last executing test programs: 2m17.623795716s ago: executing program 3 (id=2670): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) 2m17.344779838s ago: executing program 3 (id=2679): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', r2, 0x0, 0x0, 0x7e, 0x8, 0x10, @dev={0xfe, 0x80, '\x00', 0xe}, @loopback={0x0, 0xffff888101827518}, 0x8, 0x8000, 0x5, 0xffffffff}}) 2m17.12620441s ago: executing program 3 (id=2683): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @remote}, 0x10) 2m16.932816499s ago: executing program 3 (id=2686): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 2m16.85430792s ago: executing program 3 (id=2688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x24, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x7d3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x400008c) 2m15.864174853s ago: executing program 3 (id=2703): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 2m15.629377684s ago: executing program 32 (id=2703): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1m0.916060038s ago: executing program 5 (id=3899): r0 = memfd_secret(0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x2000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f00006b8000/0x2000)=nil, 0x2000}}) 1m0.805445651s ago: executing program 5 (id=3901): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 1m0.589118781s ago: executing program 5 (id=3905): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1m0.344587772s ago: executing program 5 (id=3910): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 1m0.001563402s ago: executing program 5 (id=3917): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) 58.834666374s ago: executing program 5 (id=3938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r2], 0x1c}}, 0x200040c4) 58.530835353s ago: executing program 33 (id=3938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r2], 0x1c}}, 0x200040c4) 47.151632439s ago: executing program 0 (id=4110): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 47.060852638s ago: executing program 0 (id=4111): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="b6", 0x1}, {&(0x7f0000000580)="b1cd", 0x2}], 0x2, 0x0, 0x0, 0x20040890}, 0x0) 46.933159103s ago: executing program 0 (id=4113): r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r0, 0x1b) 46.716401738s ago: executing program 0 (id=4116): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 46.580666929s ago: executing program 0 (id=4120): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 40.052180884s ago: executing program 0 (id=4226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x84, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @val, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa70a}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 39.669896824s ago: executing program 34 (id=4226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x84, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @val, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa70a}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 2.497867187s ago: executing program 4 (id=4742): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.351245972s ago: executing program 4 (id=4746): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00"}) 2.138378551s ago: executing program 4 (id=4750): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.981770669s ago: executing program 7 (id=4754): r0 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8) setreuid(0x0, 0xee00) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000140)='&/(\\\xc7*^{@::@([(\x11&\xcb\x00', 0x0, r0) 1.724781852s ago: executing program 7 (id=4757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000099000040"]) 1.724092992s ago: executing program 2 (id=4759): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x24, r1, 0xba960a2220112c19, 0x70bd2f, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'nfc\x10'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) 1.60854972s ago: executing program 4 (id=4761): bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB='\v'], 0x48) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x1411, 0x621, 0x7290000, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x2000}, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000640), 0x1004, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), 0x0}, 0x20) 1.428114366s ago: executing program 2 (id=4764): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r1, 0x93, 0x3) 1.324959583s ago: executing program 6 (id=4765): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) readv(r1, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/4096, 0x9}], 0x1) 1.319948293s ago: executing program 2 (id=4767): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x3, 0x3e3}, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 1.216219347s ago: executing program 4 (id=4768): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x2, r0}) 1.214961415s ago: executing program 7 (id=4769): openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 1.135207024s ago: executing program 6 (id=4771): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={r2, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000300)=0x90) 1.074450283s ago: executing program 2 (id=4772): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 959.037578ms ago: executing program 6 (id=4774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 809.755793ms ago: executing program 6 (id=4776): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) 809.585123ms ago: executing program 1 (id=4777): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 782.048654ms ago: executing program 2 (id=4778): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) 668.287328ms ago: executing program 1 (id=4779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a3f0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 619.223125ms ago: executing program 6 (id=4780): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0xac9e, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) r3 = socket(0xa, 0x3, 0x3a) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000380)=@llc={0x1a, 0x1b, 0xf, 0x6, 0x0, 0xd2, @multicast}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 597.968039ms ago: executing program 7 (id=4781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008f04"]) 536.344429ms ago: executing program 2 (id=4782): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000140)={0x35, 0xffff, 0xdc83}) 522.230635ms ago: executing program 1 (id=4783): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982af", 0x3}], 0x1, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) 363.135737ms ago: executing program 1 (id=4784): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x941e, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) ppoll(&(0x7f00000000c0)=[{r0, 0x8000}], 0x1, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 252.311319ms ago: executing program 4 (id=4785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 250.507585ms ago: executing program 7 (id=4786): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}], 0x30}}], 0x1, 0x810) 225.775314ms ago: executing program 1 (id=4787): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000002700)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, &(0x7f0000000580)=""/87, 0x57}, 0x80009}], 0x1, 0x0, 0x0) 176.272211ms ago: executing program 6 (id=4788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 284.34µs ago: executing program 1 (id=4789): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) fchmod(r0, 0x0) 0s ago: executing program 7 (id=4790): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x4009090) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x505, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): id=0 gid=0 ses=4294967295 subj=_ pid=9894 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 258.463728][ T37] audit: type=1326 audit(1759622413.036:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9894 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 258.463780][ T37] audit: type=1326 audit(1759622413.036:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9894 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 258.463828][ T37] audit: type=1326 audit(1759622413.036:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9894 comm="syz.4.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 258.939558][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1805'. [ 260.547741][ T992] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 260.717223][ T992] usb 4-1: config index 0 descriptor too short (expected 100, got 36) [ 260.717293][ T992] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.717322][ T992] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.717346][ T992] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.717381][ T992] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 260.717406][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.729130][ T992] usb 4-1: config 0 descriptor?? [ 261.149471][ T992] playstation 0003:054C:0BA0.000F: unknown main item tag 0x0 [ 261.149512][ T992] playstation 0003:054C:0BA0.000F: unknown main item tag 0x0 [ 261.149540][ T992] playstation 0003:054C:0BA0.000F: unknown main item tag 0x0 [ 261.149568][ T992] playstation 0003:054C:0BA0.000F: unknown main item tag 0x0 [ 261.149594][ T992] playstation 0003:054C:0BA0.000F: unknown main item tag 0x0 [ 261.149621][ T992] playstation 0003:054C:0BA0.000F: unknown main item tag 0x0 [ 261.149648][ T992] playstation 0003:054C:0BA0.000F: unknown main item tag 0x0 [ 261.158820][ T992] playstation 0003:054C:0BA0.000F: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 261.351438][ T992] playstation 0003:054C:0BA0.000F: Failed to retrieve feature with reportID 18: -71 [ 261.351472][ T992] playstation 0003:054C:0BA0.000F: Failed to retrieve DualShock4 pairing info: -71 [ 261.351531][ T992] playstation 0003:054C:0BA0.000F: Failed to get MAC address from DualShock4 [ 261.351547][ T992] playstation 0003:054C:0BA0.000F: Failed to create dualshock4. [ 261.370556][ T992] playstation 0003:054C:0BA0.000F: probe with driver playstation failed with error -71 [ 261.402125][ T992] usb 4-1: USB disconnect, device number 13 [ 261.681451][ T9980] hsr0: entered promiscuous mode [ 263.101792][T10036] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1863'. [ 263.372359][T10054] sctp: [Deprecated]: syz.3.1871 (pid 10054) Use of int in max_burst socket option deprecated. [ 263.372359][T10054] Use struct sctp_assoc_value instead [ 264.337249][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 264.487163][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 264.489865][ T44] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 264.489893][ T44] usb 4-1: config 0 has no interface number 0 [ 264.532054][ T44] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 264.532091][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.532113][ T44] usb 4-1: Product: syz [ 264.532128][ T44] usb 4-1: Manufacturer: syz [ 264.532143][ T44] usb 4-1: SerialNumber: syz [ 264.589663][ T44] usb 4-1: config 0 descriptor?? [ 264.688627][T10104] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1896'. [ 264.834837][ T44] radio-si470x 4-1:0.35: this is not a si470x device. [ 264.857870][ T44] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 265.086323][ T44] usb 4-1: USB disconnect, device number 14 [ 265.094948][ T5797] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 265.243503][ T5797] usb 5-1: Using ep0 maxpacket: 8 [ 265.252991][ T5797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.253046][ T5797] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.253072][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.413100][ T5797] usb 5-1: config 0 descriptor?? [ 265.562950][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'. [ 265.667490][ T5797] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 265.873209][ T992] usb 5-1: USB disconnect, device number 21 [ 267.365372][T10198] pimreg: tun_chr_ioctl cmd 1074812118 [ 267.670495][T10214] net_ratelimit: 3 callbacks suppressed [ 267.670518][T10214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.757124][ T5949] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 267.914771][ T5949] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 267.914815][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.914837][ T5949] usb 1-1: Product: syz [ 267.914852][ T5949] usb 1-1: Manufacturer: syz [ 267.914868][ T5949] usb 1-1: SerialNumber: syz [ 267.973448][ T5949] usb 1-1: config 0 descriptor?? [ 267.984552][ T5949] ch341 1-1:0.0: ch341-uart converter detected [ 268.341514][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 268.457125][ T44] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 268.490442][T10246] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 268.631991][ T44] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 268.632025][ T44] usb 5-1: config 0 has no interface number 0 [ 268.632307][ T44] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=53.a6 [ 268.632334][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.679687][ T44] usb 5-1: config 0 descriptor?? [ 268.695909][ T44] ftdi_sio 5-1:0.209: FTDI USB Serial Device converter detected [ 268.713703][ T44] ftdi_sio ttyUSB1: unknown device type: 0x53a6 [ 268.803036][ T5949] usb 1-1: failed to send control message: -71 [ 268.803106][ T5949] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 268.829646][ T5949] usb 1-1: USB disconnect, device number 19 [ 268.832215][ T5949] ch341 1-1:0.0: device disconnected [ 268.832384][ T5823] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 268.892970][ T992] usb 5-1: USB disconnect, device number 22 [ 268.895772][ T992] ftdi_sio 5-1:0.209: device disconnected [ 268.984059][ T5823] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 268.984093][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.984114][ T5823] usb 3-1: Product: syz [ 268.984129][ T5823] usb 3-1: Manufacturer: syz [ 268.984144][ T5823] usb 3-1: SerialNumber: syz [ 269.337434][ T5823] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 269.337506][ T5823] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 269.337519][ T5823] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 269.435543][ T5823] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 269.501583][ T5823] usb 3-1: USB disconnect, device number 16 [ 270.940235][T10335] pim6reg: entered allmulticast mode [ 270.967785][T10333] pim6reg: left allmulticast mode [ 272.410033][T10386] netlink: 'syz.2.2029': attribute type 3 has an invalid length. [ 272.622509][T10401] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2035'. [ 273.065770][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 273.065791][ T37] audit: type=1326 audit(1759622683.644:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10421 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c379deec9 code=0x7ffc0000 [ 273.104546][ T37] audit: type=1326 audit(1759622683.674:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10421 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c379deec9 code=0x7ffc0000 [ 273.115526][T10424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2047'. [ 273.125971][ T37] audit: type=1326 audit(1759622683.704:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10421 