last executing test programs: 4m21.022899951s ago: executing program 4 (id=19): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) fcntl$setstatus(r4, 0x4, 0x2800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x5452, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m13.498572553s ago: executing program 4 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x62) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 4m5.961758532s ago: executing program 4 (id=34): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x6, 0x32, 0x0, 0xe}, 0x9c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 3m59.962428662s ago: executing program 4 (id=42): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x2, 0x6, 0x7f9c, 0x201ff, 0x4, 0xfffff001, 0x7fff}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) r3 = dup(r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000180)=""/40, &(0x7f00000001c0)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x8800) shutdown(r3, 0x1) 3m51.599452973s ago: executing program 4 (id=47): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000080)=0xfffffff8, 0x4) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) close(r2) chdir(0x0) socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) 3m50.290269855s ago: executing program 4 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) memfd_create(0x0, 0x0) socket(0x2, 0x80805, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x39, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f00000017c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf25003900000000000000000000000000000000bb00000000000000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000140)={@empty, @broadcast}, &(0x7f0000000180)=0xc) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 3m33.311408637s ago: executing program 32 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) memfd_create(0x0, 0x0) socket(0x2, 0x80805, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x39, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f00000017c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf25003900000000000000000000000000000000bb00000000000000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000140)={@empty, @broadcast}, &(0x7f0000000180)=0xc) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 7.858101913s ago: executing program 0 (id=1429): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) ppoll(&(0x7f0000000580)=[{r1, 0x8f9b6401ac07941b}, {r1, 0x40}], 0x2, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 7.510040626s ago: executing program 1 (id=1433): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4, 0x0, 0xfffffffffffffffe}, {0x80000000}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 7.459213656s ago: executing program 0 (id=1435): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x2) 7.445358184s ago: executing program 1 (id=1436): r0 = socket(0x1e, 0x805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) close(r0) 7.257862922s ago: executing program 1 (id=1439): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x20000006}) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000280)={r0, r1, 0x804}) 7.112518359s ago: executing program 3 (id=1441): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)}}, 0x40) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 7.029443971s ago: executing program 1 (id=1442): r0 = epoll_create1(0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0xffff0001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b2e0c65377}) 6.716578813s ago: executing program 1 (id=1444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 6.654549605s ago: executing program 3 (id=1445): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300), 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 6.438042408s ago: executing program 3 (id=1446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) 6.148266166s ago: executing program 1 (id=1450): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000040)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0xa04d, 0x8000, 0xfe, &(0x7f0000000700)="defc602c63ff45d10982b976fe72d9e04de86476f3e967d88f7d2ef9a0b51f070aeb3cfd6f42f0187ec87dd82c91108ca8f3293f5f8679472fdd025882c01bce6139cbe191c7e758c2e21bfc09a25d853e497068417e4def98699c55b135da1783a9c7235c842a6fe80aecf608dac286e4a378dd963e7848f0a78a6fdc950cee370c41d1597ce044c7f46fd1f143d85a4bc9ed07b6b64aaa8d2a43628377cefa866c3909cca748cc885cba8aec7a386233c6e8f95a4c60db10bd3fdd814c5e0d4be1856aebb9d6f5be29308f95a980f441aec5676062f80dd8563c9bf56d8575b21d8b53c70312a476ae4aa1fa0baa4e85322892dc5fc09545b1bca55493"}], 0x2}) 6.054387316s ago: executing program 3 (id=1452): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 5.888480979s ago: executing program 3 (id=1455): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="e13650b5", 0x4}, {0x0}, {0x0}], 0x3}}], 0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x4, 0x4) 5.813839969s ago: executing program 3 (id=1456): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x1e, 0x0, 0x0, 0x0}, {0x8001, 0x68c864dec95d5b94, 0x0, 0x0}], 0x2}) 4.926043815s ago: executing program 0 (id=1467): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) 4.008272086s ago: executing program 2 (id=1472): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000800007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000978000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000000000000, 0x2) 3.355246603s ago: executing program 0 (id=1473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x30, r1, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x50}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xadf}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.909840017s ago: executing program 0 (id=1474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a00000014"], 0x340a) 2.49311962s ago: executing program 2 (id=1475): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe"]) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000000)) 2.22706478s ago: executing program 2 (id=1477): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)='%', 0x1}], 0x1}, 0x10000000) close(r0) 2.107219331s ago: executing program 0 (id=1478): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f00000000c0)=[{0x1, 0x4011, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}], 0x2}) 1.442913524s ago: executing program 5 (id=1483): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x65c8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) 1.361173511s ago: executing program 5 (id=1484): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 1.286805659s ago: executing program 2 (id=1485): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000000000850400000000000005"]) 1.266497814s ago: executing program 5 (id=1486): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r1, 0x9}, &(0x7f00000001c0)=0x8) 1.174314046s ago: executing program 5 (id=1487): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000100006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03887bafe4c6490ef65dd193", 0x0, 0xfffffff5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001000000010400000050000000d000000000000e585470afb7bcf7c52cf689a9d4e0ee6adb190a090e00000619d1605561c88eb06b4c9120bd2f1fa6feac0dd0dc58eea53dd9c3808b1769a46d7cc72f3fdac1b339c58201616d62c"], 0x0, 0x2d}, 0x28) 882.052248ms ago: executing program 2 (id=1488): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="30de", 0x2}, {&(0x7f0000001840)="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", 0x7c1}], 0x2, 0x0, 0x0, 0x24008000}}], 0x1, 0x0) 611.702046ms ago: executing program 2 (id=1489): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) getpgid(r0) 156.996605ms ago: executing program 5 (id=1490): getpid() r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) getpgid(0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r1, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) 0s ago: executing program 5 (id=1491): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000480)="6103") kernel console output (not intermixed with test programs): udit(1759299743.342:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6387 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f120134af79 code=0x7ffc0000 [ 191.811265][ T37] audit: type=1326 audit(1759299743.342:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6387 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 191.811303][ T37] audit: type=1326 audit(1759299743.342:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6387 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f120134af79 code=0x7ffc0000 [ 191.811342][ T37] audit: type=1326 audit(1759299743.342:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6387 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f120134af79 code=0x7ffc0000 [ 191.811375][ T37] audit: type=1326 audit(1759299743.342:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6387 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 191.811413][ T37] audit: type=1326 audit(1759299743.342:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6387 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 191.811451][ T37] audit: type=1326 audit(1759299743.342:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6387 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 191.811488][ T37] audit: type=1326 audit(1759299743.342:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6387 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 191.811526][ T37] audit: type=1326 audit(1759299743.342:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6387 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 191.811564][ T37] audit: type=1326 audit(1759299743.342:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6387 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 192.289905][ T6185] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.542355][ T6401] netlink: 188 bytes leftover after parsing attributes in process `syz.2.99'. [ 192.584807][ T1229] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 192.945755][ T1229] usb 1-1: Using ep0 maxpacket: 32 [ 192.967937][ T1229] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 192.967964][ T1229] usb 1-1: config 0 has no interface number 0 [ 192.968092][ T1229] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 192.968118][ T1229] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.968143][ T1229] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x7 has invalid wMaxPacketSize 0 [ 192.968163][ T1229] usb 1-1: config 0 interface 85 has no altsetting 0 [ 193.122863][ T1229] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 193.122893][ T1229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.122912][ T1229] usb 1-1: Product: syz [ 193.122925][ T1229] usb 1-1: Manufacturer: syz [ 193.122938][ T1229] usb 1-1: SerialNumber: syz [ 193.421676][ T6185] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.471428][ T1229] usb 1-1: config 0 descriptor?? [ 194.963734][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.963802][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.970777][ T1229] appletouch 1-1:0.85: Failed to read mode from device. [ 194.970909][ T1229] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 195.152317][ T6411] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 195.259305][ T6276] chnl_net:caif_netlink_parms(): no params data found [ 195.370169][ T1229] usb 1-1: USB disconnect, device number 2 [ 195.651952][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 195.667182][ T6185] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.755612][ T6185] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.777186][ T1229] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 197.961062][ T5862] IPVS: starting estimator thread 0... [ 199.519523][ T6431] IPVS: using max 9 ests per chain, 21600 per kthread [ 199.610829][ T1229] usb 3-1: device descriptor read/all, error -71 [ 202.138182][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 202.723946][ T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 202.902452][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.902582][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.902822][ T6276] bridge_slave_0: entered allmulticast mode [ 202.909909][ T6276] bridge_slave_0: entered promiscuous mode [ 202.944160][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.944182][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 202.944204][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.944216][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.066508][ T6443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.078295][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 203.078325][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 203.117320][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.140159][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 203.140192][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.140215][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.140252][ T44] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 203.140274][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.401673][ T44] usb 4-1: config 0 descriptor?? [ 203.422408][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.422620][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.429507][ T6276] bridge_slave_1: entered allmulticast mode [ 203.547225][ T6276] bridge_slave_1: entered promiscuous mode [ 203.611276][ T37] kauditd_printk_skb: 459 callbacks suppressed [ 203.611344][ T37] audit: type=1326 audit(1759299755.172:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 203.611387][ T37] audit: type=1326 audit(1759299755.172:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 203.611426][ T37] audit: type=1326 audit(1759299755.182:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12013ad710 code=0x7ffc0000 [ 203.611597][ T37] audit: type=1326 audit(1759299755.182:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12013aeacb code=0x7ffc0000 [ 203.611635][ T37] audit: type=1326 audit(1759299755.182:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12013aeacb code=0x7ffc0000 [ 203.618758][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.621474][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.679666][ T37] audit: type=1326 audit(1759299755.202:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 203.679718][ T37] audit: type=1326 audit(1759299755.202:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 203.679758][ T37] audit: type=1326 audit(1759299755.202:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 203.679793][ T37] audit: type=1326 audit(1759299755.212:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 203.679829][ T37] audit: type=1326 audit(1759299755.212:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 