last executing test programs: 2m43.834909235s ago: executing program 1 (id=177): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) 2m43.148745143s ago: executing program 1 (id=179): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x0, 0x1}, 0x20) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[@rthdr={{0x14, 0x29, 0x39, {0x3c, 0x0, 0x2, 0x1}}}], 0x14}}], 0x2, 0x20040844) 2m42.54199392s ago: executing program 1 (id=182): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x107fe, @empty, 0x2}, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {&(0x7f0000000f80)}}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) timer_settime(0x0, 0x1, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000000c0)) 2m40.657495885s ago: executing program 1 (id=186): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) r0 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0x20}, 0x0, 0xe3d08660d3cd4684}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 2m39.718251863s ago: executing program 1 (id=189): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) 2m39.032809997s ago: executing program 1 (id=192): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x75653100}, 0x0, {0x3}}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = inotify_init1(0x40800) inotify_add_watch(r5, &(0x7f0000000100)='./file0\x00', 0x100) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x2000) 2m23.655301625s ago: executing program 32 (id=192): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x75653100}, 0x0, {0x3}}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = inotify_init1(0x40800) inotify_add_watch(r5, &(0x7f0000000100)='./file0\x00', 0x100) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x2000) 8.2455309s ago: executing program 2 (id=693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44854}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 7.540651677s ago: executing program 2 (id=696): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x18, 0x2d, 0x9c, 0x10, 0x930, 0xa13, 0x7644, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x2, 0x2, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x0, 0x1, 0x2, {0x2, 0x1}}, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@local, @local=@item_4={0x3, 0x2, 0x0, "c6e15544"}, @local=@item_012={0x0, 0x2, 0x8}]}}, 0x0}, &(0x7f0000000740)={0x2c, &(0x7f0000000280)={0x40, 0x15, 0x3, '<\f.'}, 0x0, 0x0, 0x0, 0x0}) 6.636362756s ago: executing program 5 (id=701): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) 6.526092208s ago: executing program 0 (id=702): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x8000, 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) read$FUSE(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}, 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) openat$audio(0xffffff9c, &(0x7f0000000000), 0x84400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x13) 6.520908697s ago: executing program 4 (id=703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3f}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) 5.792372229s ago: executing program 5 (id=705): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x40585414, 0x0) 5.709358526s ago: executing program 4 (id=706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x20}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') 5.008708696s ago: executing program 4 (id=708): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x416}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 4.979161274s ago: executing program 0 (id=709): r0 = openat$vcsa(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) writev(r0, &(0x7f0000001ec0)=[{&(0x7f0000001bc0)="89c85770c47c22f14fc044d34c2a191ffa9ec875090f63afb1e6ca559e74bc29e6163a8aedf89a6f57c914cee6863d4ae0", 0x31}, {&(0x7f0000001cc0)="941095", 0x3}], 0x2) 4.723461609s ago: executing program 5 (id=711): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x7ff, 0x0, 0x2, 0x3, 0x0, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05"], 0x0) 4.380036253s ago: executing program 3 (id=712): syz_emit_ethernet(0x2a, &(0x7f0000000840)={@remote, @random="5bc5da2efa97", @void, {@ipv4={0x88fb, @udp={{0x5, 0x4, 0x3, 0x8, 0x1c, 0x66, 0x0, 0x3e, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x4e22, 0x4e24, 0x8}}}}}, 0x0) 4.222056518s ago: executing program 0 (id=713): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.978923134s ago: executing program 3 (id=714): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x3000000c}) 3.824352195s ago: executing program 4 (id=715): r0 = io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0x3ffffffc, 0x1000, 0x4, 0x221}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0x10}, {}, {0xf, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close_range(r0, 0xffffffffffffffff, 0x0) 3.703954683s ago: executing program 2 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) unshare(0x68040200) 3.184676197s ago: executing program 3 (id=717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000000000", 0x57}], 0x1) 2.872651307s ago: executing program 4 (id=718): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x121500) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3) 2.546998546s ago: executing program 5 (id=719): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x8000, 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) read$FUSE(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}, 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) openat$audio(0xffffff9c, &(0x7f0000000000), 0x84400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x13) 2.382418484s ago: executing program 2 (id=720): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000a, 0x50032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x8, &(0x7f00000000c0)=0xf0f, 0x0, 0x4) 2.173836007s ago: executing program 3 (id=721): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="6dd894f2f50bef2c7d5aa15a0afd56d8191046bfb0e27d10d8b1d61169278fe2abc2dc20abcf9ddb55fe0c136f8d88a57aacaad9d80167b0a6b853178c43efcc3b34cfeddf1a6980a90d3dd6476ceb85b8be6cf7be5e0571c660adaddf30b90e4af5f838e80a70c1843030da9f1b5b", @ANYRES64=r1, @ANYRESHEX], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) 1.50065419s ago: executing program 0 (id=722): r0 = mq_open(&(0x7f00000007c0)='(\x00', 0x41, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x3) 1.435569242s ago: executing program 4 (id=723): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x2, &(0x7f00000001c0)={0x6, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 959.450841ms ago: executing program 2 (id=724): writev(0xffffffffffffffff, &(0x7f0000001ec0)=[{&(0x7f0000001bc0)="89c85770c47c22f14fc044d34c2a191ffa9ec875090f63afb1e6ca559e74bc29e6163a8aedf89a6f57c914cee6863d4ae0", 0x31}, {&(0x7f0000001cc0)="941095", 0x3}], 0x2) 934.430411ms ago: executing program 5 (id=725): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4, 0x8, 0x8, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "8187dc4bf6d0fd86"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) 868.858907ms ago: executing program 0 (id=726): socket(0x2, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x8, 0x14) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x40040c4) 830.495023ms ago: executing program 3 (id=727): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x3000000c}) 310.219443ms ago: executing program 2 (id=728): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) unshare(0x2000400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 144.194874ms ago: executing program 0 (id=729): r0 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000240)='dirsync\x00', 0x0, 0x0) 3.469654ms ago: executing program 5 (id=730): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x7ff, 0x0, 0x2, 0x3, 0x0, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05"], 0x0) 0s ago: executing program 3 (id=731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000000000", 0x57}], 0x1) kernel console output (not intermixed with test programs): sim netdevsim3 netdevsim0: renamed from eth0 [ 235.084413][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.110752][ T49] Bluetooth: hci2: command tx timeout [ 235.116429][ T49] Bluetooth: hci0: command tx timeout [ 235.118830][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.183456][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.191232][ T49] Bluetooth: hci1: command tx timeout [ 235.208840][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.233555][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.256783][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 235.269792][ T49] Bluetooth: hci4: command tx timeout [ 235.372786][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 235.432450][ T49] Bluetooth: hci3: command tx timeout [ 235.484644][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.596821][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.632194][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.704510][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.734609][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.811004][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.846626][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.960789][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.543157][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.597804][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.801635][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.827205][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.864058][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.902238][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.909932][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.053788][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.076625][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.084327][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.099993][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.107442][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.134383][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.141896][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.209258][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.332476][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.340163][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.382327][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.559327][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.597017][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.604702][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.628407][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.636060][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.663871][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.671608][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.765760][ T5798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.054933][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.166596][ T5804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.179577][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.236208][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.243889][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.361596][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.369436][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.634407][ T5803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.645393][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.741587][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.956795][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.362285][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.379613][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.388026][ T5793] veth0_vlan: entered promiscuous mode [ 240.554173][ T5793] veth1_vlan: entered promiscuous mode [ 240.574182][ T5798] veth0_vlan: entered promiscuous mode [ 240.714659][ T5798] veth1_vlan: entered promiscuous mode [ 240.913411][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.030689][ T5792] veth0_vlan: entered promiscuous mode [ 241.076993][ T5793] veth0_macvtap: entered promiscuous mode [ 241.207619][ T5792] veth1_vlan: entered promiscuous mode [ 241.236722][ T5798] veth0_macvtap: entered promiscuous mode [ 241.250846][ T5793] veth1_macvtap: entered promiscuous mode [ 241.360806][ T5798] veth1_macvtap: entered promiscuous mode [ 241.374717][ T5804] veth0_vlan: entered promiscuous mode [ 241.494545][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.553820][ T5804] veth1_vlan: entered promiscuous mode [ 241.609377][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.703882][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.729545][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.738707][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.747989][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.760415][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.789695][ T5792] veth0_macvtap: entered promiscuous mode [ 241.850884][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.899990][ T5792] veth1_macvtap: entered promiscuous mode [ 241.960370][ T5798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.971119][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.981510][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.992418][ T5798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.070210][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.090898][ T5804] veth0_macvtap: entered promiscuous mode [ 242.144332][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.183704][ T5804] veth1_macvtap: entered promiscuous mode [ 242.277070][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.286412][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.297061][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.306317][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.375322][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.436198][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.547771][ T5804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.558431][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.569856][ T5804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.579097][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.907167][ T5803] veth0_vlan: entered promiscuous mode [ 244.000192][ T5803] veth1_vlan: entered promiscuous mode [ 244.379844][ T5803] veth0_macvtap: entered promiscuous mode [ 244.541304][ T5803] veth1_macvtap: entered promiscuous mode [ 