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c379deec9 code=0x7ffc0000 [ 273.126029][ T37] audit: type=1326 audit(1759622683.704:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10421 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c379deec9 code=0x7ffc0000 [ 273.138796][ T37] audit: type=1326 audit(1759622683.724:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10421 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6c379deec9 code=0x7ffc0000 [ 273.146211][ T37] audit: type=1326 audit(1759622683.724:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10421 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c379deec9 code=0x7ffc0000 [ 273.146266][ T37] audit: type=1326 audit(1759622683.724:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10421 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f6c379deec9 code=0x7ffc0000 [ 273.146308][ T37] audit: type=1326 audit(1759622683.724:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10421 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c379deec9 code=0x7ffc0000 [ 273.391979][T10429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input25 [ 273.765489][T10449] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 273.907694][T10457] netlink: 'syz.0.2063': attribute type 29 has an invalid length. [ 273.909240][T10457] netlink: 'syz.0.2063': attribute type 29 has an invalid length. [ 273.910187][T10457] netlink: 'syz.0.2063': attribute type 29 has an invalid length. [ 273.967392][ T44] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 274.133658][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 274.139163][ T44] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 274.142848][ T44] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 274.142874][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.142893][ T44] usb 5-1: Product: syz [ 274.142906][ T44] usb 5-1: Manufacturer: syz [ 274.142919][ T44] usb 5-1: SerialNumber: syz [ 274.159706][ T44] usb 5-1: config 0 descriptor?? [ 274.185948][ T44] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 274.186007][ T44] usb 5-1: setting power ON [ 274.186638][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 274.206074][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.206916][ T44] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 274.206973][ T44] usb 5-1: media controller created [ 274.278617][T10473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2070'. [ 274.387533][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.413436][T10447] dvb-usb: bulk message failed: -22 (3/0) [ 274.413506][T10447] dvb-usb: bulk message failed: -22 (4/0) [ 274.413522][T10447] cxusb: i2c read failed [ 274.425320][T10447] dvb-usb: bulk message failed: -22 (3/0) [ 274.518737][ T44] usb 5-1: selecting invalid altsetting 6 [ 274.518764][ T44] usb 5-1: digital interface selection failed (-22) [ 274.518782][ T44] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 274.522151][ T44] usb 5-1: setting power OFF [ 274.522347][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 274.522367][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 274.522381][ T44] (NULL device *): no alternate interface [ 274.671400][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 274.678775][ T44] usb 5-1: USB disconnect, device number 23 [ 275.996542][ T37] audit: type=1326 audit(1759622686.576:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.0.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c379deec9 code=0x7ffc0000 [ 275.996850][ T37] audit: type=1326 audit(1759622686.576:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.0.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c379deec9 code=0x7ffc0000 [ 276.174078][T10552] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2111'. [ 276.174126][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'. [ 276.244283][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 276.321695][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 276.505358][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 276.730746][T10576] geneve2: entered allmulticast mode [ 276.733482][T10576] bridge0: port 3(geneve2) entered blocking state [ 276.733745][T10576] bridge0: port 3(geneve2) entered disabled state [ 276.743508][T10576] geneve2: entered promiscuous mode [ 276.770999][T10576] bridge0: port 3(geneve2) entered blocking state [ 276.771234][T10576] bridge0: port 3(geneve2) entered forwarding state [ 276.954276][ T5949] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 277.112610][ T5949] usb 4-1: config 0 has no interfaces? [ 277.112653][ T5949] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 277.112737][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.148407][ T5949] usb 4-1: config 0 descriptor?? [ 277.380797][ T10] usb 4-1: USB disconnect, device number 15 [ 277.694095][ T5127] Bluetooth: hci0: command 0x0405 tx timeout [ 277.944420][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 278.114604][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 278.138765][ T10] usb 3-1: config 0 has no interfaces? [ 278.156053][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 278.156087][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.156107][ T10] usb 3-1: Product: syz [ 278.156122][ T10] usb 3-1: Manufacturer: syz [ 278.156136][ T10] usb 3-1: SerialNumber: syz [ 278.165934][ T10] usb 3-1: config 0 descriptor?? [ 278.209619][T10627] program syz.3.2144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.425321][ T5912] usb 3-1: USB disconnect, device number 17 [ 279.723056][ T992] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 279.876948][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 279.881075][ T992] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 279.881108][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.902241][ T992] usb 5-1: config 0 descriptor?? [ 280.152127][ T992] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 280.164567][ T992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 280.173490][ T992] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 280.173611][ T992] usb 5-1: media controller created [ 280.249449][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.317551][T10723] use of bytesused == 0 is deprecated and will be removed in the future, [ 280.317569][T10723] use the actual size instead. [ 280.369570][ T992] az6027: usb out operation failed. (-71) [ 280.370048][ T992] az6027: usb out operation failed. (-71) [ 280.370064][ T992] stb0899_attach: Driver disabled by Kconfig [ 280.370075][ T992] az6027: no front-end attached [ 280.370075][ T992] [ 280.370523][ T992] az6027: usb out operation failed. (-71) [ 280.370537][ T992] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 280.393406][ T992] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 280.402313][ T992] dvb-usb: schedule remote query interval to 400 msecs. [ 280.402334][ T992] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 280.410332][ T992] usb 5-1: USB disconnect, device number 24 [ 280.699682][ T992] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 281.485407][T10761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.734354][T10773] netlink: 'syz.3.2213': attribute type 1 has an invalid length. [ 281.734390][T10773] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2213'. [ 282.604065][ T5127] Bluetooth: hci4: unexpected event for opcode 0x0803 [ 282.607501][ T5825] Bluetooth: hci4: hardware error 0x00 [ 282.638749][T10803] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2228'. [ 282.837456][T10812] hub 9-0:1.0: USB hub found [ 282.839918][T10812] hub 9-0:1.0: 1 port detected [ 283.456159][T10844] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2248'. [ 284.650543][ T5825] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 285.442676][ T44] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 285.594763][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 285.597874][ T44] usb 4-1: config 0 has an invalid interface number: 24 but max is 0 [ 285.597904][ T44] usb 4-1: config 0 has no interface number 0 [ 285.597961][ T44] usb 4-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.597989][ T44] usb 4-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.598030][ T44] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 285.598054][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.627710][ T44] usb 4-1: config 0 descriptor?? [ 285.670000][ T5912] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 285.821351][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 285.824997][ T5912] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.825024][ T5912] usb 5-1: config 0 has no interface number 0 [ 285.825303][ T5912] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.825331][ T5912] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.825441][ T5912] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 285.825468][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.903446][ T5912] usb 5-1: config 0 descriptor?? [ 286.208249][ T44] hid (null): nested delimiters [ 286.210305][ T44] hid (null): invalid report_size 721493115 [ 286.417064][ T10] usb 4-1: USB disconnect, device number 16 [ 286.593947][ T5912] uclogic 0003:28BD:0094.0011: pen parameters not found [ 286.593977][ T5912] uclogic 0003:28BD:0094.0011: interface is invalid, ignoring [ 286.614721][ T5912] usb 5-1: USB disconnect, device number 25 [ 287.470140][T10978] nbd0: detected capacity change from 0 to 127 [ 287.476090][ T5825] block nbd0: Receive control failed (result -32) [ 287.479787][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 287.631375][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.631406][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.632970][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 287.633008][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 287.633029][ T10] usb 4-1: SerialNumber: syz [ 287.905015][ T10] usb 4-1: 0:2 : does not exist [ 287.955496][ T10] usb 4-1: USB disconnect, device number 17 [ 288.000776][T11002] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 288.439222][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'. [ 288.498672][ T5797] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 288.640258][T11040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.657547][ T5797] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 288.657587][ T5797] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 288.657631][ T5797] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 288.657655][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.670708][T11021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 288.699510][ T5797] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.323723][ T10] usb 3-1: USB disconnect, device number 18 [ 290.657787][ T5797] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 290.817469][ T44] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 290.829373][ T5797] usb 3-1: Using ep0 maxpacket: 32 [ 290.832137][ T5797] usb 3-1: config 0 interface 0 has no altsetting 0 [ 290.845894][ T5797] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 290.845924][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.845943][ T5797] usb 3-1: Product: syz [ 290.845957][ T5797] usb 3-1: Manufacturer: syz [ 290.845970][ T5797] usb 3-1: SerialNumber: syz [ 290.856887][ T5797] usb 3-1: config 0 descriptor?? [ 290.967504][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 290.975929][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 290.976048][ T44] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 290.976076][ T44] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 291.001678][ T44] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.001767][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 291.001787][ T44] usb 1-1: SerialNumber: syz [ 291.053726][T11105] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 291.329047][ T44] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 291.343119][ T5797] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 291.366204][ T44] usb 1-1: USB disconnect, device number 20 [ 291.753627][ T5797] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 291.864292][ T5797] usb 3-1: USB disconnect, device number 19 [ 292.057988][T11155] program syz.0.2394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.361649][T11211] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2423'. [ 293.696594][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 293.696616][ T37] audit: type=1326 audit(1759622704.285:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11227 comm="syz.0.2430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c379deec9 code=0x0 [ 294.375791][T11255] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.855383][ T5823] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 295.006061][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 295.041720][ T5823] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 295.041755][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.041777][ T5823] usb 4-1: Product: syz [ 295.041790][ T5823] usb 4-1: Manufacturer: syz [ 295.041805][ T5823] usb 4-1: SerialNumber: syz [ 295.094227][ T5823] r8152-cfgselector 4-1: Unknown version 0x0000 [ 295.094257][ T5823] r8152-cfgselector 4-1: config 0 descriptor?? [ 295.110101][ T5823] hub 4-1:0.0: bad descriptor, ignoring hub [ 295.110145][ T5823] hub 4-1:0.0: probe with driver hub failed with error -5 [ 295.411487][T11292] netlink: 'syz.2.2462': attribute type 12 has an invalid length. [ 295.411512][T11292] netlink: 'syz.2.2462': attribute type 29 has an invalid length. [ 295.411526][T11292] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2462'. [ 295.411553][T11292] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2462'. [ 295.589973][ T5823] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 295.594044][ T5823] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 295.751469][ T5949] r8152-cfgselector 4-1: reset high-speed USB device number 18 using dummy_hcd [ 296.295162][ T5823] r8152-cfgselector 4-1: USB disconnect, device number 18 [ 296.964904][ T5797] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 297.002382][T11352] trusted_key: encrypted_key: keyword 'udate' not recognized [ 297.118651][ T5797] usb 5-1: Using ep0 maxpacket: 32 [ 297.121325][ T5797] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 297.121356][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.138116][ T5797] usb 5-1: config 0 descriptor?? [ 297.356898][ T5797] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 297.368006][ T5797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 297.374837][ T5797] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 297.374891][ T5797] usb 5-1: media controller created [ 297.428091][ T5797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.565381][T11339] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 297.570792][ T5797] az6027: usb out operation failed. (-71) [ 297.571227][ T5797] az6027: usb out operation failed. (-71) [ 297.571243][ T5797] stb0899_attach: Driver disabled by Kconfig [ 297.571254][ T5797] az6027: no front-end attached [ 297.571254][ T5797] [ 297.571675][ T5797] az6027: usb out operation failed. (-71) [ 297.571690][ T5797] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 297.576536][ T5797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 297.584387][ T5797] dvb-usb: schedule remote query interval to 400 msecs. [ 297.584409][ T5797] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 297.595787][ T5797] usb 5-1: USB disconnect, device number 26 [ 297.933894][ T5797] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 298.071483][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2504'. [ 298.544681][T11403] netlink: 'syz.0.2515': attribute type 4 has an invalid length. [ 298.984514][ T5797] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 299.137055][ T5797] usb 1-1: Using ep0 maxpacket: 8 [ 299.139754][ T5797] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 299.142920][ T5797] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 299.142950][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.142971][ T5797] usb 1-1: Product: syz [ 299.142986][ T5797] usb 1-1: Manufacturer: syz [ 299.143001][ T5797] usb 1-1: SerialNumber: syz [ 299.150024][ T5797] usb 1-1: config 0 descriptor?? [ 299.165722][ T5797] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 299.572969][ T44] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 299.703645][ T5949] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 299.758199][ T44] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 299.758467][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.758490][ T44] usb 3-1: Product: syz [ 299.758506][ T44] usb 3-1: Manufacturer: syz [ 299.758521][ T44] usb 3-1: SerialNumber: syz [ 299.826344][ T44] r8152-cfgselector 3-1: Unknown version 0x0000 [ 299.826442][ T44] r8152-cfgselector 3-1: config 0 descriptor?? [ 299.834688][T11453] tap0: tun_chr_ioctl cmd 2147767517 [ 299.857863][ T5949] usb 5-1: config 0 has no interfaces? [ 299.868784][ T5949] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.868815][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.868849][ T5949] usb 5-1: Product: syz [ 299.868965][ T5949] usb 5-1: Manufacturer: syz [ 299.868980][ T5949] usb 5-1: SerialNumber: syz [ 299.873170][ T5797] gspca_zc3xx: reg_w_i err -110 [ 299.882088][ T5949] usb 5-1: config 0 descriptor?? [ 300.103499][ T44] usb 5-1: USB disconnect, device number 27 [ 300.266134][ T5912] r8152-cfgselector 3-1: USB disconnect, device number 20 [ 300.462529][ T5797] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 300.462643][ T5797] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 300.467633][ T5797] usb 1-1: USB disconnect, device number 21 [ 300.724701][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2558'. [ 300.730464][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2558'. [ 301.365407][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2569'. [ 301.999158][T11527] macsec1: entered allmulticast mode [ 301.999181][T11527] vlan0: entered allmulticast mode [ 301.999191][T11527] veth0_vlan: entered allmulticast mode [ 302.066115][T11527] vlan0: left allmulticast mode [ 302.066144][T11527] veth0_vlan: left allmulticast mode [ 302.129131][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.991578][T11570] netlink: 'syz.3.2594': attribute type 16 has an invalid length. [ 302.991603][T11570] netlink: 'syz.3.2594': attribute type 17 has an invalid length. [ 304.060727][ T5797] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 304.210645][ T5797] usb 1-1: Using ep0 maxpacket: 8 [ 304.213345][ T5797] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 304.213376][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.234895][ T5797] pvrusb2: Hardware description: Terratec Grabster AV400 [ 304.234914][ T5797] pvrusb2: ********** [ 304.234920][ T5797] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 304.234931][ T5797] pvrusb2: Important functionality might not be entirely working. [ 304.234940][ T5797] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 304.234950][ T5797] pvrusb2: ********** [ 304.332838][T11623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.347962][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2617'. [ 304.467196][ T2350] pvrusb2: Invalid write control endpoint [ 304.577127][ T2350] pvrusb2: Invalid write control endpoint [ 304.577145][ T2350] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 304.577155][ T2350] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 304.577164][ T2350] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 304.577176][ T2350] pvrusb2: Device being rendered inoperable [ 304.578695][ T2350] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 304.578759][ T2350] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 304.579875][ T2350] pvrusb2: Attached sub-driver cx25840 [ 304.579887][ T2350] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 304.579898][ T2350] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 304.716112][T11601] pvrusb2: Attempted to execute control transfer when device not ok [ 304.733231][ T5912] usb 1-1: USB disconnect, device number 22 [ 304.771682][T11635] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 305.600001][ T5797] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 305.750297][ T5797] usb 1-1: Using ep0 maxpacket: 32 [ 305.758432][ T5797] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 305.758464][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.767152][ T5797] usb 1-1: config 0 descriptor?? [ 305.770703][ T5823] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 305.952836][ T5823] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.952867][ T5823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.984810][ T5823] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 305.984844][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 305.984865][ T5823] usb 4-1: SerialNumber: syz [ 306.028833][ T5797] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 306.043566][ T5797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 306.045730][ T5797] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 306.045791][ T5797] usb 1-1: media controller created [ 306.122427][ T5797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.241017][ T5797] az6027: usb out operation failed. (-71) [ 306.251665][ T5797] az6027: usb out operation failed. (-71) [ 306.251686][ T5797] stb0899_attach: Driver disabled by Kconfig [ 306.251697][ T5797] az6027: no front-end attached [ 306.251697][ T5797] [ 306.255886][ T5797] az6027: usb out operation failed. (-71) [ 306.255903][ T5797] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 306.277093][ T5797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 306.285565][ T5797] dvb-usb: schedule remote query interval to 400 msecs. [ 306.285586][ T5797] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 306.292645][ T5797] usb 1-1: USB disconnect, device number 23 [ 306.342783][ T5823] usb 4-1: 0:2 : does not exist [ 306.380638][ T5823] usb 4-1: USB disconnect, device number 19 [ 306.518710][T11701] overlay: filesystem on ./file0 not supported as upperdir [ 306.578731][ T5797] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 306.684094][T11710] sctp: [Deprecated]: syz.2.2661 (pid 11710) Use of int in max_burst socket option deprecated. [ 306.684094][T11710] Use struct sctp_assoc_value instead [ 306.778225][T11714] sctp: [Deprecated]: syz.2.2663 (pid 11714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.778225][T11714] Use struct sctp_sack_info instead [ 307.007160][T11726] input: syz0 as /devices/virtual/input/input29 [ 307.621844][T11754] veth1_to_bond: entered allmulticast mode [ 307.622201][T11753] veth1_to_bond: left allmulticast mode [ 307.789031][ T5912] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 307.951235][ T5912] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 307.951270][ T5912] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 307.951290][ T5912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 307.951353][ T5912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 307.951380][ T5912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 307.955425][ T5912] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 307.955455][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 307.955476][ T5912] usb 1-1: Product: syz [ 307.955491][ T5912] usb 1-1: Manufacturer: syz [ 308.005137][ T5912] cdc_wdm 1-1:1.0: skipping garbage [ 308.005157][ T5912] cdc_wdm 1-1:1.0: skipping garbage [ 308.035289][ T5912] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 308.035311][ T5912] cdc_wdm 1-1:1.0: Unknown control protocol [ 308.142449][T11770] netlink: 'syz.4.2690': attribute type 4 has an invalid length. [ 308.479428][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 308.541941][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.293442][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.397875][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2707'. [ 309.398396][T11800] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2707'. [ 309.645750][ T5127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.669977][ T5127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.673650][ T5127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.711248][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.712193][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.839993][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.945369][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.313685][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.395119][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2716'. [ 310.589885][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.610353][ T44] usb 1-1: USB disconnect, device number 24 [ 310.718696][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.840107][ T5825] Bluetooth: hci0: command tx timeout [ 312.308033][T11809] chnl_net:caif_netlink_parms(): no params data found [ 312.491278][ T58] bridge_slave_1: left allmulticast mode [ 312.491307][ T58] bridge_slave_1: left promiscuous mode [ 312.491541][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.589057][ T58] bridge_slave_0: left allmulticast mode [ 312.589090][ T58] bridge_slave_0: left promiscuous mode [ 312.589373][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.776323][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 312.929574][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.929606][ T10] usb 5-1: config 0 has no interfaces? [ 312.929639][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 312.929663][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.978657][ T10] usb 5-1: config 0 descriptor?? [ 313.215615][T11881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.216329][T11881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.217970][ T5825] Bluetooth: hci2: adv larger than maximum supported [ 313.217988][ T5825] Bluetooth: hci2: Malformed LE Event: 0x0d [ 313.223062][ T5912] usb 5-1: USB disconnect, device number 28 [ 313.596581][ T44] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 313.745905][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 313.748312][ T44] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 313.748341][ T44] usb 1-1: config 0 has no interface number 0 [ 313.751561][ T44] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 313.751589][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.751610][ T44] usb 1-1: Product: syz [ 313.751626][ T44] usb 1-1: Manufacturer: syz [ 313.751642][ T44] usb 1-1: SerialNumber: syz [ 313.758564][ T44] usb 1-1: config 0 descriptor?? [ 313.763127][ T44] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 313.921315][ T5825] Bluetooth: hci0: command tx timeout [ 313.983438][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 314.037978][ T44] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 314.084741][ T44] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 314.181295][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 314.181363][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.182953][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 314.182982][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 314.183002][ T10] usb 3-1: Manufacturer: syz [ 314.247517][ T10] usb 3-1: config 0 descriptor?? [ 314.354595][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.405569][ T10] rc_core: IR keymap rc-hauppauge not found [ 314.405593][ T10] Registered IR keymap rc-empty [ 314.407294][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 314.441392][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 314.442289][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 314.443430][ T44] usb 1-1: USB disconnect, device number 25 [ 314.491108][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 314.508200][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 314.509083][ T44] quatech2 1-1:0.51: device disconnected [ 314.551005][ T10] usb 3-1: USB disconnect, device number 21 [ 314.675040][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.004339][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.353306][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.770900][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.906450][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.951697][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2793'. [ 315.986917][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.994732][ T5825] Bluetooth: hci0: command tx timeout [ 316.032586][ T58] bond0 (unregistering): Released all slaves [ 316.282050][T11964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2782'. [ 316.294627][T11973] netlink: 'syz.0.2786': attribute type 25 has an invalid length. [ 316.333228][T11974] netlink: 'syz.0.2786': attribute type 25 has an invalid length. [ 316.419075][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.300676][T11809] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.300830][T11809] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.301078][T11809] bridge_slave_0: entered allmulticast mode [ 317.324815][T11809] bridge_slave_0: entered promiscuous mode [ 317.358989][T11809] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.359149][T11809] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.362297][T11809] bridge_slave_1: entered allmulticast mode [ 317.384911][T11809] bridge_slave_1: entered promiscuous mode [ 317.460517][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.460599][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.836287][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.074378][ T5825] Bluetooth: hci0: command tx timeout [ 318.247975][T11809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.248073][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2835'. [ 318.313108][T11809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.545678][ T58] hsr_slave_0: left promiscuous mode [ 318.606807][ T58] hsr_slave_1: left promiscuous mode [ 318.607961][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.607988][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.718699][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.718730][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.837151][T12105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.975379][ T58] veth1_macvtap: left promiscuous mode [ 318.975512][ T58] veth0_macvtap: left promiscuous mode [ 318.975827][ T58] veth1_vlan: left promiscuous mode [ 318.976060][ T58] veth0_vlan: left promiscuous mode [ 319.803734][ T5896] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 319.963596][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 