204.309184][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 204.311041][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 204.359466][ T6471] netlink: 68 bytes leftover after parsing attributes in process `syz.2.115'. [ 205.965628][ T44] sony 0003:054C:024B.0001: unexpected long global item [ 205.966501][ T44] sony 0003:054C:024B.0001: parse failed [ 205.966600][ T44] sony 0003:054C:024B.0001: probe with driver sony failed with error -22 [ 206.128775][ T9] usb 2-1: USB disconnect, device number 3 [ 206.539954][ T44] usb 4-1: USB disconnect, device number 2 [ 206.718175][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 206.788310][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 206.788345][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 206.788368][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 206.788389][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 206.889728][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 206.895704][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.898610][ T5886] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 206.898635][ T5886] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 206.898652][ T5886] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 206.898673][ T5886] usb 3-1: config 128 has no interface number 0 [ 206.898719][ T5886] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 124, changing to 10 [ 206.898742][ T5886] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 9723, setting to 1024 [ 206.898767][ T5886] usb 3-1: config 128 interface 127 has no altsetting 0 [ 206.978744][ T5886] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 206.978773][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.978792][ T5886] usb 3-1: Product: М [ 206.978804][ T5886] usb 3-1: Manufacturer: ᨶ渋ᯪ轑魺绛뭯蹛⎁료㰃餴뭞綽⠉諯Υ苰팰ﱖﶆ菫ᗶꐩ䠉е৭႕吰᥁좆紜伇기㡅侗縣篠᫐侀텏⁅䝂㕺 [ 206.978824][ T5886] usb 3-1: SerialNumber: syz [ 207.026275][ T6482] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 207.546649][ T6276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.663260][ T6276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.668202][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 207.781477][ T5899] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 207.932466][ T44] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 207.932493][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.932511][ T44] usb 4-1: config 0 has no interface number 0 [ 207.932561][ T44] usb 4-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 207.932582][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.991413][ T5899] usb 1-1: not running at top speed; connect to a high speed hub [ 208.001273][ T5899] usb 1-1: config 0 has no interfaces? [ 208.019500][ T5899] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.019560][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.019610][ T5899] usb 1-1: Product: syz [ 208.019683][ T5899] usb 1-1: Manufacturer: syz [ 208.019697][ T5899] usb 1-1: SerialNumber: syz [ 208.853457][ T5899] usb 1-1: config 0 descriptor?? [ 208.862381][ T5886] usb 3-1: USB disconnect, device number 4 [ 208.917318][ T44] usb 4-1: config 0 descriptor?? [ 208.967495][ T44] qmi_wwan 4-1:0.154: bogus CDC Union: master=0, slave=0 [ 208.967906][ T44] qmi_wwan 4-1:0.154: probe with driver qmi_wwan failed with error -22 [ 209.062455][ T9] usb 1-1: USB disconnect, device number 3 [ 209.093526][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.138721][ T5928] usb 4-1: USB disconnect, device number 3 [ 209.251754][ T6276] team0: Port device team_slave_0 added [ 209.258302][ T10] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 209.277029][ T6276] team0: Port device team_slave_1 added [ 209.384153][ T6185] bridge_slave_1: left allmulticast mode [ 209.384299][ T6185] bridge_slave_1: left promiscuous mode [ 209.387122][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.416005][ T10] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 209.416033][ T10] usb 2-1: config 0 has no interface number 0 [ 209.416078][ T10] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 209.416103][ T10] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 209.416117][ T10] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 209.416130][ T10] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 209.416143][ T10] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 209.416166][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 209.416177][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.423407][ T10] usb 2-1: config 0 descriptor?? [ 209.424170][ T6502] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 209.427798][ T10] hub 2-1:0.3: bad descriptor, ignoring hub [ 209.427832][ T10] hub 2-1:0.3: probe with driver hub failed with error -5 [ 209.448838][ T10] sierra 2-1:0.3: Sierra USB modem converter detected [ 209.595621][ T6185] bridge_slave_0: left allmulticast mode [ 209.595650][ T6185] bridge_slave_0: left promiscuous mode [ 209.596815][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.617453][ T5886] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 209.673344][ T5129] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 209.700016][ T10] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 209.783351][ T5886] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 209.783378][ T5886] usb 3-1: config 0 has an invalid interface number: 97 but max is 0 [ 209.783397][ T5886] usb 3-1: config 0 has no interface number 0 [ 209.783441][ T5886] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 209.783463][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.785859][ T10] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 209.922468][ T5886] usb 3-1: config 0 descriptor?? [ 209.949858][ T5886] ftdi_sio 3-1:0.97: FTDI USB Serial Device converter detected [ 209.977516][ T5886] ftdi_sio ttyUSB2: unknown device type: 0x524d [ 210.409736][ T10] usb 2-1: USB disconnect, device number 4 [ 210.409861][ T5886] usb 3-1: USB disconnect, device number 5 [ 210.465523][ T5886] ftdi_sio 3-1:0.97: device disconnected [ 210.505052][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 210.538792][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 210.564706][ T10] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 210.578509][ T10] sierra 2-1:0.3: device disconnected [ 210.704407][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 210.704433][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 210.704455][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 210.724061][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 210.724097][ T9] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 210.724116][ T9] usb 1-1: Manufacturer: syz [ 210.761677][ T9] usb 1-1: config 0 descriptor?? [ 210.776060][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 210.799043][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 211.011866][ T5129] Bluetooth: hci3: unexpected event for opcode 0x202f [ 211.027388][ T5982] usb 1-1: USB disconnect, device number 4 [ 211.216662][ T5129] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 211.399782][ T5886] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 211.558280][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 211.564139][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.564171][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.564193][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 211.564234][ T5886] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 211.564256][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.631001][ T5886] usb 2-1: config 0 descriptor?? [ 211.672009][ T5886] usbhid 2-1:0.0: can't add hid device: -22 [ 211.672124][ T5886] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 211.688097][ T5982] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 211.688311][ T44] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 211.867984][ T9] usb 2-1: USB disconnect, device number 5 [ 211.878314][ T5982] usb 4-1: Using ep0 maxpacket: 8 [ 211.881572][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 211.881600][ T5982] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 211.887484][ T5982] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 211.887511][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.887586][ T5982] usb 4-1: Product: syz [ 211.887600][ T5982] usb 4-1: Manufacturer: syz [ 211.887613][ T5982] usb 4-1: SerialNumber: syz [ 211.966067][ T44] usb 3-1: config 252 has an invalid interface number: 191 but max is 0 [ 211.966095][ T44] usb 3-1: config 252 has no interface number 0 [ 211.969496][ T44] usb 3-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f [ 211.969523][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.969541][ T44] usb 3-1: Product: syz [ 211.969552][ T44] usb 3-1: Manufacturer: syz [ 211.969559][ T44] usb 3-1: SerialNumber: syz [ 212.088600][ T44] usb-storage 3-1:252.191: USB Mass Storage device detected [ 212.110917][ T5982] usb 4-1: config 0 descriptor?? [ 212.132131][ T44] usb-storage 3-1:252.191: Quirks match for vid 054c pid 0069: 1 [ 212.339035][ T9] usb 3-1: USB disconnect, device number 6 [ 212.385014][ T5982] usb 4-1: USB disconnect, device number 4 [ 212.808126][ T44] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 212.964894][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 212.965762][ T44] usb 2-1: not running at top speed; connect to a high speed hub [ 212.967433][ T44] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.999308][ T44] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 212.999338][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.999358][ T44] usb 2-1: Product: syz [ 212.999372][ T44] usb 2-1: Manufacturer: syz [ 212.999386][ T44] usb 2-1: SerialNumber: syz [ 213.342029][ T44] usb 2-1: USB disconnect, device number 6 [ 213.576344][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 213.576888][ T6576] 9pnet_virtio: no channels available for device syz [ 213.728323][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 213.734131][ T9] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 213.734148][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.734158][ T9] usb 3-1: Product: syz [ 213.734165][ T9] usb 3-1: Manufacturer: syz [ 213.734172][ T9] usb 3-1: SerialNumber: syz [ 213.747086][ T9] usb 3-1: config 0 descriptor?? [ 213.839367][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.957588][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.001941][ T6185] bond0 (unregistering): Released all slaves [ 214.045075][ T10] usb 3-1: USB disconnect, device number 7 [ 214.176297][ T6583] exFAT-fs (nullb0): invalid boot record signature [ 214.176316][ T6583] exFAT-fs (nullb0): failed to read boot sector [ 214.176325][ T6583] exFAT-fs (nullb0): failed to recognize exfat type [ 214.524139][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.524155][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.524176][ T6276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.532256][ T6591] (syz.3.166,6591,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 214.532286][ T6591] (syz.3.166,6591,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 214.620878][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.620894][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.620917][ T6276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.018186][ T5928] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 215.048169][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 215.168240][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 215.171297][ T5928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.171321][ T5928] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 215.171340][ T5928] usb 3-1: config 1 has no interface number 1 [ 215.171382][ T5928] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 215.176760][ T5928] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.176787][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.176806][ T5928] usb 3-1: Product: syz [ 215.176819][ T5928] usb 3-1: Manufacturer: syz [ 215.176832][ T5928] usb 3-1: SerialNumber: syz [ 215.198239][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 215.201264][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.201320][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 215.201344][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 215.201364][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 215.206002][ T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 215.206028][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 215.206047][ T10] usb 4-1: Product: syz [ 215.206060][ T10] usb 4-1: Manufacturer: syz [ 215.206073][ T10] usb 4-1: SerialNumber: syz [ 215.298851][ T10] usb 4-1: config 0 descriptor?? [ 215.330126][ T10] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 215.332942][ T10] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 215.334044][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 215.523053][ T5862] usb 4-1: USB disconnect, device number 5 [ 215.665436][ T6612] 9pnet_virtio: no channels available for device syz [ 215.819800][ T5928] usb 3-1: USB disconnect, device number 8 [ 216.234731][ T6276] hsr_slave_0: entered promiscuous mode [ 216.260318][ T6276] hsr_slave_1: entered promiscuous mode [ 216.263866][ T6276] debugfs: 'hsr0' already exists in 'hsr' [ 216.263884][ T6276] Cannot create hsr debugfs directory [ 216.359654][ T6621] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 216.381186][ T6622] ocfs2: Bad value for 'barrier' [ 216.416493][ T6621] VFS: Can't find a romfs filesystem on dev nullb0. [ 216.416493][ T6621] [ 217.473657][ T5862] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 217.636311][ T44] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 217.738876][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 217.765483][ T5862] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 217.765513][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.765532][ T5862] usb 4-1: Product: syz [ 217.765547][ T5862] usb 4-1: Manufacturer: syz [ 217.765560][ T5862] usb 4-1: SerialNumber: syz [ 217.837825][ T5862] usb 4-1: config 0 descriptor?? [ 217.838229][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 217.849794][ T44] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 217.849819][ T44] usb 3-1: config 252 has no interface number 0 [ 217.849864][ T44] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 217.852640][ T44] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 217.852667][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.852686][ T44] usb 3-1: Product: syz [ 217.852699][ T44] usb 3-1: Manufacturer: syz [ 217.852712][ T44] usb 3-1: SerialNumber: syz [ 218.023388][ T5862] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 218.045038][ T5862] usb 4-1: Detected FT-X [ 218.094649][ T44] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 218.181240][ T5862] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 218.189036][ T5862] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 218.189670][ T5862] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 218.228512][ T5862] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 218.260710][ T5862] usb 4-1: USB disconnect, device number 6 [ 218.284983][ T44] usb 3-1: USB disconnect, device number 9 [ 218.290629][ T5965] usb 3-1: Failed to submit usb control message: -71 [ 218.290663][ T5965] usb 3-1: unable to send the bmi data to the device: -71 [ 218.290678][ T5965] usb 3-1: unable to get target info from device [ 218.290706][ T5965] usb 3-1: could not get target info (-71) [ 218.291048][ T5965] usb 3-1: could not probe fw (-71) [ 218.359225][ T5862] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 218.360135][ T5862] ftdi_sio 4-1:0.0: device disconnected [ 218.650121][ T6657] 9pnet_virtio: no channels available for device syz [ 219.638133][ T5982] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 220.118510][ T5982] usb 4-1: Using ep0 maxpacket: 32 [ 220.151465][ T5982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.568142][ T5982] usb 4-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 220.568171][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.568188][ T5982] usb 4-1: Product: syz [ 220.568200][ T5982] usb 4-1: Manufacturer: syz [ 220.568212][ T5982] usb 4-1: SerialNumber: syz [ 220.819894][ T5982] usb 4-1: config 0 descriptor?? [ 220.889445][ T5982] rndis_host 4-1:0.0: skipping garbage [ 220.889853][ T5982] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 221.140125][ T5982] usb 4-1: USB disconnect, device number 7 [ 221.630899][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.652361][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.654332][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.667254][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.681743][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.819627][ T6185] hsr_slave_0: left promiscuous mode [ 221.853886][ T6706] comedi comedi0: No channels found! [ 221.907090][ T6185] hsr_slave_1: left promiscuous mode [ 221.916334][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.926105][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.964420][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.964446][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.179955][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 222.450162][ T44] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 222.450378][ T44] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 222.450424][ T44] usb 2-1: config 16 interface 0 has no altsetting 0 [ 222.450647][ T44] usb 2-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 222.450717][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.820755][ T6703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 223.041232][ T44] usb 2-1: string descriptor 0 read error: -71 [ 223.044137][ T44] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 223.044227][ T44] imon 2-1:16.0: unable to initialize intf0, err -19 [ 223.044241][ T44] imon:imon_probe: failed to initialize context! [ 223.044252][ T44] imon 2-1:16.0: unable to register, err -19 [ 223.084888][ T6185] veth1_macvtap: left promiscuous mode [ 223.110860][ T6185] veth0_macvtap: left promiscuous mode [ 223.111314][ T6185] veth1_vlan: left promiscuous mode [ 223.111704][ T6185] veth0_vlan: left promiscuous mode [ 223.152692][ T44] usb 2-1: USB disconnect, device number 7 [ 223.752528][ T5129] Bluetooth: hci2: command tx timeout [ 225.844421][ T5129] Bluetooth: hci2: command tx timeout [ 226.997646][ T6771] netlink: 'syz.2.227': attribute type 1 has an invalid length. [ 226.997668][ T6771] netlink: 224 bytes leftover after parsing attributes in process `syz.2.227'. [ 227.693610][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 227.693626][ T37] audit: type=1326 audit(1759299779.262:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6781 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 227.695285][ T37] audit: type=1326 audit(1759299779.262:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6781 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 227.760943][ T37] audit: type=1326 audit(1759299779.332:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6781 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 227.761209][ T37] audit: type=1326 audit(1759299779.342:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6781 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 227.941313][ T5129] Bluetooth: hci2: command tx timeout [ 229.174832][ T6785] binder: 6783:6785 ioctl c0306201 200000000000 returned -14 [ 229.628291][ T44] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 229.799735][ T44] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 229.799765][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.799784][ T44] usb 4-1: Product: syz [ 229.799797][ T44] usb 4-1: Manufacturer: syz [ 229.799815][ T44] usb 4-1: SerialNumber: syz [ 229.848431][ T44] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 229.953487][ T5982] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 229.988213][ T5129] Bluetooth: hci2: command tx timeout [ 230.361647][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 230.421103][ T5928] usb 4-1: USB disconnect, device number 8 [ 230.622347][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 231.029446][ T5982] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 231.029983][ T5982] ath9k_htc: Failed to initialize the device [ 231.033674][ T5928] usb 4-1: ath9k_htc: USB layer deinitialized [ 233.229924][ T6699] vxcan1 speed is unknown, defaulting to 1000 [ 234.460270][ T6818] Invalid source name [ 234.460290][ T6818] UBIFS error (pid: 6818): cannot open "/dev/sg0", error -22 [ 235.300093][ T6699] lo speed is unknown, defaulting to 1000 [ 235.810296][ T5982] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 236.056233][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.785504][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.022386][ T6699] chnl_net:caif_netlink_parms(): no params data found [ 237.030127][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.070961][ T5982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.071015][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.071040][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 237.071061][ T5982] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.071102][ T5982] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 237.071124][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.144567][ T5982] usb 2-1: config 0 descriptor?? [ 237.165382][ T5982] gspca_main: spca561-2.14.0 probing abcd:cdee [ 237.399641][ T5982] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 237.511344][ T5982] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 237.512185][ T5982] usb 2-1: MIDIStreaming interface descriptor not found [ 237.708507][ T5928] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 237.870436][ T5928] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 237.870462][ T5928] usb 4-1: config 0 has no interface number 0 [ 237.870532][ T5928] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=bb.dc [ 237.870553][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.027708][ T6185] bridge_slave_1: left allmulticast mode [ 238.027858][ T6185] bridge_slave_1: left promiscuous mode [ 238.041007][ T5928] usb 4-1: config 0 descriptor?? [ 238.053438][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.073191][ T5982] usb 2-1: USB disconnect, device number 8 [ 238.101770][ T5928] ldusb 4-1:0.186: Interrupt in endpoint not found [ 238.252161][ T6185] bridge_slave_0: left allmulticast mode [ 238.252189][ T6185] bridge_slave_0: left promiscuous mode [ 238.252457][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.332046][ T5928] usb 4-1: USB disconnect, device number 9 [ 238.638236][ T5899] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 238.711287][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.788152][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 238.792960][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.793015][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 238.793036][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 238.797147][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 239.268937][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.568931][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.568957][ T5899] usb 1-1: Product: syz [ 239.568989][ T5899] usb 1-1: Manufacturer: syz [ 239.569002][ T5899] usb 1-1: SerialNumber: syz [ 239.701794][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.878680][ T5899] usb 1-1: config 0 descriptor?? [ 239.893046][ T5899] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 239.893135][ T5899] gspca_stv06xx: st6422 sensor detected [ 240.859568][ T5899] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 241.077652][ T5899] usb 1-1: USB disconnect, device number 5 [ 241.183661][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.311607][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.391107][ T6185] bond0 (unregistering): Released all slaves [ 241.797063][ T6926] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 241.797089][ T6926] netlink: 224 bytes leftover after parsing attributes in process `syz.0.283'. [ 241.928163][ T5899] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 242.104237][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 242.104965][ T5899] usb 3-1: not running at top speed; connect to a high speed hub [ 242.106643][ T5899] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 242.106666][ T5899] usb 3-1: config 129 has no interface number 0 [ 242.106716][ T5899] usb 3-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 242.106740][ T5899] usb 3-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 242.106766][ T5899] usb 3-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 242.106792][ T5899] usb 3-1: config 129 interface 28 has no altsetting 0 [ 242.284650][ T6934] input: syz0 as /devices/virtual/input/input7 [ 242.825555][ T5899] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 242.825584][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.825602][ T5899] usb 3-1: Product: syz [ 242.825616][ T5899] usb 3-1: Manufacturer: syz [ 242.825629][ T5899] usb 3-1: SerialNumber: syz [ 242.989222][ T6922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 243.269587][ T5899] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 243.279703][ T5899] etas_es58x 3-1:129.28: could not retrieve the product info string [ 243.581806][ T6949] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.290'. [ 243.795479][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.795609][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.795843][ T6699] bridge_slave_0: entered allmulticast mode [ 243.810687][ T6699] bridge_slave_0: entered promiscuous mode [ 243.908256][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 244.098182][ T5928] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 244.488506][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.570695][ T5928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.570748][ T5928] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.573730][ T5928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.573757][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.573776][ T5928] usb 4-1: Product: syz [ 244.573789][ T5928] usb 4-1: Manufacturer: syz [ 244.573803][ T5928] usb 4-1: SerialNumber: syz [ 244.790227][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.790354][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.790574][ T6699] bridge_slave_1: entered allmulticast mode [ 244.847479][ T6699] bridge_slave_1: entered promiscuous mode [ 244.898704][ T5928] cdc_ncm 4-1:1.0: skipping garbage [ 244.898727][ T5928] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 244.898771][ T5928] cdc_ncm 4-1:1.0: bind() failure [ 245.037524][ T5899] usb 3-1: USB disconnect, device number 10 [ 245.170198][ T5928] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 245.170243][ T5928] cdc_ncm 4-1:1.1: bind() failure [ 245.216538][ T37] audit: type=1326 audit(1759299796.782:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 245.235379][ T37] audit: type=1326 audit(1759299796.792:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 245.235424][ T37] audit: type=1326 audit(1759299796.812:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 245.235462][ T37] audit: type=1326 audit(1759299796.812:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 245.235497][ T37] audit: type=1326 audit(1759299796.812:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 245.247914][ T5899] etas_es58x 3-1:129.28: Disconnecting syz syz [ 245.256379][ T5928] usb 4-1: USB disconnect, device number 10 [ 246.571774][ T7008] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 246.598230][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 246.727190][ T6699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.758369][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 246.761422][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 246.761446][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 246.761464][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.761481][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 246.761499][ T9] usb 4-1: config 1 has no interface number 0 [ 246.761542][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 246.761562][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.806065][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 246.921418][ T6185] hsr_slave_0: left promiscuous mode [ 247.062481][ T7016] 9pnet_virtio: no channels available for device syz [ 247.103576][ T9] snd_usb_pod 4-1:1.1: set_interface failed [ 247.104078][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 247.104289][ T9] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 247.142080][ T6185] hsr_slave_1: left promiscuous mode [ 247.145191][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.198998][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.199102][ T9] usb 4-1: USB disconnect, device number 11 [ 248.071298][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.377864][ T7049] netlink: 'syz.0.335': attribute type 18 has an invalid length. [ 248.533387][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.714083][ T7051] input: syz0 as /devices/virtual/input/input8 [ 250.887550][ T7057] 9pnet_virtio: no channels available for device syz [ 251.063173][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 251.063219][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 252.535871][ T7094] 9pnet_virtio: no