last executing test programs: 4.466860034s ago: executing program 4 (id=6586): mknod(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4.303167293s ago: executing program 4 (id=6589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 4.120332365s ago: executing program 4 (id=6590): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="400b04"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="40150f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.490444377s ago: executing program 2 (id=6600): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 2.216198784s ago: executing program 2 (id=6601): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfd, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x34}}, 0x20000080) 2.124740455s ago: executing program 2 (id=6602): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0003000206030000000000000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 2.074301895s ago: executing program 1 (id=6603): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x45, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x102}]}, 0x34}}, 0x0) 1.915774463s ago: executing program 1 (id=6605): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x80008000f29, 0x8) close_range(r0, r1, 0x0) 1.899373742s ago: executing program 2 (id=6606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000071, 0x0, 0x402ff}]}) 1.866838828s ago: executing program 3 (id=6608): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x6e, 0x0, 0x0) close(r0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) 1.794702184s ago: executing program 1 (id=6609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4b564d07}]}) 1.727254513s ago: executing program 3 (id=6610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000380)={0x20001, 0x0, {[0x8, 0x4, 0x8, 0x2, 0x6, 0x800, 0x8, 0x2]}}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000001c0)={[0xdddd1000, 0x6000, 0x2, 0x1000], 0x2, 0x18}) 1.573693002s ago: executing program 2 (id=6612): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 1.520875734s ago: executing program 1 (id=6613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.454077336s ago: executing program 3 (id=6614): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0x10, 0x9, 0x6, 0x3, 0x6}, 0x14) 1.379737489s ago: executing program 1 (id=6615): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 1.296512922s ago: executing program 0 (id=6616): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000780)=""/192, 0xc0) setsockopt$sock_int(r1, 0xffff, 0x1004, &(0x7f0000001280)=0x624, 0x4) write(r0, &(0x7f0000000100)="c4bdae042ef85326d9906c0659957ff0b1303d6871819cc4ea148202c82d3bc22bca656795fd2275971be3280500000000000000dd5c58a3b564652400b68f0382b0eec4764e7dc6767a0daa28785f3cd8d28f65c4a732d1baf64aaa3f529fc2a756fc6c77c9d61638202d32fb67e045fe0e6899d6c19415b31c8c2ee3d84032692b09d36f3c93e53af0e6d9c80946fd9c", 0x91) close(r0) 1.255593159s ago: executing program 1 (id=6617): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x20703) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x2, 0x2, 0x7}) 1.102931765s ago: executing program 0 (id=6618): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.062610259s ago: executing program 2 (id=6619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 999.665472ms ago: executing program 4 (id=6620): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x203f76, 0x100, 0xfffffffe, 0x1cf}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) 918.207478ms ago: executing program 0 (id=6621): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a74c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 690.732601ms ago: executing program 0 (id=6622): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_io_uring_setup(0x7e76, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0xfffffff8}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010"], 0x1010}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x2, 0x9, 0x0, 0x0) 668.934785ms ago: executing program 4 (id=6623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003181a08, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 348.999598ms ago: executing program 0 (id=6624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000380)={0x20001, 0x0, {[0x8, 0x4, 0x8, 0x2, 0x6, 0x800, 0x8, 0x2]}}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000001c0)={[0xdddd1000, 0x6000, 0x2, 0x1000], 0x2, 0x18}) 348.789838ms ago: executing program 3 (id=6625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffe, 0xfffffffc, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0) 229.584201ms ago: executing program 3 (id=6626): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 210.047283ms ago: executing program 4 (id=6627): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 16.804325ms ago: executing program 3 (id=6628): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x1, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x2, {{0xa, 0x0, 0x0, @mcast1, 0xb}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe57}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 0s ago: executing program 0 (id=6629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {0x1}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3e7}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x4}]]}, 0x60}}, 0x0) kernel console output (not intermixed with test programs): T30] audit: type=1326 audit(1773740450.364:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17475 comm="syz.1.5154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 460.504053][ T1213] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 460.515098][ T1213] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 460.524616][ T1213] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 460.536478][ T1213] usb 1-1: config 220 has no interface number 2 [ 460.544512][ T1213] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 460.558803][ T1213] usb 1-1: config 220 interface 0 has no altsetting 0 [ 460.565875][ T1213] usb 1-1: config 220 interface 76 has no altsetting 0 [ 460.573474][ T1213] usb 1-1: config 220 interface 1 has no altsetting 0 [ 460.586149][ T1213] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 460.595449][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.611430][ T1213] usb 1-1: Product: syz [ 460.626962][ T1213] usb 1-1: Manufacturer: syz [ 460.631596][ T1213] usb 1-1: SerialNumber: syz [ 460.825240][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5162'. [ 460.873230][ T1213] uvcvideo 1-1:220.1: Unknown video format 047d4302-0000-0000-0000-00a5e2000004 [ 460.887356][ T1213] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 460.904969][ T1213] uvcvideo 1-1:220.0: No valid video chain found. [ 460.911910][ T1213] usb 1-1: selecting invalid altsetting 0 [ 460.912167][T17501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5164'. [ 460.932108][T17501] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5164'. [ 460.941763][T17501] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5164'. [ 460.964340][ T1213] usb 1-1: selecting invalid altsetting 0 [ 460.970130][ T1213] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 460.999933][ T1213] usb 1-1: USB disconnect, device number 53 [ 461.802442][ T1213] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 461.974626][ T1213] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 461.988348][ T1213] usb 1-1: config 0 has no interface number 0 [ 462.011271][ T1213] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 462.031226][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.063091][ T1213] usb 1-1: Product: syz [ 462.067303][ T1213] usb 1-1: Manufacturer: syz [ 462.071921][ T1213] usb 1-1: SerialNumber: syz [ 462.104186][ T1213] usb 1-1: config 0 descriptor?? [ 462.333509][ T1213] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 462.365336][ T1213] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 462.413501][ T1213] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 462.421587][ T1213] usb 1-1: media controller created [ 462.458759][ T1213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.973256][ T8741] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 463.144297][ T8741] usb 5-1: Using ep0 maxpacket: 32 [ 463.151403][ T8741] usb 5-1: config index 0 descriptor too short (expected 164, got 36) [ 463.164137][ T8741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.176231][ T8741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.186352][ T8741] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 463.195685][ T8741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.209775][ T8741] usb 5-1: config 0 descriptor?? [ 463.452532][ T5891] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 463.543133][ T1213] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 463.549540][T17527] usb 1-1: dvb_usb_ec168: I2C read not implemented [ 463.605188][ T1213] usb 1-1: USB disconnect, device number 54 [ 463.614292][ T5940] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 463.622062][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 463.639755][ T5891] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 463.649244][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.658359][ T5891] usb 3-1: Product: syz [ 463.662778][ T5891] usb 3-1: Manufacturer: syz [ 463.670468][ T5891] usb 3-1: SerialNumber: syz [ 463.682613][ T8741] logitech 0003:046D:C29C.003E: unknown main item tag 0x0 [ 463.710304][ T8741] logitech 0003:046D:C29C.003E: unknown main item tag 0x0 [ 463.730546][ T8741] logitech 0003:046D:C29C.003E: unknown main item tag 0x0 [ 463.745059][ T8741] logitech 0003:046D:C29C.003E: unknown main item tag 0x0 [ 463.753518][ T8741] logitech 0003:046D:C29C.003E: unknown main item tag 0x0 [ 463.771308][ T8741] logitech 0003:046D:C29C.003E: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 463.793185][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 463.810531][ T5940] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.835489][ T5940] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.841185][ T8741] logitech 0003:046D:C29C.003E: no inputs found [ 463.866793][ T5940] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 463.867523][T17593] program syz.1.5206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.896621][ T8741] usb 5-1: USB disconnect, device number 56 [ 463.900357][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 463.927112][T17591] fido_id[17591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 463.941549][ T5940] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 463.951688][ T5891] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 463.971140][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.990390][ T5891] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 464.004741][ T5940] usb 4-1: config 0 descriptor?? [ 464.015527][ T5891] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 464.027620][ T5891] usb 3-1: media controller created [ 464.049345][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.282916][ T5891] zl10353_read_register: readreg error (reg=127, ret==-110) [ 464.351227][ T5891] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 464.365102][ T5891] usb 3-1: USB disconnect, device number 55 [ 464.377985][ T5830] udevd[5830]: setting mode of /dev/bus/usb/003/055 to 020664 failed: No such file or directory [ 464.412905][ T5830] udevd[5830]: setting owner of /dev/bus/usb/003/055 to uid=0, gid=0 failed: No such file or directory [ 464.475235][ T5940] hid (null): nested delimiters [ 464.562183][T17610] netlink: 'syz.0.5213': attribute type 8 has an invalid length. [ 464.572081][T17610] netem: change failed [ 464.682177][ T5891] usb 4-1: USB disconnect, device number 70 [ 464.882477][ T5940] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 465.052821][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 465.064159][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.085542][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.112543][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 465.135772][ T5940] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 465.152500][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.173581][ T5940] usb 5-1: config 0 descriptor?? [ 465.453696][ T796] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 465.600529][ T5940] input: HID 0955:7214 Haptics as /devices/virtual/input/input71 [ 465.626685][ T796] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 465.634456][ T8741] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 465.664072][ T796] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 465.676922][ T796] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 465.695112][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 465.697902][ T5940] shield 0003:0955:7214.0040: Registered Thunderstrike controller [ 465.706098][ T796] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 465.723112][ T796] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 465.729370][ T5940] shield 0003:0955:7214.0040: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 465.744043][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 465.754353][ T796] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 465.764574][ T796] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 465.782658][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 465.790703][ T796] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 465.801464][ T796] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 465.814192][ T8741] usb 4-1: Using ep0 maxpacket: 32 [ 465.824201][ T1213] shield 0003:0955:7214.0040: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 465.835240][ T8741] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 465.835285][ T8741] usb 4-1: config 0 has no interface number 0 [ 465.835341][ T8741] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 465.835365][ T8741] usb 4-1: config 0 interface 89 has no altsetting 0 [ 465.842700][ T8741] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 465.863979][ T5940] usb 5-1: USB disconnect, device number 57 [ 465.876993][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 465.891675][ T1213] shield 0003:0955:7214.0040: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 465.905653][ T8741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.920638][ T796] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 465.930546][ T796] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 465.940345][ T1213] shield 0003:0955:7214.0040: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 465.951601][ T8741] usb 4-1: Product: syz [ 465.963140][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 465.970548][ T8741] usb 4-1: Manufacturer: syz [ 465.976270][ T8741] usb 4-1: SerialNumber: syz [ 465.983511][ T796] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 465.993260][ T796] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.012641][ T1213] shield 0003:0955:7214.0040: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 466.027281][ T8741] usb 4-1: config 0 descriptor?? [ 466.040255][ T8741] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 466.054164][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 466.071113][ T8741] em28xx 4-1:0.89: Video interface 89 found: [ 466.079740][ T796] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.091597][ T796] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.104474][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 466.112874][ T796] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.121823][ T796] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.192468][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 466.202153][ T796] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 466.211726][ T796] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 