319.966016][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.966052][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.966086][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.966130][ T5896] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 319.966153][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.972168][ T5896] usb 3-1: config 0 descriptor?? [ 320.250942][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.480636][ T5896] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 320.480673][ T5896] microsoft 0003:045E:07DA.0013: no inputs found [ 320.480687][ T5896] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 320.669241][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.697361][ T5797] usb 3-1: USB disconnect, device number 22 [ 320.916029][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.167449][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.503632][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.615681][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.665794][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.786045][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.069109][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.319517][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.432363][ T58] team0 (unregistering): Port device team_slave_1 removed [ 322.752188][ T58] team0 (unregistering): Port device team_slave_0 removed [ 322.783978][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.815761][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.880946][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.983076][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.149399][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.367151][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.431667][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.498974][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.764461][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.814321][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.882356][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.164154][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.747101][T12119] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2853'. [ 325.969945][T11809] team0: Port device team_slave_0 added [ 325.996226][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.024987][T11809] team0: Port device team_slave_1 added [ 326.283874][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.395992][T11809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.396011][T11809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.396045][T11809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.456860][T11809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.456880][T11809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.456910][T11809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.646847][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.002455][T11809] hsr_slave_0: entered promiscuous mode [ 327.019951][T11809] hsr_slave_1: entered promiscuous mode [ 327.021315][T11809] debugfs: 'hsr0' already exists in 'hsr' [ 327.021346][T11809] Cannot create hsr debugfs directory [ 327.409585][T12389] program syz.0.2985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.148744][ T37] audit: type=1326 audit(1759622738.752:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12412 comm="syz.2.2997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc55b6eec9 code=0x0 [ 328.193644][ T37] audit: type=1326 audit(1759622738.802:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12412 comm="syz.2.2997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7fbc55ba1785 code=0x0 [ 328.403188][ T37] audit: type=1326 audit(1759622739.012:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12412 comm="syz.2.2997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc55b6eec9 code=0x0 [ 328.561749][T11809] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 328.653226][T11809] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 328.756226][T11809] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 328.832827][T11809] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 329.475122][T11809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.567015][T11809] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.603637][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.606626][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.661941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.669643][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.687903][ T5896] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 329.850277][ T5896] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 329.850310][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.856893][ T5896] usb 5-1: config 0 descriptor?? [ 329.861228][ T5896] cp210x 5-1:0.0: cp210x converter detected [ 330.281853][ T5896] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 330.326717][ T5896] usb 5-1: cp210x converter now attached to ttyUSB0 [ 330.503015][ T5912] usb 5-1: USB disconnect, device number 29 [ 330.511529][ T5912] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 330.638390][ T5912] cp210x 5-1:0.0: device disconnected [ 330.639453][T11809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.416501][T11809] veth0_vlan: entered promiscuous mode [ 331.453007][T11809] veth1_vlan: entered promiscuous mode [ 331.581139][T11809] veth0_macvtap: entered promiscuous mode [ 331.610469][T11809] veth1_macvtap: entered promiscuous mode [ 331.660727][T11809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.695975][T11809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.756560][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.766452][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.767405][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.777241][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.720755][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.720778][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.847359][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.847384][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.056224][ T5912] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 333.206284][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 333.212208][ T5912] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 333.212239][ T5912] usb 1-1: config 2 has no interface number 0 [ 333.212324][ T5912] usb 1-1: config 2 interface 31 has no altsetting 0 [ 333.221857][ T5912] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 333.221889][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.221908][ T5912] usb 1-1: Product: syz [ 333.221922][ T5912] usb 1-1: Manufacturer: syz [ 333.221935][ T5912] usb 1-1: SerialNumber: syz [ 333.485405][T12553] option changes via remount are deprecated (pid=12552 comm=syz.4.3053) [ 333.963448][ T5912] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 334.002476][ T5912] usb 1-1: USB disconnect, device number 26 [ 334.301672][T12582] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 334.455540][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 334.533876][T12593] netlink: 'syz.0.3073': attribute type 1 has an invalid length. [ 334.533914][T12593] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3073'. [ 334.595598][ T5912] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 334.616172][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.616205][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 334.616226][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 334.616281][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 334.616309][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 334.618935][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 334.618966][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 334.618987][ T10] usb 6-1: Product: syz [ 334.619002][ T10] usb 6-1: Manufacturer: syz [ 334.720973][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 334.720997][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 334.736510][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 334.736532][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 334.763685][ T5912] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 334.763718][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.763738][ T5912] usb 5-1: Product: syz [ 334.763753][ T5912] usb 5-1: Manufacturer: syz [ 334.763769][ T5912] usb 5-1: SerialNumber: syz [ 334.788769][ T5912] usb 5-1: config 0 descriptor?? [ 335.024459][ T5912] usb 5-1: ignoring: probably an ADSL modem [ 335.425274][ T5912] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 335.642146][ T5896] usb 5-1: USB disconnect, device number 30 [ 335.953928][T12646] netlink: 'syz.0.3099': attribute type 18 has an invalid length. [ 336.350795][T12664] vlan0: entered promiscuous mode [ 337.370893][ T10] usb 6-1: USB disconnect, device number 2 [ 337.590140][T12719] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 337.590172][T12719] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 337.600612][T12718] macvtap0: entered promiscuous mode [ 337.602835][T12718] macvtap0: left promiscuous mode [ 337.643476][T12719] vhci_hcd vhci_hcd.0: Device attached [ 337.663654][T12722] vhci_hcd: connection closed [ 337.699054][ T174] vhci_hcd: stop threads [ 337.702892][ T174] vhci_hcd: release socket [ 337.703002][ T174] vhci_hcd: disconnect device [ 339.449320][ T5912] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 339.612949][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 339.615791][ T5912] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.615823][ T5912] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 339.615847][ T5912] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.615872][ T5912] usb 5-1: config 1 interface 0 has no altsetting 0 [ 339.626157][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 339.626186][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.626205][ T5912] usb 5-1: Product: syz [ 339.626219][ T5912] usb 5-1: Manufacturer: syz [ 339.626232][ T5912] usb 5-1: SerialNumber: syz [ 339.888683][ T5912] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 340.087889][ T5896] usb 5-1: USB disconnect, device number 31 [ 340.115487][ T5896] usblp0: removed [ 340.463325][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 341.472630][ T5949] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 341.624380][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.624438][ T5949] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 341.624463][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.640206][ T5949] usb 6-1: config 0 descriptor?? [ 341.761985][ T5912] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 341.912111][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 341.919105][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.919237][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.919269][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 341.919292][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 341.920133][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.926054][ T5912] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 341.926083][ T5912] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 341.926101][ T5912] usb 5-1: Manufacturer: syz [ 341.959672][ T5912] usb 5-1: config 0 descriptor?? [ 342.166085][ T5949] magicmouse 0003:05AC:0265.0014: unexpected long global item [ 342.170986][ T5949] magicmouse 0003:05AC:0265.0014: magicmouse hid parse failed [ 342.171468][ T5949] magicmouse 0003:05AC:0265.0014: probe with driver magicmouse failed with error -22 [ 342.246478][T12882] block device autoloading is deprecated and will be removed. [ 342.291803][ T5949] usb 6-1: USB disconnect, device number 3 [ 342.431589][ T5912] rc_core: IR keymap rc-hauppauge not found [ 342.431615][ T5912] Registered IR keymap rc-empty [ 342.431794][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.451625][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.473362][ T5912] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 342.487281][ T5912] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 342.511936][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.537676][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.551771][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.571644][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.591946][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.611561][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.631608][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.651767][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.671601][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.719503][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.759325][ T5912] mceusb 5-1:0.0: Registered Ѕ with mce emulator interface version 1 [ 342.759352][ T5912] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 342.777109][ T5912] usb 5-1: USB disconnect, device number 32 [ 342.990199][ T44] kernel write not supported for file /input/event2 (pid: 44 comm: kworker/1:1) [ 343.106102][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.811264][T12934] ptrace attach of "./syz-executor exec"[12942] was attempted by "./syz-executor exec"[12934] [ 345.170772][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 345.332830][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.332860][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.334456][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 345.334484][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 345.334505][ T10] usb 1-1: SerialNumber: syz [ 345.617483][ T10] usb 1-1: 0:2 : does not exist [ 345.677844][ T10] usb 1-1: USB disconnect, device number 27 [ 346.489542][ T5897] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 346.640054][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 346.642534][ T5897] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 346.642562][ T5897] usb 6-1: config 0 has no interface number 0 [ 346.642613][ T5897] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 346.642642][ T5897] usb 6-1: config 0 interface 85 has no altsetting 0 [ 346.646623][ T5897] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 346.646654][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.646674][ T5897] usb 6-1: Product: syz [ 346.646689][ T5897] usb 6-1: Manufacturer: syz [ 346.646704][ T5897] usb 6-1: SerialNumber: syz [ 346.752917][ T5897] usb 6-1: config 0 descriptor?? [ 347.067329][T13066] loop8: detected capacity change from 0 to 7 [ 347.087273][T13066] Dev loop8: unable to read RDB block 7 [ 347.087325][T13066] loop8: unable to read partition table [ 347.103470][T13066] loop8: partition table beyond EOD, truncated [ 347.104068][T13066] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 347.400033][ T5897] appletouch 6-1:0.85: Geyser mode initialized. [ 347.403922][ T5897] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input32 [ 347.637150][ T5949] usb 6-1: USB disconnect, device number 4 [ 347.783124][ T5949] appletouch 6-1:0.85: input: appletouch disconnected [ 349.078819][T13139] program syz.2.3329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.085855][T13181] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3351'. [ 350.317619][ T5912] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 350.358124][ T44] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 350.469631][ T5912] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 350.469665][ T5912] usb 6-1: config 0 has no interface number 0 [ 350.475820][ T5912] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 350.475854][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.475875][ T5912] usb 6-1: Product: syz [ 350.475891][ T5912] usb 6-1: Manufacturer: syz [ 350.475907][ T5912] usb 6-1: SerialNumber: syz [ 350.493629][ T5912] usb 6-1: config 0 descriptor?? [ 350.516821][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 350.516872][ T44] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 350.516949][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.546763][ T44] usb 3-1: config 0 descriptor?? [ 350.687544][ T5897] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 350.847281][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 350.851468][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.851533][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.851564][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 350.851586][ T5897] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 350.851611][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.853248][ T5897] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 350.853279][ T5897] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 350.853300][ T5897] usb 1-1: Manufacturer: syz [ 350.952574][ T5897] usb 1-1: config 0 descriptor?? [ 351.073683][ T44] aquacomputer_d5next 0003:0C70:F0BD.0015: unknown main item tag 0x0 [ 351.073966][ T44] aquacomputer_d5next 0003:0C70:F0BD.0015: unknown main item tag 0x0 [ 351.073996][ T44] aquacomputer_d5next 0003:0C70:F0BD.0015: unknown main item tag 0x0 [ 351.096792][ T44] aquacomputer_d5next 0003:0C70:F0BD.0015: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.2-1/input0 [ 351.318134][ T5897] rc_core: IR keymap rc-hauppauge not found [ 351.318162][ T5897] Registered IR keymap rc-empty [ 351.318360][ T5897] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.337491][ T5897] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.358774][ T5897] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 351.360516][ T44] usb 3-1: USB disconnect, device number 23 [ 351.411108][ T5912] usb 6-1: Firmware version (0.0) predates our first public release. [ 351.411139][ T5912] usb 6-1: Please update to version 0.2 or newer [ 351.412020][ T5897] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 351.449444][ T5897] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.468085][ T5897] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.487503][ T5897] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.524135][ T5897] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.537746][ T5897] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.550394][ T5912] usb 6-1: USB disconnect, device number 5 [ 351.560607][ T5897] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.577339][ T5897] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.597287][ T5897] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.617534][ T5897] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.647261][ T5897] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 351.657118][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3364'. [ 351.743387][ T5897] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 351.743415][ T5897] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 351.768758][ T5897] usb 1-1: USB disconnect, device number 28 [ 351.776346][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3364'. [ 352.667041][ T5897] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 352.856288][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 352.860606][ T5897] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.860652][ T5897] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 352.860677][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.899474][ T5897] usb 1-1: config 0 descriptor?? [ 353.364883][ T37] audit: type=1326 audit(1759622763.984:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13279 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 353.364941][ T37] audit: type=1326 audit(1759622763.984:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13279 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 353.365200][ T5897] hid (null): bogus close delimiter [ 353.426509][ T37] audit: type=1326 audit(1759622764.034:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13279 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 353.426560][ T37] audit: type=1326 audit(1759622764.034:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13279 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 353.426599][ T37] audit: type=1326 audit(1759622764.034:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13279 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 353.429941][ T37] audit: type=1326 audit(1759622764.054:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13279 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 353.437663][ T37] audit: type=1326 audit(1759622764.054:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13279 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 353.437716][ T37] audit: type=1326 audit(1759622764.054:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13279 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 353.437759][ T37] audit: type=1326 audit(1759622764.054:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13279 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925a06eec9 code=0x7ffc0000 [ 353.565609][ T10] usb 1-1: USB disconnect, device number 29 [ 353.794809][T13293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.794829][T13293] IPv6: NLM_F_CREATE should be set when creating new route [ 353.829862][T13293] IPv6: NLM_F_CREATE should be set when creating new route [ 353.829912][T13293] IPv6: NLM_F_CREATE should be set when creating new route [ 353.832672][T13296] block nbd2: NBD_DISCONNECT [ 354.967917][T13350] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3429'. [ 357.076709][T13444] vivid-000: disconnect [ 357.119827][T13437] vivid-000: reconnect [ 358.412532][T13494] netlink: 'syz.0.3492': attribute type 2 has an invalid length. [ 360.750046][T13591] syzkaller1: entered promiscuous mode [ 360.750077][T13591] syzkaller1: entered allmulticast mode [ 361.352100][ T5912] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 361.502039][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 361.507989][ T5912] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 361.508022][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.508044][ T5912] usb 3-1: Product: syz [ 361.508060][ T5912] usb 3-1: Manufacturer: syz [ 361.508075][ T5912] usb 3-1: SerialNumber: syz [ 361.550219][ T5912] usb 3-1: config 0 descriptor?? [ 361.564625][ T5912] gspca_main: sq905-2.14.0 probing 2770:9120 [ 361.919579][T13636] nbd: nbd0 already in use [ 362.392206][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 362.542027][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 362.551613][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.551640][ T9] usb 5-1: config 0 has no interfaces? [ 362.551672][ T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 362.551698][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.557253][ T9] usb 5-1: config 0 descriptor?? [ 362.609170][ T5912] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 362.609274][ T5912] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 362.657606][ T5912] usb 3-1: USB disconnect, device number 24 [ 363.375161][T13692] binder: 13691:13692 ioctl c0306201 2000000001c0 returned -14 [ 363.615061][T13704] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3590'. [ 364.470639][ T5912] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 364.594803][T13735] loop8: detected capacity change from 0 to 8 [ 364.607484][T13735] Dev loop8: unable to read RDB block 8 [ 364.607542][T13735] loop8: unable to read partition table [ 364.607808][T13735] loop8: partition table beyond EOD, truncated [ 364.607827][T13735] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 364.654956][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.654993][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.655017][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.655065][ T5912] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.655090][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.713622][ T5912] usb 1-1: config 0 descriptor?? [ 364.839106][T13740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.958664][ T5797] usb 5-1: USB disconnect, device number 33 [ 365.211450][ T5912] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 365.472781][ T5897] usb 1-1: USB disconnect, device number 30 [ 366.015329][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.015396][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.015435][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.016686][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.291639][T13780] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 367.746428][T13848] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3659'. [ 367.925447][T13855] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 368.246921][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.978235][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 369.130750][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.130807][ T9] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 369.130832][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.137879][ T9] usb 6-1: config 0 descriptor?? [ 369.497715][T13929] sctp: [Deprecated]: syz.2.3693 (pid 13929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.497715][T13929] Use struct sctp_sack_info instead [ 369.610856][ T9] macally 0003:060B:0001.0018: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.5-1/input0 [ 369.805537][ T5897] usb 6-1: USB disconnect, device number 6 [ 370.455132][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3713'. [ 370.800273][T13990] random: crng reseeded on system resumption [ 371.149860][T13998] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 371.835261][T14020] loop2: detected capacity change from 0 to 7 [ 371.852037][T14020] Dev loop2: unable to read RDB block 7 [ 371.852092][T14020] loop2: unable to read partition table [ 371.852531][T14020] loop2: partition table beyond EOD, truncated [ 371.852553][T14020] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 372.446706][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 373.496790][T14080] futex_wake_op: syz.2.3763 tries to shift op by -1; fix this program [ 374.135637][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 374.300509][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.300548][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.300589][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 374.300613][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.307655][ T10] usb 6-1: config 0 descriptor?? [ 374.777458][ T10] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 375.373033][ T10] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device [ 375.373098][ T10] pyra 0003:1E7D:2CF6.0019: couldn't install mouse [ 375.380018][ T10] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -71 [ 375.393892][ T10] usb 6-1: USB disconnect, device number 7 [ 375.405322][ T5797] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 375.439165][T14158] tracefs: Invalid uid '0x00000000ffffffff' [ 375.557802][ T5797] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 375.557840][ T5797] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 375.557867][ T5797] usb 1-1: config 1 interface 0 has no altsetting 0 [ 375.561038][ T5797] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 375.561068][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.561089][ T5797] usb 1-1: Product: syz [ 375.561104][ T5797] usb 1-1: Manufacturer: syz [ 375.561119][ T5797] usb 1-1: SerialNumber: syz [ 375.631429][T14147] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 375.631576][T14147] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 376.004895][ T44] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 376.174689][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 376.184200][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 376.184234][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.229723][ T44] usb 5-1: config 0 descriptor?? [ 376.659809][ T5797] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8a:a1:24:9d:96:bb [ 376.693269][ T44] logitech 0003:046D:C29C.001A: unknown main item tag 0x0 [ 376.693310][ T44] logitech 0003:046D:C29C.001A: unknown main item tag 0x0 [ 376.693340][ T44] logitech 0003:046D:C29C.001A: unknown main item tag 0x0 [ 376.693375][ T44] logitech 0003:046D:C29C.001A: unknown main item tag 0x0 [ 376.693403][ T44] logitech 0003:046D:C29C.001A: unknown main item tag 0x0 [ 376.693432][ T44] logitech 0003:046D:C29C.001A: unknown main item tag 0x0 [ 376.733794][T14197] input: syz1 as /devices/virtual/input/input34 [ 376.766885][ T44] logitech 0003:046D:C29C.001A: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 376.845057][ T5797] rtl8150 1-1:1.0: eth5: rtl8150 is detected [ 376.867288][ T5797] usb 1-1: USB disconnect, device number 31 [ 377.072318][ T44] logitech 0003:046D:C29C.001A: no inputs found [ 377.098489][ T44] usb 5-1: USB disconnect, device number 34 [ 378.423434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.603350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.603496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.603567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.603651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.603713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.603777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.603860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.603922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.603986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.857784][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.857887][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.227429][T14272] netlink: 'syz.5.3850': attribute type 10 has an invalid length. [ 379.644568][T14272] bond0: (slave bond_slave_0): Releasing backup interface [ 380.263813][T14296] vxcan1: tx address claim with dest, not broadcast [ 380.953872][ T5797] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 380.962770][T14319] loop2: detected capacity change from 0 to 7 [ 381.049521][ C0] blk_print_req_error: 20 callbacks suppressed [ 381.049545][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.049656][ C0] buffer_io_error: 20 callbacks suppressed [ 381.049669][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 381.050204][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.050230][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 381.050582][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.050606][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 381.050818][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.050843][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 381.051156][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.051181][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 