last executing test programs: 1.350856008s ago: executing program 3 (id=1437): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8001, 0x0, 0x529}, 0x26, [0xf5, 0x8, 0x80000001, 0x2, 0x202, 0xffffffff, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0xfffffffe, 0x38, 0xffffff7f, 0xac, 0x5, 0x1443, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x9, 0xc, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f84, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0x3, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x7, 0x6, 0xffffff7e, 0xf3, 0x9, 0xd2, 0x8001, 0x5, 0x53, 0x1], [0x5, 0x2, 0xd91, 0x8, 0x401, 0x8, 0x1, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x0, 0x8, 0x8, 0xffffffff, 0x405, 0x2, 0x9, 0x5, 0x5, 0xd, 0xa, 0x8001, 0x9, 0xa, 0x5, 0xf, 0xb2cf, 0x1, 0x200, 0xec, 0x9, 0x100, 0x9, 0x9, 0x10001, 0x1, 0x865f, 0x8ec5, 0x3, 0x802, 0x7, 0x3, 0x29e3, 0xce, 0x40b4e5, 0x20000, 0x200, 0x5, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0xad], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x0, 0xcb06, 0xfffeffff, 0x4, 0x37, 0x5, 0x80003, 0xc8, 0xc, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xa, 0x3, 0x7, 0x401, 0x5, 0x5, 0x2, 0x3, 0x2, 0x1, 0x0, 0x10000004, 0x911, 0x7, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f83, 0x9, 0x1, 0x2, 0xd, 0x7, 0x402, 0x9, 0xffff, 0x400, 0x80000000, 0x0, 0xb, 0x80, 0xf, 0x8, 0x8, 0x9, 0x6, 0x4, 0xfffffdad], [0x27b, 0x6, 0x6, 0x10, 0x7, 0x4009, 0x8, 0xff, 0x7fffffff, 0xe012, 0xfffffffa, 0x8, 0xffff7bfb, 0x6720, 0x401, 0x100, 0x2, 0x0, 0xb, 0x8, 0x3, 0x5, 0xfffffc00, 0x91, 0x9, 0x4, 0x80000000, 0x2, 0xa, 0x27, 0x400, 0x70, 0x9, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0x5, 0x9a2, 0x81, 0xf011, 0x400, 0x103000, 0x8, 0x5, 0x4, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffc02, 0x3, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) 1.266634799s ago: executing program 3 (id=1438): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df48e000005000200070000000800030008ac0f"], 0x44}}, 0x0) 1.1364844s ago: executing program 3 (id=1442): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 1.022878276s ago: executing program 3 (id=1445): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e23, @private=0xa010101}], 0x10) 939.424896ms ago: executing program 3 (id=1447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) 828.809507ms ago: executing program 1 (id=1448): landlock_create_ruleset(&(0x7f0000000080)={0x8000, 0x0, 0x1}, 0x18, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 758.450071ms ago: executing program 0 (id=1449): r0 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000500)='-', 0x1}], 0x1) 719.548098ms ago: executing program 2 (id=1450): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x240040c5) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000300)=0x8) 718.036563ms ago: executing program 3 (id=1451): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090223ffef0000004009040000010300010009210100000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="200da0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 712.333115ms ago: executing program 1 (id=1452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 612.942719ms ago: executing program 0 (id=1453): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x2, 0x7}, 0x8) 538.459504ms ago: executing program 2 (id=1454): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_unix(&(0x7f0000000300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000, 0x0) 522.630079ms ago: executing program 0 (id=1455): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) 483.282026ms ago: executing program 2 (id=1457): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r1, 0x80079a0) splice(r1, 0x0, r0, 0x0, 0xc, 0x4) 481.253519ms ago: executing program 1 (id=1465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x800) 406.407969ms ago: executing program 2 (id=1458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010007, 0x0, 0x9}]}) 404.79249ms ago: executing program 0 (id=1467): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) 322.922011ms ago: executing program 0 (id=1459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x285}]}) 322.217149ms ago: executing program 1 (id=1469): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 267.079637ms ago: executing program 2 (id=1460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) 112.597441ms ago: executing program 0 (id=1461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x60000000}]}) 111.523854ms ago: executing program 1 (id=1472): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x240040c5) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000300)=0x8) 60.033145ms ago: executing program 2 (id=1462): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000140), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300)) 0s ago: executing program 1 (id=1463): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0xdb7, {0xffff, 0x1}, {0x48, 0x3}, @cond=[{0x8, 0x4, 0x8, 0x849, 0x5, 0x7}, {0x94, 0x4, 0x1, 0x7, 0x6, 0x4}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x5b, 0x5, 0x7, 0x3, "9c2b45e4f5d791f27b531f369941f25a4bfa0527ddcd1880b190aa8c00"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 80.282015][ T5819] cgroup: Unknown subsys name 'net' [ 80.371961][ T5819] cgroup: Unknown subsys name 'cpuset' [ 80.380635][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.999618][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.232554][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.242227][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.243747][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.251236][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.259370][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.265794][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.280457][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.280593][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.288506][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.296389][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.303207][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.312590][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.317618][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.324827][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.330965][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.346918][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.347579][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.355028][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.362687][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.399413][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.934207][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 85.028320][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 85.092323][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 85.123594][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 85.268054][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.275448][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.283202][ T5833] bridge_slave_0: entered allmulticast mode [ 85.290991][ T5833] bridge_slave_0: entered promiscuous mode [ 85.328919][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.336339][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.343678][ T5833] bridge_slave_1: entered allmulticast mode [ 85.351440][ T5833] bridge_slave_1: entered promiscuous mode [ 85.410878][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.418286][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.426068][ T5832] bridge_slave_0: entered allmulticast mode [ 85.433672][ T5832] bridge_slave_0: entered promiscuous mode [ 85.473210][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.481198][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.489111][ T5832] bridge_slave_1: entered allmulticast mode [ 85.496631][ T5832] bridge_slave_1: entered promiscuous mode [ 85.504446][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.512221][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.519784][ T5831] bridge_slave_0: entered allmulticast mode [ 85.527199][ T5831] bridge_slave_0: entered promiscuous mode [ 85.536004][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.543464][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.551407][ T5831] bridge_slave_1: entered allmulticast mode [ 85.559306][ T5831] bridge_slave_1: entered promiscuous mode [ 85.569793][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.579748][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.587333][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.595380][ T5830] bridge_slave_0: entered allmulticast mode [ 85.602822][ T5830] bridge_slave_0: entered promiscuous mode [ 85.635648][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.645214][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.652491][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.660518][ T5830] bridge_slave_1: entered allmulticast mode [ 85.668172][ T5830] bridge_slave_1: entered promiscuous mode [ 85.739065][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.752875][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.766420][ T5833] team0: Port device team_slave_0 added [ 85.786054][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.798324][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.810490][ T5833] team0: Port device team_slave_1 added [ 85.819537][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.866559][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.925923][ T5832] team0: Port device team_slave_0 added [ 85.944152][ T5831] team0: Port device team_slave_0 added [ 85.952433][ T5830] team0: Port device team_slave_0 added [ 85.960409][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.967729][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.993870][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.008583][ T5832] team0: Port device team_slave_1 added [ 86.029401][ T5831] team0: Port device team_slave_1 added [ 86.037886][ T5830] team0: Port device team_slave_1 added [ 86.044445][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.052049][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.078992][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.150808][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.161959][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.189711][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.203272][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.210543][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.237267][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.259848][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.267091][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.294252][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.308039][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.315366][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.341590][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.361047][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.368509][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.396220][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.405669][ T5153] Bluetooth: hci2: command