channels available for device syz [ 252.690611][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 253.025355][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 253.076340][ T7117] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 253.076360][ T7117] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 253.076373][ T7117] netlink: 220 bytes leftover after parsing attributes in process `syz.1.363'. [ 253.278136][ T5813] Bluetooth: hci2: command 0x0405 tx timeout [ 253.656387][ T7132] 9pnet_virtio: no channels available for device syz [ 254.157906][ T6699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.483195][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.629249][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.769205][ T7145] input: syz0 as /devices/virtual/input/input11 [ 254.780241][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.885728][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.232083][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.519847][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.904077][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.905253][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.050781][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.499804][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.515445][ T6699] team0: Port device team_slave_0 added [ 256.656889][ T6699] team0: Port device team_slave_1 added [ 257.218711][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.218726][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.218747][ T6699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.229302][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.229317][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.229339][ T6699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.735177][ T37] audit: type=1326 audit(1759299809.312:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7230eec9 code=0x7ffc0000 [ 257.737476][ T37] audit: type=1326 audit(1759299809.312:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7230eec9 code=0x7ffc0000 [ 257.746463][ T37] audit: type=1326 audit(1759299809.322:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fce7230eec9 code=0x7ffc0000 [ 257.746511][ T37] audit: type=1326 audit(1759299809.322:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7230eec9 code=0x7ffc0000 [ 257.746547][ T37] audit: type=1326 audit(1759299809.322:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7230eec9 code=0x7ffc0000 [ 258.062368][ T6699] hsr_slave_0: entered promiscuous mode [ 258.076604][ T6699] hsr_slave_1: entered promiscuous mode [ 258.302436][ T7211] Smack: duplicate mount options [ 259.354243][ T6699] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 259.383753][ T6699] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 259.427751][ T6699] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 259.473354][ T6699] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 259.625952][ T6699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.667409][ T6699] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.685190][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.685983][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.714447][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.721320][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.997086][ T6699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.256089][ T6699] veth0_vlan: entered promiscuous mode [ 260.264428][ T6699] veth1_vlan: entered promiscuous mode [ 260.301308][ T6699] veth0_macvtap: entered promiscuous mode [ 260.305630][ T6699] veth1_macvtap: entered promiscuous mode [ 260.355691][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.370173][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.377841][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.379666][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.382424][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.383913][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.638535][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.638553][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.704559][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.704578][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.978403][ T7270] warning: `syz.2.422' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 262.854879][ T7293] input: syz0 as /devices/virtual/input/input12 [ 263.909622][ T44] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 263.982294][ T7311] binder: 7309:7311 ioctl 400c620e 0 returned -14 [ 264.058111][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 264.073317][ T44] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 264.073345][ T44] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 264.073364][ T44] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 264.073384][ T44] usb 3-1: config 0 has no interface number 0 [ 264.073432][ T44] usb 3-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 264.073467][ T44] usb 3-1: config 0 interface 104 has no altsetting 1 [ 264.082094][ T44] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 264.082121][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.082140][ T44] usb 3-1: Product: syz [ 264.082152][ T44] usb 3-1: Manufacturer: syz [ 264.082165][ T44] usb 3-1: SerialNumber: syz [ 264.189797][ T44] usb 3-1: config 0 descriptor?? [ 264.417544][ T44] asix 3-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 264.417822][ T44] asix 3-1:0.104: probe with driver asix failed with error -71 [ 264.516047][ T44] usb 3-1: USB disconnect, device number 11 [ 264.705915][ T7326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.433'. [ 264.796608][ T7329] capability: warning: `syz.1.435' uses 32-bit capabilities (legacy support in use) [ 266.150182][ T7366] QAT: Stopping all acceleration devices. [ 267.618252][ T7380] 9pnet_fd: Insufficient options for proto=fd [ 267.697476][ T7381] bridge_slave_0: left allmulticast mode [ 267.697502][ T7381] bridge_slave_0: left promiscuous mode [ 267.712559][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.236279][ T7381] bridge_slave_1: left allmulticast mode [ 268.236308][ T7381] bridge_slave_1: left promiscuous mode [ 268.236544][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.365843][ T7381] bond0: (slave bond_slave_0): Releasing backup interface [ 269.730492][ T7381] bond0: (slave bond_slave_1): Releasing backup interface [ 270.898935][ T7381] team0: Port device team_slave_0 removed [ 271.037707][ T7381] team0: Port device team_slave_1 removed [ 271.049191][ T7381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.049230][ T7381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.130776][ T7381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.130803][ T7381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.286551][ T5886] vxcan1 speed is unknown, defaulting to 1000 [ 271.286634][ T44] lo speed is unknown, defaulting to 1000 [ 272.239930][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.496'. [ 272.242924][ T7476] netlink: 'syz.2.497': attribute type 7 has an invalid length. [ 272.242943][ T7476] netlink: 'syz.2.497': attribute type 3 has an invalid length. [ 272.242955][ T7476] netlink: 224 bytes leftover after parsing attributes in process `syz.2.497'. [ 275.999635][ T7591] binder: 7589:7591 ioctl 400c620e 200000000000 returned -22 [ 277.908150][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 278.060641][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.060667][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.062171][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 278.062196][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 278.062216][ T10] usb 6-1: SerialNumber: syz [ 278.097697][ T10] usb 6-1: 0:2 : does not exist [ 278.948281][ T10] usb 6-1: USB disconnect, device number 2 [ 279.053888][ T7655] openvswitch: netlink: Key type 30 is not supported [ 279.705713][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 279.705739][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 279.708682][ T7670] netlink: 68 bytes leftover after parsing attributes in process `syz.3.567'. [ 280.368553][ T7677] overlay: Bad value for 'workdir' [ 280.473442][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 282.888104][ T1229] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 282.958202][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 283.038072][ T1229] usb 4-1: Using ep0 maxpacket: 32 [ 283.040967][ T1229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 283.042331][ T1229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.056967][ T1229] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 283.056994][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.057012][ T1229] usb 4-1: Product: syz [ 283.057025][ T1229] usb 4-1: SerialNumber: syz [ 283.080074][ T1229] usb 4-1: config 0 descriptor?? [ 283.118123][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 283.120327][ T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 283.120352][ T9] usb 3-1: config 0 has no interface number 0 [ 283.120396][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.120422][ T9] usb 3-1: config 0 interface 85 has no altsetting 0 [ 283.123237][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 283.123262][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.123279][ T9] usb 3-1: Product: syz [ 283.123292][ T9] usb 3-1: Manufacturer: syz [ 283.123312][ T9] usb 3-1: SerialNumber: syz [ 283.204274][ T9] usb 3-1: config 0 descriptor?? [ 283.261797][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.598'. [ 283.261826][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.598'. [ 283.291766][ T1229] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 283.372903][ T1229] usb 4-1: USB disconnect, device number 12 [ 284.511613][ T9] appletouch 3-1:0.85: Failed to request geyser raw mode [ 284.511833][ T9] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 284.631634][ T9] usb 3-1: USB disconnect, device number 12 [ 284.898529][ T37] audit: type=1326 audit(1759299836.472:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7768 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 284.898579][ T37] audit: type=1326 audit(1759299836.472:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7768 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 284.930041][ T37] audit: type=1326 audit(1759299836.502:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7768 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 284.930091][ T37] audit: type=1326 audit(1759299836.502:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7768 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12013aeec9 code=0x7ffc0000 [ 286.395165][ T7792] binder: 7790:7792 unknown command 1074553622 [ 286.395187][ T7792] binder: 7790:7792 ioctl c0306201 200000000300 returned -22 [ 286.680680][ T7802] kernel profiling enabled (shift: 9) [ 286.969307][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'. [ 286.969600][ T7779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.969611][ T7779] IPv6: NLM_F_CREATE should be set when creating new route [ 287.359090][ T7828] netlink: 664 bytes leftover after parsing attributes in process `syz.0.633'. [ 287.683016][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 287.710210][ T7843] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 287.720944][ T7843] exFAT-fs (nbd3): unable to read boot sector [ 287.720959][ T7843] exFAT-fs (nbd3): failed to read boot sector [ 287.720967][ T7843] exFAT-fs (nbd3): failed to recognize exfat type [ 288.089555][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.184452][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.307012][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.360564][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.658188][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 288.810544][ T9] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 288.810571][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.810588][ T9] usb 2-1: config 0 has no interface number 0 [ 288.810641][ T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 288.810667][ T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 288.810687][ T9] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.810712][ T9] usb 2-1: config 0 interface 52 has no altsetting 0 [ 288.812827][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 288.812859][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 288.812879][ T9] usb 2-1: SerialNumber: syz [ 288.856030][ T9] usb 2-1: config 0 descriptor?? [ 288.963765][ T7873] capability: warning: `syz.0.652' uses deprecated v2 capabilities in a way that may be insecure [ 289.041000][ T7873] program syz.0.652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.133721][ T9] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 289.133981][ T9] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 289.651302][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.727067][ T5900] usb 2-1: USB disconnect, device number 9 [ 290.727563][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.803354][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.949714][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.998919][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.388173][ T5900] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 292.560693][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.560725][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.560763][ T5900] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 292.560785][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.570049][ T5900] usb 2-1: config 0 descriptor?? [ 292.766704][ T7985] netlink: 716 bytes leftover after parsing attributes in process `syz.0.701'. [ 293.008670][ T5900] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 293.008709][ T5900] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 293.008730][ T5900] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 293.008754][ T5900] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 293.008779][ T5900] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 293.008803][ T5900] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 293.008828][ T5900] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 293.059677][ T5900] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 293.188619][ T5900] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device [ 293.188668][ T5900] arvo 0003:1E7D:30D4.0002: couldn't install keyboard [ 293.224967][ T7995] program syz.2.706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.286024][ T5900] arvo 0003:1E7D:30D4.0002: probe with driver arvo failed with error -71 [ 293.337939][ T5900] usb 2-1: USB disconnect, device number 10 [ 293.471290][ T8000] fido_id[8000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 294.067232][ T8011] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 295.347486][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 295.838225][ T8052] netlink: 104 bytes leftover after parsing attributes in process `syz.3.729'. [ 296.448302][ T5900] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 296.600744][ T5899] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 296.608212][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 296.610906][ T5900] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.610930][ T5900] usb 1-1: config 0 has no interface number 0 [ 296.613912][ T5900] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 296.613937][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.613955][ T5900] usb 1-1: Product: syz [ 296.613968][ T5900] usb 1-1: Manufacturer: syz [ 296.613980][ T5900] usb 1-1: SerialNumber: syz [ 296.621252][ T5900] usb 1-1: config 0 descriptor?? [ 296.626454][ T5900] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 296.626484][ T5900] usb 1-1: selecting invalid altsetting 1 [ 296.626499][ T5900] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 297.089889][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 297.089909][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 297.092165][ T5899] usb 6-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 297.092181][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.092191][ T5899] usb 6-1: Product: syz [ 297.092198][ T5899] usb 6-1: Manufacturer: syz [ 297.092206][ T5899] usb 6-1: SerialNumber: syz [ 297.109333][ T5899] usb 6-1: config 0 descriptor?? [ 297.149890][ T5900] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 297.152819][ T5900] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 297.153152][ T5900] usb 1-1: media controller created [ 297.316559][ T5899] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.622398][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.821768][ T8085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.742'. [ 297.855164][ T5899] usb 6-1: USB disconnect, device number 3 [ 297.915316][ T5900] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 297.915375][ T5900] zl10353_read_register: readreg error (reg=127, ret==-71) [ 297.922432][ T5900] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 297.988331][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 298.033728][ T6218] udevd[6218]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.168294][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 298.177020][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 298.177070][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.177114][ T9] usb 3-1: Product: syz [ 298.177127][ T9] usb 3-1: Manufacturer: syz [ 298.177159][ T9] usb 3-1: SerialNumber: syz [ 298.202200][ T9] usb 3-1: config 0 descriptor?? [ 298.217960][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 298.405556][ T5900] usb 1-1: USB disconnect, device number 6 [ 299.238170][ T9] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 299.458124][ T9] gspca_sq930x: Sensor ov9630 not yet treated [ 299.458218][ T9] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 299.464638][ T9] usb 3-1: USB disconnect, device number 13 [ 299.741181][ T8131] Bluetooth: MGMT ver 1.23 [ 299.818138][ T44] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 299.963115][ T8140] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.765'. [ 299.979103][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 299.983104][ T44] usb 4-1: config 0 has no interfaces? [ 300.008018][ T44] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 300.008046][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 300.008064][ T44] usb 4-1: Product: syz [ 300.008075][ T44] usb 4-1: Manufacturer: syz [ 300.008088][ T44] usb 4-1: SerialNumber: syz [ 300.014794][ T44] usb 4-1: config 0 descriptor?? [ 300.490113][ T5129] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 300.682454][ T5928] usb 4-1: USB disconnect, device number 13 [ 301.308330][ T5928] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 301.459486][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 301.466334][ T5928] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 301.466359][ T5928] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 301.466378][ T5928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 301.466397][ T5928] usb 1-1: config 1 has no interface number 0 [ 301.466497][ T5928] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.466524][ T5928] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 301.466563][ T5928] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 301.466591][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.514047][ T5928] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 301.950155][ T5928] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 302.038138][ T5886] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 302.123647][ T5982] usb 1-1: USB disconnect, device number 7 [ 302.125733][ T5982] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 302.190289][ T5886] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 302.190319][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.200163][ T5886] usb 3-1: config 0 descriptor?? [ 302.251480][ T5886] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 302.292519][ T37] audit: type=1326 audit(1759299853.872:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 302.293158][ T37] audit: type=1326 audit(1759299853.872:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 302.322117][ T37] audit: type=1326 audit(1759299853.902:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 302.331237][ T37] audit: type=1326 audit(1759299853.902:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f65b579ef03 code=0x7ffc0000 [ 302.334482][ T37] audit: type=1326 audit(1759299853.912:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f65b579ef03 code=0x7ffc0000 [ 302.340480][ T37] audit: type=1326 audit(1759299853.922:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 302.347191][ T37] audit: type=1326 audit(1759299853.922:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 302.347545][ T37] audit: type=1326 audit(1759299853.922:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 302.367229][ T37] audit: type=1326 audit(1759299853.942:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 302.367276][ T37] audit: type=1326 audit(1759299853.942:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 302.826327][ T5886] gspca_cpia1: usb_control_msg 01, error -71 [ 302.826346][ T5886] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 302.863956][ T5886] usb 3-1: USB disconnect, device number 14 [ 303.320418][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.529278][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.667007][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.234152][ T8243] sp0: Synchronizing with TNC [ 304.551990][ T5129] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 304.552516][ T5129] Bluetooth: hci2: Injecting HCI hardware error event [ 304.555811][ T5813] Bluetooth: hci2: hardware error 0x00 [ 305.123035][ T8261] netlink: 36 bytes leftover after parsing attributes in process `syz.5.809'. [ 305.762897][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.712600][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.860369][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.860479][ T5813] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 307.073127][ T8291] vlan2: entered promiscuous mode [ 307.073148][ T8291] geneve1: entered promiscuous mode [ 307.073377][ T8291] vlan2: entered allmulticast mode [ 307.073390][ T8291] geneve1: entered allmulticast mode [ 307.311077][ T5928] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 307.461454][ T5928] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.461489][ T5928] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 307.461515][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 307.461547][ T5928] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 307.461568][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.513150][ T8312] netlink: 52 bytes leftover after parsing attributes in process `syz.3.827'. [ 307.537389][ T5928] usb 6-1: config 0 descriptor?? [ 307.839905][ T9] IPVS: starting estimator thread 0... [ 307.914501][ T8321] batman_adv: batadv0: Adding interface: gretap1 [ 307.914526][ T8321] batman_adv: batadv0: Interface activated: gretap1 [ 307.928175][ T8323] IPVS: using max 10 ests per chain, 24000 per kthread [ 307.973109][ T5928] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 307.973145][ T5928] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 307.973170][ T5928] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 307.973192][ T5928] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 307.973215][ T5928] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 308.039531][ T5928] sony 0003:054C:0268.0003: hiddev0,hidraw0: USB HID v80.05 Device [HID 054c:0268] on usb-dummy_hcd.5-1/input0 [ 308.039564][ T5928] sony 0003:054C:0268.0003: failed to claim input [ 308.202021][ T5928] usb 6-1: USB disconnect, device number 4 [ 308.261697][ T8330] fido_id[8330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 308.921882][ T5813] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 308.922782][ T5813] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 309.658109][ T1229] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 309.818230][ T1229] usb 6-1: Using ep0 maxpacket: 32 [ 309.820731][ T1229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.820761][ T1229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.820795][ T1229] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 309.820817][ T1229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.849616][ T1229] usb 6-1: config 0 descriptor?? [ 310.138218][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 310.288221][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 310.290723][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.290746][ T9] usb 3-1: config 0 has no interface number 0 [ 310.290796][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.290821][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.290842][ T9] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.290884][ T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 310.290903][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.296464][ T9] usb 3-1: config 0 descriptor?? [ 310.307112][ T1229] aquacomputer_d5next 0003:0C70:F00A.0004: unknown main item tag 0x7 [ 310.415116][ T8409] netlink: 36 bytes leftover after parsing attributes in process `syz.3.872'. [ 310.435899][ T1229] aquacomputer_d5next 0003:0C70:F00A.0004: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.5-1/input0 [ 310.448112][ T5982] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 310.604650][ T5982] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 310.604732][ T5982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.606223][ T5982] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 310.606247][ T5982] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 310.606266][ T5982] usb 1-1: Manufacturer: syz [ 310.633087][ T1229] usb 6-1: USB disconnect, device number 5 [ 310.668336][ T5982] usb 1-1: config 0 descriptor?? [ 310.781934][ T9] holtek_mouse 0003:04D9:A072.0005: item fetching failed at offset 3/4 [ 310.782711][ T9] holtek_mouse 0003:04D9:A072.0005: hid parse failed: -22 [ 310.782791][ T9] holtek_mouse 0003:04D9:A072.0005: probe with driver holtek_mouse failed with error -22 [ 310.868688][ T5982] rc_core: IR keymap rc-hauppauge not found [ 310.868718][ T5982] Registered IR keymap rc-empty [ 310.913865][ T5982] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 310.929783][ T5982] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 311.010033][ T44] usb 3-1: USB disconnect, device number 15 [ 311.210553][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 311.235916][ C1] igorplugusb 1-1:0.0: receive overflow, at least 9 lost [ 311.455189][ T9] usb 1-1: USB disconnect, device number 8 [ 311.607339][ T8438] netlink: 'syz.3.883': attribute type 10 has an invalid length. [ 312.505146][ T8438] team0: Port device dummy0 added [ 312.528209][ T8438] netlink: 'syz.3.883': attribute type 10 has an invalid length. [ 312.661747][ T8438] team0: Port device dummy0 removed [ 312.670682][ T8438] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 312.928111][ T1229] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 312.948619][ T5813] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 312.948945][ T5813] Bluetooth: hci1: Injecting HCI hardware error event [ 312.952188][ T5129] Bluetooth: hci1: hardware error 0x00 [ 313.080360][ T1229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 313.080392][ T1229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.080429][ T1229] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 313.080451][ T1229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.130049][ T1229] usb 3-1: config 0 descriptor?? [ 313.611639][ T1229] ryos 0003:1E7D:3138.