381.051457][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.051482][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 381.069423][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.069458][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 381.069551][T14319] ldm_validate_partition_table(): Disk read failed. [ 381.069758][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.069783][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 381.070075][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.070099][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 381.070442][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.070466][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 381.070743][T14319] Dev loop2: unable to read RDB block 0 [ 381.071685][T14319] loop2: unable to read partition table [ 381.071922][T14319] loop2: partition table beyond EOD, truncated [ 381.071939][T14319] loop_reread_partitions: partition scan of loop2 (DPx^8TA/w'69ڈ"%m9p<Ժ M*Y) failed (rc=-5) [ 381.286117][ T5797] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.286197][ T5797] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.286246][ T5797] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 381.286269][ T5797] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 381.286294][ T5797] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.366257][ T5797] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.366291][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.366313][ T5797] usb 1-1: Product: syz [ 381.366328][ T5797] usb 1-1: Manufacturer: syz [ 381.366343][ T5797] usb 1-1: SerialNumber: syz [ 381.755195][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.758907][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.967547][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.967744][T14356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.968159][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.968364][T14356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.062102][T14356] team0: Port device bridge0 added [ 382.514194][ T5797] cdc_ncm 1-1:1.0: bind() failure [ 382.577307][ T5797] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 382.580177][ T5797] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 382.601699][ T5797] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 382.610295][ T5797] usb 1-1: USB disconnect, device number 32 [ 382.745234][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3885'. [ 383.468180][T14400] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3894'. [ 383.468528][T14400] 0X: renamed from caif0 [ 383.593146][T14400] 0X: entered allmulticast mode [ 383.593171][T14400] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 383.911530][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880353e9800: rx timeout, send abort [ 384.413685][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880353e9800: abort rx timeout. Force session deactivation [ 384.420019][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880297d5000: rx timeout, send abort [ 384.731895][T14446] geneve2: left promiscuous mode [ 384.732253][T14446] bridge0: port 3(geneve2) entered disabled state [ 384.813910][T14446] bridge_slave_1: left allmulticast mode [ 384.813943][T14446] bridge_slave_1: left promiscuous mode [ 384.814254][T14446] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.912626][T14446] bridge_slave_0: left allmulticast mode [ 384.912659][T14446] bridge_slave_0: left promiscuous mode [ 384.912980][T14446] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.919844][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880297d5000: abort rx timeout. Force session deactivation [ 386.431047][T14343] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.040674][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3951'. [ 387.068693][T14343] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.077177][ T5127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 387.102741][ T5127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 387.112224][ T5127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 387.122736][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 387.124664][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 387.173458][T14521] vlan3: entered allmulticast mode [ 387.173835][T14521] bridge0: port 3(vlan3) entered blocking state [ 387.177329][T14521] bridge0: port 3(vlan3) entered disabled state [ 387.205501][T14521] vlan3: entered promiscuous mode [ 387.436909][T14343] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.559136][ T992] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 387.729433][ T992] usb 3-1: Using ep0 maxpacket: 16 [ 387.745490][ T992] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 387.756453][ T992] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 387.756484][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.756503][ T992] usb 3-1: Product: syz [ 387.756516][ T992] usb 3-1: Manufacturer: syz [ 387.756530][ T992] usb 3-1: SerialNumber: syz [ 387.783900][ T992] usb 3-1: config 0 descriptor?? [ 387.798570][ T992] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 387.805302][ T992] usb 3-1: Detected FT232R [ 387.820336][T14343] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.037477][ T992] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 388.272346][ T992] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 388.494724][ T5897] usb 3-1: USB disconnect, device number 25 [ 388.648666][ T5897] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 388.655546][ T5897] ftdi_sio 3-1:0.0: device disconnected [ 388.861037][T14343] bridge_slave_1: left allmulticast mode [ 388.861069][T14343] bridge_slave_1: left promiscuous mode [ 388.861346][T14343] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.020571][T14343] bridge_slave_0: left allmulticast mode [ 389.020608][T14343] bridge_slave_0: left promiscuous mode [ 389.020896][T14343] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.158444][ T5825] Bluetooth: hci0: command tx timeout [ 390.147698][ T5897] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 390.147745][ T5897] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 390.147774][ T5897] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 390.147855][ T5897] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 390.147883][ T5897] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 390.147922][ T5897] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 390.147949][ T5897] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 390.147977][ T5897] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 390.148004][ T5897] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 390.148031][ T5897] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 390.234932][ T5897] hid-generic 0003:0004:0000.001B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 390.437184][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.448619][ T37] audit: type=1400 audit(1759622801.083:832): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=14617 comm="syz.0.3999" path="/proc/1411/task/1412/attr/current" dev="proc" ino=49263 [ 390.583294][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.672271][T14631] (syz.0.4003,14631,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 390.713296][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.015962][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.152083][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.239778][ T5825] Bluetooth: hci0: command tx timeout [ 391.539793][T14343] team0: Port device bridge0 removed [ 391.747251][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.820462][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.480551][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.028427][T14343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.073230][T14343] bond0 (unregistering): Released all slaves [ 393.296167][ T5797] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 393.318736][ T5825] Bluetooth: hci0: command tx timeout [ 393.384171][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.415095][T14522] chnl_net:caif_netlink_parms(): no params data found [ 393.475197][ T5797] usb 5-1: config index 0 descriptor too short (expected 30768, got 18) [ 393.475231][ T5797] usb 5-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 393.475253][ T5797] usb 5-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 393.475274][ T5797] usb 5-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 393.475315][ T5797] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 393.475340][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.846794][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.973447][ T5797] usb 5-1: string descriptor 0 read error: -71 [ 393.983614][ T5797] usb 5-1: USB disconnect, device number 35 [ 395.177557][T14780] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.178353][ T5912] IPVS: starting estimator thread 0... [ 395.265823][T14784] IPVS: using max 6 ests per chain, 14400 per kthread [ 395.385655][T14788] loop2: detected capacity change from 0 to 7 [ 395.395178][ T5825] Bluetooth: hci0: command tx timeout [ 395.415105][T14788] Dev loop2: unable to read RDB block 7 [ 395.415144][T14788] loop2: AHDI p1 p2 [ 395.415177][T14788] loop2: partition table partially beyond EOD, truncated [ 395.415291][T14788] loop2: p1 start 1818582900 is beyond EOD, truncated [ 395.427069][T14522] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.427225][T14522] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.427450][T14522] bridge_slave_0: entered allmulticast mode [ 395.443697][T14522] bridge_slave_0: entered promiscuous mode [ 395.508003][T14790] input: syz1 as /devices/virtual/input/input35 [ 395.667009][T14343] hsr_slave_0: left promiscuous mode [ 395.715382][T14343] hsr_slave_1: left promiscuous mode [ 395.716508][T14343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.716537][T14343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.761308][T14343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.761342][T14343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.008149][T14343] veth1_macvtap: left promiscuous mode [ 396.008261][T14343] veth0_macvtap: left promiscuous mode [ 396.008513][T14343] veth1_vlan: left promiscuous mode [ 396.008687][T14343] veth0_vlan: left promiscuous mode [ 396.885787][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.965017][T14842] 9pnet: p9_errstr2errno: server reported unknown error @ [ 397.033532][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.345833][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.707367][T14868] input: syz1 as /devices/virtual/input/input36 [ 397.707408][T14868] input: failed to attach handler leds to device input36, error: -6 [ 397.828304][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.278274][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.283689][ T5797] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 398.428138][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.456404][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 398.456442][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 398.456466][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 398.463461][ T5797] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 398.463494][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.463515][ T5797] usb 3-1: Product: syz [ 398.463530][ T5797] usb 3-1: Manufacturer: syz [ 398.463545][ T5797] usb 3-1: SerialNumber: syz [ 398.497362][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.509383][ T5797] usb 3-1: config 0 descriptor?? [ 398.612051][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.646516][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.722022][ T5797] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 398.828865][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.898888][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.922987][ T5797] usb 3-1: USB disconnect, device number 26 [ 398.977086][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.109901][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.209548][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.331728][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.710656][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.855938][T14933] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 399.907867][T14343] team0 (unregistering): Port device team_slave_1 removed [ 400.215038][T14343] team0 (unregistering): Port device team_slave_0 removed [ 404.113189][T14522] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.113440][T14522] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.113682][T14522] bridge_slave_1: entered allmulticast mode [ 404.117953][T14522] bridge_slave_1: entered promiscuous mode [ 404.433271][T14353] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 404.462103][T15053] netlink: 'syz.2.4203': attribute type 1 has an invalid length. [ 404.729476][T14522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.751162][T14522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.055095][T14522] team0: Port device team_slave_0 added [ 405.059451][T14522] team0: Port device team_slave_1 added [ 405.540477][ T37] audit: type=1326 audit(1759622816.181:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15100 comm="syz.4.