244.777598][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.894962][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.991037][ T5803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.002032][ T5803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.011523][ T5803] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.020643][ T5803] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.746047][ T3894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.754489][ T3894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.906338][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.914955][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.107683][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.118423][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.252256][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.261292][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.332762][ T3654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.341041][ T3654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.552242][ T5798] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 249.670680][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.679896][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.845126][ T3894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.853289][ T3894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.053760][ T3894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.062266][ T3894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.995478][ T5979] syzkaller1: entered promiscuous mode [ 251.003105][ T5979] syzkaller1: entered allmulticast mode [ 251.468000][ T5987] loop6: detected capacity change from 0 to 7 [ 251.495881][ T5987] Dev loop6: unable to read RDB block 7 [ 251.502351][ T5987] loop6: unable to read partition table [ 251.542191][ T5987] loop6: partition table beyond EOD, truncated [ 251.549379][ T5987] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.752800][ T3894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.761840][ T3894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.888635][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 252.102983][ T4027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.111419][ T4027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.247292][ T5992] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 253.088365][ T6003] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 253.494178][ T5852] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 253.660977][ T5852] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.672956][ T5852] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 253.743811][ T5852] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 253.753768][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.762308][ T5852] usb 5-1: Product: syz [ 253.766735][ T5852] usb 5-1: Manufacturer: syz [ 253.771907][ T5852] usb 5-1: SerialNumber: syz [ 253.823838][ T5852] usb 5-1: config 0 descriptor?? [ 254.043220][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.053268][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.177382][ T42] usb 5-1: USB disconnect, device number 2 [ 254.336956][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880284f1200: rx timeout, send abort [ 254.810124][ T5852] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 254.846694][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880284f1200: abort rx timeout. Force session deactivation [ 255.052073][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 255.111308][ T5852] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 255.164054][ T5852] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 255.173980][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 255.182770][ T5852] usb 2-1: Product: syz [ 255.187194][ T5852] usb 2-1: Manufacturer: syz [ 255.198835][ T5852] usb 2-1: SerialNumber: syz [ 255.292412][ T5852] usb 2-1: config 0 descriptor?? [ 255.297876][ T6025] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 255.327901][ T6018] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.411781][ T5852] hub 2-1:0.0: bad descriptor, ignoring hub [ 255.418128][ T5852] hub 2-1:0.0: probe with driver hub failed with error -5 [ 255.789753][ T5852] usb 2-1: USB disconnect, device number 2 [ 255.993131][ T6034] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 256.214258][ T30] audit: type=1326 audit(1750674124.273:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 256.219199][ T5852] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 256.321753][ T30] audit: type=1326 audit(1750674124.403:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 256.530849][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 256.569446][ T5852] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 256.694193][ T5852] usb 2-1: string descriptor 0 read error: -22 [ 256.701348][ T5852] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 256.710966][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 256.765200][ T5852] usb 2-1: config 0 descriptor?? [ 256.774061][ T6018] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.798527][ T5852] hub 2-1:0.0: bad descriptor, ignoring hub [ 256.805413][ T5852] hub 2-1:0.0: probe with driver hub failed with error -5 [ 257.079777][ T30] audit: type=1326 audit(1750674125.163:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 257.106139][ T30] audit: type=1326 audit(1750674125.163:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 257.289448][ T30] audit: type=1326 audit(1750674125.393:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 257.315731][ T30] audit: type=1326 audit(1750674125.393:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 257.520681][ T42] usb 2-1: USB disconnect, device number 3 [ 257.551970][ T30] audit: type=1326 audit(1750674125.483:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 257.575193][ T30] audit: type=1326 audit(1750674125.483:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 257.599235][ T30] audit: type=1326 audit(1750674125.483:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 257.621646][ T30] audit: type=1326 audit(1750674125.483:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 258.532009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 258.600847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 258.611022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 258.839877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 258.869609][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 258.924615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 259.000067][ T5875] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 259.123747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 259.179565][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 259.230679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 259.298194][ T5875] usb 5-1: config 0 has no interfaces? [ 259.356321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 259.366526][ T42] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 259.378609][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 259.389214][ T42] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 259.399601][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 259.459810][ T5875] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 259.469464][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.477793][ T5875] usb 5-1: Product: syz [ 259.482723][ T5875] usb 5-1: Manufacturer: syz [ 259.487622][ T5875] usb 5-1: SerialNumber: syz [ 259.500456][ T5875] usb 5-1: config 0 descriptor?? [ 259.531947][ T42] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 259.541627][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.550294][ T42] usb 1-1: Product: syz [ 259.558777][ T42] usb 1-1: Manufacturer: syz [ 259.565124][ T42] usb 1-1: SerialNumber: syz [ 259.579531][ T2232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 259.621247][ T42] usb 1-1: config 0 descriptor?? [ 259.722243][ T42] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 259.765646][ T2232] usb 4-1: Using ep0 maxpacket: 32 [ 259.863695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 259.893424][ T2232] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 259.903166][ T2232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.035249][ T2232] usb 4-1: config 0 descriptor?? [ 260.169923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 260.571506][ T2232] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 260.630603][ T2232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.762275][ T2232] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 260.769896][ T2232] usb 4-1: media controller created [ 260.835391][ T2232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.385819][ T2232] az6027: usb out operation failed. (-71) [ 261.476194][ T2232] az6027: usb out operation failed. (-71) [ 261.482377][ T2232] stb0899_attach: Driver disabled by Kconfig [ 261.488577][ T2232] az6027: no front-end attached [ 261.488577][ T2232] [ 261.583428][ T2232] az6027: usb out operation failed. (-71) [ 261.590305][ T2232] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 261.607242][ T2232] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 261.872851][ T2232] dvb-usb: schedule remote query interval to 400 msecs. [ 261.880228][ T2232] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 262.030574][ T2232] usb 4-1: USB disconnect, device number 2 [ 262.579338][ T2232] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 264.899424][ T6091] netlink: 'syz.3.42': attribute type 5 has an invalid length. [ 268.813224][ T2232] usb 5-1: USB disconnect, device number 3 [ 269.243707][ T5852] usb 1-1: USB disconnect, device number 2 [ 270.692686][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.889557][ T6138] netlink: 'syz.4.57': attribute type 27 has an invalid length. [ 271.620887][ T6144] loop6: detected capacity change from 0 to 524287999 [ 272.672513][ T6156] Zero length message leads to an empty skb [ 272.680660][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 272.910804][ T6156] team0 (unregistering): Port device team_slave_0 removed [ 272.963070][ T6156] team0 (unregistering): Port device team_slave_1 removed [ 273.761542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.771379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.310669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.244991][ T6176] netlink: 'syz.4.70': attribute type 27 has an invalid length. [ 280.159610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.419441][ T5852] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 280.644119][ T5852] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 280.656751][ T5852] usb 5-1: config 0 has no interface number 0 [ 280.763430][ T5852] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 280.773056][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.781628][ T5852] usb 5-1: Product: syz [ 280.786031][ T5852] usb 5-1: Manufacturer: syz [ 280.791075][ T5852] usb 5-1: SerialNumber: syz [ 280.893045][ T5852] usb 5-1: config 0 descriptor?? [ 281.285265][ T5852] asix 5-1:0.251: probe with driver asix failed with error -71 [ 281.342178][ T2232] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 281.386484][ T5852] usb 5-1: USB disconnect, device number 4 [ 281.639997][ T2232] usb 1-1: unable to get BOS descriptor or descriptor too short [ 281.669634][ T2232] usb 1-1: not running at top speed; connect to a high speed hub [ 281.760113][ T2232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.852921][ T2232] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.862519][ T2232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.870969][ T2232] usb 1-1: Product: syz [ 281.879376][ T2232] usb 1-1: Manufacturer: syz [ 281.884238][ T2232] usb 1-1: SerialNumber: syz [ 282.146728][ T5852] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 282.150224][ T2232] cdc_ether 1-1:1.0: skipping garbage [ 282.160946][ T2232] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 282.329526][ T5852] usb 2-1: Using ep0 maxpacket: 16 [ 282.373260][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.385229][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.398806][ T5852] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 282.409976][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.549982][ T5852] usb 2-1: config 0 descriptor?? [ 282.579873][ T5852] usbhid 2-1:0.0: can't add hid device: -22 [ 282.586533][ T5852] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 283.137813][ T6198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.148180][ T6198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.889376][ T5852] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 285.932219][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.939219][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.066615][ T5852] usb 5-1: Using ep0 maxpacket: 32 [ 286.107213][ T5852] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.151362][ T5852] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 286.160828][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 286.169343][ T5852] usb 5-1: Product: syz [ 286.173639][ T5852] usb 5-1: Manufacturer: syz [ 286.182416][ T5852] usb 5-1: SerialNumber: syz [ 286.264976][ T5852] usb 5-1: config 0 descriptor?? [ 286.331058][ T5852] hub 5-1:0.0: bad descriptor, ignoring hub [ 286.337367][ T5852] hub 5-1:0.0: probe with driver hub failed with error -5 [ 286.701713][ T5852] usb 5-1: USB disconnect, device number 5 [ 287.580004][ T6209] netlink: 'syz.2.82': attribute type 27 has an invalid length. [ 288.092355][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.144571][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.311685][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.361742][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.371368][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.380812][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.470693][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.620737][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.670070][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.708315][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.179816][ T2232] usb 2-1: USB disconnect, device number 4 [ 290.061749][ T6232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.366875][ T6242] netlink: 44 bytes leftover after parsing attributes in process `syz.1.91'. [ 291.388062][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.397181][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.432110][ T42] usb 1-1: USB disconnect, device number 3 [ 292.531257][ T2232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 292.749266][ T2232] usb 4-1: Using ep0 maxpacket: 32 [ 292.766125][ T2232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 292.777059][ T2232] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 292.826582][ T2232] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 292.840248][ T2232] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 292.848720][ T2232] usb 4-1: Product: syz [ 292.855294][ T2232] usb 4-1: Manufacturer: syz [ 292.860241][ T2232] usb 4-1: SerialNumber: syz [ 292.939954][ T2232] usb 4-1: config 0 descriptor?? [ 292.998112][ T2232] hub 4-1:0.0: bad descriptor, ignoring hub [ 293.004531][ T2232] hub 4-1:0.0: probe with driver hub failed with error -5 [ 293.313214][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.95'. [ 293.341812][ T2232] usb 4-1: USB disconnect, device number 3 [ 293.462248][ T6253] loop2: detected capacity change from 0 to 7 [ 293.509549][ T6253] Dev loop2: unable to read RDB block 7 [ 293.515976][ T6253] loop2: unable to read partition table [ 293.559352][ T6253] loop2: partition table beyond EOD, truncated [ 293.565865][ T6253] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 294.424805][ T6260] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 296.302671][ T6278] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.104' sets config #1 [ 297.669483][ C1] net_ratelimit: 48 callbacks suppressed [ 297.669560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.683972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.699513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.708305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.335235][ T6289] netlink: 176 bytes leftover after parsing attributes in process `syz.3.107'. [ 299.448370][ T6291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.458269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.530125][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 300.929195][ T2232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 301.189538][ T2232] usb 3-1: Using ep0 maxpacket: 32 [ 301.215179][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 301.215231][ T30] audit: type=1800 audit(1750674169.283:13): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.109" name="bus" dev="ramfs" ino=8441 res=0 errno=0 [ 301.271637][ T2232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 301.286369][ T2232] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 301.859561][ T2232] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 301.869171][ T2232] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 301.877507][ T2232] usb 3-1: Product: syz [ 301.882027][ T2232] usb 3-1: Manufacturer: syz [ 301.886751][ T2232] usb 3-1: SerialNumber: syz [ 302.112079][ T2232] usb 3-1: config 0 descriptor?? [ 302.122370][ T2232] hub 3-1:0.0: bad descriptor, ignoring hub [ 302.128513][ T2232] hub 3-1:0.0: probe with driver hub failed with error -5 [ 302.350913][ T2232] usb 3-1: USB disconnect, device number 2 [ 305.760749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.782616][ T6285] delete_channel: no stack [ 307.003991][ T30] audit: type=1326 audit(1750674175.103:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 307.026584][ T30] audit: type=1326 audit(1750674175.103:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 307.220117][ T30] audit: type=1326 audit(1750674175.203:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=334 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 307.242496][ T30] audit: type=1326 audit(1750674175.203:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.0.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 308.611828][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 308.670203][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 309.184911][ T5852] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 309.210700][ T5884] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 309.402247][ T5852] usb 5-1: Using ep0 maxpacket: 32 [ 309.432380][ T5852] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 309.441072][ T5852] usb 5-1: config 0 has no interface number 0 [ 309.447437][ T5852] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 309.459321][ T5852] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 309.586525][ T5884] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 309.597819][ T5884] usb 3-1: config 0 has no interface number 1 [ 309.607160][ T5884] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 309.617655][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.719123][ T5852] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 309.732982][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.743225][ T5852] usb 5-1: Product: syz [ 309.747656][ T5852] usb 5-1: Manufacturer: syz [ 309.752714][ T5852] usb 5-1: SerialNumber: syz [ 309.799997][ T5884] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 309.809691][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 309.817958][ T5884] usb 3-1: SerialNumber: syz [ 309.860715][ T5852] usb 5-1: config 0 descriptor?? [ 309.898567][ T5884] usb 3-1: config 0 descriptor?? [ 309.979906][ T5884] usb 3-1: Found UVC 0.00 device (0002:0000) [ 309.987295][ T5884] usb 3-1: No valid video chain found. [ 310.284557][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.294793][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.337061][ T5852] usb 5-1: USB disconnect, device number 6 [ 310.521919][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.019541][ T42] usb 3-1: USB disconnect, device number 3 [ 312.324233][ T6370] batman_adv: batadv0: Adding interface: dummy0 [ 312.331013][ T6370] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.357269][ T6370] batman_adv: batadv0: Interface activated: dummy0 [ 312.722722][ T6372] batadv0: mtu less than device minimum [ 312.731757][ T6372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.744941][ T6372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.757985][ T6372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.771229][ T6372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.783895][ T6372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.796396][ T6372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.808384][ T6372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.820668][ T6372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 312.832647][ T6372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 315.971017][ T6387] usb usb8: usbfs: process 6387 (syz.1.134) did not claim interface 0 before use [ 322.964912][ T6414] kvm: pic: non byte read [ 322.970208][ T6414] kvm: pic: non byte read [ 322.996602][ T6414] kvm: pic: non byte read [ 323.045044][ T6414] kvm: pic: non byte read [ 323.070538][ T6414] kvm: pic: non byte read [ 323.090499][ T6414] kvm: pic: non byte read [ 323.108021][ T6414] kvm: pic: non byte read [ 323.140311][ T6414] kvm: pic: non byte read [ 323.200728][ T6414] kvm: pic: non byte read [ 323.205399][ T6414] kvm: pic: non byte read [ 323.315266][ T6413] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 323.321980][ T6413] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 323.366739][ T6413] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 323.386326][ T6413] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 323.393079][ T6413] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 323.428772][ T6413] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 323.503809][ C1] sd 0:0:1:0: [sda] tag#6179 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 323.514837][ C1] sd 0:0:1:0: [sda] tag#6179 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 323.525884][ T6413] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.532565][ T6413] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 323.590878][ T6413] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 323.684872][ T6413] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 323.691712][ T6413] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 323.799434][ T6413] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 323.818027][ T6413] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 323.824663][ T6413] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 323.851570][ T6413] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 324.249979][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 324.305110][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 324.949497][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 325.430837][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 325.589687][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 325.749323][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 325.840002][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 325.913832][ T49] Bluetooth: hci4: command 0x0c1a tx timeout [ 326.038020][ T6438] dummy0: entered promiscuous mode [ 326.043884][ T6438] macvtap1: entered promiscuous mode [ 326.050547][ T6438] macvtap1: entered allmulticast mode [ 326.056170][ T6438] dummy0: entered allmulticast mode [ 326.144716][ T6439] dummy0: left allmulticast mode [ 326.151936][ T6439] dummy0: left promiscuous mode [ 327.030387][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.172502][ T6445] loop8: detected capacity change from 0 to 8 [ 327.232125][ T6445] Dev loop8: unable to read RDB block 8 [ 327.240241][ T6445] loop8: unable to read partition table [ 327.300735][ T6445] loop8: partition table beyond EOD, truncated [ 327.307299][ T6445] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 327.510302][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.669782][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.829548][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 327.999448][ T49] Bluetooth: hci4: command 0x0c1a tx timeout [ 329.115244][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 329.591775][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 329.749738][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 329.960585][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 330.069198][ T49] Bluetooth: hci4: command 0x0c1a tx timeout [ 331.276247][ T6465] netlink: 240 bytes leftover after parsing attributes in process `syz.0.162'. [ 339.206583][ T6521] sctp: [Deprecated]: syz.3.181 (pid 6521) Use of int in max_burst socket option deprecated. [ 339.206583][ T6521] Use struct sctp_assoc_value instead [ 339.879247][ T30] audit: type=1326 audit(1750674207.983:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 339.902077][ T30] audit: type=1326 audit(1750674207.983:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 339.924501][ T30] audit: type=1326 audit(1750674207.983:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 339.950715][ T30] audit: type=1326 audit(1750674208.033:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 339.974492][ T30] audit: type=1326 audit(1750674208.033:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 339.996657][ T30] audit: type=1326 audit(1750674208.033:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 340.018704][ T30] audit: type=1326 audit(1750674208.033:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 340.045403][ T30] audit: type=1326 audit(1750674208.033:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 340.069249][ T30] audit: type=1326 audit(1750674208.043:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 340.092185][ T30] audit: type=1326 audit(1750674208.043:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 340.252810][ T6527] loop6: detected capacity change from 0 to 7 [ 340.295263][ T6527] Dev loop6: unable to read RDB block 7 [ 340.301645][ T6527] loop6: unable to read partition table [ 340.335058][ T6527] loop6: partition table beyond EOD, truncated [ 340.342140][ T6527] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 344.989412][ T6559] loop6: detected capacity change from 0 to 7 [ 345.044798][ T6559] Dev loop6: unable to read RDB block 7 [ 345.050935][ T6559] loop6: unable to read partition table [ 345.180612][ T6559] loop6: partition table beyond EOD, truncated [ 345.187182][ T6559] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 347.383341][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.390402][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.611151][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.201'. [ 348.588101][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 348.597455][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.204'. [ 351.002865][ T6594] loop6: detected capacity change from 0 to 7 [ 351.028444][ T6594] Dev loop6: unable to read RDB block 7 [ 351.034883][ T6594] loop6: unable to read partition table [ 351.252369][ T6594] loop6: partition table beyond EOD, truncated [ 351.259298][ T6594] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 351.739323][ T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 352.030120][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 352.073537][ T42] usb 4-1: config 0 has no interfaces? [ 352.379373][ T6600] veth1_macvtap: left promiscuous mode [ 352.385228][ T6600] macsec0: entered allmulticast mode [ 352.510828][ T42] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 352.520304][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.528538][ T42] usb 4-1: Product: syz [ 352.537076][ T42] usb 4-1: Manufacturer: syz [ 352.542882][ T42] usb 4-1: SerialNumber: syz [ 352.772131][ T42] usb 4-1: config 0 descriptor?? [ 359.889552][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.901839][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.917645][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.930205][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.987602][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.202412][ T6637] loop6: detected capacity change from 0 to 7 [ 360.287647][ T6637] Dev loop6: unable to read RDB block 7 [ 360.293894][ T6637] loop6: unable to read partition table [ 360.437048][ T6637] loop6: partition table beyond EOD, truncated [ 360.443922][ T6637] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 360.496840][ T5852] usb 4-1: USB disconnect, device number 4 [ 361.412761][ T6642] net_ratelimit: 11 callbacks suppressed [ 361.412835][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.428421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.659732][ T6647] loop6: detected capacity change from 0 to 63 [ 361.742294][ T6647] Buffer I/O error on dev loop6, logical