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 313.814824][ T44] usb 3-1: USB disconnect, device number 16 [ 314.278165][ T1229] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 314.393527][ T8506] vlan3: entered allmulticast mode [ 314.393548][ T8506] bond0: entered allmulticast mode [ 314.393561][ T8506] bond_slave_0: entered allmulticast mode [ 314.393579][ T8506] bond_slave_1: entered allmulticast mode [ 314.393598][ T8506] dummy0: entered allmulticast mode [ 314.430267][ T1229] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 314.433205][ T1229] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 314.433231][ T1229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.433250][ T1229] usb 6-1: Product: syz [ 314.433263][ T1229] usb 6-1: Manufacturer: syz [ 314.433276][ T1229] usb 6-1: SerialNumber: syz [ 314.487446][ T1229] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 314.750984][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 314.751017][ T8515] netlink: 'syz.1.917': attribute type 5 has an invalid length. [ 314.751031][ T8515] netlink: 'syz.1.917': attribute type 8 has an invalid length. [ 314.751043][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 314.801959][ T8515] geneve2: entered promiscuous mode [ 314.801987][ T8515] geneve2: entered allmulticast mode [ 314.844856][ T1505] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 314.844904][ T1505] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 314.844937][ T1505] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 314.844971][ T1505] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 315.152810][ T1229] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 315.190134][ T5129] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 315.196029][ T1229] usb 6-1: USB disconnect, device number 6 [ 315.398269][ T5982] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 315.561256][ T8541] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 315.567464][ T8541] gretap0: entered promiscuous mode [ 315.568224][ T5982] usb 2-1: Using ep0 maxpacket: 8 [ 315.592669][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.592699][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.592735][ T5982] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 315.592753][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.646245][ T5982] usb 2-1: config 0 descriptor?? [ 316.147616][ T5982] input: HID 28bd:0935 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0935.0007/input/input20 [ 316.287589][ T5982] uclogic 0003:28BD:0935.0007: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.1-1/input0 [ 316.336036][ T5982] usb 2-1: USB disconnect, device number 11 [ 316.532404][ T8562] fido_id[8562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 316.717325][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.769547][ T8556] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.195479][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.772087][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 317.772777][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 317.795691][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 317.795892][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 317.908325][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 317.929517][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 317.929954][ T8607] sit0: Master is either lo or non-ether device [ 318.008250][ T5899] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 318.064707][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 318.064892][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 318.078136][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 318.082496][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.082519][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.110140][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.110169][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.110187][ T9] usb 2-1: Product: syz [ 318.110200][ T9] usb 2-1: Manufacturer: syz [ 318.110213][ T9] usb 2-1: SerialNumber: syz [ 318.168167][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 318.171077][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.171106][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.171175][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 318.171208][ T5899] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 318.171229][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.230515][ T5982] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 318.247850][ T5899] usb 4-1: config 0 descriptor?? [ 318.360494][ T9] usb 2-1: 0:2 : does not exist [ 318.380174][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 318.390127][ T5982] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.390149][ T5982] usb 1-1: config 0 has no interface number 0 [ 318.390192][ T5982] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 318.390215][ T5982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.410575][ T5982] usb 1-1: config 0 descriptor?? [ 318.453944][ T5982] usb 1-1: selecting invalid altsetting 1 [ 318.604573][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 318.604887][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 318.625265][ T5982] dvb_ttusb_budget: ttusb_init_controller: error [ 318.625284][ T5982] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 318.648141][ T8597] ceph: No mds server is up or the cluster is laggy [ 318.708881][ T9] usb 2-1: USB disconnect, device number 12 [ 318.894353][ T6504] udevd[6504]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.897607][ T5899] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 318.897641][ T5899] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 318.897667][ T5899] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 318.897692][ T5899] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 318.897717][ T5899] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 318.897742][ T5899] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 318.897767][ T5899] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 318.897792][ T5899] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 318.897817][ T5899] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 318.897842][ T5899] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 318.995427][ T5899] apple 0003:05AC:0247.0008: unexpected long global item [ 318.996237][ T5899] apple 0003:05AC:0247.0008: parse failed [ 318.996348][ T5899] apple 0003:05AC:0247.0008: probe with driver apple failed with error -22 [ 319.088842][ T5899] usb 4-1: USB disconnect, device number 14 [ 319.092721][ T5982] DVB: Unable to find symbol cx22700_attach() [ 319.234899][ T5982] DVB: Unable to find symbol tda10046_attach() [ 319.234914][ T5982] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 319.379677][ T5982] usb 1-1: USB disconnect, device number 9 [ 319.511009][ T8620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.515976][ T8619] Bluetooth: MGMT ver 1.23 [ 319.586641][ T8622] netlink: 72 bytes leftover after parsing attributes in process `syz.1.963'. [ 320.058213][ T5982] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 320.209850][ T5982] usb 1-1: Using ep0 maxpacket: 32 [ 320.214274][ T5982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.214304][ T5982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.214343][ T5982] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 320.214363][ T5982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.220148][ T5982] usb 1-1: config 0 descriptor?? [ 320.225225][ T5982] hub 1-1:0.0: USB hub found [ 320.432700][ T5982] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 320.954935][ T5982] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 321.072306][ T8643] Bluetooth: MGMT ver 1.23 [ 321.179513][ T5899] usb 1-1: USB disconnect, device number 10 [ 321.216073][ T8644] fido_id[8644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 321.979170][ T8666] netlink: 'syz.2.985': attribute type 9 has an invalid length. [ 321.979190][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 322.016093][ T8666] hsr0: entered promiscuous mode [ 322.016644][ T8666] macvlan2: entered promiscuous mode [ 322.016842][ T8666] macvlan2: entered allmulticast mode [ 322.016852][ T8666] hsr0: entered allmulticast mode [ 322.016863][ T8666] hsr_slave_0: entered allmulticast mode [ 322.016877][ T8666] hsr_slave_1: entered allmulticast mode [ 322.028214][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 322.202942][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 322.205535][ T9] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 322.205592][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.205617][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.205665][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 322.205687][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.272221][ T9] usb 4-1: config 0 descriptor?? [ 322.291642][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.987'. [ 322.334871][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 322.648180][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 322.749868][ T5886] usb 4-1: USB disconnect, device number 15 [ 322.749960][ C1] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 322.800634][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 322.800663][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 322.800684][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 322.800706][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 322.803688][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 322.803819][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.803838][ T9] usb 2-1: Product: syz [ 322.803852][ T9] usb 2-1: Manufacturer: syz [ 322.803865][ T9] usb 2-1: SerialNumber: syz [ 322.902960][ T9] usb 2-1: config 0 descriptor?? [ 323.181862][ T9] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 323.371195][ T5886] usb 2-1: USB disconnect, device number 13 [ 324.062364][ T8725] syz.1.1010 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 324.706902][ T8749] program syz.1.1019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.575844][ T8767] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1026'. [ 325.955760][ T8771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 325.972448][ T8771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 325.972629][ T8771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 325.972773][ T8771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 325.972917][ T8771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 325.973079][ T8771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 325.973704][ T8771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 325.973859][ T8771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 325.974020][ T8771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 325.974179][ T8771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 326.188258][ T5928] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 326.351533][ T5928] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 326.351561][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.391384][ T5928] usb 6-1: config 0 descriptor?? [ 326.498238][ T5899] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 326.642652][ T5928] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 326.658154][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 326.666023][ T5899] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 326.666050][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.750636][ T5899] pvrusb2: Hardware description: Terratec Grabster AV400 [ 326.750654][ T5899] pvrusb2: ********** [ 326.750660][ T5899] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 326.750670][ T5899] pvrusb2: Important functionality might not be entirely working. [ 326.750679][ T5899] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 326.750688][ T5899] pvrusb2: ********** [ 326.844010][ T5928] [drm:udl_init] *ERROR* Selecting channel failed [ 326.963245][ T2365] pvrusb2: Invalid write control endpoint [ 327.139982][ T5928] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 327.140008][ T5928] [drm] Initialized udl on minor 2 [ 327.150722][ T8782] pvrusb2: Invalid write control endpoint [ 327.172790][ T5928] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.176230][ T5928] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 327.195213][ T5900] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.340877][ T5928] usb 6-1: USB disconnect, device number 7 [ 327.348958][ T5899] usb 1-1: USB disconnect, device number 11 [ 327.358575][ T5900] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.359231][ T5900] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 327.445019][ T2365] pvrusb2: Invalid write control endpoint [ 327.445036][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 327.445044][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 327.445051][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 327.445059][ T2365] pvrusb2: Device being rendered inoperable [ 327.445257][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 327.445706][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 327.546296][ T2365] pvrusb2: Attached sub-driver cx25840 [ 327.546324][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 327.546334][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 328.658736][ T5928] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 328.848172][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 328.850000][ T5928] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 328.850042][ T5928] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.850054][ T5928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 328.850066][ T5928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 328.850079][ T5928] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.850101][ T5928] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 328.850113][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.166283][ T5928] usb 1-1: GET_CAPABILITIES returned 0 [ 329.166330][ T5928] usbtmc 1-1:16.0: can't read capabilities [ 329.392731][ T5886] usb 1-1: USB disconnect, device number 12 [ 330.048186][ T5899] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 330.211330][ T5899] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 330.211360][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.211379][ T5899] usb 2-1: Product: syz [ 330.211393][ T5899] usb 2-1: Manufacturer: syz [ 330.211406][ T5899] usb 2-1: SerialNumber: syz [ 330.278299][ T5899] usb 2-1: config 0 descriptor?? [ 330.690035][ T8855] nbd0: detected capacity change from 0 to 127 [ 330.696290][ T5129] block nbd0: Receive control failed (result -32) [ 330.707466][ T8859] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1066'. [ 330.707499][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1066'. [ 330.752995][ T6504] block nbd0: Dead connection, failed to find a fallback [ 330.753022][ T6504] block nbd0: shutting down sockets [ 330.753175][ T6504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.753285][ T6504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.753655][ T6504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.753677][ T6504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 330.753822][ T6504] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.753844][ T6504] Buffer I/O error on dev nbd0, logical block 2, async page read [ 330.753988][ T6504] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.754007][ T6504] Buffer I/O error on dev nbd0, logical block 3, async page read [ 330.754167][ T6504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.754188][ T6504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.754335][ T6504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.754356][ T6504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 330.754496][ T6504] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.754517][ T6504] Buffer I/O error on dev nbd0, logical block 2, async page read [ 330.754766][ T6504] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.754787][ T6504] Buffer I/O error on dev nbd0, logical block 3, async page read [ 330.754949][ T6504] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.754970][ T6504] Buffer I/O error on dev nbd0, logical block 0, async page read [ 330.755114][ T6504] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.755135][ T6504] Buffer I/O error on dev nbd0, logical block 1, async