tx timeout [ 86.409755][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.412887][ T5835] Bluetooth: hci1: command tx timeout [ 86.419572][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.452140][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.474739][ T5153] Bluetooth: hci3: command tx timeout [ 86.480589][ T5835] Bluetooth: hci0: command tx timeout [ 86.515645][ T5833] hsr_slave_0: entered promiscuous mode [ 86.522403][ T5833] hsr_slave_1: entered promiscuous mode [ 86.595064][ T5832] hsr_slave_0: entered promiscuous mode [ 86.601578][ T5832] hsr_slave_1: entered promiscuous mode [ 86.608167][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 86.614093][ T5832] Cannot create hsr debugfs directory [ 86.637868][ T5830] hsr_slave_0: entered promiscuous mode [ 86.644293][ T5830] hsr_slave_1: entered promiscuous mode [ 86.650766][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 86.656640][ T5830] Cannot create hsr debugfs directory [ 86.711732][ T5831] hsr_slave_0: entered promiscuous mode [ 86.718698][ T5831] hsr_slave_1: entered promiscuous mode [ 86.725237][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 86.731172][ T5831] Cannot create hsr debugfs directory [ 87.388325][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.402181][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.413653][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.441743][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.539889][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.552179][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.603662][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.614048][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.703571][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.714441][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.731887][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.747106][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.905435][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.918229][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.929414][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.941431][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.977732][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.066360][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.092254][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.100323][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.114421][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.152468][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.159986][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.193038][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.220524][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.228176][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.253040][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.266623][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.273889][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.347707][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.364080][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.399431][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.406932][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.440313][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.447566][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.460470][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.475820][ T5835] Bluetooth: hci1: command tx timeout [ 88.477463][ T5153] Bluetooth: hci2: command tx timeout [ 88.523809][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.531471][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.550687][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.554983][ T5153] Bluetooth: hci0: command tx timeout [ 88.558110][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.563348][ T5153] Bluetooth: hci3: command tx timeout [ 88.889924][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.078156][ T5832] veth0_vlan: entered promiscuous mode [ 89.121958][ T5832] veth1_vlan: entered promiscuous mode [ 89.183102][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.241885][ T5832] veth0_macvtap: entered promiscuous mode [ 89.271794][ T5832] veth1_macvtap: entered promiscuous mode [ 89.350194][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.363452][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.386676][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.408862][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.432288][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.446703][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.456248][ T5833] veth0_vlan: entered promiscuous mode [ 89.468928][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.493280][ T5833] veth1_vlan: entered promiscuous mode [ 89.500591][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.666245][ T5830] veth0_vlan: entered promiscuous mode [ 89.674354][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.693142][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.720244][ T5833] veth0_macvtap: entered promiscuous mode [ 89.743115][ T5831] veth0_vlan: entered promiscuous mode [ 89.750513][ T5830] veth1_vlan: entered promiscuous mode [ 89.762231][ T5833] veth1_macvtap: entered promiscuous mode [ 89.788476][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.801585][ T5831] veth1_vlan: entered promiscuous mode [ 89.808007][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.879297][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.896618][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.919810][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.946707][ T5831] veth0_macvtap: entered promiscuous mode [ 89.955637][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.979959][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.998058][ T5831] veth1_macvtap: entered promiscuous mode [ 90.017520][ T5830] veth0_macvtap: entered promiscuous mode [ 90.037705][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.065873][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.132611][ T5830] veth1_macvtap: entered promiscuous mode [ 90.152345][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.168045][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.256835][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.272386][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.295657][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.348015][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.359237][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.375584][ T5927] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 90.379732][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.382853][ T5927] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 90.405360][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.413225][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.435016][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.471954][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.488258][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.561105][ T5835] Bluetooth: hci2: command tx timeout [ 90.570300][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.579702][ T5153] Bluetooth: hci1: command tx timeout [ 90.627814][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.636179][ T5153] Bluetooth: hci3: command tx timeout [ 90.646278][ T5153] Bluetooth: hci0: command tx timeout [ 90.657315][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.736562][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.746101][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.958937][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.987313][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.010693][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.015620][ T5937] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.045731][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.218068][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.242769][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.391734][ T5944] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.571980][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.743309][ T5957] Bluetooth: MGMT ver 1.23 [ 91.892946][ T5962] netlink: 84 bytes leftover after parsing attributes in process `syz.0.19'. [ 92.158391][ T10] cfg80211: failed to load regulatory.db [ 92.340424][ T5977] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27'. [ 92.572876][ T5983] netlink: 92 bytes leftover after parsing attributes in process `syz.3.28'. [ 92.597580][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 92.636371][ T5153] Bluetooth: hci1: command tx timeout [ 92.636384][ T5835] Bluetooth: hci2: command tx timeout [ 92.716037][ T5835] Bluetooth: hci0: command tx timeout [ 92.720725][ T5153] Bluetooth: hci3: command tx timeout [ 92.850894][ T5153] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 93.142668][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 93.225778][ T5920] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.304687][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.398985][ T5920] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.426425][ T5920] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 93.455112][ T5920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.465096][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 93.467347][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.472046][ T5920] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.483092][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.506272][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 93.508952][ T29] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 93.517789][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 93.520354][ T5920] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.535519][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.545340][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.569229][ T5920] usb 2-1: Product: syz [ 93.573516][ T29] usb 4-1: config 0 descriptor?? [ 93.580697][ T5920] usb 2-1: Manufacturer: syz [ 93.602357][ T5998] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.617627][ T5920] cdc_wdm 2-1:1.0: skipping garbage [ 93.623877][ T5920] cdc_wdm 2-1:1.0: skipping garbage [ 93.652467][ T5920] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 93.668638][ T5920] cdc_wdm 2-1:1.0: Unknown control protocol [ 93.701932][ T6015] netlink: 128 bytes leftover after parsing attributes in process `syz.2.43'. [ 93.898085][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 93.920698][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 93.928190][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 93.936479][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 93.942853][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 93.949586][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 93.956469][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 93.963187][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 93.973146][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 93.980084][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 93.986640][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 