block 0, async page read [ 361.756416][ T6647] Buffer I/O error on dev loop6, logical block 1, async page read [ 361.766306][ T6647] Buffer I/O error on dev loop6, logical block 2, async page read [ 361.774749][ T6647] Buffer I/O error on dev loop6, logical block 3, async page read [ 361.783881][ T6647] Buffer I/O error on dev loop6, logical block 0, async page read [ 361.792836][ T6647] Buffer I/O error on dev loop6, logical block 1, async page read [ 361.801598][ T6647] Buffer I/O error on dev loop6, logical block 2, async page read [ 361.810407][ T6647] Buffer I/O error on dev loop6, logical block 3, async page read [ 361.920296][ T5966] Buffer I/O error on dev loop6, logical block 0, async page read [ 361.928672][ T5966] Buffer I/O error on dev loop6, logical block 1, async page read [ 362.095753][ T6634] chnl_net:caif_netlink_parms(): no params data found [ 362.174119][ T49] Bluetooth: hci5: command tx timeout [ 363.210067][ T6657] syz.2.227 uses obsolete (PF_INET,SOCK_PACKET) [ 364.079600][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.087354][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.095471][ T6634] bridge_slave_0: entered allmulticast mode [ 364.110683][ T6634] bridge_slave_0: entered promiscuous mode [ 364.249777][ T49] Bluetooth: hci5: command tx timeout [ 364.285751][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.293462][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.301469][ T6634] bridge_slave_1: entered allmulticast mode [ 364.318059][ T6634] bridge_slave_1: entered promiscuous mode [ 364.705492][ T6634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.854140][ T6634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.418807][ T6634] team0: Port device team_slave_0 added [ 365.499631][ T6634] team0: Port device team_slave_1 added [ 365.919743][ T6666] qrtr: Invalid version 225 [ 365.988618][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.996213][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.022604][ T6634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.280648][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.289809][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.316920][ T6634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.340161][ T49] Bluetooth: hci5: command tx timeout [ 366.391945][ T6668] netlink: 'syz.0.232': attribute type 4 has an invalid length. [ 366.934460][ T6673] loop6: detected capacity change from 0 to 7 [ 366.975770][ T6673] Dev loop6: unable to read RDB block 7 [ 366.981974][ T6673] loop6: unable to read partition table [ 367.036089][ T6673] loop6: partition table beyond EOD, truncated [ 367.042830][ T6673] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 367.191991][ T6634] hsr_slave_0: entered promiscuous mode [ 367.202630][ T6634] hsr_slave_1: entered promiscuous mode [ 367.211822][ T6634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.219783][ T6634] Cannot create hsr debugfs directory [ 367.829837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.060394][ T6680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 368.389770][ T49] Bluetooth: hci5: command tx timeout [ 369.586042][ T6634] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 369.720470][ T6634] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 369.810449][ T6634] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 369.946189][ T6634] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 370.429520][ T5852] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 370.688575][ T5852] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.697106][ T5852] usb 4-1: config 0 has no interface number 0 [ 370.850237][ T5852] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 370.859954][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.872410][ T5852] usb 4-1: Product: syz [ 370.876913][ T5852] usb 4-1: Manufacturer: syz [ 370.883473][ T5852] usb 4-1: SerialNumber: syz [ 371.052256][ T5852] usb 4-1: config 0 descriptor?? [ 371.408642][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'. [ 371.541477][ T5852] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 371.610269][ T5852] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 371.621848][ T5852] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 371.630425][ T5852] usb 4-1: media controller created [ 371.750155][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.929676][ T6700] loop6: detected capacity change from 0 to 7 [ 371.944965][ T6700] Dev loop6: unable to read RDB block 7 [ 371.951013][ T6700] loop6: unable to read partition table [ 372.000581][ T5852] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 372.014351][ T6634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.049997][ T6700] loop6: partition table beyond EOD, truncated [ 372.056499][ T6700] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 372.654182][ T6634] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.755974][ T3685] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.781849][ T5852] usb 4-1: USB disconnect, device number 5 [ 372.886852][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.894561][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.965170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.031330][ T3685] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.184520][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.192386][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.369931][ T3685] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.612114][ T3685] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.463506][ T3685] bridge_slave_1: left allmulticast mode [ 374.469645][ T3685] bridge_slave_1: left promiscuous mode [ 374.476350][ T3685] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.606538][ T3685] bridge_slave_0: left allmulticast mode [ 374.612687][ T3685] bridge_slave_0: left promiscuous mode [ 374.619649][ T3685] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.720035][ T5852] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 374.939400][ T5852] usb 4-1: Using ep0 maxpacket: 8 [ 375.003979][ T5852] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 375.011980][ T5852] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 375.023726][ T5852] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.036050][ T5852] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 375.047587][ T5852] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 375.145267][ T5852] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 375.153873][ T5852] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 375.169710][ T5852] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.183330][ T5852] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 375.194962][ T5852] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 375.418286][ T5852] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 375.426267][ T5852] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 375.439284][ T5852] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.451628][ T5852] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 375.463214][ T5852] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 375.703209][ T3685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.721320][ T3685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.742112][ T3685] bond0 (unregistering): Released all slaves [ 375.823309][ T5852] usb 4-1: string descriptor 0 read error: -22 [ 375.831028][ T5852] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 375.840580][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.930937][ T5852] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 376.048567][ T6726] loop6: detected capacity change from 0 to 7 [ 376.129926][ T6726] Dev loop6: unable to read RDB block 7 [ 376.136157][ T6726] loop6: unable to read partition table [ 376.267221][ T2232] usb 4-1: USB disconnect, device number 6 [ 376.285680][ T6726] loop6: partition table beyond EOD, truncated [ 376.296155][ T6726] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 376.871062][ T3685] hsr_slave_0: left promiscuous mode [ 376.905550][ T3685] hsr_slave_1: left promiscuous mode [ 376.940655][ T3685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.948436][ T3685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.009904][ T3685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.017676][ T3685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.192221][ T3685] veth1_macvtap: left promiscuous mode [ 377.198018][ T3685] veth0_macvtap: left promiscuous mode [ 377.204316][ T3685] veth1_vlan: left promiscuous mode [ 377.212886][ T3685] veth0_vlan: left promiscuous mode [ 377.770903][ T6741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.720273][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'. [ 379.594560][ T6634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.713373][ T2232] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 379.952252][ T2232] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 379.963582][ T2232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.977596][ T2232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.988501][ T2232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 380.403500][ T2232] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 380.413214][ T2232] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 380.421914][ T2232] usb 4-1: Manufacturer: syz [ 380.548182][ T2232] usb 4-1: config 0 descriptor?? [ 381.247248][ T6766] loop6: detected capacity change from 0 to 7 [ 381.256016][ T2232] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 381.345172][ T6766] Dev loop6: unable to read RDB block 7 [ 381.351946][ T6766] loop6: unable to read partition table [ 381.368241][ T2232] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 381.479495][ T6766] loop6: partition table beyond EOD, truncated [ 381.486242][ T6766] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 381.632494][ T2232] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 382.608657][ T2232] usb 4-1: USB disconnect, device number 7 [ 384.860864][ T6753] Set syz1 is full, maxelem 65536 reached [ 385.057116][ T6787] netlink: 36 bytes leftover after parsing attributes in process `syz.3.269'. [ 386.147323][ T6780] fido_id[6780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 387.000697][ T6634] veth0_vlan: entered promiscuous mode [ 387.226088][ T6634] veth1_vlan: entered promiscuous mode [ 387.585744][ T6634] veth0_macvtap: entered promiscuous mode [ 387.689815][ T6634] veth1_macvtap: entered promiscuous mode [ 387.977216][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.070546][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.180921][ T6634] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.190225][ T6634] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.199542][ T6634] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.208586][ T6634] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.117669][ T5852] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 391.339589][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 391.411008][ T5852] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 391.421177][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.518507][ T5852] usb 3-1: config 0 descriptor?? [ 391.929794][ T5852] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 392.043910][ T5852] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 392.054008][ T5852] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 393.199372][ T5884] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 393.374684][ T6840] loop6: detected capacity change from 0 to 7 [ 393.419395][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 393.473085][ T6840] Dev loop6: unable to read RDB block 7 [ 393.479368][ T6840] loop6: unable to read partition table [ 393.515933][ T5884] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 393.525858][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.530681][ T6840] loop6: partition table beyond EOD, truncated [ 393.534230][ T5884] usb 1-1: Product: syz [ 393.534337][ T5884] usb 1-1: Manufacturer: syz [ 393.540680][ T6840] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 393.544827][ T5884] usb 1-1: SerialNumber: syz [ 393.732524][ T5884] usb 1-1: config 0 descriptor?? [ 393.787757][ T5884] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 393.797016][ T5884] usb 1-1: setting power ON [ 393.808135][ T5884] dvb-usb: bulk message failed: -22 (2/0) [ 393.934933][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 394.008838][ T6836] dvb-usb: bulk message failed: -22 (3/0) [ 394.015728][ T6836] cxusb: i2c wr: len=80 is too big! [ 394.015728][ T6836] [ 394.031035][ T5884] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 394.039941][ T5884] usb 1-1: media controller created [ 394.143178][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 394.581575][ T5884] usb 1-1: selecting invalid altsetting 6 [ 394.587600][ T5884] usb 1-1: digital interface selection failed (-22) [ 394.594702][ T5884] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 394.610344][ T6854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.717842][ T5884] usb 1-1: setting power OFF [ 394.729544][ T5884] dvb-usb: bulk message failed: -22 (2/0) [ 394.735531][ T5884] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 394.747108][ T5884] (NULL device *): no alternate interface [ 395.412397][ T5884] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 395.530864][ T5884] usb 1-1: USB disconnect, device number 4 [ 395.916412][ T6865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.925930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.074037][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.084651][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.381260][ T4027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.392969][ T4027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.734203][ T6890] loop6: detected capacity change from 0 to 7 [ 397.765032][ T6890] Dev loop6: unable to read RDB block 7 [ 397.771254][ T6890] loop6: unable to read partition table [ 397.805220][ T6890] loop6: partition table beyond EOD, truncated [ 397.813578][ T6890] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 398.989400][ T6907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.243707][ T6911] netlink: 'syz.2.296': attribute type 6 has an invalid length. [ 399.895974][ T6917] netlink: 2 bytes leftover after parsing attributes in process `syz.3.299'. [ 401.255352][ T6935] loop6: detected capacity