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925a06eec9 code=0x7fc00000 [ 405.717278][T14522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.717298][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.717325][T14522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.726839][T14522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.726856][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.726880][T14522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.857592][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 405.875813][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 405.887481][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.899579][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.902738][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.092847][T14522] hsr_slave_0: entered promiscuous mode [ 406.094987][T14522] hsr_slave_1: entered promiscuous mode [ 406.096416][T14522] debugfs: 'hsr0' already exists in 'hsr' [ 406.096446][T14522] Cannot create hsr debugfs directory [ 407.458882][T15122] chnl_net:caif_netlink_parms(): no params data found [ 407.859030][ T5797] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 407.948855][ T5127] Bluetooth: hci4: command tx timeout [ 407.991001][T14522] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 408.012874][ T5797] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 408.012907][ T5797] usb 5-1: config 0 has no interface number 0 [ 408.017756][ T5797] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 408.017787][ T5797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.017808][ T5797] usb 5-1: Product: syz [ 408.017824][ T5797] usb 5-1: Manufacturer: syz [ 408.017838][ T5797] usb 5-1: SerialNumber: syz [ 408.031443][ T5797] usb 5-1: config 0 descriptor?? [ 408.040271][ T5797] hub 5-1:0.217: bad descriptor, ignoring hub [ 408.040313][ T5797] hub 5-1:0.217: probe with driver hub failed with error -5 [ 408.208682][T14522] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 408.298012][ T5797] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 408.309802][ T5797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 408.317381][ T5797] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 408.317454][ T5797] usb 5-1: media controller created [ 408.334597][T14522] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 408.352311][ T5797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.419924][T14522] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 408.442292][ T5797] DVB: Unable to find symbol dib7000p_attach() [ 408.442310][ T5797] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 408.580109][ T5797] rc_core: IR keymap rc-dib0700-rc5 not found [ 408.580134][ T5797] Registered IR keymap rc-empty [ 408.580486][ T5797] dvb-usb: could not initialize remote control. [ 408.580498][ T5797] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 408.759138][ T5797] usb 5-1: USB disconnect, device number 36 [ 408.812882][ T5797] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 408.837545][T15122] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.837801][T15122] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.838071][T15122] bridge_slave_0: entered allmulticast mode [ 408.865905][T15122] bridge_slave_0: entered promiscuous mode [ 408.882460][T15122] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.882609][T15122] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.882865][T15122] bridge_slave_1: entered allmulticast mode [ 408.885858][T15122] bridge_slave_1: entered promiscuous mode [ 409.160304][T15122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.167189][T15122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.258156][ T5797] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 409.420387][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.420423][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.420437][ T5797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 409.420464][ T5797] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 409.420478][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.425238][ T5797] usb 3-1: config 0 descriptor?? [ 409.602132][T15122] team0: Port device team_slave_0 added [ 409.634342][T15122] team0: Port device team_slave_1 added [ 409.906104][ T5797] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 409.964035][T15122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.964055][T15122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.964084][T15122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.019700][T15122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.019720][T15122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.019751][T15122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.027963][ T5127] Bluetooth: hci4: command tx timeout [ 410.153597][ T5897] usb 3-1: USB disconnect, device number 27 [ 410.319128][T15122] hsr_slave_0: entered promiscuous mode [ 410.320820][T15122] hsr_slave_1: entered promiscuous mode [ 410.321945][T15122] debugfs: 'hsr0' already exists in 'hsr' [ 410.321972][T15122] Cannot create hsr debugfs directory [ 411.117208][ T5897] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 411.246027][T14522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.271486][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 411.284746][ T5897] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 411.284776][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.284795][ T5897] usb 3-1: Product: syz [ 411.284808][ T5897] usb 3-1: Manufacturer: syz [ 411.284821][ T5897] usb 3-1: SerialNumber: syz [ 411.316399][ T5897] usb 3-1: config 0 descriptor?? [ 411.333773][ T5897] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 411.419658][T14522] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.458166][T14345] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.460024][T14345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.567238][ T5897] gp8psk: usb in 128 operation failed. [ 411.568097][ T5897] gp8psk: usb in 137 operation failed. [ 411.568116][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.569339][ T5897] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 411.569395][ T5897] usb 3-1: media controller created [ 411.601324][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.659562][ T5897] gp8psk_fe: Frontend revision 1 attached [ 411.659627][ T5897] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 411.659953][ T5897] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 411.709764][T14351] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.718399][T14351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.924400][ T5897] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 411.924424][ T5897] gp8psk: found Genpix USB device pID = 201 (hex) [ 412.015251][T15122] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 412.069719][T15122] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 412.106843][ T5127] Bluetooth: hci4: command tx timeout [ 412.143927][ T5949] usb 3-1: USB disconnect, device number 28 [ 412.167825][T15122] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 412.275786][ T5949] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 412.291937][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4325'. [ 412.312051][T15122] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 412.692304][T15122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.756972][T15122] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.794002][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.804153][ T6431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.892284][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.896001][ T6431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.310216][T14522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.666247][ T5949] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 413.835824][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 413.838968][ T5949] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 413.861904][ T5949] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 413.861936][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 413.861958][ T5949] usb 5-1: Product: syz [ 413.861973][ T5949] usb 5-1: Manufacturer: syz [ 413.861988][ T5949] usb 5-1: SerialNumber: syz [ 413.909776][ T5949] usb 5-1: config 0 descriptor?? [ 413.911271][T15369] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 413.930206][ T5949] hub 5-1:0.0: bad descriptor, ignoring hub [ 413.930252][ T5949] hub 5-1:0.0: probe with driver hub failed with error -5 [ 413.960664][T15122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.186149][ T5127] Bluetooth: hci4: command tx timeout [ 414.256015][ T5949] usb 5-1: USB disconnect, device number 37 [ 414.416983][T14522] veth0_vlan: entered promiscuous mode [ 414.467985][T14522] veth1_vlan: entered promiscuous mode [ 414.585624][ T5949] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 414.603516][T14522] veth0_macvtap: entered promiscuous mode [ 414.657661][T14522] veth1_macvtap: entered promiscuous mode [ 414.735309][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 414.737751][ T5949] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 414.742831][ T5949] usb 5-1: string descriptor 0 read error: -22 [ 414.743025][ T5949] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 414.743051][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 414.769655][T15122] veth0_vlan: entered promiscuous mode [ 414.800149][T14522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.814839][ T5949] usb 5-1: config 0 descriptor?? [ 414.816357][T15369] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 414.830198][ T5949] hub 5-1:0.0: bad descriptor, ignoring hub [ 414.830243][ T5949] hub 5-1:0.0: probe with driver hub failed with error -5 [ 414.846837][T14522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.864974][T15122] veth1_vlan: entered promiscuous mode [ 414.911804][T14353] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.916497][T14353] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.923341][T14353] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.932509][T14353] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.147399][ T5949] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 415.147793][ T5912] usb 5-1: USB disconnect, device number 38 [ 415.202019][T15122] veth0_macvtap: entered promiscuous mode [ 415.256246][T15122] veth1_macvtap: entered promiscuous mode [ 415.308959][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 415.313109][ T5949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.313181][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 415.313208][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 415.313235][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 415.313259][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 415.380924][ T5949] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 415.380959][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 415.380981][ T5949] usb 3-1: Product: syz [ 415.380997][ T5949] usb 3-1: Manufacturer: syz [ 415.381013][ T5949] usb 3-1: SerialNumber: syz [ 415.422336][ T5949] usb 3-1: config 0 descriptor?? [ 415.444782][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.444817][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.635456][ T5949] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 415.635485][ T5949] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 415.798755][T15122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.841476][ T5949] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 415.841506][ T5949] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 415.841528][ T5949] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 415.889561][T14345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.889585][T14345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.939409][T15122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.044070][ T5949] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 416.050294][T14345] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.051656][T14345] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.052989][T14345] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.053030][T14345] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.454134][ T5949] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 416.465794][ T5949] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 416.517778][ T5949] usb 3-1: USB disconnect, device number 29 [ 416.696226][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.696249][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.864330][T14345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.864354][T14345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.976291][ T37] audit: type=1400 audit(1759622827.616:834): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=15462 comm="syz.6.4381" src=1 dest=20000 netif=wpan0 [ 418.093794][ T5949] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 418.251839][ T5949] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.251878][ T5949] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 418.251921][ T5949] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 418.251944][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.310010][T15496] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 418.331047][ T5949] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 418.645021][ T5897] usb 7-1: USB disconnect, device number 2 [ 419.073332][ T5912] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 419.224341][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 419.227393][ T5912] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 419.227422][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.227442][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.230664][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.230694][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.230715][ T5912] usb 3-1: Product: syz [ 419.230731][ T5912] usb 3-1: Manufacturer: syz [ 419.230747][ T5912] usb 3-1: SerialNumber: syz [ 419.337036][T15540] netlink: 'syz.6.4415': attribute type 34 has an invalid length. [ 419.747950][ T5912] usb 3-1: 0:2 : does not exist [ 420.232231][ T37] audit: type=1326 audit(1759622830.878:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15557 comm="syz.6.4422" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71c12deec9 code=0x0 [ 420.254426][ T5912] usb 3-1: USB disconnect, device number 30 [ 421.503835][T15607] input: syz1 as /devices/virtual/input/input38 [ 421.936576][ T37] audit: type=1326 audit(1759622832.589:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15621 comm="syz.7.4450" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24e17eeec9 code=0x0 [ 422.232556][T15634] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 422.331549][ T5897] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 422.483929][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.483968][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.485545][ T5897] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 422.485573][ T5897] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 422.485594][ T5897] usb 7-1: Manufacturer: syz [ 422.512768][ T5897] usb 7-1: config 0 descriptor?? [ 423.404046][ T5897] uclogic 0003:256C:006D.001D: failed retrieving string descriptor #100: -71 [ 423.404111][ T5897] uclogic 0003:256C:006D.001D: failed retrieving pen parameters: -71 [ 423.404129][ T5897] uclogic 0003:256C:006D.001D: failed probing pen v1 parameters: -71 [ 423.404181][ T5897] uclogic 0003:256C:006D.001D: failed probing parameters: -71 [ 423.404287][ T5897] uclogic 0003:256C:006D.001D: probe with driver uclogic failed with error -71 [ 423.451075][ T5897] usb 7-1: USB disconnect, device number 3 [ 424.687377][T15688] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4477'. [ 426.198303][T15731] bond0: entered promiscuous mode [ 426.198330][T15731] bond_slave_0: entered promiscuous mode [ 426.198603][T15731] bond_slave_1: entered promiscuous mode [ 426.247796][T15731] batadv0: entered promiscuous mode [ 426.257452][T15731] debugfs: 'hsr1' already exists in 'hsr' [ 426.257486][T15731] Cannot create hsr debugfs directory [ 426.261429][T15731] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 432.380275][ T10] kernel write not supported for file /input/event2 (pid: 10 comm: kworker/0:1) [ 434.928925][T15997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4620'. [ 434.928956][T15997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4620'. [ 435.068518][T16006] gfs2: gfs2 mount does not exist [ 435.834825][ T44] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 435.987299][ T44] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 435.987329][ T44] usb 7-1: config 1 has no interface number 0 [ 435.987387][ T44] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.987416][ T44] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 435.987455][ T44] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 111 [ 435.990670][ T44] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 435.990702][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.990723][ T44] usb 7-1: Product: syz [ 435.990738][ T44] usb 7-1: Manufacturer: syz [ 435.990753][ T44] usb 7-1: SerialNumber: syz [ 436.124800][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 