466.220466][ T796] usb 3-1: Product: syz [ 466.224878][ T796] usb 3-1: Manufacturer: syz [ 466.229560][ T796] usb 3-1: SerialNumber: syz [ 466.237682][ T796] usb 3-1: config 0 descriptor?? [ 466.257259][ T796] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 466.596203][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 466.605815][ T796] usb 3-1: USB disconnect, device number 56 [ 466.621280][ T796] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 466.653708][ T8741] em28xx 4-1:0.89: chip ID is em2750 [ 466.884727][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5240'. [ 466.929845][ T8741] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 466.950806][ T8741] em28xx 4-1:0.89: board has no eeprom [ 467.022467][ T8741] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 467.042485][ T8741] em28xx 4-1:0.89: analog set to bulk mode. [ 467.052725][ T796] em28xx 4-1:0.89: Registering V4L2 extension [ 467.079417][ T8741] usb 4-1: USB disconnect, device number 71 [ 467.105317][ T8741] em28xx 4-1:0.89: Disconnecting em28xx [ 467.158560][ T796] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 467.178765][ T796] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 467.187629][T17678] sctp: [Deprecated]: syz.1.5243 (pid 17678) Use of int in maxseg socket option. [ 467.187629][T17678] Use struct sctp_assoc_value instead [ 467.209278][ T796] em28xx 4-1:0.89: No AC97 audio processor [ 467.232733][ T796] usb 4-1: Decoder not found [ 467.252396][ T796] em28xx 4-1:0.89: failed to create media graph [ 467.258734][ T796] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 467.285515][ T796] em28xx 4-1:0.89: Registering snapshot button... [ 467.307441][ T796] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input72 [ 467.330784][ T796] em28xx 4-1:0.89: Remote control support is not available for this card. [ 467.349653][ T8741] em28xx 4-1:0.89: Closing input extension [ 467.359743][ T8741] em28xx 4-1:0.89: Deregistering snapshot button [ 467.359751][T17680] tap0: tun_chr_ioctl cmd 2147767507 [ 467.433414][ T8741] em28xx 4-1:0.89: Freeing device [ 468.321069][ T796] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 468.502534][ T796] usb 1-1: Using ep0 maxpacket: 16 [ 468.544106][ T796] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.562497][ T796] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.592790][ T796] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 468.616190][ T796] usb 1-1: config 0 interface 0 has no altsetting 0 [ 468.632499][ T796] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 468.651823][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.697119][ T796] usb 1-1: config 0 descriptor?? [ 469.315416][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 469.315433][ T30] audit: type=1326 audit(1773740459.504:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.4.5281" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f6c code=0x0 [ 469.382547][ T796] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 469.402449][ T8741] usb 1-1: USB disconnect, device number 55 [ 469.553987][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.572583][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.597548][ T796] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 469.612997][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.632154][ T796] usb 3-1: config 0 descriptor?? [ 469.943528][ T1213] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 470.053002][ T796] arvo 0003:1E7D:30D4.0042: unknown main item tag 0x0 [ 470.071627][ T796] arvo 0003:1E7D:30D4.0042: unknown main item tag 0x0 [ 470.079898][ T796] arvo 0003:1E7D:30D4.0042: unknown main item tag 0x0 [ 470.088054][ T796] arvo 0003:1E7D:30D4.0042: unknown main item tag 0x0 [ 470.098507][ T796] arvo 0003:1E7D:30D4.0042: unknown main item tag 0x0 [ 470.108980][ T796] arvo 0003:1E7D:30D4.0042: unknown main item tag 0x0 [ 470.116107][ T796] arvo 0003:1E7D:30D4.0042: unknown main item tag 0x0 [ 470.131960][ T796] arvo 0003:1E7D:30D4.0042: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 470.136633][ T1213] usb 4-1: Using ep0 maxpacket: 32 [ 470.167473][ T1213] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 470.184239][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.204617][ T1213] usb 4-1: Product: syz [ 470.215940][ T1213] usb 4-1: Manufacturer: syz [ 470.226967][ T1213] usb 4-1: SerialNumber: syz [ 470.246832][ T1213] usb 4-1: config 0 descriptor?? [ 470.427355][T17786] netlink: 'syz.4.5293': attribute type 5 has an invalid length. [ 470.435333][T17786] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5293'. [ 470.457138][ T5940] usb 3-1: USB disconnect, device number 57 [ 470.672512][ T1213] airspy 4-1:0.0: Board ID: 00 [ 470.678053][ T1213] airspy 4-1:0.0: Firmware version: [ 471.081615][ T1213] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 471.107787][ T1213] airspy 4-1:0.0: Registered as swradio24 [ 471.113863][ T1213] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 471.130865][ T1213] usb 4-1: USB disconnect, device number 72 [ 471.188290][ T30] audit: type=1326 audit(1773740461.374:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17811 comm="syz.4.5304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f6c code=0x7ffc0000 [ 471.233653][ T30] audit: type=1326 audit(1773740461.384:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17811 comm="syz.4.5304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f6c code=0x7ffc0000 [ 471.286915][ T30] audit: type=1326 audit(1773740461.394:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17811 comm="syz.4.5304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7ff8f6c code=0x7ffc0000 [ 471.336262][ T5940] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 471.344595][ T30] audit: type=1326 audit(1773740461.394:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17811 comm="syz.4.5304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f6c code=0x7ffc0000 [ 471.369720][ T30] audit: type=1326 audit(1773740461.394:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17811 comm="syz.4.5304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f6c code=0x7ffc0000 [ 471.395507][ T30] audit: type=1326 audit(1773740461.414:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17811 comm="syz.4.5304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7ff8f6c code=0x7ffc0000 [ 471.437694][ T30] audit: type=1326 audit(1773740461.414:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17811 comm="syz.4.5304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f6c code=0x7ffc0000 [ 471.474069][ T30] audit: type=1326 audit(1773740461.414:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17811 comm="syz.4.5304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7ff8f6c code=0x7ffc0000 [ 471.531271][ T30] audit: type=1326 audit(1773740461.414:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17811 comm="syz.4.5304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8f6c code=0x7ffc0000 [ 471.563159][ T5940] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 471.588189][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 471.619450][ T5940] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 471.643555][ T5940] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 471.652810][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.674875][ T5940] usb 3-1: Product: syz [ 471.684719][ T5940] usb 3-1: Manufacturer: syz [ 471.698387][ T5940] usb 3-1: SerialNumber: syz [ 471.722921][ T5940] usb 3-1: config 0 descriptor?? [ 471.737916][T17807] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 471.748324][T17807] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 471.777247][ T5940] usb 3-1: ucan: probing device on interface #0 [ 472.272433][ T1213] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 472.388905][ T5940] ucan 3-1:0.0: probe with driver ucan failed with error -22 [ 472.451597][ T1213] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 472.460370][ T1213] usb 2-1: config 0 has no interface number 0 [ 472.473707][ T1213] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 472.499915][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.523603][ T1213] usb 2-1: Product: syz [ 472.527926][ T1213] usb 2-1: Manufacturer: syz [ 472.533056][ T1213] usb 2-1: SerialNumber: syz [ 472.546324][ T1213] usb 2-1: config 0 descriptor?? [ 472.629261][ T5940] usb 3-1: USB disconnect, device number 58 [ 472.637082][T17850] netlink: 'syz.0.5322': attribute type 1 has an invalid length. [ 472.652740][T17850] netlink: 'syz.0.5322': attribute type 2 has an invalid length. [ 472.671014][T17850] netlink: 'syz.0.5322': attribute type 1 has an invalid length. [ 472.769263][ T1213] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 472.789137][ T1213] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 472.825192][ T1213] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 472.852659][ T1213] usb 2-1: media controller created [ 472.881603][ T1213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.983757][T17858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5325'. [ 473.036092][T17858] ip6gre1: entered promiscuous mode [ 473.041527][T17858] ip6gre1: entered allmulticast mode [ 473.052263][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.066857][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.075843][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.357440][T17872] netlink: 'syz.4.5332': attribute type 1 has an invalid length. [ 473.392786][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.612676][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.692440][ T796] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 473.735037][T17889] Invalid logical block size (536870915) [ 473.865017][ T796] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 473.882796][ T796] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.897158][ T796] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 473.907080][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.964028][T17897] tmpfs: Unknown parameter 'fd' [ 474.030080][ T1213] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 474.036558][T17836] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 474.132242][ T1213] usb 2-1: USB disconnect, device number 53 [ 474.144913][ T796] usb 3-1: GET_CAPABILITIES returned 0 [ 474.172183][ T796] usbtmc 3-1:16.0: can't read capabilities [ 474.360109][ T5891] usb 3-1: USB disconnect, device number 59 [ 474.638711][T17925] netlink: 'syz.0.5358': attribute type 2 has an invalid length. [ 474.640072][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5357'. [ 474.664555][T17925] !: entered promiscuous mode [ 474.688132][T17925] netlink: 'syz.0.5358': attribute type 2 has an invalid length. [ 474.803053][ T5891] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 474.988506][ T5891] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 475.004436][ T1213] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 475.022587][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.035049][ T5891] usb 4-1: Product: syz [ 475.039268][ T5891] usb 4-1: Manufacturer: syz [ 475.055107][ T5891] usb 4-1: SerialNumber: syz [ 475.073093][ T5891] usb 4-1: config 0 descriptor?? [ 475.091373][ T5891] ch341 4-1:0.0: ch341-uart converter detected [ 475.175687][ T1213] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 475.192473][ T1213] usb 2-1: config 1 has no interface number 0 [ 475.214192][ T1213] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 475.244733][ T1213] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 475.257227][ T1213] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 475.281489][ T1213] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 475.292001][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.300444][ T1213] usb 2-1: Product: syz [ 475.306593][ T1213] usb 2-1: Manufacturer: syz [ 475.311252][ T1213] usb 2-1: SerialNumber: syz [ 475.327999][ T1213] usb 2-1: Expected 3 endpoints, found: 0 [ 475.386996][T17949] program syz.4.5368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.566169][ T1213] usb 2-1: USB disconnect, device number 54 [ 475.692036][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5373'. [ 475.938888][ T5891] usb 4-1: failed to send control message: -71 [ 475.953388][ T5891] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 475.971350][ T5891] usb 4-1: USB disconnect, device number 73 [ 475.988812][ T5891] ch341 4-1:0.0: device disconnected [ 476.012224][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5377'. [ 477.392503][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.882457][ T1213] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 478.056132][ T1213] usb 2-1: Using ep0 maxpacket: 8 [ 478.064574][ T1213] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 478.076456][ T1213] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.089244][ T1213] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.099914][ T1213] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.116129][ T1213] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.138761][ T1213] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.172570][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.390812][T18067] ALSA: mixer_oss: invalid OSS volume 'RgECLEV' [ 478.411663][ T1213] usb 2-1: GET_CAPABILITIES returned 0 [ 478.422790][ T1213] usbtmc 2-1:16.0: can't read capabilities [ 478.437198][T18067] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 478.591095][T18076] macsec0: entered promiscuous mode [ 478.617314][T18045] usb 2-1: usbtmc_ioctl_clear_in_halt returned -32 [ 478.625199][T18076] macsec0: left promiscuous mode [ 478.630173][ T1213] usb 2-1: USB disconnect, device number 55 [ 479.002870][ T796] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 479.032461][ T8741] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 479.063690][T18074] program syz.0.5425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.154261][ T796] usb 3-1: config 0 has no interfaces? [ 479.159816][ T796] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 479.192411][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.202085][ T8741] usb 4-1: Using ep0 maxpacket: 16 [ 479.224414][ T796] usb 3-1: config 0 descriptor?? [ 479.236626][ T8741] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 479.247607][ T8741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.269624][ T8741] usb 4-1: Product: syz [ 479.278393][ T8741] usb 4-1: Manufacturer: syz [ 479.293092][ T8741] usb 4-1: SerialNumber: syz [ 479.304604][ T8741] usb 4-1: config 0 descriptor?? [ 479.315674][ T8741] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 479.353515][T18094] netlink: 'syz.4.5433': attribute type 1 has an invalid length. [ 479.361417][T18094] netlink: 'syz.4.5433': attribute type 7 has an invalid length. [ 479.369483][T18094] netlink: 'syz.4.5433': attribute type 8 has an invalid length. [ 479.391519][T18094] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5433'. [ 479.448363][ T8741] usb 3-1: USB disconnect, device number 60 [ 479.540630][ T1213] usb 4-1: USB disconnect, device number 74 [ 479.580387][T18100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5436'. [ 479.776443][T18114] loop7: detected capacity change from 0 to 7 [ 479.785943][ C0] blk_print_req_error: 11 callbacks suppressed [ 479.785963][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.801901][ C0] buffer_io_error: 10 callbacks suppressed [ 479.801922][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 479.819562][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.829208][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 479.838517][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.848152][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 