change from 0 to 7 [ 401.300771][ T6935] Dev loop6: unable to read RDB block 7 [ 401.306953][ T6935] loop6: unable to read partition table [ 401.325193][ T6935] loop6: partition table beyond EOD, truncated [ 401.332385][ T6935] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 403.028377][ T6955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.042515][ T6955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.594040][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 404.395310][ T6977] loop6: detected capacity change from 0 to 7 [ 404.403235][ T5884] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 404.468625][ T6977] Dev loop6: unable to read RDB block 7 [ 404.474892][ T6977] loop6: unable to read partition table [ 404.510225][ T6977] loop6: partition table beyond EOD, truncated [ 404.517012][ T6977] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 404.620702][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 404.666979][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 404.717861][ T5884] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 404.727948][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.736486][ T5884] usb 4-1: Product: syz [ 404.741034][ T5884] usb 4-1: Manufacturer: syz [ 404.745881][ T5884] usb 4-1: SerialNumber: syz [ 404.909565][ T5884] usb 4-1: config 0 descriptor?? [ 404.938030][ T5884] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 405.079712][ T5884] usb 4-1: Detected FT232R [ 405.259721][ T5884] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 405.499805][ T5884] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32 [ 405.571847][ T5884] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 405.651347][ T5884] usb 4-1: USB disconnect, device number 8 [ 405.717235][ T5884] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 405.730012][ T5884] ftdi_sio 4-1:0.0: device disconnected [ 406.993803][ T7005] usb usb1: usbfs: process 7005 (syz.4.327) did not claim interface 0 before use [ 407.226051][ T5884] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 407.400804][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 407.454571][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.465601][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 407.477118][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 407.487304][ T5884] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 407.497730][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.714270][ T5884] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 407.723926][ T5884] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 407.736518][ T5884] usb 6-1: Manufacturer: syz [ 407.800641][ T5884] usb 6-1: config 0 descriptor?? [ 407.915908][ T7019] loop6: detected capacity change from 0 to 7 [ 407.993160][ T7019] Dev loop6: unable to read RDB block 7 [ 407.999635][ T7019] loop6: unable to read partition table [ 408.092191][ T7019] loop6: partition table beyond EOD, truncated [ 408.099501][ T7019] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 408.833749][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.841707][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.756366][ T5146] udevd[5146]: worker [6032] terminated by signal 33 (Unknown signal 33) [ 409.837386][ T5146] udevd[5146]: worker [6032] failed while handling '/devices/virtual/block/loop3' [ 409.901849][ T5146] udevd[5146]: worker [6334] terminated by signal 33 (Unknown signal 33) [ 409.990218][ T5146] udevd[5146]: worker [6334] failed while handling '/devices/virtual/block/loop0' [ 410.969609][ T5884] rc_core: IR keymap rc-hauppauge not found [ 410.975777][ T5884] Registered IR keymap rc-empty [ 410.981762][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 411.080820][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 411.139302][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 411.155994][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 411.561178][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 411.639451][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 411.710140][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 411.734886][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 411.759464][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 411.816926][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 411.866490][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 411.889501][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 411.919835][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 412.156735][ T5884] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 412.185112][ T5884] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 412.185277][ T7063] loop6: detected capacity change from 0 to 7 [ 412.193712][ T5884] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 412.203078][ T5884] usb 6-1: USB disconnect, device number 2 [ 412.362372][ T7063] Dev loop6: unable to read RDB block 7 [ 412.370674][ T7063] loop6: unable to read partition table [ 412.426225][ T7063] loop6: partition table beyond EOD, truncated [ 412.435090][ T7063] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 415.531242][ T7104] loop6: detected capacity change from 0 to 7 [ 415.556090][ T7104] Dev loop6: unable to read RDB block 7 [ 415.562484][ T7104] loop6: unable to read partition table [ 415.576799][ T7104] loop6: partition table beyond EOD, truncated [ 415.584028][ T7104] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 415.699202][ T2232] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 415.876041][ T2232] usb 4-1: Using ep0 maxpacket: 16 [ 415.915697][ T2232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.930516][ T2232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.943300][ T2232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 415.953341][ T2232] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 415.963551][ T2232] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.094080][ T2232] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 416.103578][ T2232] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 416.112477][ T2232] usb 4-1: Manufacturer: syz [ 416.223049][ T2232] usb 4-1: config 0 descriptor?? [ 417.279665][ T42] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 417.541514][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.552492][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.570025][ T42] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 417.580920][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.648602][ T42] usb 5-1: config 0 descriptor?? [ 417.697153][ T42] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 417.926447][ T5884] usb 5-1: USB disconnect, device number 7 [ 418.409629][ T5884] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 418.689331][ T5884] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 418.697821][ T5884] usb 5-1: config 0 has no interface number 0 [ 418.704582][ T5884] usb 5-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 418.716883][ T5884] usb 5-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 418.727700][ T5884] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 418.737243][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.967070][ T5884] usb 5-1: config 0 descriptor?? [ 419.209876][ T5884] usb 5-1: string descriptor 0 read error: -71 [ 419.224052][ T5884] keyspan 5-1:0.168: Keyspan 2 port adapter converter detected [ 419.232845][ T5884] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 1 [ 419.244344][ T5884] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 84 [ 419.253292][ T5884] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 2 [ 419.379199][ T2232] rc_core: IR keymap rc-hauppauge not found [ 419.385467][ T2232] Registered IR keymap rc-empty [ 419.391759][ T2232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.439034][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 419.467597][ T5884] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 419.558809][ T2232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.562699][ T5884] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 88 [ 419.574843][ T5884] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 6 [ 419.596946][ T2232] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 419.620784][ T2232] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 419.752133][ T5884] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 419.767390][ T2232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.825177][ T5884] usb 5-1: USB disconnect, device number 8 [ 419.849522][ T2232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.887863][ T2232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.943335][ T5884] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 419.950813][ T2232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 420.002752][ T2232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 420.018454][ T5884] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 420.032870][ T5884] keyspan 5-1:0.168: device disconnected [ 420.078036][ T2232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 420.145378][ T2232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 420.196645][ T2232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 420.259673][ T2232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 420.289005][ T2232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 420.343978][ T2232] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 420.352400][ T2232] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 420.450240][ T2232] usb 4-1: USB disconnect, device number 9 [ 420.831455][ T7144] loop6: detected capacity change from 0 to 7 [ 420.914440][ T7144] Dev loop6: unable to read RDB block 7 [ 420.920676][ T7144] loop6: unable to read partition table [ 421.006705][ T7144] loop6: partition table beyond EOD, truncated [ 421.013762][ T7144] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 422.113332][ T7161] Illegal XDP return value 4294967274 on prog (id 15) dev N/A, expect packet loss! [ 423.742854][ T7182] loop6: detected capacity change from 0 to 7 [ 423.799099][ T7182] Dev loop6: unable to read RDB block 7 [ 423.809826][ T7182] loop6: unable to read partition table [ 423.860574][ T7182] loop6: partition table beyond EOD, truncated [ 423.873759][ T7182] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 425.070769][ T7190] binder: 7188:7190 ioctl 400c620e 0 returned -14 [ 428.120907][ T7224] loop6: detected capacity change from 0 to 7 [ 428.179831][ T7224] Dev loop6: unable to read RDB block 7 [ 428.186025][ T7224] loop6: unable to read partition table [ 428.250285][ T7224] loop6: partition table beyond EOD, truncated [ 428.256960][ T7224] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 428.981377][ T7235] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 431.132605][ T7268] IPv6: Can't replace route, no match found [ 431.671318][ T7272] loop6: detected capacity change from 0 to 7 [ 431.751358][ T7272] Dev loop6: unable to read RDB block 7 [ 431.757473][ T7272] loop6: unable to read partition table [ 431.818188][ T7272] loop6: partition table beyond EOD, truncated [ 431.825212][ T7272] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 432.057112][ T7278] netlink: 44 bytes leftover after parsing attributes in process `syz.4.417'. [ 433.043485][ T7287] [U] [ 433.046590][ T7287] [U] [ 433.049625][ T7287] [U] [ 433.052662][ T7287] [U] [ 433.080776][ T7287] [U] [ 433.083860][ T7287] [U] [ 433.086866][ T7287] [U] [ 433.089874][ T7287] [U] [ 433.130239][ T7287] [U] [ 433.133314][ T7287] [U] [ 433.136364][ T7287] [U] [ 433.139383][ T7287] [U] [ 433.187420][ T7287] [U] [ 433.190568][ T7287] [U] [ 433.193615][ T7287] [U] [ 433.196657][ T7287] [U] [ 433.246117][ T7287] [U] [ 433.249207][ T7287] [U] [ 433.252222][ T7287] [U] [ 433.255240][ T7287] [U] [ 433.316602][ T7287] [U] [ 433.319797][ T7287] [U] [ 433.322875][ T7287] [U] [ 433.325907][ T7287] [U] [ 433.394276][ T7287] [U] [ 433.397373][ T7287] [U] [ 433.400391][ T7287] [U] [ 433.403417][ T7287] [U] [ 433.460237][ T7287] [U] [ 433.463332][ T7287] [U] [ 433.466362][ T7287] [U] [ 433.469395][ T7287] [U] [ 433.511462][ T7287] [U] [ 433.514556][ T7287] [U] [ 433.517695][ T7287] [U] [ 433.520753][ T7287] [U] [ 433.566202][ T7287] [U] [ 433.569289][ T7287] [U] [ 433.572326][ T7287] [U] [ 433.575344][ T7287] [U] [ 433.606195][ T7287] [U] [ 433.609274][ T7287] [U] [ 433.612305][ T7287] [U] [ 433.615326][ T7287] [U] [ 433.642699][ T7287] [U] [ 433.645798][ T7287] [U] [ 433.648992][ T7287] [U] [ 433.652021][ T7287] [U] [ 433.677928][ T7287] [U] [ 433.681017][ T7287] [U] [ 433.684045][ T7287] [U] [ 433.687066][ T7287] [U] [ 433.730088][ T7287] [U] [ 433.733179][ T7287] [U] [ 433.736206][ T7287] [U] [ 433.739223][ T7287] [U] [ 433.774471][ T7287] [U] [ 433.777561][ T7287] [U] [ 433.780589][ T7287] [U] [ 433.783623][ T7287] [U] [ 433.851279][ T7287] [U] [ 433.854378][ T7287] [U] [ 433.857414][ T7287] [U] [ 433.860479][ T7287] [U] [ 433.879804][ T7287] [U] [ 434.682017][ T7304] loop6: detected capacity change from 0 to 7 [ 434.737434][ T7304] Dev loop6: unable to read RDB block 7 [ 434.743961][ T7304] loop6: unable to read partition table [ 434.806957][ T7304] loop6: partition table beyond EOD, truncated [ 434.814064][ T7304] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 435.561942][ T7311] netlink: 60 bytes leftover after parsing attributes in process `syz.2.431'. [ 435.610923][ T7310] netlink: 60 bytes leftover after parsing attributes in process `syz.2.431'. [ 436.420402][ T7324] process 'syz.2.439' launched './file1' with NULL argv: empty string added [ 437.262722][ T42] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 437.399326][ T2232] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 437.461527][ T42] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.473792][ T42] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 437.485607][ T42] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 437.497270][ T42] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 437.506690][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.594735][ T7330] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 437.649420][ T2232] usb 1-1: Using ep0 maxpacket: 16 [ 437.738721][ T2232] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 437.748776][ T2232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.757525][ T2232] usb 1-1: Product: syz [ 437.762226][ T2232] usb 1-1: Manufacturer: syz [ 437.767272][ T2232] usb 1-1: SerialNumber: syz [ 437.863523][ T2232] usb 1-1: config 