436.274560][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 436.278681][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.278715][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.278737][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.278783][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.278809][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.300090][T16032] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 436.302411][ T10] usb 3-1: config 0 descriptor?? [ 436.416861][ T6431] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 436.539931][T16042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.540775][T16042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.769394][ T10] hid_parser_main: 8 callbacks suppressed [ 436.769423][ T10] microsoft 0003:045E:07DA.001E: unknown main item tag 0x2 [ 436.769785][ T10] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 436.769814][ T10] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 436.769841][ T10] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 436.769868][ T10] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 436.769895][ T10] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 436.769923][ T10] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 436.769950][ T10] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 436.769977][ T10] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 436.781975][ T10] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 436.782007][ T10] microsoft 0003:045E:07DA.001E: no inputs found [ 436.782020][ T10] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway [ 436.911854][T16032] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 436.927466][ T44] cdc_ncm 7-1:1.1: bind() failure [ 437.038554][ T10] usb 3-1: USB disconnect, device number 31 [ 437.120166][ T5896] usb 7-1: USB disconnect, device number 4 [ 437.164530][ T992] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 437.316925][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.316962][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.316986][ T992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 437.317032][ T992] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 437.317057][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.324319][ T992] usb 5-1: config 0 descriptor?? [ 437.800219][ T992] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 438.049965][ T44] usb 5-1: USB disconnect, device number 39 [ 438.713731][ T37] audit: type=1326 audit(1759622849.377:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16125 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc55b6eec9 code=0x7ffc0000 [ 438.713794][ T37] audit: type=1326 audit(1759622849.377:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16125 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc55b6eec9 code=0x7ffc0000 [ 438.765551][ T37] audit: type=1326 audit(1759622849.427:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16125 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fbc55b6eec9 code=0x7ffc0000 [ 438.765605][ T37] audit: type=1326 audit(1759622849.427:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16125 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc55b6eec9 code=0x7ffc0000 [ 438.766627][ T37] audit: type=1326 audit(1759622849.427:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16125 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc55b6eec9 code=0x7ffc0000 [ 438.766677][ T37] audit: type=1326 audit(1759622849.427:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16125 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc55b6eec9 code=0x7ffc0000 [ 438.766957][ T37] audit: type=1326 audit(1759622849.427:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16125 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbc55b6eec9 code=0x7ffc0000 [ 438.767222][ T37] audit: type=1326 audit(1759622849.427:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16125 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc55b6eec9 code=0x7ffc0000 [ 438.767661][ T37] audit: type=1326 audit(1759622849.427:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16125 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc55b6eec9 code=0x7ffc0000 [ 438.767925][ T37] audit: type=1326 audit(1759622849.427:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16125 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc55b6eec9 code=0x7ffc0000 [ 438.955058][ T992] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 438.996683][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4690'. [ 438.996710][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4690'. [ 439.032641][T14351] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.048694][T14345] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.048752][T14345] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.048792][T14345] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.116481][ T992] usb 5-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 439.116528][ T992] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 439.116556][ T992] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 127, setting to 64 [ 439.116587][ T992] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 439.116633][ T992] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 439.116658][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.145080][T16128] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 439.145277][T16128] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 439.193438][ T992] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 439.365446][ T992] usb 5-1: USB disconnect, device number 40 [ 440.270143][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.270245][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.321232][T16191] sctp: [Deprecated]: syz.4.4715 (pid 16191) Use of int in max_burst socket option deprecated. [ 440.321232][T16191] Use struct sctp_assoc_value instead [ 440.880081][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.382472][T16226] Smack: duplicate mount options [ 442.392608][T16257] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4747'. [ 442.505733][T16264] netlink: 428 bytes leftover after parsing attributes in process `syz.2.4749'. [ 442.505776][T16264] netlink: 'syz.2.4749': attribute type 5 has an invalid length. [ 443.144848][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.235701][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 444.235786][ T37] audit: type=1326 audit(1759622854.900:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16337 comm="syz.2.4782" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc55b6eec9 code=0x0 [ 444.321402][ T37] audit: type=1326 audit(1759622854.980:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16305 comm="syz.4.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925a06eec9 code=0x7fc00000 [ 444.701021][ C0] ------------[ cut here ]------------ [ 444.701038][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 444.701952][ C0] WARNING: CPU: 0 PID: 16 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 444.702002][ C0] Modules linked in: [ 444.702023][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 444.702048][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.702061][ C0] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 444.702096][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 e8 da 8b 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 cf c1 4f f7 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 444.702117][ C0] RSP: 0018:ffffc90000157210 EFLAGS: 00010246 [ 444.702137][ C0] RAX: 931695f92037ab00 RBX: 000000000000000c RCX: ffff88801b2a5a00 [ 444.702154][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 444.702169][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 444.702184][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: ffff88801fe973e8 [ 444.702200][ C0] R13: 0000000000000000 R14: ffff88805d641060 R15: ffff88805d643c38 [ 444.702217][ C0] FS: 0000000000000000(0000) GS:ffff88812702f000(0000) knlGS:0000000000000000 [ 444.702235][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.702249][ C0] CR2: 00007f67e1f756c0 CR3: 000000002852e000 CR4: 00000000003526f0 [ 444.702268][ C0] Call Trace: [ 444.702275][ C0] [ 444.702302][ C0] rate_control_send_low+0x1a7/0x7b0 [ 444.702346][ C0] rate_control_get_rate+0x20b/0x5f0 [ 444.702394][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 444.702435][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 444.702503][ C0] ieee80211_beacon_get_ap+0x1785/0x1e10 [ 444.702558][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 444.702617][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 444.702652][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 444.702680][ C0] __ieee80211_beacon_get+0x1190/0x1850 [ 444.702707][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 444.702750][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 444.702778][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 444.702819][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 444.702846][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 444.702875][ C0] __iterate_interfaces+0x2ab/0x590 [ 444.702909][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 444.702931][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 444.702955][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 444.702978][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 444.703007][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 444.703039][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 444.703067][ C0] __hrtimer_run_queues+0x552/0xd40 [ 444.703118][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 444.703140][ C0] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 444.703185][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 444.703217][ C0] handle_softirqs+0x22f/0x710 [ 444.703260][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 444.703305][ C0] run_ktimerd+0xcf/0x190 [ 444.703339][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 444.703369][ C0] ? schedule+0x91/0x360 [ 444.703405][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 444.703435][ C0] smpboot_thread_fn+0x542/0xa60 [ 444.703468][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 444.703521][ C0] kthread+0x711/0x8a0 [ 444.703549][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 444.703580][ C0] ? __pfx_kthread+0x10/0x10 [ 444.703599][ C0] ? rt_spin_unlock+0x150/0x200 [ 444.703627][ C0] ? rt_spin_unlock+0x161/0x200 [ 444.703646][ C0] ? __pfx_kthread+0x10/0x10 [ 444.703670][ C0] ret_from_fork+0x436/0x7d0 [ 444.703704][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 444.703743][ C0] ? __switch_to_asm+0x39/0x70 [ 444.703764][ C0] ? __switch_to_asm+0x33/0x70 [ 444.703783][ C0] ? __pfx_kthread+0x10/0x10 [ 444.703807][ C0] ret_from_fork_asm+0x1a/0x30 [ 444.703851][ C0] [ 444.703864][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 444.703882][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 444.703906][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.703917][ C0] Call Trace: [ 444.703926][ C0] [ 444.703935][ C0] dump_stack_lvl+0x99/0x250 [ 444.703967][ C0] ? __asan_memcpy+0x40/0x70 [ 444.703994][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.704026][ C0] ? __pfx__printk+0x10/0x10 [ 444.704071][ C0] vpanic+0x237/0x6d0 [ 444.704092][ C0] ? __pfx_vpanic+0x10/0x10 [ 444.704125][ C0] panic+0xb9/0xc0 [ 444.704145][ C0] ? __pfx_panic+0x10/0x10 [ 444.704185][ C0] __warn+0x31b/0x4b0 [ 444.704203][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 444.704239][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 444.704270][ C0] report_bug+0x2be/0x4f0 [ 444.704296][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 444.704331][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 444.704365][ C0] ? __rate_control_send_low+0x5e4/0x820 [ 444.704400][ C0] handle_bug+0x84/0x160 [ 444.704431][ C0] exc_invalid_op+0x1a/0x50 [ 444.704463][ C0] asm_exc_invalid_op+0x1a/0x20 [ 444.704484][ C0] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 444.704527][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 e8 da 8b 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 cf c1 4f f7 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 444.704547][ C0] RSP: 0018:ffffc90000157210 EFLAGS: 00010246 [ 444.704566][ C0] RAX: 931695f92037ab00 RBX: 000000000000000c RCX: ffff88801b2a5a00 [ 444.704583][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 444.704598][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 444.704613][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: ffff88801fe973e8 [ 444.704630][ C0] R13: 0000000000000000 R14: ffff88805d641060 R15: ffff88805d643c38 [ 444.704691][ C0] rate_control_send_low+0x1a7/0x7b0 [ 444.704733][ C0] rate_control_get_rate+0x20b/0x5f0 [ 444.704779][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 444.704815][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 444.704867][ C0] ieee80211_beacon_get_ap+0x1785/0x1e10 [ 444.704918][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 444.704975][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 444.705008][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 444.705034][ C0] __ieee80211_beacon_get+0x1190/0x1850 [ 444.705057][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 444.705099][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 444.705130][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 444.705170][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 444.705197][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 444.705227][ C0] __iterate_interfaces+0x2ab/0x590 [ 444.705261][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 444.705284][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 444.705310][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 444.705333][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 444.705363][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 444.705403][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 444.705432][ C0] __hrtimer_run_queues+0x552/0xd40 [ 444.705482][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 444.705511][ C0] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 444.705555][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 444.705586][ C0] handle_softirqs+0x22f/0x710 [ 444.705630][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 444.705674][ C0] run_ktimerd+0xcf/0x190 [ 444.705707][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 444.705737][ C0] ? schedule+0x91/0x360 [ 444.705773][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 444.705802][ C0] smpboot_thread_fn+0x542/0xa60 [ 444.705835][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 444.705879][ C0] kthread+0x711/0x8a0 [ 444.705906][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 444.705937][ C0] ? __pfx_kthread+0x10/0x10 [ 444.705956][ C0] ? rt_spin_unlock+0x150/0x200 [ 444.705983][ C0] ? rt_spin_unlock+0x161/0x200 [ 444.706002][ C0] ? __pfx_kthread+0x10/0x10 [ 444.706026][ C0] ret_from_fork+0x436/0x7d0 [ 444.706059][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 444.706097][ C0] ? __switch_to_asm+0x39/0x70 [ 444.706117][ C0] ? __switch_to_asm+0x33/0x70 [ 444.706137][ C0] ? __pfx_kthread+0x10/0x10 [ 444.706162][ C0] ret_from_fork_asm+0x1a/0x30 [ 444.706202][ C0] [ 444.706532][ C0] Kernel Offset: disabled