page read [ 330.960102][ T6504] ldm_validate_partition_table(): Disk read failed. [ 330.979607][ T6504] Dev nbd0: unable to read RDB block 0 [ 330.987170][ T6504] nbd0: unable to read partition table [ 331.021551][ T6504] ldm_validate_partition_table(): Disk read failed. [ 331.035343][ T6504] Dev nbd0: unable to read RDB block 0 [ 331.046191][ T6504] nbd0: unable to read partition table [ 331.160792][ T5899] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 331.160822][ T5899] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 331.161076][ T5899] asix 2-1:0.0: probe with driver asix failed with error -71 [ 331.218109][ T5899] usb 2-1: USB disconnect, device number 14 [ 331.348226][ T979] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 331.498156][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 331.501786][ T979] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 331.501813][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.539760][ T979] usb 1-1: config 0 descriptor?? [ 331.668861][ T8879] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 331.669024][ T8879] dvmrp1: linktype set to 2 [ 331.759489][ T979] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 331.781008][ T979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.782297][ T979] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 331.782352][ T979] usb 1-1: media controller created [ 331.850780][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.866971][ T37] audit: type=1326 audit(1759299883.442:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.2.1077" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4dca7aeec9 code=0x0 [ 331.938180][ T5982] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 331.964841][ T8863] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 331.966206][ T979] az6027: usb out operation failed. (-71) [ 331.966761][ T979] az6027: usb out operation failed. (-71) [ 331.966775][ T979] stb0899_attach: Driver disabled by Kconfig [ 331.966783][ T979] az6027: no front-end attached [ 331.966783][ T979] [ 331.967147][ T979] az6027: usb out operation failed. (-71) [ 331.967171][ T979] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 332.022701][ T979] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 332.025293][ T979] dvb-usb: schedule remote query interval to 400 msecs. [ 332.025313][ T979] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 332.061382][ T979] usb 1-1: USB disconnect, device number 13 [ 332.115660][ T5982] usb 6-1: unable to get BOS descriptor or descriptor too short [ 332.117219][ T5982] usb 6-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 1024 [ 332.117248][ T5982] usb 6-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 7227, setting to 1024 [ 332.117274][ T5982] usb 6-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 1024 [ 332.117298][ T5982] usb 6-1: config 1 interface 0 has no altsetting 0 [ 332.168726][ T5982] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.168753][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.168772][ T5982] usb 6-1: Product: syz [ 332.168786][ T5982] usb 6-1: Manufacturer: syz [ 332.168799][ T5982] usb 6-1: SerialNumber: syz [ 332.202469][ T8873] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 332.202646][ T8873] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 332.261024][ T979] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 332.454014][ T5982] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 332.491052][ T8891] ip6gretap1: entered promiscuous mode [ 332.491082][ T8891] ip6gretap1: entered allmulticast mode [ 332.495667][ T5982] usb 6-1: USB disconnect, device number 8 [ 333.378389][ T979] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 333.428216][ T5899] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 333.530980][ T979] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 333.531009][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.535356][ T979] usb 4-1: config 0 descriptor?? [ 333.565728][ T979] cp210x 4-1:0.0: cp210x converter detected [ 333.590696][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.590727][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.590815][ T5899] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 333.590836][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.644629][ T5899] usb 1-1: config 0 descriptor?? [ 333.819094][ T8919] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1093'. [ 334.166705][ T979] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 334.166763][ T979] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 334.276240][ T979] usb 4-1: cp210x converter now attached to ttyUSB0 [ 334.320661][ T979] usb 4-1: USB disconnect, device number 16 [ 334.384876][ T979] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 334.405884][ T979] cp210x 4-1:0.0: device disconnected [ 334.462876][ T5899] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -71 [ 334.496681][ T5899] usb 1-1: USB disconnect, device number 14 [ 335.269943][ T8933] block device autoloading is deprecated and will be removed. [ 335.446634][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'. [ 336.189707][ T8959] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1108'. [ 336.394909][ T8964] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1110'. [ 336.641947][ T1229] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 336.791458][ T1229] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.791487][ T1229] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 336.791506][ T1229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.791556][ T1229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 336.791583][ T1229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 336.796141][ T1229] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 336.796170][ T1229] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 336.796189][ T1229] usb 3-1: Product: syz [ 336.796202][ T1229] usb 3-1: Manufacturer: syz [ 337.000355][ T1229] cdc_wdm 3-1:1.0: skipping garbage [ 337.000375][ T1229] cdc_wdm 3-1:1.0: skipping garbage [ 337.034144][ T1229] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 337.034176][ T1229] cdc_wdm 3-1:1.0: Unknown control protocol [ 337.237298][ T5982] usb 3-1: USB disconnect, device number 17 [ 338.496485][ T9001] can0: slcan on ttyS3. [ 338.729628][ T9004] can0 (unregistered): slcan off ttyS3. [ 338.974695][ T9023] program syz.5.1133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.132055][ T9028] tap0: tun_chr_ioctl cmd 35111 [ 341.067104][ T5982] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 341.228258][ T5982] usb 1-1: Using ep0 maxpacket: 8 [ 341.233566][ T5982] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 341.233595][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.233614][ T5982] usb 1-1: Product: syz [ 341.233628][ T5982] usb 1-1: Manufacturer: syz [ 341.233641][ T5982] usb 1-1: SerialNumber: syz [ 341.277603][ T5982] usb 1-1: config 0 descriptor?? [ 341.538219][ T5982] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 341.943384][ T5982] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 341.972493][ T5982] usb 1-1: USB disconnect, device number 15 [ 344.017306][ T37] audit: type=1326 audit(1759299895.592:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b573af79 code=0x7ffc0000 [ 344.017673][ T37] audit: type=1326 audit(1759299895.592:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b573af79 code=0x7ffc0000 [ 344.018150][ T37] audit: type=1326 audit(1759299895.592:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b573af79 code=0x7ffc0000 [ 344.028637][ T37] audit: type=1326 audit(1759299895.612:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b573af79 code=0x7ffc0000 [ 344.030219][ T37] audit: type=1326 audit(1759299895.612:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b573af79 code=0x7ffc0000 [ 344.031657][ T37] audit: type=1326 audit(1759299895.612:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b573af79 code=0x7ffc0000 [ 344.033566][ T37] audit: type=1326 audit(1759299895.612:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b573af79 code=0x7ffc0000 [ 344.045469][ T37] audit: type=1326 audit(1759299895.612:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b573af79 code=0x7ffc0000 [ 344.045963][ T37] audit: type=1326 audit(1759299895.622:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b573af79 code=0x7ffc0000 [ 344.047211][ T37] audit: type=1326 audit(1759299895.622:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.3.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b573af79 code=0x7ffc0000 [ 344.255513][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 344.255540][ T9163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 344.255557][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 344.257429][ T9163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 344.257457][ T9163] netlink: 'syz.2.1182': attribute type 6 has an invalid length. [ 345.117518][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 345.283508][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 345.283781][ T9194] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 345.749638][ T9208] syz.2.1202 uses obsolete (PF_INET,SOCK_PACKET) [ 346.058496][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 346.947400][ T9248] netlink: 'syz.0.1219': attribute type 3 has an invalid length. [ 348.656831][ T9275] mmap: syz.5.1230 (9275) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 349.038087][ T979] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 349.212708][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 349.216140][ T979] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.216192][ T979] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 349.216213][ T979] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.227232][ T979] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 349.227261][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.227280][ T979] usb 3-1: Product: syz [ 349.227294][ T979] usb 3-1: Manufacturer: syz [ 349.227355][ T979] usb 3-1: SerialNumber: syz [ 349.320009][ T979] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 349.321661][ T979] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 349.321746][ T979] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 349.563105][ T979] usb 3-1: USB disconnect, device number 18 [ 350.692248][ T9337] 9pnet_fd: p9_fd_create_tcp (9337): problem binding to privport [ 351.165496][ T9347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1261'. [ 352.105932][ T9375] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1273'. [ 352.319006][ T37] kauditd_printk_skb: 290 callbacks suppressed [ 352.319024][ T37] audit: type=1326 audit(1759299903.892:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 352.321750][ T37] audit: type=1326 audit(1759299903.902:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 352.322026][ T37] audit: type=1326 audit(1759299903.902:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 352.322413][ T37] audit: type=1326 audit(1759299903.902:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 352.322680][ T37] audit: type=1326 audit(1759299903.902:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 352.323193][ T37] audit: type=1326 audit(1759299903.902:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 352.324007][ T37] audit: type=1326 audit(1759299903.902:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 352.324332][ T37] audit: type=1326 audit(1759299903.902:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 352.324760][ T37] audit: type=1326 audit(1759299903.902:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 352.325125][ T37] audit: type=1326 audit(1759299903.902:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f65b579eec9 code=0x7ffc0000 [ 355.014519][ T9473] kvm: kvm [9472]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xffffffff00000000 [ 355.018911][ T1229] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 355.168095][ T1229] usb 1-1: Using ep0 maxpacket: 16 [ 355.170357][ T1229] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 355.170387][ T1229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 355.174219][ T1229] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 355.174254][ T1229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.174275][ T1229] usb 1-1: Product: syz [ 355.174289][ T1229] usb 1-1: Manufacturer: syz [ 355.174303][ T1229] usb 1-1: SerialNumber: syz [ 355.195651][ T1229] usb 1-1: config 0 descriptor?? [ 355.204134][ T1229] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 355.204166][ T1229] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 355.338088][ T5899] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 355.493380][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.493628][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 355.495929][ T5899] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 355.495955][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.551654][ T5899] pvrusb2: Hardware description: Terratec Grabster AV400 [ 355.551671][ T5899] pvrusb2: ********** [ 355.551677][ T5899] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 355.551690][ T5899] pvrusb2: Important functionality might not be entirely working. [ 355.551697][ T5899] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 355.551706][ T5899] pvrusb2: ********** [ 355.790842][ T2365] pvrusb2: Invalid write control endpoint [ 355.861282][ T1229] em28xx 1-1:0.0: chip ID is em2710 [ 355.902951][ T2365] pvrusb2: Invalid write control endpoint [ 355.902966][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 355.902973][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 355.902979][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 355.902986][ T2365] pvrusb2: Device being rendered inoperable [ 355.949706][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 355.949759][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 355.973005][ T2365] pvrusb2: Attached sub-driver cx25840 [ 355.973018][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 355.973028][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 356.053780][ T9477] pvrusb2: Attempted to execute control transfer when device not ok [ 356.063320][ T1229] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 356.092632][ T5886] usb 2-1: USB disconnect, device number 15 [ 356.113077][ T1229] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 356.113099][ T1229] em28xx 1-1:0.0: No AC97 audio processor [ 356.160156][ T1229] usb 1-1: USB disconnect, device number 16 [ 356.162326][ T1229] em28xx 1-1:0.0: Disconnecting em28xx [ 356.359032][ T1229] em28xx 1-1:0.0: Freeing device [ 356.598233][ T5982] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 356.750374][ T5982] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 