0 descriptor?? [ 437.892828][ T2232] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 437.905277][ T2232] usb 1-1: Detected FT232H [ 438.093940][ T2232] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 438.573843][ T2232] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 438.759768][ T2232] usb 1-1: USB disconnect, device number 5 [ 438.815940][ T2232] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 438.908256][ T2232] ftdi_sio 1-1:0.0: device disconnected [ 440.704661][ T42] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 440.716735][ T42] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input10 [ 441.002069][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 441.011045][ T42] usb 4-1: USB disconnect, device number 10 [ 442.569691][ T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 442.799173][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 442.833748][ T42] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.847253][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 442.858299][ T42] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 442.869120][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.043250][ T42] usb 6-1: config 0 descriptor?? [ 443.581991][ T42] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.5-1/input0 [ 443.701490][ T42] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-38) [ 443.812605][ T42] corsair-psu 0003:1B1C:1C09.0002: probe with driver corsair-psu failed with error -38 [ 444.160754][ T42] usb 6-1: USB disconnect, device number 3 [ 444.308834][ T7397] fido_id[7397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 445.419326][ T42] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 445.629318][ T42] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 445.639371][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.699966][ T42] usb 1-1: config 0 descriptor?? [ 445.735322][ T42] cp210x 1-1:0.0: cp210x converter detected [ 446.186518][ T42] usb 1-1: cp210x converter now attached to ttyUSB0 [ 446.367020][ T5884] usb 1-1: USB disconnect, device number 6 [ 446.421534][ T5884] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 446.471549][ T5884] cp210x 1-1:0.0: device disconnected [ 447.124823][ T42] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 447.313249][ T42] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.325324][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 447.337292][ T42] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 447.347255][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.373028][ T7430] loop6: detected capacity change from 0 to 7 [ 447.412856][ T7430] Dev loop6: unable to read RDB block 7 [ 447.419347][ T7430] loop6: unable to read partition table [ 447.428291][ T7430] loop6: partition table beyond EOD, truncated [ 447.435247][ T7430] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 447.445029][ T42] usb 4-1: config 0 descriptor?? [ 447.452934][ T7426] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 447.471282][ T42] hub 4-1:0.0: USB hub found [ 447.707652][ T42] hub 4-1:0.0: 2 ports detected [ 448.392667][ T42] usb 4-1: USB disconnect, device number 11 [ 448.762340][ T5884] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 448.981771][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.997451][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.010932][ T5884] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 449.021256][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.072638][ T5884] usb 5-1: config 0 descriptor?? [ 449.191219][ T7442] netlink: 308 bytes leftover after parsing attributes in process `syz.2.487'. [ 449.323552][ T7438] binder: 7437:7438 ioctl c0306201 80000080 returned -14 [ 449.410143][ T5884] usbhid 5-1:0.0: can't add hid device: -71 [ 449.416984][ T5884] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 449.471125][ T5884] usb 5-1: USB disconnect, device number 9 [ 449.699511][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 449.699585][ T30] audit: type=1326 audit(1750674317.803:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7445 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25539 code=0x7ffc0000 [ 449.732373][ T30] audit: type=1326 audit(1750674317.823:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7445 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f25539 code=0x7ffc0000 [ 449.756655][ T30] audit: type=1326 audit(1750674317.823:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7445 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25539 code=0x7ffc0000 [ 449.779327][ T30] audit: type=1326 audit(1750674317.833:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7445 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25539 code=0x7ffc0000 [ 450.506816][ T7456] loop6: detected capacity change from 0 to 7 [ 450.553034][ T7456] Dev loop6: unable to read RDB block 7 [ 450.559324][ T7456] loop6: unable to read partition table [ 450.643243][ T7457] block nbd0: NBD_DISCONNECT [ 450.643383][ T7456] loop6: partition table beyond EOD, truncated [ 450.655051][ T7456] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 450.702693][ T7455] block nbd0: Disconnected due to user request. [ 450.709732][ T7455] block nbd0: shutting down sockets [ 451.021343][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 451.465510][ T7471] ======================================================= [ 451.465510][ T7471] WARNING: The mand mount option has been deprecated and [ 451.465510][ T7471] and is ignored by this kernel. Remove the mand [ 451.465510][ T7471] option from the mount to silence this warning. [ 451.465510][ T7471] ======================================================= [ 453.038095][ T7493] input: syz1 as /devices/virtual/input/input11 [ 453.144441][ T5884] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 453.376933][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 453.447463][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.459254][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.469696][ T5884] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 453.479208][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.692280][ T5884] usb 5-1: config 0 descriptor?? [ 454.204543][ T5884] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 454.245744][ T7499] loop6: detected capacity change from 0 to 7 [ 454.284567][ T7499] Dev loop6: unable to read RDB block 7 [ 454.290974][ T7499] loop6: unable to read partition table [ 454.364512][ T5884] usb 5-1: USB disconnect, device number 10 [ 454.394980][ T7499] loop6: partition table beyond EOD, truncated [ 454.401932][ T7499] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 454.894329][ T5852] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 454.910645][ T5852] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 455.039964][ T5852] usb 3-1: USB disconnect, device number 4 [ 455.739385][ T5852] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 455.981424][ T5852] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.040260][ T5852] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.053260][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.065867][ T5852] usb 6-1: Product: syz [ 456.071782][ T5852] usb 6-1: Manufacturer: syz [ 456.076756][ T5852] usb 6-1: SerialNumber: syz [ 457.233136][ T5852] cdc_ncm 6-1:1.0: failed to get mac address [ 457.447448][ T5852] cdc_ncm 6-1:1.0: bind() failure [ 457.487512][ T5852] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 457.526649][ T5852] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 457.570363][ T5852] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 457.622230][ T5852] usb 6-1: USB disconnect, device number 4 [ 457.953716][ T7530] netlink: 'syz.4.525': attribute type 4 has an invalid length. [ 458.206452][ T7536] random: crng reseeded on system resumption [ 458.359277][ T42] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 458.419996][ T7540] netlink: 44 bytes leftover after parsing attributes in process `syz.5.529'. [ 458.549903][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 458.563869][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.575258][ T42] usb 3-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 458.584955][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.640948][ T42] usb 3-1: config 0 descriptor?? [ 459.077922][ T42] thrustmaster 0003:044F:B324.0004: unknown main item tag 0x0 [ 459.091896][ T42] thrustmaster 0003:044F:B324.0004: unknown main item tag 0x0 [ 459.099887][ T42] thrustmaster 0003:044F:B324.0004: unknown main item tag 0x0 [ 459.107711][ T42] thrustmaster 0003:044F:B324.0004: unknown main item tag 0x0 [ 459.115792][ T42] thrustmaster 0003:044F:B324.0004: unknown main item tag 0x0 [ 459.229832][ T42] thrustmaster 0003:044F:B324.0004: hidraw0: USB HID v0.05 Device [HID 044f:b324] on usb-dummy_hcd.2-1/input0 [ 459.249566][ T42] thrustmaster 0003:044F:B324.0004: no inputs found [ 459.341111][ T42] usb 3-1: USB disconnect, device number 5 [ 459.686131][ T7554] futex_wake_op: syz.4.537 tries to shift op by -1; fix this program [ 460.121820][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 460.326335][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.337957][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.348237][ T42] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 460.357659][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.494295][ T42] usb 1-1: config 0 descriptor?? [ 460.899276][ T2232] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 460.964470][ T42] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 460.979768][ T42] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 460.987537][ T42] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 460.997195][ T42] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 461.005196][ T42] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 461.025016][ T42] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 461.101791][ T2232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.113474][ T2232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.119820][ T5852] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 461.123639][ T2232] usb 5-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 461.141151][ T2232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.189645][ T42] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 9: -32 [ 461.199442][ T42] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -32 [ 461.211046][ T42] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense [ 461.220120][ T42] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 461.246914][ T2232] usb 5-1: config 0 descriptor?? [ 461.261037][ T42] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -32 [ 461.310919][ T5852] usb 6-1: Using ep0 maxpacket: 32 [ 461.316685][ T42] usb 1-1: USB disconnect, device number 7 [ 461.352987][ T5852] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 461.362969][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.371384][ T5852] usb 6-1: Product: syz [ 461.375803][ T5852] usb 6-1: Manufacturer: syz [ 461.381082][ T5852] usb 6-1: SerialNumber: syz [ 461.461553][ T5852] usb 6-1: config 0 descriptor?? [ 461.800840][ T2232] hid-generic 0003:18D1:5030.0006: hidraw0: USB HID v0.00 Device [HID 18d1:5030] on usb-dummy_hcd.4-1/input0 [ 461.816676][ T42] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 461.958503][ T2232] usb 5-1: USB disconnect, device number 11 [ 462.028425][ T42] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 462.040596][ T42] usb 4-1: config 1 interface 0 has no altsetting 0 [ 462.110639][ T5852] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 462.115769][ T42] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 462.128644][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.137046][ T42] usb 4-1: Product: syz [ 462.141567][ T42] usb 4-1: Manufacturer: syz [ 462.146395][ T42] usb 4-1: SerialNumber: syz [ 462.198410][ T5852] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 462.263491][ T5852] usb 6-1: USB disconnect, device number 5 [ 462.448695][ T42] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input12 [ 462.531517][ T42] usb 4-1: USB disconnect, device number 12 [ 463.619780][ T5852] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 463.642184][ T5884] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 463.822156][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 463.855629][ T5852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.867155][ T5852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.891451][ T5884] usb 5-1: no configurations [ 463.896570][ T5884] usb 5-1: can't read configurations, error -22 [ 463.928732][ T5852] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 463.938368][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 463.952048][ T5852] usb 4-1: SerialNumber: syz [ 464.040369][ T5884] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 464.216419][ T5852] usb 4-1: 0:2 : does not exist [ 464.241540][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 464.270293][ T5884] usb 5-1: no configurations [ 464.275440][ T5884] usb 5-1: can't read configurations, error -22 [ 464.307310][ T5884] usb usb5-port1: attempt power cycle [ 464.315659][ T5852] usb 4-1: USB disconnect, device number 13 [ 464.691551][ T5884] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 464.728453][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 464.747952][ T5884] usb 5-1: no configurations [ 464.754165][ T5884] usb 5-1: can't read configurations, error -22 [ 464.830393][ T5852] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 464.878288][ T5852] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 464.929538][ T5884] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 464.995120][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 465.003838][ T5884] usb 5-1: no configurations [ 465.008695][ T5884] usb 5-1: can't read configurations, error -22 [ 465.038016][ T5884] usb usb5-port1: unable to enumerate USB device [ 465.659520][ T5884] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 465.710534][ T7625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.570'. [ 465.871136][ T5884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.883180][ T5884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 465.899534][ T5884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 465.928047][ T5884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.937661][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.946160][ T5884] usb 