479.860014][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.869674][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 479.906072][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.915752][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 479.924342][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.934013][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 479.948642][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.958327][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 479.966244][ T7641] ldm_validate_partition_table(): Disk read failed. [ 479.978112][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 479.987789][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 479.997705][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.007377][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 480.017813][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.027476][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 480.065102][ T7641] Dev loop7: unable to read RDB block 0 [ 480.095047][ T7641] loop7: unable to read partition table [ 480.100998][ T7641] loop7: partition table beyond EOD, truncated [ 480.119892][T18114] ldm_validate_partition_table(): Disk read failed. [ 480.134660][T18114] Dev loop7: unable to read RDB block 0 [ 480.153630][T18114] loop7: unable to read partition table [ 480.159544][T18114] loop7: partition table beyond EOD, truncated [ 480.192537][T18114] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 481.112940][T18158] pim6reg: tun_chr_ioctl cmd 1074025677 [ 481.118646][T18158] pim6reg: linktype set to 6 [ 481.352620][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5467'. [ 481.393904][T18169] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5467'. [ 481.559673][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5473'. [ 481.573107][T18181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5473'. [ 481.582093][T18181] netlink: 'syz.2.5473': attribute type 13 has an invalid length. [ 481.862657][ T1213] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 481.904742][T18198] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5481'. [ 482.032514][ T1213] usb 5-1: Using ep0 maxpacket: 32 [ 482.040889][ T1213] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 482.063092][ T1213] usb 5-1: config 0 has no interface number 0 [ 482.075684][ T1213] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 482.095355][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.115633][ T1213] usb 5-1: Product: syz [ 482.119834][ T1213] usb 5-1: Manufacturer: syz [ 482.133572][ T1213] usb 5-1: SerialNumber: syz [ 482.146287][ T1213] usb 5-1: config 0 descriptor?? [ 482.155075][ T1213] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 482.228940][T18213] program syz.3.5488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.307097][T18216] program syz.3.5488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.317507][ T5891] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 482.365990][ T1213] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 482.395284][ T1213] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 482.477991][ T5891] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 482.496606][ T5891] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 482.517334][ T5891] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 482.525059][T18223] program syz.3.5491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.552193][ T5891] usb 3-1: config 220 has no interface number 2 [ 482.561571][ T5891] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 482.604982][ T5891] usb 3-1: config 220 interface 0 has no altsetting 0 [ 482.621551][ T5891] usb 3-1: config 220 interface 76 has no altsetting 0 [ 482.631918][ T5891] usb 3-1: config 220 interface 1 has no altsetting 0 [ 482.642159][ T5891] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 482.651552][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.661677][ T5891] usb 3-1: Product: syz [ 482.668728][ T5891] usb 3-1: Manufacturer: syz [ 482.673783][ T5891] usb 3-1: SerialNumber: syz [ 482.814373][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 482.822860][ T1213] usb 5-1: USB disconnect, device number 58 [ 482.841636][ T1213] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 482.867897][ T1213] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 482.904645][ T1213] quatech2 5-1:0.51: device disconnected [ 482.929810][ T5891] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 482.948115][ T5891] uvcvideo 3-1:220.0: No valid video chain found. [ 482.962775][ T5891] usb 3-1: selecting invalid altsetting 0 [ 482.987492][ T5891] usb 3-1: selecting invalid altsetting 0 [ 483.003184][ T5891] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 483.033696][ T5891] usb 3-1: USB disconnect, device number 61 [ 483.181519][T18239] loop9: detected capacity change from 0 to 7 [ 483.195412][ T7641] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 483.200952][ T7641] loop9: partition table partially beyond EOD, truncated [ 483.208659][ T7641] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 483.234319][T18239] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 483.239895][T18239] loop9: partition table partially beyond EOD, truncated [ 483.247780][T18239] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 483.308595][ T7641] udevd[7641]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 483.356418][ T7641] udevd[7641]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 485.272558][ T1213] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 485.479095][ T1213] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 485.507493][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.522896][ T1213] usb 1-1: Product: syz [ 485.532387][ T1213] usb 1-1: Manufacturer: syz [ 485.537032][ T1213] usb 1-1: SerialNumber: syz [ 485.563153][ T1213] usb 1-1: config 0 descriptor?? [ 485.585561][ T1213] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 485.594719][ T1213] dw2102: su3000_power_ctrl: 1, initialized 0 [ 485.600838][ T1213] dvb-usb: bulk message failed: -22 (2/0) [ 485.620410][ T1213] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 485.664428][ T1213] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 error while loading driver (-19) [ 485.824197][ T1213] usb 1-1: USB disconnect, device number 56 [ 485.984428][T18346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5547'. [ 485.997656][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5547'. [ 486.012125][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5547'. [ 486.102509][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.436972][T18364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5556'. [ 486.873578][ T1213] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 487.024933][T18390] loop4: detected capacity change from 0 to 7 [ 487.032229][T18390] buffer_io_error: 25 callbacks suppressed [ 487.032244][T18390] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.053617][ T1213] usb 5-1: Using ep0 maxpacket: 32 [ 487.066473][ T1213] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 487.072909][T18390] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.086666][ T1213] usb 5-1: config 0 has no interface number 0 [ 487.105388][ T1213] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 487.121288][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.130074][ T1213] usb 5-1: Product: syz [ 487.134904][T18391] Invalid logical block size (4) [ 487.147291][ T1213] usb 5-1: Manufacturer: syz [ 487.147293][T18390] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.147402][T18390] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.172544][ T1213] usb 5-1: SerialNumber: syz [ 487.191776][ T1213] usb 5-1: config 0 descriptor?? [ 487.209633][T18390] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.219486][ T1213] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 487.228910][T18390] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.253672][T18390] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.261543][T18390] ldm_validate_partition_table(): Disk read failed. [ 487.273852][T18390] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.281752][T18390] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.293004][T18390] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.300942][T18390] Dev loop4: unable to read RDB block 0 [ 487.308291][T18390] loop4: unable to read partition table [ 487.315000][T18390] loop4: partition table beyond EOD, truncated [ 487.327783][T18397] netlink: 'syz.3.5570': attribute type 2 has an invalid length. [ 487.335747][T18397] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5570'. [ 487.358468][T18390] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 487.433593][ T1213] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 487.474373][ T1213] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 487.622971][T18403] geneve2: left promiscuous mode [ 487.731288][T18404] geneve3: entered promiscuous mode [ 487.740580][ T1108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.750842][ T1108] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 44777 - 0 [ 487.770739][ T1108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.799106][ T1108] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 44777 - 0 [ 487.819016][ T1108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.840125][ T1108] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 44777 - 0 [ 487.856091][ T1108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.883453][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 487.889813][ T796] usb 5-1: USB disconnect, device number 59 [ 487.900967][ T1108] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 44777 - 0 [ 487.932128][ T796] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 487.954952][ T796] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 488.023330][ T796] quatech2 5-1:0.51: device disconnected [ 489.320291][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5606'. [ 489.676644][T18488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5612'. [ 489.692160][T18490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5613'. [ 489.704186][T18488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5612'. [ 489.863518][T18492] Invalid logical block size (536870915) [ 490.322731][ T8743] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 490.474221][ T8743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 490.492442][ T8743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 490.504706][ T8743] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 490.514148][ T8743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.525328][ T8743] usb 2-1: config 0 descriptor?? [ 490.531120][T18503] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 490.652580][ T1213] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 490.804399][ T1213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.825551][ T1213] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 490.836041][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.852502][ T1213] usb 4-1: Product: syz [ 490.860062][ T1213] usb 4-1: Manufacturer: syz [ 490.870367][ T1213] usb 4-1: SerialNumber: syz [ 490.913930][ T1213] usb 4-1: config 0 descriptor?? [ 490.936401][ T1213] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 490.965776][ T8743] cypress 0003:04B4:BCA1.0043: unknown main item tag 0x0 [ 490.988381][ T8743] cypress 0003:04B4:BCA1.0043: unknown main item tag 0x0 [ 490.997215][ T8743] cypress 0003:04B4:BCA1.0043: unknown main item tag 0x0 [ 491.006002][ T8743] cypress 0003:04B4:BCA1.0043: unknown main item tag 0x0 [ 491.014462][ T8743] cypress 0003:04B4:BCA1.0043: unknown main item tag 0x0 [ 491.021683][ T8743] cypress 0003:04B4:BCA1.0043: unknown main item tag 0x0 [ 491.029670][ T8743] cypress 0003:04B4:BCA1.0043: unknown main item tag 0x0 [ 491.043211][ T8743] cypress 0003:04B4:BCA1.0043: unknown main item tag 0x0 [ 491.050291][ T8743] cypress 0003:04B4:BCA1.0043: unknown main item tag 0x0 [ 491.071317][ T8743] cypress 0003:04B4:BCA1.0043: unknown main item tag 0x0 [ 491.082093][ T8743] cypress 0003:04B4:BCA1.0043: item fetching failed at offset 64/235 [ 491.091308][ T8743] cypress 0003:04B4:BCA1.0043: parse failed [ 491.098783][ T8743] cypress 0003:04B4:BCA1.0043: probe with driver cypress failed with error -22 [ 491.157080][ T8743] usb 2-1: USB disconnect, device number 56 [ 491.496899][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5629'. [ 491.752216][ T1213] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 491.759537][ T1213] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 491.778964][ T1213] usb 4-1: USB disconnect, device number 75 [ 492.540339][T18565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5645'. [ 493.562540][ T8741] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 493.714828][ T8741] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 493.736670][ T8741] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 493.746760][ T8741] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 493.757630][ T8741] usb 1-1: config 220 has no interface number 2 [ 493.764374][ T8741] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 493.799002][ T8741] usb 1-1: config 220 interface 0 has no altsetting 0 [ 493.807308][ T8741] usb 1-1: config 220 interface 76 has no altsetting 0 [ 493.815420][ T8741] usb 1-1: config 220 interface 1 has no altsetting 0 [ 493.840599][ T8741] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 493.852411][ T8741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.860451][ T8741] usb 1-1: Product: syz [ 493.873898][ T8741] usb 1-1: Manufacturer: syz [ 493.878944][ T8741] usb 1-1: SerialNumber: syz [ 494.127424][ T8741] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 494.141850][ T8741] uvcvideo 1-1:220.0: No valid video chain found. [ 494.148986][ T8741] usb 1-1: selecting invalid altsetting 0 [ 494.192666][ T8741] usb 1-1: selecting invalid altsetting 0 [ 494.198466][ T8741] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 494.239344][ T8741] usb 1-1: USB disconnect, device number 57 [ 494.312505][ T8743] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 494.472423][ T8743] usb 3-1: Using ep0 maxpacket: 16 [ 494.493162][ T8743] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.516283][ T8743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.547863][ T8743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 494.566121][ T8743] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 494.593006][ T8743] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.620495][ T8743] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 494.640397][ T8743] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 494.654350][ T8743] usb 3-1: Manufacturer: syz [ 494.668963][ T8743] usb 3-1: config 0 descriptor?? [ 494.747871][T18650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5682'. [ 495.009543][T18663] netlink: 'syz.0.5688': attribute type 4 has an invalid length. [ 495.026065][ T8743] rc_core: IR keymap rc-hauppauge not found [ 495.032049][ T8743] Registered IR keymap rc-empty [ 495.037528][ T8743] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 495.062587][ T8743] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 495.087735][ T8743] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 495.144560][ T8743] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input75 [ 495.180063][ T8743] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 495.236901][ T8743] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 495.273098][ T8743] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 495.300767][ T8743] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 495.342538][ T8743] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 495.362883][ T8743] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 495.391946][ T8743] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 495.436882][ T8743] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 495.469537][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5695'. [ 495.473551][ T8743] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 495.523071][ T8743] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 495.555228][ T8743] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 495.574413][ T8743] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 495.605503][ T8743] usb 3-1: USB disconnect, device number 62 [ 495.826199][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 495.826218][ T30] audit: type=1326 audit(1773740486.014:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.0.5702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 495.861387][ T30] audit: type=1326 audit(1773740486.014:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.0.5702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 495.886363][ T30] audit: type=1326 audit(1773740486.044:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.0.5702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 495.909541][ T30] audit: type=1326 audit(1773740486.044:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.0.5702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 495.990001][ T30] audit: type=1326 audit(1773740486.044:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.0.5702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 496.015165][ T30] audit: type=1326 audit(1773740486.044:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.0.5702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 496.112485][ T30] audit: type=1326 audit(1773740486.164:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.0.5702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 496.158559][ T30] audit: type=1326 audit(1773740486.164:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18692 comm="syz.0.5702" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 496.892583][ T5940] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 497.042607][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 497.054653][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.079073][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.094828][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 497.122751][ T5940] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 497.131857][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.153485][ T5940] usb 5-1: config 0 descriptor?? [ 497.576690][ T5940] hid_parser_main: 45 callbacks suppressed [ 497.576715][ T5940] a4tech 0003:09DA:000A.0044: unknown main item tag 0x0 [ 497.597802][ T5940] a4tech 0003:09DA:000A.0044: unknown main item tag 0x0 [ 497.615220][ T5940] a4tech 0003:09DA:000A.0044: unknown main item tag 0x0 [ 497.636512][ T5940] a4tech 0003:09DA:000A.0044: unknown main item tag 0x0 [ 497.647896][ T5940] a4tech 0003:09DA:000A.0044: unknown main item tag 0x0 [ 497.655169][ T5940] a4tech 0003:09DA:000A.0044: unknown main item tag 0x0 [ 497.662208][ T5940] a4tech 0003:09DA:000A.0044: unknown main item tag 0x0 [ 497.669759][ T5940] a4tech 0003:09DA:000A.0044: collection stack underflow [ 497.678310][ T5940] a4tech 0003:09DA:000A.0044: item 0 0 0 12 parsing failed [ 497.708356][ T5940] a4tech 0003:09DA:000A.0044: parse failed [ 497.714679][ T5940] a4tech 0003:09DA:000A.0044: probe with driver a4tech failed with error -22 [ 497.807210][ T5940] usb 5-1: USB disconnect, device number 60 [ 497.840777][T18773] ip6gretap1: entered allmulticast mode [ 498.796578][T18808] netlink: 'syz.2.5753': attribute type 6 has an invalid length. [ 498.858780][T18813] netlink: 'syz.0.5755': attribute type 1 has an invalid length. [ 498.901924][T18813] netlink: 'syz.0.5755': attribute type 4 has an invalid length. [ 498.942429][ T8743] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 499.105644][ T8743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.122517][ T8743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.145519][ T8743] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 499.155139][ T8743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.183070][ T8743] usb 2-1: config 0 descriptor?? [ 499.335877][T18837] batadv_slave_0: entered promiscuous mode [ 499.350517][T18835] batadv_slave_0: left promiscuous mode [ 499.559604][T18850] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5773'. [ 499.562522][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5772'. [ 499.594703][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5772'. [ 499.617357][ T8743] arvo 0003:1E7D:30D4.0045: unknown main item tag 0x0 [ 499.632474][ T8743] arvo 0003:1E7D:30D4.0045: unknown main item tag 0x0 [ 499.639372][ T8743] arvo 0003:1E7D:30D4.0045: unknown main item tag 0x0 [ 499.665850][ T8743] arvo 0003:1E7D:30D4.0045: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 500.039535][ T8743] usb 2-1: USB disconnect, device number 57 [ 500.462452][ T5891] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 500.622387][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 500.634744][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.652546][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 500.676842][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 500.698703][ T5891] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 500.723817][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.751638][ T5891] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 500.766380][ T5891] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 500.783299][ T5891] usb 1-1: Manufacturer: syz [ 500.799793][ T5891] usb 1-1: config 0 descriptor?? [ 501.142763][ T5891] rc_core: IR keymap rc-hauppauge not found [ 501.150007][ T5891] Registered IR keymap rc-empty [ 501.171986][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 501.223303][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 501.253925][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 501.296193][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input76 [ 501.359117][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 501.384018][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 501.403809][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 501.422463][ T8743] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 501.432886][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 501.468330][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.475832][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.485167][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 501.532473][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 501.563052][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 501.574667][ T8743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.594103][ T8743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 501.595263][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 501.626431][ T8743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.642504][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 501.658825][ T8743] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.683995][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 501.697744][ T8743] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 501.719054][ T5891] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 501.722773][ T8743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.747601][ T5891] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 501.763372][ T8743] usb 2-1: config 0 descriptor?? [ 501.806937][ T5891] usb 1-1: USB disconnect, device number 58 [ 502.147635][T18932] input: syz0 as /devices/virtual/input/input77 [ 502.190533][ T8743] hid (null): unknown global tag 0xc [ 502.207143][ T8743] hid-u2fzero 0003:10C4:8ACF.0046: unknown global tag 0xc [ 502.223689][ T8743] hid-u2fzero 0003:10C4:8ACF.0046: item 0 1 1 12 parsing failed [ 502.242861][ T8743] hid-u2fzero 0003:10C4:8ACF.0046: probe with driver hid-u2fzero failed with error -22 [ 502.366628][T18940] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 502.372555][T18940] pim6reg0: linktype set to 774 [ 502.400089][ T5891] usb 2-1: USB disconnect, device number 58 [ 502.523252][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5812'. [ 502.661980][T18948] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 3580128042 out of range (51000000..2150000000) [ 502.749813][T18952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5816'. [ 503.092987][ T796] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 503.252423][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 503.260490][T18975] vivid-002: disconnect [ 503.265952][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.286836][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.310297][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 503.332503][ T796] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 503.352475][ T796] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.374589][ T796] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 503.383892][ T796] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 503.391932][ T796] usb 4-1: Manufacturer: syz [ 503.393013][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.409609][ T796] usb 4-1: config 0 descriptor?? [ 503.694906][ T796] rc_core: IR keymap rc-hauppauge not found [ 503.701250][ T796] Registered IR keymap rc-empty [ 503.708971][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 503.732756][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 503.760626][ T796] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 503.794182][ T796] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input78 [ 503.829443][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 503.854964][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 503.892614][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 503.912568][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 503.932490][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 503.954054][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 503.995171][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.010023][T18985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5829'. [ 504.022672][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.035863][T18972] vivid-002: reconnect [ 504.052645][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.072511][ T796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.106569][ T796] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 504.125982][ T796] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 504.147582][ T796] usb 4-1: USB disconnect, device number 76 [ 504.434038][T18994] netlink: 'syz.4.5834': attribute type 14 has an invalid length. [ 504.733416][T19008] kvm: kvm [19005]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 507.168088][T19086] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 507.206975][T19088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5876'. [ 507.216289][T19086] macvlan4: entered promiscuous mode [ 508.550914][T19143] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 508.978070][T19152] syz.0.5905 (19152): drop_caches: 2 [ 510.027781][T19192] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.5922'. [ 510.347649][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5927'. [ 510.432455][ T796] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 510.572634][ T8743] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 510.583361][ T796] usb 1-1: Using ep0 maxpacket: 16 [ 510.590815][ T796] usb 1-1: unable to get BOS descriptor or descriptor too short [ 510.600941][ T796] usb 1-1: config 9 has an invalid interface number: 57 but max is 0 [ 510.611354][ T796] usb 1-1: config 9 has no interface number 0 [ 510.631561][ T796] usb 1-1: config 9 interface 57 has no altsetting 0 [ 510.645062][ T796] usb 1-1: string descriptor 0 read error: -22 [ 510.651446][ T796] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 510.661511][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.736861][ T8743] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 510.753868][ T8743] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 510.776813][ T8743] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 510.793659][ T8743] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.822637][ T8743] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 510.842655][ T8743] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 510.916888][ T8743] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 510.944869][ T8743] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 510.976101][T19221] usb usb9: usbfs: process 19221 (syz.3.5934) did not claim interface 0 before use [ 510.982268][ T8743] usb 2-1: Product: syz [ 511.017257][ T8743] usb 2-1: Manufacturer: syz [ 511.054292][T19205] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 511.184823][ T8743] cdc_wdm 2-1:1.0: skipping garbage [ 511.190616][ T8743] cdc_wdm 2-1:1.0: skipping garbage [ 511.226449][ T8743] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 511.242766][ T8743] cdc_wdm 2-1:1.0: Unknown control protocol [ 511.414770][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 511.421432][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 511.427742][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 511.434377][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 511.442570][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 511.449209][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 511.460365][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 511.466977][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 511.480124][ T8743] usb 2-1: USB disconnect, device number 59 [ 511.598867][ T796] video4linux radio48: keene_cmd_main failed (-71) [ 511.607748][ T796] radio-keene 1-1:9.57: V4L2 device registered as radio48 [ 511.630988][ T796] usb 1-1: USB disconnect, device number 59 [ 511.680521][T19238] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 511.757893][T19242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.833738][T19246] usb usb9: usbfs: process 19246 (syz.4.5946) did not claim interface 0 before use [ 511.887024][T19248] netlink: 'syz.2.5947': attribute type 16 has an invalid length. [ 511.895020][T19248] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.5947'. [ 512.059446][T19257] random: crng reseeded on system resumption [ 512.079122][T19261] netlink: 'syz.4.5952': attribute type 2 has an invalid length. [ 512.231717][T19265] dummy0: entered allmulticast mode [ 512.253152][T19263] dummy0: left allmulticast mode [ 512.378386][T19276] VFS: Mount too revealing [ 512.709489][T19295] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 512.752957][ T5940] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 512.917668][ T5940] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 512.933507][ T5940] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 512.949353][ T5940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 512.961646][ T5940] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 512.974249][ T5940] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 512.986544][ T5940] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 513.004674][ T5940] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 513.016645][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 513.025227][ T5940] usb 1-1: Product: syz [ 513.029653][ T5940] usb 1-1: Manufacturer: syz [ 513.050372][T19283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 513.061761][ T5940] cdc_wdm 1-1:1.0: skipping garbage [ 513.068524][ T5940] cdc_wdm 1-1:1.0: skipping garbage [ 513.078326][ T5940] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 513.085326][ T5940] cdc_wdm 1-1:1.0: Unknown control protocol [ 513.214552][T19317] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5980'. [ 513.289703][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 513.296385][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 513.302810][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 513.309449][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 513.315780][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 513.322419][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 513.329648][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 513.336289][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 513.342668][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 513.349292][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 513.355586][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 513.362313][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 513.429746][ T8741] usb 1-1: USB disconnect, device number 60 [ 514.114639][T19358] binder: 19354:19358 ioctl c0306201 80000040 returned -22 [ 514.342829][ T5891] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 514.526299][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.542671][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 514.573057][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.598794][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.629689][ T5891] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 514.641668][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.667502][ T5891] usb 1-1: config 0 descriptor?? [ 514.848292][T19385] syz.3.6011 (19385): drop_caches: 2 [ 515.096562][ T5891] hid (null): unknown global tag 0xc [ 515.124005][ T5891] hid-u2fzero 0003:10C4:8ACF.0047: unknown global tag 0xc [ 515.142036][ T5891] hid-u2fzero 0003:10C4:8ACF.0047: item 0 1 1 12 parsing failed [ 515.151791][ T5891] hid-u2fzero 0003:10C4:8ACF.0047: probe with driver hid-u2fzero failed with error -22 [ 515.163705][ T5940] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 515.192485][ T1213] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 515.328422][ T9] usb 1-1: USB disconnect, device number 61 [ 515.352562][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 515.360091][ T1213] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.373445][ T1213] usb 5-1: config 0 has no interface number 0 [ 515.380015][T19408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6022'. [ 515.393158][ T1213] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 515.405179][ T5940] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 515.415058][T19408] netlink: 'syz.3.6022': attribute type 15 has an invalid length. [ 515.422448][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.431942][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.440445][ T1213] usb 5-1: Product: syz [ 515.445314][ T5940] usb 2-1: Product: syz [ 515.449509][ T5940] usb 2-1: Manufacturer: syz [ 515.454970][ T1213] usb 5-1: Manufacturer: syz [ 515.459854][ T1213] usb 5-1: SerialNumber: syz [ 515.469506][ T5940] usb 2-1: SerialNumber: syz [ 515.483213][ T1213] usb 5-1: config 0 descriptor?? [ 515.491905][ T5940] usb 2-1: config 0 descriptor?? [ 515.716116][ T5940] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 515.733032][ T1213] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 515.757690][ T1213] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 515.768874][ T1213] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 515.792441][ T1213] usb 5-1: media controller created [ 515.813497][ T1213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 516.392586][ T5940] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 516.760725][ T5940] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 516.771371][T19426] syz.2.6029 (19426): drop_caches: 2 [ 516.772731][ T5940] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 516.795712][T19426] syz.2.6029 (19426): drop_caches: 2 [ 516.902945][ T1213] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 516.966156][ T8743] usb 2-1: USB disconnect, device number 60 [ 516.992389][ T796] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 517.011317][ T1213] usb 5-1: USB disconnect, device number 61 [ 517.172461][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 517.179595][ T796] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 517.192474][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.208567][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.232474][ T796] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 517.242063][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.264942][ T796] usb 4-1: config 0 descriptor?? [ 517.592724][T19446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6038'. [ 517.710274][ T796] logitech 0003:046D:C29C.0048: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 517.810336][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6042'. [ 517.839939][T19455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6042'. [ 517.908902][T19457] input: syz0 as /devices/virtual/input/input79 [ 518.088675][ T796] logitech 0003:046D:C29C.0048: no inputs found [ 518.112698][ T796] usb 4-1: USB disconnect, device number 77 [ 518.341524][T19476] netlink: 'syz.0.6053': attribute type 1 has an invalid length. [ 518.456812][T19482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6056'. [ 518.512221][ T30] audit: type=1326 audit(1773740508.694:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 518.552279][ T30] audit: type=1326 audit(1773740508.694:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 518.602451][ T30] audit: type=1326 audit(1773740508.724:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 518.647681][ T30] audit: type=1326 audit(1773740508.724:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 518.674469][ T30] audit: type=1326 audit(1773740508.724:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 518.733099][ T30] audit: type=1326 audit(1773740508.724:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 518.789409][ T30] audit: type=1326 audit(1773740508.724:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 518.861005][ T30] audit: type=1326 audit(1773740508.724:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 518.885942][ T30] audit: type=1326 audit(1773740508.724:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 518.909877][ T30] audit: type=1326 audit(1773740508.724:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 518.946081][T19494] batman_adv: batadv0: Adding interface: vlan0 [ 518.952725][T19494] batman_adv: batadv0: The MTU of interface vlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.002446][T19494] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 519.240435][T19506] kvm: user requested TSC rate below hardware speed [ 520.132146][T19548] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6087'. [ 520.174005][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6088'. [ 520.457503][ T796] hid_parser_main: 4 callbacks suppressed [ 520.457527][ T796] hid-generic 000A:0004:0009.0049: unknown main item tag 0x0 [ 520.470963][ T796] hid-generic 000A:0004:0009.0049: unknown main item tag 0x0 [ 520.478754][ T796] hid-generic 000A:0004:0009.0049: unknown main item tag 0x0 [ 520.489810][ T796] hid-generic 000A:0004:0009.0049: unknown main item tag 0x0 [ 520.497589][ T796] hid-generic 000A:0004:0009.0049: unknown main item tag 0x0 [ 520.509200][ T796] hid-generic 000A:0004:0009.0049: unknown main item tag 0x0 [ 520.517552][ T796] hid-generic 000A:0004:0009.0049: unknown main item tag 0x0 [ 520.527303][ T796] hid-generic 000A:0004:0009.0049: unknown main item tag 0x0 [ 520.535714][ T796] hid-generic 000A:0004:0009.0049: unknown main item tag 0x0 [ 520.548536][ T796] hid-generic 000A:0004:0009.0049: unknown main item tag 0x0 [ 520.562286][ T796] hid-generic 000A:0004:0009.0049: hidraw0: HID v0.04 Device [syz1] on syz0 [ 520.695740][T19571] fido_id[19571]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 520.843330][ T1213] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 521.014277][ T1213] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 521.023027][ T1213] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 521.031912][ T1213] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 521.042569][ T1213] usb 3-1: config 220 has no interface number 2 [ 521.048890][ T1213] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 521.092406][ T1213] usb 3-1: config 220 interface 0 has no altsetting 0 [ 521.099323][ T1213] usb 3-1: config 220 interface 76 has no altsetting 0 [ 521.106446][ T1213] usb 3-1: config 220 interface 1 has no altsetting 0 [ 521.118026][ T1213] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 521.127961][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.136052][ T1213] usb 3-1: Product: syz [ 521.140239][ T1213] usb 3-1: Manufacturer: syz [ 521.145335][ T1213] usb 3-1: SerialNumber: syz [ 521.202690][ T796] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 521.252449][ T5940] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 521.353342][ T796] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 521.374489][ T796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 521.383382][ T1213] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 521.383483][ T1213] uvcvideo 3-1:220.0: No valid video chain found. [ 521.383536][ T1213] usb 3-1: selecting invalid altsetting 0 [ 521.414996][ T1213] usb 3-1: selecting invalid altsetting 0 [ 521.424790][ T796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 521.435862][ T796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.436963][ T5940] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.445008][ T796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 521.453714][ T1213] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 521.470703][ T5940] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.490482][ T796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 521.497341][ T5940] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 521.520679][ T1213] usb 3-1: USB disconnect, device number 63 [ 521.523346][ T796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.547006][ T796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 521.555360][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 521.562822][ T796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 521.592964][ T5940] usb 4-1: SerialNumber: syz [ 521.597520][ T796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.613659][ T796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 521.632452][ T796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 521.644594][ T796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.654123][ T796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 521.663378][ T796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 521.674699][ T796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.683123][ T796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 521.694017][ T796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 521.706595][ T796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.715290][ T796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 521.724783][ T796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 521.743422][ T796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.763473][ T796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 521.772970][ T796] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 521.787600][ T796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.799875][ T796] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 521.822412][ T796] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 521.830791][ T796] usb 5-1: Product: syz [ 521.840161][ T5940] usb 4-1: 0:2 : does not exist [ 521.845901][ T796] usb 5-1: Manufacturer: syz [ 521.850549][ T796] usb 5-1: SerialNumber: syz [ 521.869134][ T796] usb 5-1: config 0 descriptor?? [ 521.899242][ T796] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 521.931238][ T5940] usb 4-1: USB disconnect, device number 78 [ 521.969706][ T5843] udevd[5843]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 522.003259][ T5843] udevd[5843]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 522.165047][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 522.172848][ T796] usb 5-1: USB disconnect, device number 62 [ 522.190972][ T796] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 522.737427][T19639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6127'. [ 523.218299][T19661] netlink: 'syz.3.6137': attribute type 46 has an invalid length. [ 523.247011][T19661] netlink: 212868 bytes leftover after parsing attributes in process `syz.3.6137'. [ 524.491452][ T5940] hid-generic 0000:0000:0004.004A: hidraw0: HID v0.03 Device [syz1] on syz0 [ 524.625931][T19705] fido_id[19705]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 525.162493][ T5940] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 525.334274][ T5940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.356274][ T5940] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.375088][ T5940] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 525.391505][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 525.409809][ T5940] usb 2-1: SerialNumber: syz [ 525.568306][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 525.568325][ T30] audit: type=1326 audit(1773740515.754:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.2.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 525.631947][ T30] audit: type=1326 audit(1773740515.784:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.2.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 525.665988][ T5940] usb 2-1: 0:2 : does not exist [ 525.700920][ T30] audit: type=1326 audit(1773740515.784:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.2.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 525.752652][ T30] audit: type=1326 audit(1773740515.784:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.2.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 525.812450][ T30] audit: type=1326 audit(1773740515.784:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.2.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 525.864262][ T30] audit: type=1326 audit(1773740515.784:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.2.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 525.865408][ T5940] usb 2-1: USB disconnect, device number 61 [ 525.961135][ T30] audit: type=1326 audit(1773740515.794:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.2.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 526.036152][ T30] audit: type=1326 audit(1773740515.794:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.2.