93.993277][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.000517][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.007175][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.013883][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.020804][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.027307][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.034326][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.041088][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.044394][ T5892] usb 2-1: USB disconnect, device number 2 [ 94.047739][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.047763][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 94.082963][ T29] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 94.095135][ T29] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 94.214777][ T29] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 94.405510][ T29] ft260 0003:0403:6030.0001: failed to retrieve system status [ 94.413952][ T29] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -71 [ 94.477788][ T29] usb 4-1: USB disconnect, device number 2 [ 95.047633][ T6050] netlink: 48 bytes leftover after parsing attributes in process `syz.0.60'. [ 95.578707][ T6070] Invalid ELF header len 16 [ 95.616979][ T6069] loop6: detected capacity change from 0 to 1 [ 95.652599][ T6069] Dev loop6: unable to read RDB block 1 [ 95.670888][ T6069] loop6: unable to read partition table [ 95.694984][ T6069] loop6: partition table beyond EOD, truncated [ 95.702451][ T6069] loop_reread_partitions: partition scan of loop6 (u0v ) failed (rc=-5) [ 96.111322][ T6086] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 96.483531][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 96.635604][ T5892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.815067][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 96.824821][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.848311][ T5892] usb 3-1: config 1 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.862053][ T5892] usb 3-1: config 1 interface 0 has no altsetting 0 [ 96.873001][ T5892] usb 3-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.40 [ 96.885902][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.895029][ T5892] usb 3-1: Product: syz [ 96.899465][ T5892] usb 3-1: Manufacturer: syz [ 96.904362][ T5892] usb 3-1: SerialNumber: syz [ 97.081624][ T6119] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.643407][ T6140] capability: warning: `syz.3.104' uses deprecated v2 capabilities in a way that may be insecure [ 97.738224][ T5892] usbhid 3-1:1.0: can't add hid device: -71 [ 97.744381][ T5892] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 97.801149][ T5892] usb 3-1: USB disconnect, device number 2 [ 98.007367][ T6154] Bluetooth: MGMT ver 1.23 [ 98.107914][ T6158] ======================================================= [ 98.107914][ T6158] WARNING: The mand mount option has been deprecated and [ 98.107914][ T6158] and is ignored by this kernel. Remove the mand [ 98.107914][ T6158] option from the mount to silence this warning. [ 98.107914][ T6158] ======================================================= [ 98.273750][ T6165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.395309][ T1218] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.569966][ T1218] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.604657][ T1218] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 98.622235][ T1218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.641704][ T1218] usb 2-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 98.653648][ T1218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.680337][ T1218] usb 2-1: config 0 descriptor?? [ 99.117697][ T1218] hid_mf 0003:0079:1843.0002: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.1-1/input0 [ 99.164129][ T1218] hid_mf 0003:0079:1843.0002: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 99.219431][ T6196] mmap: syz.0.131 (6196) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.330562][ T1218] usb 2-1: USB disconnect, device number 3 [ 99.427699][ T6194] fido_id[6194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 99.604500][ T6209] netlink: 9 bytes leftover after parsing attributes in process `syz.0.136'. [ 99.638280][ T6209] gretap0: entered promiscuous mode [ 99.674866][ T6209] netlink: 5 bytes leftover after parsing attributes in process `syz.0.136'. [ 99.699623][ T6209] 0{X: renamed from gretap0 [ 99.716956][ T6209] 0{X: left promiscuous mode [ 99.727313][ T6209] 0{X: entered allmulticast mode [ 99.737798][ T6209] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 100.027948][ T6222] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.143'. [ 101.004250][ T6258] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 101.036384][ T6260] process 'syz.2.162' launched './file2' with NULL argv: empty string added [ 101.039376][ T6258] syzkaller1: linktype set to 786 [ 102.121037][ T6304] tipc: Started in network mode [ 102.140385][ T6304] tipc: Node identity ac14140f, cluster identity 4711 [ 102.144747][ T5834] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.155228][ T6304] tipc: New replicast peer: 255.255.255.255 [ 102.180116][ T6304] tipc: Enabled bearer , priority 10 [ 102.314923][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 102.326530][ T5834] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 102.355373][ T5834] usb 2-1: config 0 has no interface number 0 [ 102.400756][ T5834] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 102.442779][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.486710][ T5834] usb 2-1: Product: syz [ 102.492032][ T5834] usb 2-1: Manufacturer: syz [ 102.524510][ T5834] usb 2-1: SerialNumber: syz [ 102.545477][ T5834] usb 2-1: config 0 descriptor?? [ 102.561116][ T5834] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 102.795638][ T5834] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 102.872504][ T5834] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 103.262819][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 103.278220][ T1218] usb 2-1: USB disconnect, device number 4 [ 103.299820][ T5892] tipc: Node number set to 2886997007 [ 103.341877][ T1218] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 103.385695][ T1218] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 103.430168][ T1218] quatech2 2-1:0.51: device disconnected [ 103.664958][ T5202] Dev loop6: unable to read RDB block 1 [ 103.670701][ T5202] loop6: unable to read partition table [ 103.724950][ T5202] loop6: partition table beyond EOD, truncated [ 104.027190][ T6351] Falling back ldisc for ptm0. [ 104.321946][ T5834] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.515599][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 104.551317][ T5834] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 104.572230][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.583541][ T5834] usb 2-1: Product: syz [ 104.589196][ T5834] usb 2-1: Manufacturer: syz [ 104.597824][ T5834] usb 2-1: SerialNumber: syz [ 104.619650][ T5834] usb 2-1: config 0 descriptor?? [ 105.012132][ T6384] netlink: 180 bytes leftover after parsing attributes in process `syz.2.213'. [ 105.041510][ T5834] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 105.093912][ T5834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.140656][ T5834] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 105.170168][ T5834] usb 2-1: media controller created [ 105.234386][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.379753][ T5834] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 105.408799][ T5834] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 105.625231][ T5834] usb 2-1: USB disconnect, device number 5 [ 105.701776][ T5834] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 106.001971][ T6407] vivid-000: ================= START STATUS ================= [ 106.014891][ T6407] vivid-000: Enable Output Cropping: true grabbed [ 106.033069][ T6407] vivid-000: Enable Output Composing: true grabbed [ 106.050591][ T6407] vivid-000: Enable Output Scaler: true grabbed [ 106.081210][ T6407] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 106.109184][ T6407] vivid-000: Transmit Mode: HDMI grabbed [ 106.134856][ T6407] vivid-000: Hotplug Present: 0x00000000 [ 106.152439][ T6407] vivid-000: RxSense Present: 0x00000000 [ 106.190983][ T6407] vivid-000: EDID Present: 0x00000000 [ 106.219130][ T6407] vivid-000: ================== END STATUS ================== [ 106.539983][ T6428] netlink: 92 bytes leftover after parsing attributes in process `syz.0.227'. [ 106.571297][ T6428] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 107.778712][ T5892] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 107.946419][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 107.961272][ T5892] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 107.970378][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.983654][ T5892] usb 2-1: config 0 has no interface number 0 [ 107.990819][ T5892] usb 2-1: config 0 interface 110 has no altsetting 0 [ 108.009300][ T5892] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 108.021676][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.043485][ T5892] usb 2-1: Product: syz [ 108.055858][ T5892] usb 2-1: Manufacturer: syz [ 108.067895][ T5892] usb 2-1: SerialNumber: syz [ 108.113969][ T5892] usb 2-1: config 0 descriptor?? [ 108.354297][ T5892] cdc_subset 2-1:0.110: probe with driver cdc_subset failed with error -71 [ 108.391175][ T5892] usb 2-1: USB disconnect, device number 6 [ 108.573636][ T58] Bluetooth: hci4: Frame reassembly failed (-84) [ 108.805384][ T6502] netlink: 164 bytes leftover after parsing attributes in process `syz.3.260'. [ 109.040826][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.205838][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 109.224260][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 109.239479][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.261610][ T10] usb 1-1: Product: syz [ 109.276669][ T10] usb 1-1: Manufacturer: syz [ 109.291830][ T10] usb 1-1: SerialNumber: syz [ 109.318318][ T10] usb 1-1: config 0 descriptor?? [ 109.348220][ T1140] Bluetooth: hci5: Frame reassembly failed (-84) [ 109.547142][ T10] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 109.953246][ T10] usb write operation failed. (-71) [ 109.964427][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.977847][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 109.984785][ T10] usb 1-1: media controller created [ 109.991818][ T10] usb read operation failed. (-71) [ 109.999491][ T10] usb write operation failed. (-71) [ 110.009162][ T10] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 110.032282][ T10] usb 1-1: USB disconnect, device number 2 [ 110.634739][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 110.635558][ T5153] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 111.244725][ T5834] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.356202][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 111.357479][ T5153] Bluetooth: hci5: command 0x1003 tx timeout [ 111.441109][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.494625][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.525651][ T5834] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 111.550998][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.578054][ T5834] usb 3-1: config 0 descriptor?? [ 112.060970][ T6596] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 1, id = 0 [ 112.218376][ T5834] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71 [ 112.253827][ T5834] usb 3-1: USB disconnect, device number 3 [ 112.464714][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.641496][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 112.674536][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.706533][ T10] usb 2-1: config 0 descriptor?? [ 112.721580][ T10] cp210x 2-1:0.0: cp210x converter detected [ 112.742995][ T6620] loop8: detected capacity change from 0 to 1 [ 112.797499][ T6620] Dev loop8: unable to read RDB block 1 [ 112.807407][ T6620] loop8: unable to read partition table [ 112.816953][ T6620] loop8: partition table beyond EOD, truncated [ 112.859093][ T6620] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 113.158232][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 113.229219][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 113.429746][ T29] usb 2-1: USB disconnect, device number 7 [ 113.459520][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 113.489325][ T29] cp210x 2-1:0.0: device disconnected [ 113.622258][ T6641] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 114.314766][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.400623][ T6667] netlink: 'syz.2.340': attribute type 9 has an invalid length. [ 114.514701][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 114.544894][ T10] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 114.614738][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 114.623645][ T10] usb 4-1: config 0 has no interface number 0 [ 114.646019][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 114.674736][ T10] usb 4-1: config 0 has no interface number 0 [ 114.689216][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 114.704671][ T10] usb 4-1: config 0 has no interface number 0 [ 114.715923][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 114.721838][ T6678] veth1_macvtap: left promiscuous mode [ 114.732426][ T6678] macsec0: entered promiscuous mode [ 114.737143][ T10] usb 4-1: config 0 has no interface number 0 [ 114.755931][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 114.760702][ T6678] veth1_macvtap: entered promiscuous mode [ 114.773147][ T29] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.782989][ T10] usb 4-1: config 0 has no interface number 0 [ 114.791604][ T6678] macsec0: left promiscuous mode [ 114.796007][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 114.814631][ T10] usb 4-1: config 0 has no interface number 0 [ 114.837898][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 114.854802][ T10] usb 4-1: config 0 has no interface number 0 [ 114.888666][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 114.898760][ T10] usb 4-1: config 0 has no interface number 0 [ 114.916960][ T10] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 114.924720][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 114.940976][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.953768][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.960785][ T10] usb 4-1: Product: syz [ 114.975165][ T10] usb 4-1: Manufacturer: syz [ 114.975866][ T29] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.984455][ T10] usb 4-1: SerialNumber: syz [ 115.005639][ T10] usb 4-1: config 0 descriptor?? [ 115.010303][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.025750][ T10] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 115.044862][ T29] usb 2-1: config 0 descriptor?? [ 115.271035][ T29] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 115.307100][ T10] etas_es58x 4-1:0.2: could not parse product info: '424242424242' [ 115.541927][ T10] usb 2-1: USB disconnect, device number 8 [ 116.971259][ C1] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 116.982707][ C1] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 116.991538][ C1] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 117.047818][ T5498] etas_es58x 4-1:0.2 can0: bit-timing not yet defined [ 117.118670][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 117.128508][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 117.138684][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 117.148636][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 117.158268][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 117.169123][ C1] etas_es58x 4-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 117.179749][ T29] usb 4-1: USB disconnect, device number 3 [ 117.189058][ T29] etas_es58x 4-1:0.2: Disconnecting syz syz [ 117.205627][ T5498] etas_es58x 4-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 117.714668][ T6747] netlink: 'syz.1.372': attribute type 2 has an invalid length. [ 117.767058][ T6747] netlink: 'syz.1.372': attribute type 11 has an invalid length. [ 117.811591][ T6747] netlink: 112 bytes leftover after parsing attributes in process `syz.1.372'. [ 118.353286][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 118.593802][ T6781] netlink: 164 bytes leftover after parsing attributes in process `syz.2.382'. [ 118.851575][ T6791] random: crng reseeded on system resumption [ 119.097964][ T6796] netlink: 48 bytes leftover after parsing attributes in process `syz.3.387'. [ 120.855271][ T5834] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 121.076070][ T5834] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 121.123355][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.157421][ T5834] usb 2-1: config 0 descriptor?? [ 121.182342][ T5834] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 121.582179][ T5834] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 121.987307][ T5834] gspca_cpia1: usb_control_msg 02, error -71 [ 122.009567][ T5834] gspca_cpia1: usb_control_msg 05, error -71 [ 122.018455][ T5834] cpia1 2-1:0.0: unexpected systemstate: 00 [ 122.038419][ T5834] usb 2-1: USB disconnect, device number 9 [ 122.460520][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.432'. [ 122.524656][ T5834] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.694720][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 122.711170][ T5834] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 122.732925][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.752556][ T5834] usb 1-1: Product: syz [ 122.772840][ T5834] usb 1-1: Manufacturer: syz [ 122.781539][ T5834] usb 1-1: SerialNumber: syz [ 122.798028][ T5834] usb 1-1: config 0 descriptor?? [ 123.014871][ T5834] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 123.184791][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.355603][ T29] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 123.385034][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.394115][ T29] usb 4-1: Product: syz [ 123.434813][ T29] usb 4-1: Manufacturer: syz [ 123.440501][ T29] usb 4-1: SerialNumber: syz [ 123.466582][ T29] usb 4-1: config 0 descriptor?? [ 123.621800][ T5834] usb write operation failed. (-71) [ 123.640889][ T5834] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 123.670995][ T5834] dvbdev: DVB: registering new adapter (Terratec H7) [ 123.678770][ T5834] usb 1-1: media controller created [ 123.686535][ T5834] usb read operation failed. (-71) [ 123.694377][ T5834] usb write operation failed. (-71) [ 123.709213][ T5834] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 123.728310][ T5834] usb 1-1: USB disconnect, device number 3 [ 123.891726][ T29] usb 4-1: Firmware: major: 143, minor: 0, hardware type: ATUSB (0) [ 124.091191][ T29] usb 4-1: failed to fetch extended address, random address set [ 124.138781][ T29] usb 4-1: USB disconnect, device number 4 [ 125.379724][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 125.995901][ T7024] netlink: 'syz.0.479': attribute type 83 has an invalid length. [ 126.909985][ T7060] netlink: 'syz.0.497': attribute type 3 has an invalid length. [ 126.940801][ T7060] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 126.968720][ T7060] netlink: 204 bytes leftover after parsing attributes in process `syz.0.497'. [ 127.038343][ T7060] NCSI netlink: No device for ifindex 813332851 [ 127.324517][ T7079] netlink: 84 bytes leftover after parsing attributes in process `syz.3.505'. [ 127.731481][ T7095] netlink: 72 bytes leftover after parsing attributes in process `syz.3.514'. [ 127.747039][ T30] audit: type=1326 audit(1769511739.385:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.2.512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27a059aeb9 code=0x0 [ 127.879367][ T7102] capability: warning: `syz.3.517' uses 32-bit capabilities (legacy support in use) [ 128.207833][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 128.560296][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 129.005632][ T7139] netlink: 128 bytes leftover after parsing attributes in process `syz.3.533'. [ 129.311177][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 129.576490][ T30] audit: type=1326 audit(1769511741.215:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f779aeb9 code=0x7ffc0000 [ 129.657554][ T30] audit: type=1326 audit(1769511741.255:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f779aeb9 code=0x7ffc0000 [ 129.713718][ T30] audit: type=1326 audit(1769511741.255:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f779aeb9 code=0x7ffc0000 [ 129.742292][ T30] audit: type=1326 audit(1769511741.275:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05f775b78e code=0x7ffc0000 [ 129.805414][ T30] audit: type=1326 audit(1769511741.275:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f779aeb9 code=0x7ffc0000 [ 129.869868][ T30] audit: type=1326 audit(1769511741.275:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f779aeb9 code=0x7ffc0000 [ 129.901196][ T30] audit: type=1326 audit(1769511741.275:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f779aeb9 code=0x7ffc0000 [ 129.935301][ T30] audit: type=1326 audit(1769511741.275:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f05f779aeb9 code=0x7ffc0000 [ 129.960850][ T30] audit: type=1326 audit(1769511741.275:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f779aeb9 code=0x7ffc0000 [ 130.134926][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.284810][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 130.302795][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 130.333498][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 130.355245][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.386340][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.421907][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.438615][ T7191] netlink: 48 bytes leftover after parsing attributes in process `syz.1.559'. [ 130.449569][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.705909][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 130.721654][ T10] usbtmc 1-1:16.0: can't read capabilities [ 130.902652][ T7206] Invalid ELF header len 16 [ 130.969089][ T10] usb 1-1: USB disconnect, device number 4 [ 131.047109][ T5202] Dev loop6: unable to read RDB block 1 [ 131.064416][ T5202] loop6: unable to read partition table [ 131.073252][ T5202] loop6: partition table beyond EOD, truncated [ 131.394806][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.555223][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 131.564936][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.592394][ T10] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 131.614249][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.631433][ T10] usb 3-1: Product: syz [ 131.636701][ T10] usb 3-1: Manufacturer: syz [ 131.641438][ T10] usb 3-1: SerialNumber: syz [ 131.665705][ T10] usb 3-1: config 0 descriptor?? [ 131.897403][ T10] kaweth 3-1:0.0: Firmware present in device. [ 132.053624][ T7236] netlink: 1 bytes leftover after parsing attributes in process `syz.3.580'. [ 132.094993][ T10] kaweth 3-1:0.0: Statistics collection: 0 [ 132.102706][ T10] kaweth 3-1:0.0: Multicast filter limit: 0 [ 132.155423][ T10] kaweth 3-1:0.0: MTU: 0 [ 132.161897][ T10] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 132.464849][ T29] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 132.475303][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 132.493139][ T10] kaweth 3-1:0.0: Error setting SOFS wait [ 132.507559][ T10] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 132.540023][ T10] usb 3-1: USB disconnect, device number 4 [ 132.653820][ T7252] can0: slcan on ttyS3. [ 132.661429][ T29] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 132.679692][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.696579][ T29] usb 2-1: Product: syz [ 132.702749][ T29] usb 2-1: Manufacturer: syz [ 132.710320][ T29] usb 2-1: SerialNumber: syz [ 132.721276][ T29] usb 2-1: config 0 descriptor?? [ 132.738214][ T7252] can0 (unregistered): slcan off ttyS3. [ 132.745674][ T29] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 133.124593][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.134024][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.600860][ T29] usb 2-1: USB disconnect, device number 10 [ 134.357161][ T29] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 134.536644][ T29] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 134.561357][ T29] usb 1-1: config 0 has no interface number 0 [ 134.578928][ T29] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 134.606775][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.624407][ T29] usb 1-1: Product: syz [ 134.633119][ T29] usb 1-1: Manufacturer: syz [ 134.664680][ T1218] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 134.675325][ T29] usb 1-1: SerialNumber: syz [ 134.695504][ T29] usb 1-1: config 0 descriptor?? [ 134.835014][ T1218] usb 2-1: Using ep0 maxpacket: 16 [ 134.859443][ T1218] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.874267][ T1218] usb 2-1: config 1 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.903307][ T1218] usb 2-1: config 1 interface 0 has no altsetting 0 [ 134.934212][ T1218] usb 2-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.40 [ 134.972873][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.994638][ T1218] usb 2-1: Product: syz [ 134.999738][ T1218] usb 2-1: Manufacturer: syz [ 135.028155][ T1218] usb 2-1: SerialNumber: syz [ 135.150251][ T29] usb 1-1: Firmware: major: 18, minor: 23, hardware type: UNKNOWN (55) [ 135.354157][ T29] usb 1-1: failed to fetch extended address, random address set [ 135.388193][ T29] usb 1-1: atusb_probe: initialization failed, error = -524 [ 135.406657][ T29] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 135.465638][ T29] usb 1-1: USB disconnect, device number 5 [ 135.917596][ T1218] usbhid 2-1:1.0: can't add hid device: -71 [ 135.944750][ T1218] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 135.983991][ T1218] usb 2-1: USB disconnect, device number 11 [ 136.595216][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 136.613682][ T7354] netlink: 84 bytes leftover after parsing attributes in process `syz.2.634'. [ 136.965466][ T7366] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.640'. [ 137.044694][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.237967][ T10] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.265309][ T10] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 137.305241][ T1218] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.314666][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.344683][ T10] usb 1-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 137.366749][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.400637][ T10] usb 1-1: config 0 descriptor?? [ 137.474702][ T1218] usb 3-1: Using ep0 maxpacket: 32 [ 137.488263][ T1218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.506386][ T1218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.522213][ T1218] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 137.555582][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.571256][ T1218] usb 3-1: config 0 descriptor?? [ 137.865284][ T10] hid_mf 0003:0079:1843.0004: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.0-1/input0 [ 137.901337][ T10] hid_mf 0003:0079:1843.0004: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 138.021750][ T1218] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 138.051596][ T1218] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 138.114391][ T5834] usb 1-1: USB disconnect, device number 6 [ 138.208829][ T1218] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 138.327116][ T7403] netlink: 'syz.1.660': attribute type 3 has an invalid length. [ 138.337277][ T7403] netlink: 'syz.1.660': attribute type 1 has an invalid length. [ 138.346921][ T7403] netlink: 204 bytes leftover after parsing attributes in process `syz.1.660'. [ 138.366475][ T7403] NCSI netlink: No device for ifindex 813332851 [ 138.419511][ T1218] ft260 0003:0403:6030.0005: failed to retrieve system status [ 138.466063][ T1218] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -71 [ 138.487526][ T1218] usb 3-1: USB disconnect, device number 5 [ 138.887167][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 138.887189][ T30] audit: type=1326 audit(1769511750.525:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.3.669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdde19aeb9 code=0x0 [ 140.439733][ T7469] Falling back ldisc for ptm0. [ 141.638282][ T7504] netlink: 180 bytes leftover after parsing attributes in process `syz.1.703'. [ 141.675472][ T5202] Dev loop6: unable to read RDB block 1 [ 141.683663][ T5202] loop6: unable to read partition table [ 141.738142][ T5202] loop6: partition table beyond EOD, truncated [ 141.945699][ T7510] netlink: 92 bytes leftover after parsing attributes in process `syz.3.714'. [ 141.985176][ T7512] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 141.997455][ T7510] netlink: 'syz.3.714': attribute type 1 has an invalid length. [ 142.640401][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 144.965228][ T5892] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.155798][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 145.176492][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.219898][ T5892] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 145.245520][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.272846][ T5892] usb 4-1: Product: syz [ 145.290395][ T5892] usb 4-1: Manufacturer: syz [ 145.297851][ T5892] usb 4-1: SerialNumber: syz [ 145.316926][ T5892] usb 4-1: config 0 descriptor?? [ 145.579041][ T5892] kaweth 4-1:0.0: Firmware present in device. [ 145.697668][ T7637] netlink: 164 bytes leftover after parsing attributes in process `syz.2.760'. [ 145.766603][ T5892] kaweth 4-1:0.0: Statistics collection: 0 [ 145.784232][ T5892] kaweth 4-1:0.0: Multicast filter limit: 0 [ 145.795486][ T5892] kaweth 4-1:0.0: MTU: 0 [ 145.825169][ T5892] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 146.177452][ T5892] kaweth 4-1:0.0: Error setting SOFS wait [ 146.187570][ T5892] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 146.209444][ T5892] usb 4-1: USB disconnect, device number 5 [ 147.355389][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 147.574788][ T5834] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 147.684776][ T1218] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.734735][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 147.746170][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.772483][ T5834] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 147.785590][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.798008][ T5834] usb 2-1: Product: syz [ 147.806261][ T5834] usb 2-1: Manufacturer: syz [ 147.815657][ T5834] usb 2-1: SerialNumber: syz [ 147.824326][ T5834] usb 2-1: config 0 descriptor?? [ 147.858714][ T1218] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 147.872479][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.883438][ T1218] usb 3-1: Product: syz [ 147.890660][ T1218] usb 3-1: Manufacturer: syz [ 147.897388][ T1218] usb 3-1: SerialNumber: syz [ 147.916926][ T1218] usb 3-1: config 0 descriptor?? [ 147.935319][ T1218] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 148.062563][ T5834] kaweth 2-1:0.0: Firmware present in device. [ 148.254417][ T5834] kaweth 2-1:0.0: Statistics collection: 0 [ 148.268949][ T5834] kaweth 2-1:0.0: Multicast filter limit: 0 [ 148.279580][ T5834] kaweth 2-1:0.0: MTU: 0 [ 148.288967][ T5834] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 148.666698][ T5834] kaweth 2-1:0.0: Error setting SOFS wait [ 148.705277][ T5834] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 148.749578][ T5834] usb 2-1: USB disconnect, device number 12 [ 148.807907][ T1218] usb 3-1: USB disconnect, device number 6 [ 149.354692][ T5153] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 149.949969][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 150.234901][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.414840][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 150.431103][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 150.468654][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.481464][ T10] usb 4-1: Product: syz [ 150.487749][ T10] usb 4-1: Manufacturer: syz [ 150.495703][ T10] usb 4-1: SerialNumber: syz [ 150.515141][ T10] usb 4-1: config 0 descriptor?? [ 150.753876][ T10] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 151.158302][ T10] usb write operation failed. (-71) [ 151.182638][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 151.206479][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 151.219945][ T10] usb 4-1: media controller created [ 151.231117][ T10] usb read operation failed. (-71) [ 151.245760][ T10] usb write operation failed. (-71) [ 151.278201][ T10] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 151.336792][ T10] usb 4-1: USB disconnect, device number 6 [ 151.994940][ T5153] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 151.995059][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 152.188148][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 152.367153][ T10] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 152.390765][ T10] usb 4-1: config 0 has no interface number 0 [ 152.419344][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 152.433524][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.446246][ T10] usb 4-1: Product: syz [ 152.453351][ T10] usb 4-1: Manufacturer: syz [ 152.462642][ T10] usb 4-1: SerialNumber: syz [ 152.483404][ T10] usb 4-1: config 0 descriptor?? [ 152.541474][ T1140] Bluetooth: hci4: Frame reassembly failed (-84) [ 152.645575][ T5892] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.852611][ T5892] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.867213][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.891214][ T5892] usb 1-1: config 0 descriptor?? [ 152.904828][ T10] usb 4-1: Firmware: major: 18, minor: 23, hardware type: UNKNOWN (55) [ 152.920165][ T5892] cp210x 1-1:0.0: cp210x converter detected [ 153.117208][ T10] usb 4-1: failed to fetch extended address, random address set [ 153.129199][ T10] usb 4-1: atusb_probe: initialization failed, error = -524 [ 153.140935][ T10] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 153.161491][ T10] usb 4-1: USB disconnect, device number 7 [ 153.354020][ T5892] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 153.381884][ T5892] usb 1-1: cp210x converter now attached to ttyUSB0 [ 153.576717][ T5892] usb 1-1: USB disconnect, device number 7 [ 153.594237][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.644268][ T5892] cp210x 1-1:0.0: device disconnected [ 154.152028][ T7810] veth1_macvtap: left promiscuous mode [ 154.163311][ T7810] macsec0: entered promiscuous mode [ 154.187168][ T7810] veth1_macvtap: entered promiscuous mode [ 154.195343][ T7810] macsec0: left promiscuous mode [ 154.556308][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 154.565681][ T5153] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 154.592343][ T5892] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 154.773425][ T5892] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 154.800245][ T5892] usb 2-1: config 0 has no interface number 0 [ 154.847130][ T5892] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 154.878106][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.880480][ T7835] vivid-000: ================= START STATUS ================= [ 154.922014][ T7835] vivid-000: Enable Output Cropping: true grabbed [ 154.927428][ T5892] usb 2-1: Product: syz [ 154.944630][ T5892] usb 2-1: Manufacturer: syz [ 154.944857][ T7835] vivid-000: Enable Output Composing: [ 154.958411][ T5892] usb 2-1: SerialNumber: syz [ 154.960404][ T7835] true [ 154.990140][ T5892] usb 2-1: config 0 descriptor?? [ 155.006989][ T7835] grabbed [ 155.013074][ T7835] vivid-000: Enable Output Scaler: true grabbed [ 155.024397][ T7835] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 155.044378][ T7835] vivid-000: Transmit Mode: HDMI grabbed [ 155.053059][ T7835] vivid-000: Hotplug Present: 0x00000000 [ 155.081961][ T7835] vivid-000: RxSense Present: 0x00000000 [ 155.097679][ T7835] vivid-000: EDID Present: 0x00000000 [ 155.115184][ T7835] vivid-000: ================== END STATUS ================== [ 155.457769][ T5892] usb 2-1: Firmware: major: 18, minor: 23, hardware type: UNKNOWN (55) [ 155.535152][ T5928] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.661062][ T5892] usb 2-1: failed to fetch extended address, random address set [ 155.672306][ T5892] usb 2-1: atusb_probe: initialization failed, error = -524 [ 155.684024][ T5892] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 155.706404][ T5892] usb 2-1: USB disconnect, device number 13 [ 155.715082][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 155.726726][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.742714][ T5928] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.756950][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.787008][ T5928] usb 1-1: config 0 descriptor?? [ 156.022182][ T5928] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 156.238544][ T1218] usb 1-1: USB disconnect, device number 8 [ 156.564910][ T1218] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 156.724827][ T1218] usb 2-1: Using ep0 maxpacket: 32 [ 156.732605][ T1218] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 156.745395][ T1218] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 156.773899][ T1218] usb 2-1: config 0 has no interface number 0 [ 156.786755][ T1218] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 156.810158][ T1218] usb 2-1: config 0 has no interface number 0 [ 156.832220][ T1218] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 156.849703][ T1218] usb 2-1: config 0 has no interface number 0 [ 156.868440][ T1218] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 156.882395][ T1218] usb 2-1: config 0 has no interface number 0 [ 156.894835][ T1218] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 156.908863][ T1218] usb 2-1: config 0 has no interface number 0 [ 156.919374][ T1218] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 156.931925][ T1218] usb 2-1: config 0 has no interface number 0 [ 156.942632][ T1218] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 156.953826][ T1218] usb 2-1: config 0 has no interface number 0 [ 156.966532][ T1218] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 156.978488][ T1218] usb 2-1: config 0 has no interface number 0 [ 156.988578][ T1218] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 156.999419][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.010014][ T1218] usb 2-1: Product: syz [ 157.014787][ T1218] usb 2-1: Manufacturer: syz [ 157.020372][ T1218] usb 2-1: SerialNumber: syz [ 157.029217][ T1218] usb 2-1: config 0 descriptor?? [ 157.039496][ T1218] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 157.255032][ T1218] etas_es58x 2-1:0.2: could not parse product info: '424242424242' [ 157.358349][ T7886] netlink: 92 bytes leftover after parsing attributes in process `syz.2.875'. [ 157.369566][ T7886] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 157.887324][ T7907] netlink: 'syz.0.879': attribute type 2 has an invalid length. [ 157.912969][ T7907] netlink: 'syz.0.879': attribute type 11 has an invalid length. [ 157.938215][ T7907] netlink: 112 bytes leftover after parsing attributes in process `syz.0.879'. [ 158.201922][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 158.217635][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 158.227590][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 158.238964][ T5498] etas_es58x 2-1:0.2 can1: bit-timing not yet defined [ 158.406473][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 158.408122][ T1218] usb 2-1: USB disconnect, device number 14 [ 158.418650][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 158.418738][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 158.452961][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 158.467205][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 158.479357][ C0] etas_es58x 2-1:0.2 can0: es58x_write_bulk_callback: error -ESHUTDOWN [ 158.491992][ T5498] etas_es58x 2-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 158.492381][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 158.504741][ T1218] etas_es58x 2-1:0.2: Disconnecting syz syz [ 159.038128][ T7933] netlink: 48 bytes leftover after parsing attributes in process `syz.0.890'. [ 161.623693][ T8044] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 1, id = 0 [ 162.081620][ T8064] loop8: detected capacity change from 0 to 1 [ 162.094816][ T5892] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 162.104745][ T5844] Dev loop8: unable to read RDB block 1 [ 162.134740][ T5844] loop8: unable to read partition table [ 162.143409][ T5844] loop8: partition table beyond EOD, truncated [ 162.156384][ T8064] Dev loop8: unable to read RDB block 1 [ 162.163200][ T8064] loop8: unable to read partition table [ 162.172422][ T8064] loop8: partition table beyond EOD, truncated [ 162.180746][ T8064] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 162.276970][ T5892] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 162.290382][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.314520][ T5892] usb 3-1: config 0 descriptor?? [ 162.331966][ T5892] cp210x 3-1:0.0: cp210x converter detected [ 162.756327][ T5892] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 162.778078][ T5892] usb 3-1: cp210x converter now attached to ttyUSB0 [ 162.981853][ T10] usb 3-1: USB disconnect, device number 7 [ 163.020584][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 163.057103][ T10] cp210x 3-1:0.0: device disconnected [ 163.284879][ T8100] netlink: 'syz.1.976': attribute type 9 has an invalid length. [ 164.396963][ T8156] netlink: 'syz.2.993': attribute type 83 has an invalid length. [ 164.516452][ T8161] netlink: 'syz.1.1005': attribute type 83 has an invalid length. [ 165.766735][ T8215] netlink: 'syz.2.1023': attribute type 2 has an invalid length. [ 165.784326][ T8215] netlink: 'syz.2.1023': attribute type 11 has an invalid length. [ 165.805812][ T8215] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1023'. [ 165.973090][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 166.124435][ T8229] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1028'. [ 166.484669][ T29] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 166.661381][ T29] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 166.694648][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.711281][ T29] usb 2-1: Product: syz [ 166.723411][ T29] usb 2-1: Manufacturer: syz [ 166.737795][ T29] usb 2-1: SerialNumber: syz [ 166.759698][ T29] usb 2-1: config 0 descriptor?? [ 167.200502][ T29] usb 2-1: Firmware: major: 143, minor: 0, hardware type: ATUSB (0) [ 167.417979][ T29] usb 2-1: failed to fetch extended address, random address set [ 167.493766][ T29] usb 2-1: USB disconnect, device number 15 [ 167.654797][ T5892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 167.842865][ T5892] usb 3-1: config 0 has no interfaces? [ 167.875479][ T5892] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.889477][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.905579][ T5892] usb 3-1: Product: syz [ 167.911292][ T5892] usb 3-1: Manufacturer: syz [ 167.921778][ T5892] usb 3-1: config 0 descriptor?? [ 168.158000][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.172540][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.185675][ T5892] usb 3-1: USB disconnect, device number 8 [ 168.644836][ T5920] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 168.733947][ T8320] program syz.1.1072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.847813][ T5920] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 168.860110][ T5920] usb 3-1: config 0 has no interface number 0 [ 168.867908][ T5920] usb 3-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 168.881098][ T5920] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.892852][ T5920] usb 3-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 168.905827][ T5920] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 168.915792][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.926382][ T5920] usb 3-1: config 0 descriptor?? [ 168.974987][ T5892] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 169.136176][ T5920] usb 3-1: string descriptor 0 read error: -71 [ 169.147667][ T5920] keyspan 3-1:0.168: Keyspan 2 port adapter converter detected [ 169.160189][ T5920] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 1 [ 169.171166][ T5892] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 169.183468][ T5920] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 84 [ 169.197168][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.207781][ T5920] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 2 [ 169.217247][ T5892] usb 1-1: Product: syz [ 169.222467][ T5892] usb 1-1: Manufacturer: syz [ 169.231714][ T5892] usb 1-1: SerialNumber: syz [ 169.237297][ T5920] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 169.250338][ T5920] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 88 [ 169.261094][ T5920] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 6 [ 169.282583][ T5892] usb 1-1: config 0 descriptor?? [ 169.293319][ T5920] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 169.316402][ T5920] usb 3-1: USB disconnect, device number 9 [ 169.337159][ T5920] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 169.368405][ T5920] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 169.387844][ T5920] keyspan 3-1:0.168: device disconnected [ 169.717932][ T5892] usb 1-1: Firmware: major: 143, minor: 0, hardware type: ATUSB (0) [ 169.930861][ T5892] usb 1-1: failed to fetch extended address, random address set [ 170.002487][ T5892] usb 1-1: USB disconnect, device number 9 [ 170.010220][ T5920] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 170.226117][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 170.236304][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.257743][ T5920] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 170.272938][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.300051][ T5920] usb 4-1: config 0 descriptor?? [ 170.351389][ T8345] program syz.2.1082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.630468][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 170.739842][ T5920] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 171.014845][ T5928] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 171.136057][ T1218] usb 4-1: USB disconnect, device number 8 [ 171.174687][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 171.182112][ T5928] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 171.193199][ T5928] usb 3-1: config 0 has no interface number 0 [ 171.203175][ T5928] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 171.213538][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.223251][ T5928] usb 3-1: Product: syz [ 171.227578][ T5928] usb 3-1: Manufacturer: syz [ 171.232569][ T5928] usb 3-1: SerialNumber: syz [ 171.241835][ T5928] usb 3-1: config 0 descriptor?? [ 171.252292][ T5928] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 171.464305][ T5928] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 171.480956][ T5928] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 171.849733][ T8370] program syz.3.1093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.885940][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 171.897067][ T5928] usb 3-1: USB disconnect, device number 10 [ 171.925958][ T5928] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 171.976196][ T5928] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 172.021855][ T5928] quatech2 3-1:0.51: device disconnected [ 172.534986][ T8383] loop6: detected capacity change from 1 to 524288000 [ 172.697327][ T5920] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 172.877037][ T5920] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 172.903934][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.919155][ T5892] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 172.929327][ T5920] usb 3-1: Product: syz [ 172.934503][ T5920] usb 3-1: Manufacturer: syz [ 172.939850][ T5920] usb 3-1: SerialNumber: syz [ 172.958176][ T5920] usb 3-1: config 0 descriptor?? [ 173.094814][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 173.101883][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 173.121092][ T5892] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 173.132853][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.142787][ T5892] usb 2-1: Product: syz [ 173.148556][ T5892] usb 2-1: Manufacturer: syz [ 173.155319][ T5892] usb 2-1: SerialNumber: syz [ 173.165389][ T5892] usb 2-1: config 0 descriptor?? [ 173.265121][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 173.275016][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 173.287611][ T9] usb 4-1: config 0 has no interface number 0 [ 173.303789][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 173.316711][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.327224][ T9] usb 4-1: Product: syz [ 173.333102][ T9] usb 4-1: Manufacturer: syz [ 173.338688][ T9] usb 4-1: SerialNumber: syz [ 173.349221][ T9] usb 4-1: config 0 descriptor?? [ 173.360152][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 173.384720][ T5920] usb 3-1: Firmware: major: 143, minor: 0, hardware type: ATUSB (0) [ 173.396914][ T5892] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 173.569771][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 173.589468][ T5920] usb 3-1: failed to fetch extended address, random address set [ 173.604442][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 173.679224][ T5920] usb 3-1: USB disconnect, device number 11 [ 173.989501][ T5892] gspca_sunplus: reg_w_riv err -71 [ 173.997237][ T5892] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 174.009180][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 174.021233][ T5834] usb 4-1: USB disconnect, device number 9 [ 174.027097][ T5892] usb 2-1: USB disconnect, device number 16 [ 174.068665][ T5834] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 174.105623][ T5834] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 174.130425][ T5834] quatech2 4-1:0.51: device disconnected [ 174.713433][ T8422] netlink: 'syz.2.1119': attribute type 22 has an invalid length. [ 174.755267][ T8422] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.1119'. [ 174.844832][ T8428] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1123'. [ 175.271406][ T8442] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1129'. [ 175.384674][ T29] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 175.395683][ T8445] evm: overlay not supported [ 175.544637][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 175.568080][ T29] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 175.584654][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.608162][ T29] usb 1-1: Product: syz [ 175.612487][ T29] usb 1-1: Manufacturer: syz [ 175.616416][ T8454] netlink: 'syz.3.1135': attribute type 22 has an invalid length. [ 175.635718][ T29] usb 1-1: SerialNumber: syz [ 175.639436][ T8454] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.1135'. [ 175.667246][ T29] usb 1-1: config 0 descriptor?? [ 175.925148][ T29] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 175.998525][ T8466] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1140'. [ 176.314292][ T8479] netlink: 'syz.1.1146': attribute type 22 has an invalid length. [ 176.327551][ T8479] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.1146'. [ 176.525417][ T29] gspca_sunplus: reg_w_riv err -71 [ 176.533192][ T29] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 176.551845][ T29] usb 1-1: USB disconnect, device number 10 [ 177.289214][ T8495] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1151'. [ 177.515860][ T8509] serio: Serial port ptm0 [ 177.931630][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 178.364122][ T8545] use of bytesused == 0 is deprecated and will be removed in the future, [ 178.374033][ T8545] use the actual size instead. [ 178.505134][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 178.677306][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 178.688531][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.710247][ T5892] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 178.755239][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.782501][ T5892] usb 3-1: config 0 descriptor?? [ 179.217002][ T5892] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 179.520540][ T8580] serio: Serial port ptm0 [ 179.554649][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.591836][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.599765][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.683468][ T5892] usb 3-1: USB disconnect, device number 12 [ 181.548064][ T8643] sctp: [Deprecated]: syz.3.1221 (pid 8643) Use of int in max_burst socket option. [ 181.548064][ T8643] Use struct sctp_assoc_value instead [ 181.753520][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.789625][ T8649] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.799752][ T8649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.260975][ T8671] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.300550][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.308875][ T8672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.445563][ T5834] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 183.621056][ T5834] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 183.648173][ T5834] usb 3-1: config 0 has no interface number 0 [ 183.679840][ T5834] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 183.699046][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.709136][ T5834] usb 3-1: Product: syz [ 183.713712][ T5834] usb 3-1: Manufacturer: syz [ 183.720112][ T5834] usb 3-1: SerialNumber: syz [ 183.736952][ T5834] usb 3-1: config 0 descriptor?? [ 183.831169][ T8735] netlink: 'syz.1.1267': attribute type 83 has an invalid length. [ 184.609665][ T5834] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 184.622513][ T5834] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 184.634101][ T5834] asix 3-1:0.251: probe with driver asix failed with error -71 [ 184.646756][ T5834] usb 3-1: USB disconnect, device number 13 [ 184.853741][ T8765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.404650][ T5834] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 185.591689][ T5834] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.613733][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.639431][ T5834] usb 4-1: config 0 descriptor?? [ 185.669815][ T5834] cp210x 4-1:0.0: cp210x converter detected [ 185.874679][ T5928] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 186.070678][ T5928] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 186.079987][ T5928] usb 1-1: config 0 has no interface number 0 [ 186.090958][ T5928] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 186.101372][ T5834] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 186.111109][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.120334][ T5928] usb 1-1: Product: syz [ 186.126110][ T5928] usb 1-1: Manufacturer: syz [ 186.131165][ T5928] usb 1-1: SerialNumber: syz [ 186.147896][ T5834] usb 4-1: cp210x converter now attached to ttyUSB0 [ 186.178119][ T5928] usb 1-1: config 0 descriptor?? [ 186.347742][ T5920] usb 4-1: USB disconnect, device number 10 [ 186.359282][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.377174][ T5920] cp210x 4-1:0.0: device disconnected [ 186.489219][ T8827] loop8: detected capacity change from 0 to 7 [ 186.502052][ T8827] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 