1-1: Product: syz [ 465.950715][ T5884] usb 1-1: Manufacturer: syz [ 465.955548][ T5884] usb 1-1: SerialNumber: syz [ 466.020587][ T7620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.061654][ T5884] usb 1-1: bad CDC descriptors [ 466.295069][ T5884] usb 1-1: USB disconnect, device number 8 [ 466.407856][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 468.769635][ T5884] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 468.799320][ T42] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 468.846238][ T7673] kernel read not supported for file /!sel (pid: 7673 comm: syz.3.592) [ 468.870691][ T30] audit: type=1800 audit(1750674336.963:123): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.592" name="!sel" dev="mqueue" ino=14090 res=0 errno=0 [ 468.987822][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 469.003254][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 469.014114][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.043469][ T42] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 469.047407][ T5884] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 469.052114][ T42] usb 6-1: config 0 has no interface number 0 [ 469.061384][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.071777][ T42] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 469.081111][ T5884] usb 1-1: Product: syz [ 469.090956][ T42] usb 6-1: config 0 interface 196 has no altsetting 0 [ 469.095137][ T5884] usb 1-1: Manufacturer: syz [ 469.107375][ T5884] usb 1-1: SerialNumber: syz [ 469.279770][ T5884] usb 1-1: config 0 descriptor?? [ 469.295528][ T42] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 469.305134][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.305993][ T5884] usb 1-1: bad CDC descriptors [ 469.313409][ T42] usb 6-1: Product: syz [ 469.313511][ T42] usb 6-1: Manufacturer: syz [ 469.313609][ T42] usb 6-1: SerialNumber: syz [ 469.334052][ T5884] usb 1-1: unsupported MDLM descriptors [ 469.353564][ T42] usb 6-1: config 0 descriptor?? [ 469.362406][ T7668] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 469.520982][ T5884] usb 1-1: USB disconnect, device number 9 [ 469.553175][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 469.562512][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 470.029643][ T42] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 470.055407][ T42] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 470.183518][ T42] usb 6-1: USB disconnect, device number 6 [ 470.247326][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.254162][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.343518][ T42] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 470.780397][ T7692] macsec0: entered promiscuous mode [ 470.786050][ T7692] macsec0: left allmulticast mode [ 475.019348][ T42] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 475.228729][ T42] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 475.238584][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.304667][ T42] usb 4-1: config 0 descriptor?? [ 476.402776][ T5884] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 476.606398][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 476.838520][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 476.867901][ T5884] usb 3-1: config 40 has an invalid interface number: 49 but max is 0 [ 476.876724][ T5884] usb 3-1: config 40 has no interface number 0 [ 476.883384][ T5884] usb 3-1: config 40 interface 49 has no altsetting 0 [ 476.911028][ T42] usb 4-1: Cannot set autoneg [ 476.916647][ T42] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 476.974666][ T5884] usb 3-1: New USB device found, idVendor=0af0, idProduct=7706, bcdDevice= a.96 [ 476.984273][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.992907][ T5884] usb 3-1: Product: syz [ 476.995566][ T42] usb 4-1: USB disconnect, device number 14 [ 476.997201][ T5884] usb 3-1: Manufacturer: syz [ 477.008401][ T5884] usb 3-1: SerialNumber: syz [ 477.375465][ T5884] usb 3-1: USB disconnect, device number 6 [ 477.499343][ T5852] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 477.659432][ T5852] usb 6-1: Using ep0 maxpacket: 8 [ 477.693152][ T5852] usb 6-1: config 5 has an invalid interface number: 63 but max is 1 [ 477.702117][ T5852] usb 6-1: config 5 has an invalid interface number: 148 but max is 1 [ 477.710860][ T5852] usb 6-1: config 5 has no interface number 0 [ 477.717617][ T5852] usb 6-1: config 5 has no interface number 1 [ 477.724196][ T5852] usb 6-1: config 5 interface 63 has no altsetting 0 [ 477.731269][ T5852] usb 6-1: config 5 interface 148 has no altsetting 0 [ 477.798373][ T5852] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 477.808101][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.816516][ T5852] usb 6-1: Product: syz [ 477.821087][ T5852] usb 6-1: Manufacturer: syz [ 477.825912][ T5852] usb 6-1: SerialNumber: syz [ 477.889609][ T5884] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 478.030893][ T30] audit: type=1326 audit(1750674346.133:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 478.053801][ T30] audit: type=1326 audit(1750674346.133:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 478.120758][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 478.131751][ T30] audit: type=1326 audit(1750674346.233:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 478.154530][ T30] audit: type=1326 audit(1750674346.233:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 478.181066][ T30] audit: type=1326 audit(1750674346.233:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 478.204916][ T30] audit: type=1326 audit(1750674346.243:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 478.227404][ T30] audit: type=1326 audit(1750674346.243:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 478.250001][ T30] audit: type=1326 audit(1750674346.243:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 478.272803][ T30] audit: type=1326 audit(1750674346.293:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 478.300494][ T30] audit: type=1326 audit(1750674346.363:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.4.631" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 478.330864][ T5884] usb 3-1: not running at top speed; connect to a high speed hub [ 478.362119][ T5884] usb 3-1: config 40 has an invalid interface number: 49 but max is 0 [ 478.370778][ T5884] usb 3-1: config 40 has no interface number 0 [ 478.377283][ T5884] usb 3-1: config 40 interface 49 has no altsetting 0 [ 478.405697][ T5852] usb 6-1: USB disconnect, device number 7 [ 478.434378][ T5884] usb 3-1: New USB device found, idVendor=0af0, idProduct=7706, bcdDevice= a.96 [ 478.444051][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.453428][ T5884] usb 3-1: Product: syz [ 478.457946][ T5884] usb 3-1: Manufacturer: syz [ 478.463875][ T5884] usb 3-1: SerialNumber: syz [ 479.139442][ T5852] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 479.333969][ T5852] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 479.342793][ T5852] usb 5-1: config 1 has no interface number 0 [ 479.349566][ T5852] usb 5-1: config 1 interface 105 has no altsetting 0 [ 479.357926][ T42] usb 3-1: USB disconnect, device number 7 [ 479.392518][ T5852] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 479.402497][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.415271][ T5852] usb 5-1: Product: syz [ 479.421177][ T5852] usb 5-1: Manufacturer: syz [ 479.426022][ T5852] usb 5-1: SerialNumber: syz [ 480.029355][ T42] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 480.222646][ T42] usb 4-1: config 4 has an invalid interface number: 223 but max is 0 [ 480.235395][ T42] usb 4-1: config 4 has no interface number 0 [ 480.243201][ T42] usb 4-1: config 4 interface 223 altsetting 85 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 480.254577][ T42] usb 4-1: config 4 interface 223 has no altsetting 0 [ 480.337839][ T5852] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 480.353531][ T42] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=e0.78 [ 480.363198][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.371699][ T42] usb 4-1: Product: syz [ 480.376098][ T42] usb 4-1: Manufacturer: syz [ 480.381131][ T42] usb 4-1: SerialNumber: syz [ 480.388333][ T5852] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 480.443363][ T5852] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 480.481817][ T5852] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 46:e8:07:ad:0c:90 [ 480.504594][ T7780] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 480.624182][ T5852] usb 5-1: USB disconnect, device number 16 [ 480.637979][ T5852] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 480.757820][ T42] kvaser_usb 4-1:4.223: error -ENODEV: Cannot get usb endpoint(s) [ 480.821187][ T42] usb 4-1: USB disconnect, device number 15 [ 480.821305][ T5852] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 480.837663][ T5852] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 480.852398][ T5852] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 481.089399][ T2232] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 481.298721][ T2232] usb 6-1: Using ep0 maxpacket: 32 [ 481.329760][ T2232] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.342052][ T2232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 481.357636][ T2232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.370791][ T2232] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 481.380226][ T2232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.465021][ T2232] usb 6-1: config 0 descriptor?? [ 481.480876][ T7788] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 481.503059][ T2232] hub 6-1:0.0: USB hub found [ 481.716943][ T2232] hub 6-1:0.0: 2 ports detected [ 482.550559][ T5805] Bluetooth: hci5: command 0x0406 tx timeout [ 482.620968][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.648'. [ 483.407077][ T2232] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 483.411861][ T5852] usb 6-1: USB disconnect, device number 8 [ 484.018452][ T5852] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 484.227686][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 484.239435][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.249585][ T5852] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.262980][ T5852] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.272511][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.369905][ T5852] usb 4-1: config 0 descriptor?? [ 484.864985][ T5852] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xe [ 484.873363][ T5852] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 484.918808][ T5852] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 484.986598][ T5852] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 485.081844][ T5852] usb 4-1: USB disconnect, device number 16 [ 486.309448][ T5852] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 486.429257][ T42] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 486.475906][ T5852] usb 5-1: device descriptor read/64, error -71 [ 486.655996][ T42] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 486.667695][ T42] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.682345][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.690799][ T42] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 486.700219][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.742118][ T5852] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 486.753107][ T42] usb 3-1: config 0 descriptor?? [ 486.899981][ T5852] usb 5-1: device descriptor read/64, error -71 [ 487.010981][ T5852] usb usb5-port1: attempt power cycle [ 487.156806][ T7860] netlink: 76 bytes leftover after parsing attributes in process `syz.0.679'. [ 487.214521][ T42] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 487.222462][ T42] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 487.259918][ T42] hid-steam 0003:28DE:1102.0009: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 487.329451][ T42] hid-steam 0003:28DE:1102.0009: Steam Controller 'XXXXXXXXXX' connected [ 487.342833][ T42] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0009/input/input13 [ 487.372401][ T5852] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 487.429163][ T42] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 487.436777][ T42] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 487.457250][ T5852] usb 5-1: device descriptor read/8, error -71 [ 487.520617][ T42] hid-steam 0003:28DE:1102.000A: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 487.581943][ T42] usb 3-1: USB disconnect, device number 8 [ 487.645305][ T42] hid-steam 0003:28DE:1102.0009: Steam Controller 'XXXXXXXXXX' disconnected [ 487.729684][ T5852] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 487.782928][ T5852] usb 5-1: device descriptor read/8, error -71 [ 487.916740][ T5852] usb usb5-port1: unable to enumerate USB device [ 489.430997][ T7887] random: crng reseeded on system resumption [ 489.729593][ T42] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 489.945393][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.960933][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 489.971788][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.001311][ T7898] binder: 7896:7898 ioctl c0306201 0 returned -14 [ 490.062170][ T42] usb 3-1: config 0 descriptor?? [ 490.069831][ T7900] binder: 7896:7900 ioctl c08c5332 0 returned -22 [ 490.113611][ T7900] binder: 7896:7900 ioctl 4018620d 0 returned -22 [ 490.379479][ T5875] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 490.508445][ T42] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 490.542407][ T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000B/input/input15 [ 490.565979][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 490.589450][ T2232] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 490.627409][ T5875] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 490.688027][ T42] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 490.729846][ T5875] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 490.740141][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 490.748786][ T5875] usb 1-1: Product: syz [ 490.753529][ T5875] usb 1-1: Manufacturer: syz [ 490.758560][ T5875] usb 1-1: SerialNumber: syz [ 490.833263][ T5875] usb 1-1: config 0 descriptor?? [ 490.844335][ T7899] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 490.871911][ T2232] usb 6-1: Using ep0 maxpacket: 32 [ 490.898559][ T5875] hub 1-1:0.0: bad