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 526.086681][ T30] audit: type=1326 audit(1773740515.794:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.2.6166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 526.592750][ T1213] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 526.772554][ T1213] usb 3-1: Using ep0 maxpacket: 8 [ 526.823461][ T1213] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.833873][ T1213] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 526.852573][ T1213] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.887053][ T1213] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 526.902556][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.933362][ T1213] hub 3-1:1.0: bad descriptor, ignoring hub [ 526.947657][ T1213] hub 3-1:1.0: probe with driver hub failed with error -5 [ 526.964213][ T1213] cdc_wdm 3-1:1.0: skipping garbage [ 526.969521][ T1213] cdc_wdm 3-1:1.0: skipping garbage [ 526.975210][ T1213] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 527.062556][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.260525][ T1213] usb 3-1: USB disconnect, device number 64 [ 527.732552][ T5940] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 527.913022][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 527.919864][ T5940] usb 3-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 527.941091][ T5940] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 527.961537][ T5940] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.978427][ T5940] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 527.987844][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.004252][ T5940] hub 3-1:1.0: bad descriptor, ignoring hub [ 528.019133][ T5940] hub 3-1:1.0: probe with driver hub failed with error -5 [ 528.040072][ T5940] cdc_wdm 3-1:1.0: skipping garbage [ 528.047432][ T5940] cdc_wdm 3-1:1.0: skipping garbage [ 528.052971][ T5940] cdc_wdm 3-1:1.0: invalid descriptor buffer length [ 528.059763][ T5940] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 528.332980][ T5940] usb 3-1: USB disconnect, device number 65 [ 528.552467][ T8741] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 528.703459][ T8741] usb 2-1: Using ep0 maxpacket: 32 [ 528.722463][ T8741] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 528.730527][ T8741] usb 2-1: config 0 has no interface number 0 [ 528.772375][ T8741] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.794744][ T8741] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.827451][ T8741] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 528.843477][ T8741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.882897][ T8741] usb 2-1: config 0 descriptor?? [ 529.352395][ T5940] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 529.513156][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 529.526068][ T5940] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 529.535914][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.560951][ T5940] usb 3-1: Product: syz [ 529.572414][ T5940] usb 3-1: Manufacturer: syz [ 529.584989][ T5940] usb 3-1: SerialNumber: syz [ 529.622605][ T8741] uclogic 0003:28BD:0094.004B: pen parameters not found [ 529.629714][ T8741] uclogic 0003:28BD:0094.004B: interface is invalid, ignoring [ 529.684308][ T8741] usb 2-1: USB disconnect, device number 62 [ 529.722467][ T1213] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 529.835352][ T5940] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 529.861752][ T5940] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 529.877780][ T5940] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 529.889137][ T5940] usb 3-1: media controller created [ 529.894455][ T1213] usb 5-1: Using ep0 maxpacket: 16 [ 529.902032][ T1213] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.922483][ T1213] usb 5-1: config 0 interface 0 has no altsetting 0 [ 529.933486][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.942160][ T1213] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 529.953879][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.983397][ T1213] usb 5-1: config 0 descriptor?? [ 530.176073][T19849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6220'. [ 530.193776][ T5940] zl10353_read_register: readreg error (reg=127, ret==-110) [ 530.285473][T19853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6222'. [ 530.333731][ T5940] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 530.373069][ T5940] usb 3-1: USB disconnect, device number 66 [ 530.438201][ T1213] mcp2221 0003:04D8:00DD.004C: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 530.599178][T19865] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 530.750025][T19874] input: syz0 as /devices/virtual/input/input80 [ 530.831501][ T5940] usb 5-1: USB disconnect, device number 63 [ 531.015978][T19889] tap0: tun_chr_ioctl cmd 1074025680 [ 531.228208][ T30] audit: type=1326 audit(1773740521.414:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19892 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 531.332944][ T30] audit: type=1326 audit(1773740521.444:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19892 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 531.443895][ T30] audit: type=1326 audit(1773740521.444:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19892 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 531.599971][ T30] audit: type=1326 audit(1773740521.444:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19892 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 531.648543][ T30] audit: type=1326 audit(1773740521.444:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19892 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 531.707734][ T30] audit: type=1326 audit(1773740521.444:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19892 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 531.766445][ T30] audit: type=1326 audit(1773740521.444:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19892 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 531.828130][ T30] audit: type=1326 audit(1773740521.444:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19892 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 531.885113][ T30] audit: type=1326 audit(1773740521.444:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19892 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 531.953245][ T30] audit: type=1326 audit(1773740521.444:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19892 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 532.422757][ T5940] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 532.599905][ T5940] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 532.614598][ T5940] usb 2-1: config 0 has no interface number 0 [ 532.636269][ T5940] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 532.657906][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.678657][ T5940] usb 2-1: Product: syz [ 532.690999][ T5940] usb 2-1: Manufacturer: syz [ 532.702495][ T5940] usb 2-1: SerialNumber: syz [ 532.723400][ T5940] usb 2-1: config 0 descriptor?? [ 532.948484][ T5940] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 532.978375][ T5940] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 533.001480][ T5940] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 533.019316][ T5940] usb 2-1: media controller created [ 533.049254][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.117375][T19960] GUP no longer grows the stack in syz.3.6271 (19960): 80009000-8000a000 (80005000) [ 533.143398][T19960] CPU: 1 UID: 0 PID: 19960 Comm: syz.3.6271 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.143435][T19960] Tainted: [L]=SOFTLOCKUP [ 533.143443][T19960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.143461][T19960] Call Trace: [ 533.143529][T19960] [ 533.143572][T19960] dump_stack_lvl+0xe8/0x150 [ 533.143674][T19960] __get_user_pages+0x2453/0x29d0 [ 533.143700][T19960] ? __lock_acquire+0x6b5/0x2cf0 [ 533.143794][T19960] ? __gup_longterm_locked+0xc4e/0x1630 [ 533.143825][T19960] ? down_read_killable+0x1bb/0x340 [ 533.143892][T19960] __gup_longterm_locked+0xdcf/0x1630 [ 533.143956][T19960] gup_fast_fallback+0x1d82/0x22e0 [ 533.144011][T19960] ? __pfx_gup_fast_fallback+0x10/0x10 [ 533.144052][T19960] ? futex_unqueue+0x22/0x240 [ 533.144085][T19960] ? futex_unqueue+0x22/0x240 [ 533.144108][T19960] ? is_valid_gup_args+0x11f/0x200 [ 533.144143][T19960] ? get_user_pages_fast+0x4d/0xb0 [ 533.144168][T19960] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 533.144253][T19960] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 533.144294][T19960] iov_iter_get_pages2+0x5e/0xa0 [ 533.144313][T19960] __se_sys_vmsplice+0x7b3/0x1490 [ 533.144372][T19960] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 533.144406][T19960] ? __pfx_futex_wait+0x10/0x10 [ 533.144487][T19960] __do_fast_syscall_32+0x20d/0x640 [ 533.144527][T19960] ? lockdep_hardirqs_on+0x7a/0x110 [ 533.144549][T19960] ? do_fast_syscall_32+0x33/0x70 [ 533.144570][T19960] ? irqentry_exit+0x10e/0x620 [ 533.144597][T19960] ? trace_irq_disable+0x3b/0x150 [ 533.144623][T19960] do_fast_syscall_32+0x33/0x70 [ 533.144641][T19960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.144704][T19960] RIP: 0023:0xf6ffef6c [ 533.144757][T19960] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 533.144771][T19960] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 000000000000013c [ 533.144826][T19960] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 533.144842][T19960] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.144853][T19960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.144865][T19960] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 533.144877][T19960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.144911][T19960] [ 534.187165][ T5940] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 534.293307][ T5940] usb 2-1: USB disconnect, device number 63 [ 535.204809][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6303'. [ 535.492681][T20040] block device autoloading is deprecated and will be removed. [ 535.592726][ T8741] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 535.763115][ T8741] usb 2-1: Using ep0 maxpacket: 16 [ 535.771859][ T8741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.882381][ T8741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.892270][ T8741] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 535.911529][ T8741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.934428][ T8741] usb 2-1: config 0 descriptor?? [ 536.359299][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6315'. [ 536.367268][ T8741] ntrig 0003:1B96:0008.004D: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.1-1/input0 [ 536.375835][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6315'. [ 536.564287][ T8741] ntrig 0003:1B96:0008.004D: Firmware version: 2.7.31.21.7 (dfb5 afea) [ 536.788846][ T8741] usb 2-1: USB disconnect, device number 64 [ 537.859906][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6338'. [ 537.942490][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 538.013495][T20123] netlink: 'syz.2.6343': attribute type 2 has an invalid length. [ 538.222043][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6347'. [ 538.469507][T20145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6353'. [ 538.485120][T20145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6353'. [ 538.862500][ T8741] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 539.014336][ T8741] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.045385][ T8741] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 539.062574][ T8741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.084017][ T8741] usb 3-1: config 0 descriptor?? [ 539.103288][ T8741] pwc: Askey VC010 type 2 USB webcam detected. [ 539.318271][ T8741] pwc: send_video_command error -71 [ 539.333285][ T8741] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 539.340919][ T8741] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 539.372669][ T8741] usb 3-1: USB disconnect, device number 67 [ 539.682587][ T5940] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 539.862584][ T8741] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 539.870434][ T5940] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 539.889318][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.911313][ T5940] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 539.922634][ T5940] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 539.940880][ T5940] usb 2-1: Manufacturer: syz [ 539.949426][ T5940] usb 2-1: config 0 descriptor?? [ 540.028766][T20189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6371'. [ 540.044690][ T8741] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.057777][ T8741] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 540.069005][ T8741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.072646][ T5940] rc_core: IR keymap rc-hauppauge not found [ 540.100975][ T5940] Registered IR keymap rc-empty [ 540.105621][ T8741] usb 3-1: config 0 descriptor?? [ 540.114176][ T5940] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 540.129567][ T8741] pwc: Askey VC010 type 2 USB webcam detected. [ 540.141672][ T5940] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input81 [ 540.177409][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 540.187117][ T8742] usb 2-1: USB disconnect, device number 65 [ 540.515902][ T8741] pwc: recv_control_msg error -71 req 02 val 2b00 [ 540.538415][ T8741] pwc: recv_control_msg error -71 req 02 val 2700 [ 540.550816][ T8741] pwc: recv_control_msg error -71 req 02 val 2c00 [ 540.572788][ T8741] pwc: recv_control_msg error -71 req 04 val 1000 [ 540.579682][ T8741] pwc: recv_control_msg error -71 req 04 val 1300 [ 540.589474][ T8741] pwc: recv_control_msg error -71 req 04 val 1400 [ 540.602983][ T8741] pwc: recv_control_msg error -71 req 02 val 2000 [ 540.617127][ T8741] pwc: recv_control_msg error -71 req 02 val 2100 [ 540.642702][ T8741] pwc: recv_control_msg error -71 req 04 val 1500 [ 540.652744][ T8741] pwc: recv_control_msg error -71 req 02 val 2500 [ 540.663946][ T8741] pwc: recv_control_msg error -71 req 02 val 2400 [ 540.680985][ T8741] pwc: recv_control_msg error -71 req 02 val 2600 [ 540.709678][ T8741] pwc: recv_control_msg error -71 req 02 val 2900 [ 540.753493][ T8741] pwc: recv_control_msg error -71 req 02 val 2800 [ 540.762744][ T8741] pwc: recv_control_msg error -71 req 04 val 1100 [ 540.777873][ T8741] pwc: recv_control_msg error -71 req 04 val 1200 [ 540.800144][ T8741] pwc: Registered as video103. [ 540.822738][ T8741] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input82 [ 540.873489][ T8741] usb 3-1: USB disconnect, device number 68 [ 540.978486][T20210] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 540.997760][T20210] syzkaller0: group set to 0 [ 542.362804][ T8742] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 542.526029][ T8742] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 542.535421][ T8742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.545079][ T8742] usb 1-1: Product: syz [ 542.549678][ T8742] usb 1-1: Manufacturer: syz [ 542.556102][ T8742] usb 1-1: SerialNumber: syz [ 542.573375][ T8742] usb 1-1: config 0 descriptor?? [ 542.774733][T20277] syzkaller1: entered promiscuous mode [ 542.780270][T20277] syzkaller1: entered allmulticast mode [ 542.996920][ T8742] usb 1-1: Firmware: major: 0, minor: 0, hardware type: HULUSB (4) [ 543.013192][ T8742] usb 1-1: Firmware version (0.0) predates our first public release. [ 543.030644][ T8742] usb 1-1: Please update to version 0.2 or newer [ 543.032832][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6416'. [ 543.086288][T20287] bond3: Invalid ad_actor_system MAC address. [ 543.092760][T20287] bond3: option ad_actor_system: invalid value (281419142266867) [ 543.102182][T20287] bond3 (unregistering): Released all slaves [ 543.260489][ T8742] usb 1-1: USB disconnect, device number 62 [ 544.212442][ T5940] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 544.374673][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 544.394518][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.415050][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.435459][ T5940] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 544.465084][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.487164][ T5940] usb 1-1: config 0 descriptor?? [ 544.662427][ T5891] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 544.833283][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 544.845165][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.855061][ T5891] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 544.865038][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.887421][T20368] loop5: detected capacity change from 0 to 3775 [ 544.891732][ T5891] usb 4-1: config 0 descriptor?? [ 544.927990][T20368] loop5: detected capacity change from 3775 to 6023 [ 544.941550][ T5940] ntrig 0003:1B96:0008.004E: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.0-1/input0 [ 545.015502][ T1213] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 545.050406][ T7641] buffer_io_error: 14 callbacks suppressed [ 545.050433][ T7641] Buffer I/O error on dev loop5, logical block 752, async page read [ 545.114243][ T5940] ntrig 0003:1B96:0008.004E: Firmware version: 2.7.31.21.7 (dfb5 afea) [ 545.182483][ T1213] usb 2-1: Using ep0 maxpacket: 8 [ 545.189855][ T1213] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 545.199713][ T1213] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 545.214016][ T1213] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 545.225606][ T1213] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 545.237481][ T1213] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 545.248853][ T1213] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.263247][ T1213] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 545.272685][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.334507][ T5891] elan 0003:04F3:0755.004F: failed to start in urb: -90 [ 545.363316][ T5940] usb 1-1: USB disconnect, device number 63 [ 545.375763][ T5891] elan 0003:04F3:0755.004F: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 545.500897][ T1213] usb 2-1: usb_control_msg returned -32 [ 545.513529][ T1213] usbtmc 2-1:16.0: can't read capabilities [ 545.566146][ T8742] usb 4-1: USB disconnect, device number 79 [ 545.860514][T20384] usbtmc 2-1:16.0: control status returned 0 [ 546.066044][ T8742] usb 2-1: USB disconnect, device number 66 [ 546.391261][T20410] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6469'. [ 546.411229][T20413] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6468'. [ 546.444240][T20413] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.478674][T20413] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6468'. [ 546.613347][ T8741] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 546.782406][ T8741] usb 5-1: Using ep0 maxpacket: 16 [ 546.791333][ T8741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.804772][ T8741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.822100][ T8741] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 546.832163][ T8741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.850132][ T8741] usb 5-1: config 0 descriptor?? [ 547.313961][ T8741] ntrig 0003:1B96:0008.0050: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 547.471688][T20453] binder: 20452:20453 ioctl c0306201 800003c0 returned -14 [ 547.502645][ T8741] ntrig 0003:1B96:0008.0050: Firmware version: 2.7.31.21.7 (dfb5 afea) [ 547.572411][ T5940] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 547.703716][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 547.722063][ T1213] usb 5-1: USB disconnect, device number 64 [ 547.747761][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 547.780895][ T5940] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 547.822062][ T5940] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.847745][ T5940] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.860049][ T5940] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 547.876783][ T5940] usb 1-1: config 7 interface 0 has no altsetting 0 [ 547.885522][ T5940] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 547.895234][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.327943][T20448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.347402][T20448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.386509][ T5940] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0051/input/input83 [ 548.422593][ T1213] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 548.488636][ T5940] kye 0003:0458:5010.0051: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 548.595408][ T8741] usb 1-1: USB disconnect, device number 64 [ 548.605460][ T1213] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 548.619142][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.629808][ T1213] usb 2-1: Product: syz [ 548.634877][ T1213] usb 2-1: Manufacturer: syz [ 548.639791][ T1213] usb 2-1: SerialNumber: syz [ 548.714336][ T1213] usb 2-1: config 0 descriptor?? [ 548.739989][T20480] fido_id[20480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 549.095306][T20488] sctp: [Deprecated]: syz.2.6501 (pid 20488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 549.095306][T20488] Use struct sctp_sack_info instead [ 549.143968][ T1213] usb 2-1: Firmware: major: 0, minor: 0, hardware type: HULUSB (4) [ 549.163222][ T1213] usb 2-1: Firmware version (0.0) predates our first public release. [ 549.175922][ T1213] usb 2-1: Please update to version 0.2 or newer [ 549.396333][ T1213] usb 2-1: USB disconnect, device number 67 [ 549.442419][ T5940] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 549.602813][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 549.623990][ T5940] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 549.632256][ T5940] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 549.649017][ T5940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 549.702485][ T5940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 549.723735][ T5940] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.741431][ T5940] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 549.762129][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.782696][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 550.025766][T20508] syzkaller1: entered promiscuous mode [ 550.031309][T20508] syzkaller1: entered allmulticast mode [ 550.209295][T20513] input: syz0 as /devices/virtual/input/input84 [ 550.588061][T20521] usbtmc 3-1:16.0: simple usb_control_msg returned 0 [ 550.802735][ T8741] usb 3-1: USB disconnect, device number 69 [ 550.963334][T20536] loop5: detected capacity change from 0 to 5247 [ 550.993352][T20536] loop5: detected capacity change from 5247 to 6223 [ 551.110523][ T7641] Buffer I/O error on dev loop5, logical block 777, async page read [ 551.795312][ T1213] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 551.974642][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.996119][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.032373][ T1213] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 552.062518][ T1213] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 552.092761][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.117814][ T1213] usb 5-1: config 0 descriptor?? [ 552.240368][T20583] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6541'. [ 552.295394][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6542'. [ 552.305614][T20585] hsr_slave_0: left promiscuous mode [ 552.314561][T20585] hsr_slave_1: left promiscuous mode [ 552.557998][ T1213] hid_parser_main: 96 callbacks suppressed [ 552.558028][ T1213] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 552.572612][ T1213] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 552.592487][ T1213] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 552.600113][ T1213] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 552.608464][ T1213] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 552.616107][ T1213] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 552.623784][ T1213] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 552.631217][ T1213] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 552.638788][ T1213] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 552.646442][ T1213] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 552.679075][ T1213] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 552.857497][ T1213] usb 5-1: USB disconnect, device number 65 [ 553.747080][T20649] loop5: detected capacity change from 0 to 2879 [ 553.813780][T20653] loop5: detected capacity change from 2879 to 3879 [ 553.897176][ T7641] Buffer I/O error on dev loop5, logical block 484, async page read [ 553.957875][ T7641] Buffer I/O error on dev loop5, logical block 484, async page read [ 555.015783][T20692] netlink: 'syz.1.6567': attribute type 10 has an invalid length. [ 555.034328][T20692] team0: Device vxcan1 is of different type [ 556.132692][ T8743] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 556.295166][ T8743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 556.306573][ T8743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.318924][ T8743] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 556.342980][ T8743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.366699][ T8743] usb 1-1: config 0 descriptor?? [ 556.492491][ T8741] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 556.655386][ T8741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.666825][ T8741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.676736][ T8741] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 556.689820][ T8741] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.702476][ T1213] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 556.712433][ T8741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.731914][ T8741] usb 2-1: config 0 descriptor?? [ 556.801776][ T8743] elan 0003:04F3:0755.0053: failed to start in urb: -90 [ 556.810704][ T8743] elan 0003:04F3:0755.0053: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 556.842458][ T5940] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 556.855058][ T1213] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 556.867745][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 556.879819][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 556.894911][ T1213] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 556.905635][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.915391][ T1213] usb 5-1: Product: syz [ 556.919656][ T1213] usb 5-1: Manufacturer: syz [ 556.925226][ T1213] usb 5-1: SerialNumber: syz [ 556.933716][ T1213] usb 5-1: config 0 descriptor?? [ 556.995763][ T5940] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 557.008014][ T5940] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 557.018787][ T5940] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 557.028932][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.047276][T20730] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 557.055168][ T8743] usb 1-1: USB disconnect, device number 65 [ 557.080983][ T5940] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 557.185794][ T8741] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 557.311365][ T5940] usb 3-1: USB disconnect, device number 70 [ 557.423722][ T5891] usb 2-1: USB disconnect, device number 68 [ 558.482642][ T5940] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 558.675159][ T5940] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 558.776340][ T5940] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 558.787731][ T5940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 558.797328][ T5940] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 558.812769][ T5940] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 558.835964][ T5940] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 558.845553][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 558.854061][ T5940] usb 1-1: Product: syz [ 558.858332][ T5940] usb 1-1: Manufacturer: syz [ 558.877910][ T5940] cdc_wdm 1-1:1.0: skipping garbage [ 558.884813][ T5940] cdc_wdm 1-1:1.0: skipping garbage [ 558.895444][ T5940] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 558.901521][ T5940] cdc_wdm 1-1:1.0: Unknown control protocol [ 558.951165][T20763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6594'. [ 559.037799][T20763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6594'. [ 559.065662][T20766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6595'. [ 559.075048][T20766] netlink: 'syz.3.6595': attribute type 7 has an invalid length. [ 559.122369][T20766] netlink: 'syz.3.6595': attribute type 8 has an invalid length. [ 559.133375][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6595'. [ 559.191629][T20766] gretap0: entered promiscuous mode [ 559.206272][T20766] gretap0: left promiscuous mode [ 559.371162][T20771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6597'. [ 559.384312][T20771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6597'. [ 559.395421][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 559.402511][ C1] wdm_int_callback: 306 callbacks suppressed [ 559.402536][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.415145][ C1] wdm_int_callback: 306 callbacks suppressed [ 559.415171][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.427947][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.434588][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.440957][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.447592][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.453923][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.460546][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.467096][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.473748][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.480070][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.486696][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.493046][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.499671][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.505975][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.512603][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.518948][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 559.525573][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 559.532417][ T8741] usb 1-1: USB disconnect, device number 66 [ 559.721054][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 559.795846][T20777] hsr_slave_0: left promiscuous mode [ 559.815535][T20777] hsr_slave_1: left promiscuous mode [ 560.007138][T20781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.017343][T20781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.027152][T20781] batman_adv: batadv0: Removing interface: macvtap1 [ 561.442519][ T8743] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 561.587281][T20829] loop3: detected capacity change from 0 to 7 [ 561.596013][T20829] Dev loop3: unable to read RDB block 7 [ 561.601799][T20829] loop3: AHDI p3 p4 [ 561.606997][T20829] loop3: partition table partially beyond EOD, truncated [ 561.609122][ T8743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.624636][T20829] loop3: p3 start 1702000233 is beyond EOD, truncated [ 561.704421][ T8743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.736874][ T8743] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 561.767114][ T8743] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 561.793683][ T8743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.813559][ T8743] usb 2-1: config 0 descriptor?? [ 562.275393][ T8743] hid_parser_main: 5 callbacks suppressed [ 562.275418][ T8743] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 562.316972][ T8743] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 562.352437][ T8743] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 562.359919][ T8743] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 562.412619][ T8743] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 562.456855][ T8743] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 562.491623][ T8743] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 562.528772][ T8743] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 562.541249][ T8743] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 562.559462][ T8743] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 562.585085][ T8743] plantronics 0003:047F:FFFF.0055: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 562.612817][ C1] ------------[ cut here ]------------ [ 562.618747][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 562.628690][ C1] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: syz.0.6629/20848 [ 562.639559][ C1] Modules linked in: [ 562.644271][ C1] CPU: 1 UID: 0 PID: 20848 Comm: syz.0.6629 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.655381][ C1] Tainted: [L]=SOFTLOCKUP [ 562.659766][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.669889][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 562.676210][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 562.695927][ C1] RSP: 0018:ffffc90000a08618 EFLAGS: 00010246 [ 562.702060][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 562.710107][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022e3b0 [ 562.718143][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 562.726191][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff8880796b6de8 [ 562.734236][ C1] R13: 0000000000000000 R14: ffffffff9022e3b0 R15: ffff88806cbb3138 [ 562.742242][ C1] FS: 0000000000000000(0000) GS:ffff888125560000(0063) knlGS:00000000f54bdb40 [ 562.751247][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 562.757899][ C1] CR2: 000000000c417197 CR3: 0000000030886000 CR4: 00000000003526f0 [ 562.765951][ C1] Call Trace: [ 562.769269][ C1] [ 562.772158][ C1] rate_control_send_low+0x1a7/0x7b0 [ 562.777536][ C1] rate_control_get_rate+0x20b/0x5d0 [ 562.782910][ C1] ieee80211_beacon_get_finish+0x3af/0x6f0 [ 562.788872][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 562.795280][ C1] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 562.801412][ C1] ? ieee80211_beacon_get_ap+0x8cb/0x2040 [ 562.807217][ C1] ieee80211_beacon_get_ap+0x196a/0x2040 [ 562.812955][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 562.819033][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 562.824659][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 562.830356][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 562.835994][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 562.841601][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 562.847174][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 562.853333][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 562.859022][ C1] ? lock_acquire+0xf0/0x2e0 [ 562.863698][ C1] __iterate_interfaces+0x2ab/0x590 [ 562.868936][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 562.875080][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 562.882368][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 562.888474][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 562.895601][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 562.900977][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 562.906869][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 562.912173][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 562.917977][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 562.924138][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 562.924735][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.929298][ C1] handle_softirqs+0x22a/0x870 [ 562.936603][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.940367][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 562.951423][ C1] __irq_exit_rcu+0x5f/0x150 [ 562.956092][ C1] irq_exit_rcu+0x9/0x30 [ 562.960378][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 562.966084][ C1] [ 562.969047][ C1] [ 562.972004][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 562.978064][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 562.984587][ C1] Code: f7 e8 cd 4f f1 f5 f7 c3 00 02 00 00 74 05 e8 d0 a7 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 0c e3 f5 65 8b 05 0d 20 6b 07 85 c0 74 18 5b 41 5e c3 cc cc [ 563.004272][ C1] RSP: 0018:ffffc9000536ef98 EFLAGS: 00000206 [ 563.010385][ C1] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001 [ 563.018426][ C1] RDX: 0000000000000006 RSI: ffffffff8def6c33 RDI: 0000000000000001 [ 563.026488][ C1] RBP: 0000000000000011 R08: ffffffff90119ab7 R09: 1ffffffff2023356 [ 563.034538][ C1] R10: dffffc0000000000 R11: fffffbfff2023357 R12: ffff8880559fcc78 [ 563.042592][ C1] R13: 0000000000000246 R14: ffffffff8fbd0bc0 R15: dffffc0000000000 [ 563.050619][ C1] linkwatch_fire_event+0x1dc/0x220 [ 563.056000][ C1] netif_carrier_on+0xa5/0x130 [ 563.060907][ C1] ieee80211_start_ap+0x26c0/0x3830 [ 563.066206][ C1] ? __pfx_ieee80211_start_ap+0x10/0x10 [ 563.071806][ C1] ? __pfx_nl80211_calculate_ap_params+0x10/0x10 [ 563.078310][ C1] ? rcu_needs_cpu+0xa4/0xb0 [ 563.082987][ C1] rdev_start_ap+0xf3/0x2a0 [ 563.087549][ C1] nl80211_start_ap+0x1e3b/0x25c0 [ 563.092743][ C1] ? __pfx_nl80211_start_ap+0x10/0x10 [ 563.098162][ C1] ? nl80211_pre_doit+0x4f1/0x930 [ 563.103273][ C1] genl_family_rcv_msg_doit+0x22a/0x330 [ 563.108941][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 563.115101][ C1] ? bpf_lsm_capable+0x9/0x20 [ 563.119837][ C1] ? security_capable+0x7e/0x2c0 [ 563.124963][ C1] genl_rcv_msg+0x61c/0x7a0 [ 563.129517][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.134627][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 563.140037][ C1] ? __pfx_nl80211_start_ap+0x10/0x10 [ 563.145486][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 563.150981][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 563.156018][ C1] netlink_rcv_skb+0x232/0x4b0 [ 563.160899][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.166005][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.171370][ C1] ? down_read+0x272/0x2e0 [ 563.175862][ C1] ? genl_rcv+0xd/0x40 [ 563.179970][ C1] genl_rcv+0x28/0x40 [ 563.184024][ C1] netlink_unicast+0x80f/0x9b0 [ 563.188847][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 563.194216][ C1] ? netlink_sendmsg+0x650/0xb40 [ 563.199201][ C1] ? skb_put+0x11b/0x210 [ 563.203600][ C1] netlink_sendmsg+0x813/0xb40 [ 563.208421][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.213794][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 563.218878][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 563.224245][ C1] ____sys_sendmsg+0x972/0x9f0 [ 563.229129][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.234590][ C1] ? preempt_schedule_common+0x82/0xd0 [ 563.240097][ C1] ___sys_sendmsg+0x2a5/0x360 [ 563.244859][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.250099][ C1] ? futex_private_hash_put+0x13b/0x170 [ 563.255732][ C1] ? futex_wake+0x4ac/0x580 [ 563.260313][ C1] ? __fget_files+0x2a/0x420 [ 563.265001][ C1] ? __fget_files+0x3a0/0x420 [ 563.269738][ C1] __sys_sendmsg+0x183/0x260 [ 563.274410][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 563.279590][ C1] __do_fast_syscall_32+0x20d/0x640 [ 563.284868][ C1] ? do_fast_syscall_32+0x33/0x70 [ 563.289934][ C1] ? asm_int80_emulation+0x1a/0x20 [ 563.295120][ C1] ? do_int80_emulation+0x274/0x4d0 [ 563.300361][ C1] ? trace_irq_disable+0x3b/0x150 [ 563.305476][ C1] do_fast_syscall_32+0x33/0x70 [ 563.310367][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 563.316779][ C1] RIP: 0023:0xf70cef6c [ 563.320887][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 563.340569][ C1] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 563.349089][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 563.357137][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.365197][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.373240][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 563.381242][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.389299][ C1] [ 563.392395][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 563.399710][ C1] CPU: 1 UID: 0 PID: 20848 Comm: syz.0.6629 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.410694][ C1] Tainted: [L]=SOFTLOCKUP [ 563.415046][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.425131][ C1] Call Trace: [ 563.428441][ C1] [ 563.431401][ C1] vpanic+0x56c/0xa60 [ 563.435449][ C1] ? __pfx__printk+0x10/0x10 [ 563.440075][ C1] ? __pfx_vpanic+0x10/0x10 [ 563.444622][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 563.450025][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 563.455280][ C1] panic+0xc5/0xd0 [ 563.459061][ C1] ? __pfx_panic+0x10/0x10 [ 563.463537][ C1] __warn+0x315/0x4f0 [ 563.467564][ C1] ? __rate_control_send_low+0x524/0x800 [ 563.473232][ C1] ? __rate_control_send_low+0x524/0x800 [ 563.478904][ C1] __report_bug+0x29a/0x540 [ 563.483537][ C1] ? __rate_control_send_low+0x524/0x800 [ 563.489206][ C1] ? __pfx___report_bug+0x10/0x10 [ 563.494272][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 563.499597][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 563.504842][ C1] report_bug_entry+0x19a/0x290 [ 563.509744][ C1] ? __rate_control_send_low+0x5bb/0x800 [ 563.515415][ C1] ? __rate_control_send_low+0x5c0/0x800 [ 563.521091][ C1] handle_bug+0xce/0x200 [ 563.525423][ C1] exc_invalid_op+0x1a/0x50 [ 563.530027][ C1] asm_exc_invalid_op+0x1a/0x20 [ 563.534913][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 563.541193][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 563.560837][ C1] RSP: 0018:ffffc90000a08618 EFLAGS: 00010246 [ 563.566947][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 563.574971][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022e3b0 [ 563.582998][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.591012][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff8880796b6de8 [ 563.599032][ C1] R13: 0000000000000000 R14: ffffffff9022e3b0 R15: ffff88806cbb3138 [ 563.607091][ C1] ? __rate_control_send_low+0x58d/0x800 [ 563.612784][ C1] rate_control_send_low+0x1a7/0x7b0 [ 563.618119][ C1] rate_control_get_rate+0x20b/0x5d0 [ 563.623451][ C1] ieee80211_beacon_get_finish+0x3af/0x6f0 [ 563.629308][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 563.635683][ C1] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 563.641800][ C1] ? ieee80211_beacon_get_ap+0x8cb/0x2040 [ 563.647566][ C1] ieee80211_beacon_get_ap+0x196a/0x2040 [ 563.653260][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 563.659296][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 563.664890][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 563.670476][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 563.676067][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 563.681666][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 563.687170][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 563.693293][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 563.698880][ C1] ? lock_acquire+0xf0/0x2e0 [ 563.703512][ C1] __iterate_interfaces+0x2ab/0x590 [ 563.708753][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 563.714864][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 563.722099][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 563.728204][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 563.735269][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 563.740516][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 563.746369][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 563.751626][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 563.757389][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 563.763504][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 563.768655][ C1] handle_softirqs+0x22a/0x870 [ 563.773455][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 563.778257][ C1] __irq_exit_rcu+0x5f/0x150 [ 563.782866][ C1] irq_exit_rcu+0x9/0x30 [ 563.787124][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 563.792777][ C1] [ 563.795726][ C1] [ 563.798674][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.804674][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 563.811117][ C1] Code: f7 e8 cd 4f f1 f5 f7 c3 00 02 00 00 74 05 e8 d0 a7 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 0c e3 f5 65 8b 05 0d 20 6b 07 85 c0 74 18 5b 41 5e c3 cc cc [ 563.830738][ C1] RSP: 0018:ffffc9000536ef98 EFLAGS: 00000206 [ 563.836837][ C1] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001 [ 563.844822][ C1] RDX: 0000000000000006 RSI: ffffffff8def6c33 RDI: 0000000000000001 [ 563.852807][ C1] RBP: 0000000000000011 R08: ffffffff90119ab7 R09: 1ffffffff2023356 [ 563.860803][ C1] R10: dffffc0000000000 R11: fffffbfff2023357 R12: ffff8880559fcc78 [ 563.868794][ C1] R13: 0000000000000246 R14: ffffffff8fbd0bc0 R15: dffffc0000000000 [ 563.876806][ C1] linkwatch_fire_event+0x1dc/0x220 [ 563.882052][ C1] netif_carrier_on+0xa5/0x130 [ 563.886850][ C1] ieee80211_start_ap+0x26c0/0x3830 [ 563.892099][ C1] ? __pfx_ieee80211_start_ap+0x10/0x10 [ 563.897694][ C1] ? __pfx_nl80211_calculate_ap_params+0x10/0x10 [ 563.904072][ C1] ? rcu_needs_cpu+0xa4/0xb0 [ 563.908694][ C1] rdev_start_ap+0xf3/0x2a0 [ 563.913234][ C1] nl80211_start_ap+0x1e3b/0x25c0 [ 563.918316][ C1] ? __pfx_nl80211_start_ap+0x10/0x10 [ 563.923718][ C1] ? nl80211_pre_doit+0x4f1/0x930 [ 563.928778][ C1] genl_family_rcv_msg_doit+0x22a/0x330 [ 563.934354][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 563.940448][ C1] ? bpf_lsm_capable+0x9/0x20 [ 563.945156][ C1] ? security_capable+0x7e/0x2c0 [ 563.950133][ C1] genl_rcv_msg+0x61c/0x7a0 [ 563.954657][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.959708][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 563.965117][ C1] ? __pfx_nl80211_start_ap+0x10/0x10 [ 563.970528][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 563.976022][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 563.981005][ C1] netlink_rcv_skb+0x232/0x4b0 [ 563.985806][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.990874][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.996229][ C1] ? down_read+0x272/0x2e0 [ 564.000669][ C1] ? genl_rcv+0xd/0x40 [ 564.004760][ C1] genl_rcv+0x28/0x40 [ 564.008767][ C1] netlink_unicast+0x80f/0x9b0 [ 564.013563][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 564.018874][ C1] ? netlink_sendmsg+0x650/0xb40 [ 564.023868][ C1] ? skb_put+0x11b/0x210 [ 564.028135][ C1] netlink_sendmsg+0x813/0xb40 [ 564.032941][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.038269][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 564.043245][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.048563][ C1] ____sys_sendmsg+0x972/0x9f0 [ 564.053365][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.058685][ C1] ? preempt_schedule_common+0x82/0xd0 [ 564.064188][ C1] ___sys_sendmsg+0x2a5/0x360 [ 564.068905][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.074131][ C1] ? futex_private_hash_put+0x13b/0x170 [ 564.079711][ C1] ? futex_wake+0x4ac/0x580 [ 564.084277][ C1] ? __fget_files+0x2a/0x420 [ 564.088932][ C1] ? __fget_files+0x3a0/0x420 [ 564.093652][ C1] __sys_sendmsg+0x183/0x260 [ 564.098269][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 564.103423][ C1] __do_fast_syscall_32+0x20d/0x640 [ 564.108655][ C1] ? do_fast_syscall_32+0x33/0x70 [ 564.113709][ C1] ? asm_int80_emulation+0x1a/0x20 [ 564.118842][ C1] ? do_int80_emulation+0x274/0x4d0 [ 564.124059][ C1] ? trace_irq_disable+0x3b/0x150 [ 564.129126][ C1] do_fast_syscall_32+0x33/0x70 [ 564.134037][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.140390][ C1] RIP: 0023:0xf70cef6c [ 564.144484][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 564.164123][ C1] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 564.172569][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 564.180560][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.188556][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.196546][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 564.204543][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.212551][ C1] [ 564.216259][ C1] Kernel Offset: disabled [ 564.220587][ C1] Rebooting in 86400 seconds..