186.514830][ T8827] loop8: partition table partially beyond EOD, truncated [ 186.527710][ T8827] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 186.542595][ T8827] loop8: p2 start 956478 is beyond EOD, truncated [ 186.584439][ T8830] sctp: [Deprecated]: syz.1.1307 (pid 8830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.584439][ T8830] Use struct sctp_sack_info instead [ 186.660061][ T6199] udevd[6199]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 187.010501][ T8845] kvm: apic: phys broadcast and lowest prio [ 187.028834][ T5928] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 187.053791][ T5928] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 187.084707][ T5928] asix 1-1:0.251: probe with driver asix failed with error -71 [ 187.103750][ T5928] usb 1-1: USB disconnect, device number 11 [ 187.740427][ T8878] kvm: apic: phys broadcast and lowest prio [ 187.933781][ T8886] kvm: kvm [8884]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 187.996701][ T8891] sctp: [Deprecated]: syz.3.1335 (pid 8891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.996701][ T8891] Use struct sctp_sack_info instead [ 188.324831][ T5920] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 188.358743][ T8909] kvm: apic: phys broadcast and lowest prio [ 188.437793][ T8913] sctp: [Deprecated]: syz.0.1347 (pid 8913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.437793][ T8913] Use struct sctp_sack_info instead [ 188.475157][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 188.497969][ T5920] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 188.517264][ T5920] usb 2-1: config 0 has no interface number 0 [ 188.536139][ T5920] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 188.546171][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.555034][ T5920] usb 2-1: Product: syz [ 188.560254][ T5920] usb 2-1: Manufacturer: syz [ 188.571807][ T5920] usb 2-1: SerialNumber: syz [ 188.574758][ T8917] kvm: kvm [8916]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 188.591608][ T5920] usb 2-1: config 0 descriptor?? [ 188.648329][ T9] usb 3-1: config index 0 descriptor too short (expected 64706, got 72) [ 188.663930][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 188.684648][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.703492][ T9] usb 3-1: Product: syz [ 188.708580][ T9] usb 3-1: Manufacturer: syz [ 188.713962][ T9] usb 3-1: SerialNumber: syz [ 188.746704][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 188.799076][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 189.043116][ T5928] usb 3-1: USB disconnect, device number 14 [ 189.079540][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1356'. [ 189.327433][ T8943] kvm: kvm [8941]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 189.442086][ T5920] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 189.459747][ T5920] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 189.471680][ T5920] asix 2-1:0.251: probe with driver asix failed with error -71 [ 189.489272][ T5920] usb 2-1: USB disconnect, device number 17 [ 189.924969][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 189.942443][ T10] ath9k_htc: Failed to initialize the device [ 190.037004][ T5928] usb 3-1: ath9k_htc: USB layer deinitialized [ 190.250631][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'. [ 190.915379][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'. [ 191.883329][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'. [ 191.894721][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1413'. [ 191.906269][ T9060] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1413'. [ 191.917321][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1413'. [ 191.927726][ T9060] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1413'. [ 192.064769][ T5834] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 192.227428][ T5834] usb 1-1: config index 0 descriptor too short (expected 64706, got 72) [ 192.240047][ T5834] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 192.252733][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.272701][ T5834] usb 1-1: Product: syz [ 192.284685][ T5834] usb 1-1: Manufacturer: syz [ 192.289834][ T5834] usb 1-1: SerialNumber: syz [ 192.311728][ T5834] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 192.333814][ T5928] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 192.626115][ T5834] usb 1-1: USB disconnect, device number 12 [ 192.870972][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 192.885733][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 193.437320][ T5928] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 193.453483][ T5928] ath9k_htc: Failed to initialize the device [ 193.486142][ T5834] usb 1-1: ath9k_htc: USB layer deinitialized [ 193.864662][ T5928] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 194.024691][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 194.042799][ T5928] usb 4-1: config index 0 descriptor too short (expected 65315, got 36) [ 194.059945][ T5928] usb 4-1: config 0 has too many interfaces: 239, using maximum allowed: 32 [ 194.071172][ T5928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 239 [ 194.087798][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.109382][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.121127][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 194.132606][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.149796][ T5928] usb 4-1: config 0 descriptor?? [ 194.328152][ T9164] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 194.340927][ T9164] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 194.349450][ T9164] CPU: 0 UID: 0 PID: 9164 Comm: syz.1.1463 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.360569][ T9164] Tainted: [L]=SOFTLOCKUP [ 194.365099][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 194.377932][ T9164] RIP: 0010:__queue_work+0xa2/0xf90 [ 194.384926][ T9164] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 194.411734][ T9164] RSP: 0018:ffffc9000399f438 EFLAGS: 00010002 [ 194.418547][ T9164] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 194.426921][ T9164] RDX: ffffc9000bcb3000 RSI: 00000000000003e0 RDI: 00000000000003e1 [ 194.435399][ T9164] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 194.443697][ T9164] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 194.452063][ T9164] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 194.460761][ T9164] FS: 00007f0ce99f26c0(0000) GS:ffff888125063000(0000) knlGS:0000000000000000 [ 194.470628][ T9164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.479068][ T9164] CR2: 000000110c2e8d03 CR3: 0000000078770000 CR4: 00000000003526f0 [ 194.487467][ T9164] Call Trace: [ 194.490873][ T9164] [ 194.494150][ T9164] ? __asan_memcpy+0x40/0x70 [ 194.500359][ T9164] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 194.508393][ T9164] queue_work_on+0x106/0x1d0 [ 194.514788][ T9164] puts_queue+0xa3/0xe0 [ 194.520914][ T9164] ? __pfx_puts_queue+0x10/0x10 [ 194.527163][ T9164] k_pad+0x781/0xa90 [ 194.531577][ T9164] ? lock_acquire+0x106/0x330 [ 194.537028][ T9164] ? atomic_notifier_call_chain+0x26/0x180 [ 194.544469][ T9164] ? __pfx_k_pad+0x10/0x10 [ 194.551081][ T9164] ? atomic_notifier_call_chain+0x26/0x180 [ 194.558713][ T9164] ? atomic_notifier_call_chain+0x26/0x180 [ 194.565869][ T9164] kbd_event+0x2ec1/0x40d0 [ 194.571305][ T9164] ? kernel_fpu_end+0x4f/0x80 [ 194.577763][ T9164] ? blake2s_compress+0x1e17/0x1eb0 [ 194.584599][ T9164] ? __pfx_kbd_event+0x10/0x10 [ 194.590192][ T9164] ? finish_task_switch+0x240/0x920 [ 194.596795][ T9164] ? lockdep_hardirqs_on+0x7a/0x110 [ 194.604132][ T9164] ? __lock_acquire+0x6b5/0x2cf0 [ 194.610106][ T9164] ? __lock_acquire+0x6b5/0x2cf0 [ 194.615455][ T9164] ? __pfx_blake2s_compress+0x10/0x10 [ 194.621951][ T9164] ? __lock_acquire+0x6b5/0x2cf0 [ 194.627579][ T9164] ? __lock_acquire+0x6b5/0x2cf0 [ 194.633165][ T9164] ? __lock_acquire+0x6b5/0x2cf0 [ 194.639173][ T9164] ? input_pass_values+0x8d/0x890 [ 194.646150][ T9164] ? lock_acquire+0x106/0x330 [ 194.653431][ T9164] ? input_pass_values+0x8d/0x890 [ 194.659982][ T9164] input_handle_events_default+0xd4/0x1a0 [ 194.668122][ T9164] ? input_pass_values+0x8d/0x890 [ 194.674065][ T9164] input_pass_values+0x288/0x890 [ 194.679354][ T9164] ? input_handle_event+0x70c/0xf30 [ 194.685740][ T9164] input_event_dispose+0x330/0x6b0 [ 194.691770][ T9164] input_inject_event+0x1dd/0x340 [ 194.696961][ T9164] ? input_inject_event+0xb6/0x340 [ 194.702470][ T9164] evdev_write+0x325/0x4c0 [ 194.706964][ T9164] ? __lock_acquire+0x6b5/0x2cf0 [ 194.712019][ T9164] ? __pfx_evdev_write+0x10/0x10 [ 194.717702][ T9164] ? bpf_lsm_file_permission+0x9/0x20 [ 194.724230][ T9164] ? security_file_permission+0x75/0x260 [ 194.731585][ T9164] ? rw_verify_area+0x255/0x4d0 [ 194.738499][ T9164] ? __pfx_evdev_write+0x10/0x10 [ 194.745934][ T9164] vfs_write+0x29a/0xb90 [ 194.751712][ T9164] ? __pfx_vfs_write+0x10/0x10 [ 194.757310][ T9164] ? __fget_files+0x2a/0x420 [ 194.762643][ T9164] ? __fget_files+0x2a/0x420 [ 194.768363][ T9164] ? __fget_files+0x3a0/0x420 [ 194.774031][ T9164] ? __fget_files+0x2a/0x420 [ 194.779036][ T9164] ksys_write+0x150/0x270 [ 194.783585][ T9164] ? __pfx_ksys_write+0x10/0x10 [ 194.788487][ T9164] do_syscall_64+0xe2/0xf80 [ 194.793904][ T9164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.800578][ T9164] ? trace_irq_disable+0x37/0x100 [ 194.806176][ T9164] ? clear_bhb_loop+0x40/0x90 [ 194.810990][ T9164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.817535][ T9164] RIP: 0033:0x7f0ce8b9aeb9 [ 194.822512][ T9164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.845275][ T9164] RSP: 002b:00007f0ce99f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.854704][ T9164] RAX: ffffffffffffffda RBX: 00007f0ce8e15fa0 RCX: 00007f0ce8b9aeb9 [ 194.863372][ T9164] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 194.871490][ T9164] RBP: 00007f0ce8c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 194.879901][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.888722][ T9164] R13: 00007f0ce8e16038 R14: 00007f0ce8e15fa0 R15: 00007ffeb5c3ebe8 [ 194.897784][ T9164] [ 194.900917][ T9164] Modules linked in: [ 194.904957][ T9164] ---[ end trace 0000000000000000 ]--- [ 194.910424][ T9164] RIP: 0010:__queue_work+0xa2/0xf90 [ 194.916177][ T9164] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 194.939676][ T9164] RSP: 0018:ffffc9000399f438 EFLAGS: 00010002 [ 194.947272][ T9164] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 194.955799][ T9164] RDX: ffffc9000bcb3000 RSI: 00000000000003e0 RDI: 00000000000003e1 [ 194.964163][ T9164] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 194.972776][ T9164] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 194.980993][ T9164] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 194.989182][ T9164] FS: 00007f0ce99f26c0(0000) GS:ffff888125063000(0000) knlGS:0000000000000000 [ 194.998452][ T9164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.006035][ T9164] CR2: 000000110c2e8d03 CR3: 0000000078770000 CR4: 00000000003526f0 [ 195.016285][ T9164] Kernel panic - not syncing: Fatal exception [ 195.024948][ T9164] Kernel Offset: disabled [ 195.029804][ T9164] Rebooting in 86400 seconds..