descriptor, ignoring hub [ 490.906154][ T5875] hub 1-1:0.0: probe with driver hub failed with error -5 [ 491.024758][ T2232] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.037045][ T2232] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 491.119878][ T2232] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 491.130392][ T2232] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 491.140208][ T2232] usb 6-1: Product: syz [ 491.145588][ T2232] usb 6-1: Manufacturer: syz [ 491.152483][ T2232] usb 6-1: SerialNumber: syz [ 491.252995][ T2232] appletouch 6-1:1.0: Could not find int-in endpoint [ 491.260314][ T2232] appletouch 6-1:1.0: probe with driver appletouch failed with error -5 [ 491.272951][ T2232] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 491.429900][ T5852] usb 1-1: USB disconnect, device number 10 [ 491.450793][ T5884] usb 3-1: USB disconnect, device number 9 [ 491.602162][ T1874] usb 6-1: USB disconnect, device number 9 [ 491.905528][ T5852] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 492.080299][ T5852] usb 1-1: Using ep0 maxpacket: 32 [ 492.094345][ T5852] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 492.199272][ T5852] usb 1-1: string descriptor 0 read error: -22 [ 492.211676][ T5852] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 492.222551][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 492.256102][ T5852] usb 1-1: config 0 descriptor?? [ 492.264130][ T7899] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.358352][ T5852] hub 1-1:0.0: bad descriptor, ignoring hub [ 492.364805][ T5852] hub 1-1:0.0: probe with driver hub failed with error -5 [ 492.639165][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 492.639251][ T30] audit: type=1326 audit(1750674360.733:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 492.667940][ T30] audit: type=1326 audit(1750674360.743:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 492.690494][ T30] audit: type=1326 audit(1750674360.743:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 492.712945][ T30] audit: type=1326 audit(1750674360.753:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 492.740514][ T30] audit: type=1326 audit(1750674360.803:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 492.762985][ T30] audit: type=1326 audit(1750674360.803:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 492.785369][ T30] audit: type=1326 audit(1750674360.803:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 492.807848][ T30] audit: type=1326 audit(1750674360.803:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 492.834261][ T30] audit: type=1326 audit(1750674360.823:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x7ffc0000 [ 492.857105][ T2232] usb 1-1: USB disconnect, device number 11 [ 493.335861][ T2232] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 493.405394][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 493.458224][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 493.516522][ T2232] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.527406][ T2232] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.618781][ T2232] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 493.629515][ T2232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 493.637788][ T2232] usb 6-1: SerialNumber: syz [ 494.007074][ T2232] usb 6-1: 0:2 : does not exist [ 494.012742][ T2232] usb 6-1: unit 5 not found! [ 494.200576][ T2232] usb 6-1: USB disconnect, device number 10 [ 494.446393][ T5418] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 494.477046][ T7930] loop1: detected capacity change from 0 to 7 [ 494.515259][ T7930] Dev loop1: unable to read RDB block 7 [ 494.521416][ T7930] loop1: AHDI p4 [ 494.525601][ T7930] loop1: partition table partially beyond EOD, truncated [ 494.668089][ T5418] usb 3-1: Using ep0 maxpacket: 16 [ 494.712599][ T5418] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 494.721337][ T5418] usb 3-1: config 4 has no interface number 0 [ 494.731627][ T5418] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 494.741957][ T5418] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 494.752440][ T5418] usb 3-1: config 4 interface 15 has no altsetting 0 [ 494.913467][ T5418] usb 3-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 494.922969][ T5418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.931574][ T5418] usb 3-1: Product: syz [ 494.935967][ T5418] usb 3-1: Manufacturer: syz [ 494.940914][ T5418] usb 3-1: SerialNumber: syz [ 495.050645][ T7926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.081931][ T7926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.371294][ T7926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.420082][ T7926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 496.458807][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.468795][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.860194][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 496.871810][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 496.910657][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 496.988421][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 497.015691][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 497.059549][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 497.090032][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 497.172146][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 497.238433][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 497.293122][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 497.330871][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 497.369371][ T2232] usb 6-1: new high-speed USB device number 11 using dummy_hcd Stopping sshd: [ 497.402967][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 497.469553][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 497.519994][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 497.585856][ T2232] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.596472][ T2232] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.609163][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 497.664368][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 497.709303][ T5875] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 497.721241][ T2232] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 497.730845][ T2232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 497.743141][ T2232] usb 6-1: SerialNumber: syz [ 497.763851][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 497.799462][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 497.849819][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 497.879785][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 497.909812][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 497.929530][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 497.950628][ T5875] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.961259][ T5875] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.971576][ T5875] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.982044][ T5875] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.995868][ T5875] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 498.005563][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.031469][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 stopped /usr/sbin/sshd (pid 5548) [ 498.088079][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 498.132586][ T2232] usb 6-1: 0:2 : does not exist [ 498.137793][ T2232] usb 6-1: unit 5 not found! OK [ 498.166411][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 498.189500][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 498.420644][ T5418] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 498.449754][ T5418] ax88179_178a 3-1:4.15 eth5: register 'ax88179_178a' at usb-dummy_hcd.2-1, Toshiba USB Ethernet Adapter, 42:8c:d9:ce:69:cb [ 498.483870][ T2232] usb 6-1: USB disconnect, device number 11 [ 498.512738][ T5418] usb 3-1: USB disconnect, device number 10 [ 498.523185][ T5418] ax88179_178a 3-1:4.15 eth5: unregister 'ax88179_178a' usb-dummy_hcd.2-1, Toshiba USB Ethernet Adapter [ 498.719107][ T5875] usb 1-1: GET_CAPABILITIES returned 0 [ 498.725093][ T5875] usbtmc 1-1:16.0: can't read capabilities [ 498.940072][ T5418] usb 1-1: USB disconnect, device number 12 Stopping crond: stopped /usr/sbin/crond (pid 5519) OK [ 500.520193][ T5418] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 500.739337][ T5418] usb 5-1: Using ep0 maxpacket: 32 [ 500.769653][ T5418] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 500.779228][ T5418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.824777][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.725'. [ 500.851490][ T5418] usb 5-1: config 0 descriptor?? [ 501.124687][ T5418] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 501.150967][ T5418] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 501.198490][ T5418] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 501.206294][ T5418] usb 5-1: media controller created [ 501.314518][ T5418] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.387495][ T8001] ===================================================== [ 501.395220][ T8001] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 501.404019][ T8001] _copy_to_user+0xcc/0x120 [ 501.408748][ T8001] i2cdev_ioctl_smbus+0x586/0x660 [ 501.415405][ T8001] compat_i2cdev_ioctl+0x48f/0xb40 [ 501.425403][ T8001] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 501.432629][ T8001] ia32_sys_call+0x2d07/0x42c0 [ 501.438328][ T8001] __do_fast_syscall_32+0xb0/0x150 [ 501.444194][ T8001] do_fast_syscall_32+0x38/0x80 [ 501.449347][ T8001] do_SYSENTER_32+0x1f/0x30 [ 501.454060][ T8001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.460763][ T8001] [ 501.463209][ T8001] Uninit was stored to memory at: [ 501.468511][ T8001] __i2c_smbus_xfer+0x2561/0x2f60 [ 501.473859][ T8001] i2c_smbus_xfer+0x31d/0x4d0 [ 501.478763][ T8001] i2cdev_ioctl_smbus+0x4a1/0x660 [ 501.484167][ T8001] compat_i2cdev_ioctl+0x48f/0xb40 [ 501.490129][ T8001] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 501.495923][ T8001] ia32_sys_call+0x2d07/0x42c0 [ 501.500990][ T8001] __do_fast_syscall_32+0xb0/0x150 [ 501.506313][ T8001] do_fast_syscall_32+0x38/0x80 [ 501.511501][ T8001] do_SYSENTER_32+0x1f/0x30 [ 501.516225][ T8001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.527692][ T8001] [ 501.531618][ T8001] Local variable msgbuf1.i created at: [ 501.537209][ T8001] __i2c_smbus_xfer+0x86a/0x2f60 [ 501.542552][ T8001] i2c_smbus_xfer+0x31d/0x4d0 [ 501.547464][ T8001] [ 501.550001][ T8001] Byte 0 of 1 is uninitialized [ 501.554886][ T8001] Memory access of size 1 starts at ffff88811aa5bc86 [ 501.561896][ T8001] Data copied to user address 00000000800001c0 [ 501.568204][ T8001] [ 501.570812][ T8001] CPU: 1 UID: 0 PID: 8001 Comm: syz.4.723 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(undef) [ 501.583150][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.593635][ T8001] ===================================================== [ 501.600860][ T8001] Disabling lock debugging due to kernel taint [ 501.607164][ T8001] Kernel panic - not syncing: kmsan.panic set ... [ 501.613781][ T8001] CPU: 1 UID: 0 PID: 8001 Comm: syz.4.723 Tainted: G B 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(undef) [ 501.627678][ T8001] Tainted: [B]=BAD_PAGE [ 501.631967][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.642219][ T8001] Call Trace: [ 501.645621][ T8001] [ 501.648667][ T8001] __dump_stack+0x26/0x30 [ 501.653214][ T8001] dump_stack_lvl+0x53/0x270 [ 501.658012][ T8001] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 501.664072][ T8001] dump_stack+0x1e/0x25 [ 501.668432][ T8001] panic+0x4bd/0xd50 [ 501.672758][ T8001] kmsan_report+0x31c/0x320 [ 501.677485][ T8001] ? kmsan_internal_check_memory+0x1e1/0x230 [ 501.683681][ T8001] ? kmsan_copy_to_user+0xf1/0x190 [ 501.689020][ T8001] ? _copy_to_user+0xcc/0x120 [ 501.694417][ T8001] ? i2cdev_ioctl_smbus+0x586/0x660 [ 501.699807][ T8001] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 501.705285][ T8001] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 501.711236][ T8001] ? ia32_sys_call+0x2d07/0x42c0 [ 501.716350][ T8001] ? __do_fast_syscall_32+0xb0/0x150 [ 501.721845][ T8001] ? do_fast_syscall_32+0x38/0x80 [ 501.727230][ T8001] ? do_SYSENTER_32+0x1f/0x30 [ 501.732180][ T8001] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.738926][ T8001] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 501.744413][ T8001] ? __i2c_transfer+0x11cd/0x3110 [ 501.749635][ T8001] ? kmsan_get_metadata+0xfb/0x160 [ 501.754985][ T8001] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 501.761551][ T8001] ? kmsan_get_metadata+0xfb/0x160 [ 501.766888][ T8001] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 501.772940][ T8001] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 501.778369][ T8001] ? kmsan_get_metadata+0xfb/0x160 [ 501.783708][ T8001] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 501.789768][ T8001] kmsan_internal_check_memory+0x1e1/0x230 [ 501.797728][ T8001] kmsan_copy_to_user+0xf1/0x190 [ 501.802886][ T8001] _copy_to_user+0xcc/0x120 [ 501.807587][ T8001] i2cdev_ioctl_smbus+0x586/0x660 [ 501.812836][ T8001] compat_i2cdev_ioctl+0x48f/0xb40 [ 501.818167][ T8001] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 501.824001][ T8001] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 501.829792][ T8001] ? kmsan_get_metadata+0xfb/0x160 [ 501.835137][ T8001] ? kmsan_get_metadata+0xfb/0x160 [ 501.840504][ T8001] ia32_sys_call+0x2d07/0x42c0 [ 501.845448][ T8001] __do_fast_syscall_32+0xb0/0x150 [ 501.850762][ T8001] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 501.856681][ T8001] do_fast_syscall_32+0x38/0x80 [ 501.861728][ T8001] do_SYSENTER_32+0x1f/0x30 [ 501.866416][ T8001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.872980][ T8001] RIP: 0023:0xf7fa6539 [ 501.877196][ T8001] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 501.897018][ T8001] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 501.905635][ T8001] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 501.913762][ T8001] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.921882][ T8001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.929999][ T8001] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 501.938116][ T8001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.946278][ T8001] [ 501.949692][ T8001] Kernel Offset: disabled [ 501.954091][ T8001] Rebooting in 86400 seconds..