356.750406][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.761827][ T5982] usb 3-1: config 0 descriptor?? [ 356.770810][ T5982] cp210x 3-1:0.0: cp210x converter detected [ 357.180215][ T5982] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 357.414303][ T5982] usb 3-1: cp210x converter now attached to ttyUSB0 [ 357.593361][ T1229] usb 3-1: USB disconnect, device number 19 [ 357.603692][ T1229] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 357.744377][ T1229] cp210x 3-1:0.0: device disconnected [ 358.125596][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'. [ 358.286652][ T9551] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1350'. [ 358.489834][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1353'. [ 358.757313][ T9568] program syz.1.1356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.592022][ T9591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.594277][ T9591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.608063][ T5886] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 359.761473][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 359.763865][ T5886] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 359.763889][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.763908][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.767213][ T5886] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.767242][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.767262][ T5886] usb 3-1: Product: syz [ 359.767276][ T5886] usb 3-1: Manufacturer: syz [ 359.767289][ T5886] usb 3-1: SerialNumber: syz [ 359.819446][ T9600] overlayfs: failed to clone upperpath [ 360.242698][ T5886] usb 3-1: 0:2 : does not exist [ 360.882050][ T5886] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 360.953286][ T5886] usb 3-1: USB disconnect, device number 20 [ 361.074353][ T6504] udevd[6504]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.401496][ T9645] netlink: 'syz.0.1389': attribute type 12 has an invalid length. [ 362.461836][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 363.209505][ T5886] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 363.378144][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 363.381515][ T5886] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.381543][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 363.381575][ T5886] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 363.381596][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.387653][ T5886] usb 2-1: config 0 descriptor?? [ 363.490074][ T979] kernel read not supported for file /dsp (pid: 979 comm: kworker/0:2) [ 363.639967][ T9695] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 13 [ 363.801135][ T5886] hid (null): report_id 55783 is invalid [ 363.909307][ T5886] cougar 0003:060B:500A.000B: usage count exceeds max: fixing up report descriptor [ 363.910592][ T5886] cougar 0003:060B:500A.000B: unexpected long global item [ 363.911381][ T5886] cougar 0003:060B:500A.000B: parse failed [ 363.911479][ T5886] cougar 0003:060B:500A.000B: probe with driver cougar failed with error -22 [ 364.015366][ T5886] usb 2-1: USB disconnect, device number 16 [ 366.053897][ T9779] sctp: [Deprecated]: syz.3.1445 (pid 9779) Use of int in max_burst socket option deprecated. [ 366.053897][ T9779] Use struct sctp_assoc_value instead [ 366.902763][ T5886] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 367.068735][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 367.073038][ T5886] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 367.073067][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.087614][ T5886] usb 2-1: config 0 descriptor?? [ 367.158195][ T979] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 367.308394][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 367.308454][ T5886] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 367.310519][ T979] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.310541][ T979] usb 4-1: config 0 has no interface number 0 [ 367.314878][ T979] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 367.314903][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.314922][ T979] usb 4-1: Product: syz [ 367.314935][ T979] usb 4-1: Manufacturer: syz [ 367.314949][ T979] usb 4-1: SerialNumber: syz [ 367.385354][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 367.393305][ T5886] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 367.393361][ T5886] usb 2-1: media controller created [ 367.410604][ T979] usb 4-1: config 0 descriptor?? [ 367.416662][ T979] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 367.416688][ T979] usb 4-1: selecting invalid altsetting 1 [ 367.416704][ T979] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 367.453004][ T979] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 367.492402][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.508200][ T5813] Bluetooth: hci5: command 0xfc11 tx timeout [ 367.508221][ T5129] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 367.558069][ T979] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 367.558137][ T979] usb 4-1: media controller created [ 367.718508][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.952593][ T5886] DVB: Unable to find symbol dib7000p_attach() [ 367.952608][ T5886] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 368.078849][ T5886] rc_core: IR keymap rc-dib0700-rc5 not found [ 368.078869][ T5886] Registered IR keymap rc-empty [ 368.871470][ T979] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 368.871527][ T979] zl10353_read_register: readreg error (reg=127, ret==-110) [ 370.572868][ T9857] netlink: 'syz.5.1479': attribute type 10 has an invalid length. [ 370.596633][ T9857] bridge_slave_1: left allmulticast mode [ 370.596677][ T9857] bridge_slave_1: left promiscuous mode [ 370.596945][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.752516][ T9857] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 370.948556][ T5862] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 371.113913][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 371.124306][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.124324][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.124346][ T5862] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 371.124358][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.133130][ T5862] usb 1-1: config 0 descriptor?? [ 371.631708][ T5862] hid_parser_main: 839 callbacks suppressed [ 371.631734][ T5862] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 371.631769][ T5862] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 371.632170][ T5862] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 371.632198][ T5862] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 371.632224][ T5862] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 371.637619][ T5862] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 372.714526][ T5886] dvb-usb: could not initialize remote control. [ 372.714543][ T5886] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 372.731496][ T9860] ------------[ cut here ]------------ [ 372.731511][ T9860] usb 2-1: BOGUS control dir, pipe 80001180 doesn't match bRequestType c0 [ 372.732023][ T9860] WARNING: CPU: 1 PID: 9860 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 372.732063][ T9860] Modules linked in: [ 372.732099][ T9860] CPU: 1 UID: 0 PID: 9860 Comm: syz.0.1478 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 372.732123][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.732143][ T9860] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 372.732165][ T9860] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 20 4f 60 8b 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 a6 8f 19 fb 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 372.732183][ T9860] RSP: 0018:ffffc90009bbf850 EFLAGS: 00010246 [ 372.732201][ T9860] RAX: 62f278f86c4d0800 RBX: ffff8880283cfd00 RCX: 0000000000080000 [ 372.732216][ T9860] RDX: ffffc90005a09000 RSI: 0000000000000749 RDI: 000000000000074a [ 372.732229][ T9860] RBP: 1ffff11005a7a744 R08: 0000000000000000 R09: 0000000000000000 [ 372.732243][ T9860] R10: dffffc0000000000 R11: ffffed101712487b R12: dffffc0000000000 [ 372.732258][ T9860] R13: ffff88802d3d3a20 R14: 0000000080001180 R15: ffff88802eb9adc0 [ 372.732274][ T9860] FS: 00007fce7056e6c0(0000) GS:ffff888127117000(0000) knlGS:0000000000000000 [ 372.732291][ T9860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.732304][ T9860] CR2: 00007f6c3604bf70 CR3: 000000005dabe000 CR4: 00000000003526f0 [ 372.732321][ T9860] Call Trace: [ 372.732334][ T9860] [ 372.732356][ T9860] usb_start_wait_urb+0x114/0x4c0 [ 372.732386][ T9860] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 372.732431][ T9860] usb_control_msg+0x232/0x3e0 [ 372.732459][ T9860] dib0700_i2c_xfer+0xba7/0xf70 [ 372.732501][ T9860] ? __lock_acquire+0xab9/0xd20 [ 372.732534][ T9860] __i2c_transfer+0x871/0x2170 [ 372.732567][ T9860] ? i2c_transfer+0x120/0x3a0 [ 372.732604][ T9860] ? __pfx___i2c_transfer+0x10/0x10 [ 372.732635][ T9860] ? rt_mutex_lock_nested+0x172/0x1e0 [ 372.732657][ T9860] ? i2c_transfer+0x120/0x3a0 [ 372.732686][ T9860] i2c_transfer+0x25b/0x3a0 [ 372.732717][ T9860] ? __pfx_i2c_transfer+0x10/0x10 [ 372.732750][ T9860] ? _copy_from_user+0x94/0xb0 [ 372.732776][ T9860] i2cdev_ioctl_rdwr+0x460/0x740 [ 372.732806][ T9860] i2cdev_ioctl+0x64e/0x800 [ 372.732834][ T9860] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 372.732863][ T9860] ? __fget_files+0x3a6/0x420 [ 372.732912][ T9860] ? __fget_files+0x2a/0x420 [ 372.732949][ T9860] ? bpf_lsm_file_ioctl+0x9/0x20 [ 372.732970][ T9860] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 372.732998][ T9860] __se_sys_ioctl+0xff/0x170 [ 372.733023][ T9860] do_syscall_64+0xfa/0x3b0 [ 372.733043][ T9860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.733061][ T9860] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 372.733081][ T9860] ? clear_bhb_loop+0x60/0xb0 [ 372.733104][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.733123][ T9860] RIP: 0033:0x7fce7230eec9 [ 372.733146][ T9860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.733161][ T9860] RSP: 002b:00007fce7056e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.733181][ T9860] RAX: ffffffffffffffda RBX: 00007fce72565fa0 RCX: 00007fce7230eec9 [ 372.733196][ T9860] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 372.733209][ T9860] RBP: 00007fce72391f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.733222][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.733234][ T9860] R13: 00007fce72566038 R14: 00007fce72565fa0 R15: 00007ffe2ef87e38 [ 372.733267][ T9860] [ 372.733280][ T9860] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 372.733294][ T9860] CPU: 1 UID: 0 PID: 9860 Comm: syz.0.1478 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 372.733317][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.733329][ T9860] Call Trace: [ 372.733336][ T9860] [ 372.733344][ T9860] dump_stack_lvl+0x99/0x250 [ 372.733363][ T9860] ? __asan_memcpy+0x40/0x70 [ 372.733384][ T9860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.733402][ T9860] ? __pfx__printk+0x10/0x10 [ 372.733439][ T9860] vpanic+0x281/0x750 [ 372.733459][ T9860] ? __pfx__printk+0x10/0x10 [ 372.733482][ T9860] ? __pfx_vpanic+0x10/0x10 [ 372.733502][ T9860] ? is_bpf_text_address+0x292/0x2b0 [ 372.733533][ T9860] panic+0xb9/0xc0 [ 372.733551][ T9860] ? __pfx_panic+0x10/0x10 [ 372.733589][ T9860] __warn+0x31b/0x4b0 [ 372.733606][ T9860] ? usb_submit_urb+0x112b/0x1830 [ 372.733627][ T9860] ? usb_submit_urb+0x112b/0x1830 [ 372.733646][ T9860] report_bug+0x2be/0x4f0 [ 372.733673][ T9860] ? usb_submit_urb+0x112b/0x1830 [ 372.733692][ T9860] ? usb_submit_urb+0x112b/0x1830 [ 372.733711][ T9860] ? usb_submit_urb+0x112d/0x1830 [ 372.733730][ T9860] handle_bug+0x84/0x160 [ 372.733751][ T9860] exc_invalid_op+0x1a/0x50 [ 372.733772][ T9860] asm_exc_invalid_op+0x1a/0x20 [ 372.733790][ T9860] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 372.733808][ T9860] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 20 4f 60 8b 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 a6 8f 19 fb 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 372.733825][ T9860] RSP: 0018:ffffc90009bbf850 EFLAGS: 00010246 [ 372.733840][ T9860] RAX: 62f278f86c4d0800 RBX: ffff8880283cfd00 RCX: 0000000000080000 [ 372.733854][ T9860] RDX: ffffc90005a09000 RSI: 0000000000000749 RDI: 000000000000074a [ 372.733867][ T9860] RBP: 1ffff11005a7a744 R08: 0000000000000000 R09: 0000000000000000 [ 372.733880][ T9860] R10: dffffc0000000000 R11: ffffed101712487b R12: dffffc0000000000 [ 372.733895][ T9860] R13: ffff88802d3d3a20 R14: 0000000080001180 R15: ffff88802eb9adc0 [ 372.733947][ T9860] usb_start_wait_urb+0x114/0x4c0 [ 372.733976][ T9860] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 372.734018][ T9860] usb_control_msg+0x232/0x3e0 [ 372.734046][ T9860] dib0700_i2c_xfer+0xba7/0xf70 [ 372.734088][ T9860] ? __lock_acquire+0xab9/0xd20 [ 372.734120][ T9860] __i2c_transfer+0x871/0x2170 [ 372.734148][ T9860] ? i2c_transfer+0x120/0x3a0 [ 372.734180][ T9860] ? __pfx___i2c_transfer+0x10/0x10 [ 372.734206][ T9860] ? rt_mutex_lock_nested+0x172/0x1e0 [ 372.734223][ T9860] ? i2c_transfer+0x120/0x3a0 [ 372.734249][ T9860] i2c_transfer+0x25b/0x3a0 [ 372.734278][ T9860] ? __pfx_i2c_transfer+0x10/0x10 [ 372.734308][ T9860] ? _copy_from_user+0x94/0xb0 [ 372.734331][ T9860] i2cdev_ioctl_rdwr+0x460/0x740 [ 372.734361][ T9860] i2cdev_ioctl+0x64e/0x800 [ 372.734385][ T9860] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 372.734413][ T9860] ? __fget_files+0x3a6/0x420 [ 372.734435][ T9860] ? __fget_files+0x2a/0x420 [ 372.734458][ T9860] ? bpf_lsm_file_ioctl+0x9/0x20 [ 372.734476][ T9860] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 372.734502][ T9860] __se_sys_ioctl+0xff/0x170 [ 372.734523][ T9860] do_syscall_64+0xfa/0x3b0 [ 372.734542][ T9860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.734562][ T9860] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 372.734582][ T9860] ? clear_bhb_loop+0x60/0xb0 [ 372.734606][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.734625][ T9860] RIP: 0033:0x7fce7230eec9 [ 372.734642][ T9860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.734660][ T9860] RSP: 002b:00007fce7056e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.734679][ T9860] RAX: ffffffffffffffda RBX: 00007fce72565fa0 RCX: 00007fce7230eec9 [ 372.734694][ T9860] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 372.734707][ T9860] RBP: 00007fce72391f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.734720][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.734733][ T9860] R13: 00007fce72566038 R14: 00007fce72565fa0 R15: 00007ffe2ef87e38 [ 372.734767][ T9860] [ 372.735028][ T9860] Kernel Offset: disabled