last executing test programs: 1m52.428160171s ago: executing program 0 (id=3743): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x2c}}, 0x10) 1m52.21486411s ago: executing program 0 (id=3746): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=r1, @ANYBLOB="00000000000001002000128008000100677265001400028006000f00ab00000006000e00005e"], 0x40}}, 0x90) 1m51.930440739s ago: executing program 0 (id=3748): io_setup(0x2, &(0x7f0000000040)=0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040)=0x9, 0x4) 1m51.627116415s ago: executing program 0 (id=3753): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) 1m50.166768808s ago: executing program 0 (id=3769): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r1, 0x0, 0x0) 1m50.102298562s ago: executing program 0 (id=3771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m33.933096035s ago: executing program 32 (id=3771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.497728065s ago: executing program 4 (id=4825): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 5.112054026s ago: executing program 4 (id=4830): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x3, @local, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 4.117823204s ago: executing program 5 (id=4835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x404c095}, 0x800) 3.999211923s ago: executing program 5 (id=4836): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r0 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.762700096s ago: executing program 3 (id=4838): r0 = io_uring_setup(0x560e, &(0x7f0000000a40)={0x0, 0xb589, 0x2, 0x0, 0x3bd}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.533745804s ago: executing program 5 (id=4840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffefa, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) 3.097861635s ago: executing program 3 (id=4843): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}], 0x1}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.833007052s ago: executing program 5 (id=4846): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 1.586210179s ago: executing program 1 (id=4851): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.585723095s ago: executing program 2 (id=4852): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) shutdown(r0, 0x1) 1.558750212s ago: executing program 4 (id=4853): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.41597776s ago: executing program 5 (id=4854): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 1.31378442s ago: executing program 1 (id=4855): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x15, 0x0, 0x1, 0xff, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.150593867s ago: executing program 4 (id=4856): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xd82, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd4c, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], "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"}}}}}, 0x0) 1.057891773s ago: executing program 5 (id=4857): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 1.049659486s ago: executing program 2 (id=4858): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x32b}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 899.136747ms ago: executing program 1 (id=4859): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) unshare(0x2c020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 760.65ms ago: executing program 3 (id=4860): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 606.497444ms ago: executing program 4 (id=4861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303, 0x39}, "2f9ba2ce41a730cb", "37a000000000002a000000000200", "40c28f00", "de3f106b925ded4d"}, 0x28) 596.845337ms ago: executing program 1 (id=4862): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0205fc090900000027bd7000070000000500060000000e000a004e24fffffffdfc01000000000000000000000000000098850000000000000200010004"], 0x48}, 0x1, 0x400000000000000}, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) read$FUSE(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 534.072397ms ago: executing program 3 (id=4863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002540)={0x28, r1, 0xe03, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) 460.362637ms ago: executing program 2 (id=4864): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 346.667008ms ago: executing program 4 (id=4865): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000020904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000440)={0x20, 0x15, 0x2, "12fb"}, 0x0, 0x0}) 320.773084ms ago: executing program 3 (id=4866): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)) 256.873283ms ago: executing program 2 (id=4867): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x300000f, 0x12, r0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) 150.74409ms ago: executing program 1 (id=4868): r0 = io_uring_setup(0x167c, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000000), 0x1) 104.73948ms ago: executing program 2 (id=4869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@random={0xff, 0x1, "c5"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 94.127956ms ago: executing program 3 (id=4870): r0 = syz_io_uring_setup(0x3224, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x2, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103, 0x0, {0xfffe}}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 729.108µs ago: executing program 1 (id=4871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000002c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 0s ago: executing program 2 (id=4872): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) kernel console output (not intermixed with test programs): maxpacket: 16 [ 418.325690][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.325753][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 418.325779][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.352602][ T10] usb 1-1: config 0 descriptor?? [ 418.777833][ T5914] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 418.823353][ T10] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 418.938221][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 418.943103][ T5914] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 418.943137][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.983168][ T5914] usb 2-1: config 0 descriptor?? [ 419.025425][ T5914] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 419.270167][ T10] usb 1-1: USB disconnect, device number 30 [ 419.721194][T15709] sctp: [Deprecated]: syz.4.3036 (pid 15709) Use of int in max_burst socket option deprecated. [ 419.721194][T15709] Use struct sctp_assoc_value instead [ 419.867113][ T5914] gspca_vc032x: reg_w err -71 [ 419.867160][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867173][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867183][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867193][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867202][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867213][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867223][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867232][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867241][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867250][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867260][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867269][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867279][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867288][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867298][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867307][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867316][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867326][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.867342][ T5914] gspca_vc032x: Unknown sensor... [ 419.867430][ T5914] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 419.990965][ T5914] usb 2-1: USB disconnect, device number 32 [ 420.024488][T15716] netlink: 'syz.4.3039': attribute type 49 has an invalid length. [ 420.211196][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.652579][T15734] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3047'. [ 423.541977][T15807] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3080'. [ 424.537803][T15832] smc: net device bond0 applied user defined pnetid SYZ0 [ 424.549874][T15832] smc: net device bond0 erased user defined pnetid SYZ0 [ 425.049918][ T5913] IPVS: starting estimator thread 0... [ 425.161181][T15850] IPVS: using max 10 ests per chain, 24000 per kthread [ 425.513826][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3109'. [ 425.595841][T15873] tap0: tun_chr_ioctl cmd 1074025677 [ 425.596080][T15873] tap0: linktype set to 773 [ 425.726727][ T5898] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 425.894369][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 425.894510][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 425.894559][ T5898] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 425.894583][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.911447][ T5898] usb 3-1: config 0 descriptor?? [ 425.932843][T15863] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 426.124318][T15887] netlink: 'syz.4.3116': attribute type 1 has an invalid length. [ 426.125569][T15887] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3116'. [ 426.374237][ T5898] glorious 0003:22D4:1503.0020: item fetching failed at offset 5/7 [ 426.395167][ T5898] glorious 0003:22D4:1503.0020: probe with driver glorious failed with error -22 [ 426.488181][T15898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3121'. [ 426.489609][T15898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3121'. [ 426.490429][T15898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3121'. [ 426.608064][ T5898] usb 3-1: USB disconnect, device number 25 [ 427.277083][ T5914] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 427.443369][ T5914] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 427.443402][ T5914] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 427.443422][ T5914] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 427.443443][ T5914] usb 2-1: config 220 has no interface number 2 [ 427.443534][ T5914] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 427.443562][ T5914] usb 2-1: config 220 interface 0 has no altsetting 0 [ 427.443582][ T5914] usb 2-1: config 220 interface 76 has no altsetting 0 [ 427.443602][ T5914] usb 2-1: config 220 interface 1 has no altsetting 0 [ 427.446943][ T5914] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 427.446975][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.446996][ T5914] usb 2-1: Product: syz [ 427.447012][ T5914] usb 2-1: Manufacturer: syz [ 427.447026][ T5914] usb 2-1: SerialNumber: syz [ 427.791808][ T5914] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 427.791846][ T5914] usb 2-1: No valid video chain found. [ 427.791912][ T5914] usb 2-1: selecting invalid altsetting 0 [ 427.824276][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.828246][ T5914] usb 2-1: selecting invalid altsetting 0 [ 427.828291][ T5914] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 427.832535][ T5914] usb 2-1: USB disconnect, device number 33 [ 428.398221][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3153'. [ 429.340206][ T5914] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 429.504461][ T5914] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 429.504515][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.504539][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 429.504585][ T5914] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 429.504610][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.564052][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 429.577543][ T5914] usb 1-1: config 0 descriptor?? [ 429.725092][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 429.734204][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.734516][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.734544][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 429.734662][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 429.734688][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.833656][ T31] usb 2-1: config 0 descriptor?? [ 430.059970][ T5914] holtek_kbd 0003:04D9:A055.0021: bogus close delimiter [ 430.059995][ T5914] holtek_kbd 0003:04D9:A055.0021: item 0 4 2 10 parsing failed [ 430.066733][ T5914] holtek_kbd 0003:04D9:A055.0021: probe with driver holtek_kbd failed with error -22 [ 430.271367][ T5971] usb 1-1: USB disconnect, device number 31 [ 430.330436][ T31] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 430.330475][ T31] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 430.348867][ T31] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 430.348907][ T31] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 430.348949][ T31] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 430.348977][ T31] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 430.349004][ T31] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 430.349031][ T31] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 430.349058][ T31] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 430.349085][ T31] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 430.494015][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0022/input/input29 [ 430.534489][ T31] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 430.582050][ T31] usb 2-1: USB disconnect, device number 34 [ 431.277692][ T5971] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 431.438166][ T5971] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 431.444982][ T5971] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 431.445016][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.445038][ T5971] usb 3-1: Product: syz [ 431.445053][ T5971] usb 3-1: Manufacturer: syz [ 431.445077][ T5971] usb 3-1: SerialNumber: syz [ 431.495082][ T5971] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 432.130888][T16039] Bluetooth: MGMT ver 1.23 [ 432.378175][ T5971] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 432.391917][ T5971] usb 3-1: USB disconnect, device number 26 [ 433.295828][T16073] tap0: tun_chr_ioctl cmd 1074025677 [ 433.301248][T16073] tap0: linktype set to 804 [ 434.033372][ T5914] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 434.213527][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 434.213566][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.213612][ T5914] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 434.213648][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.301570][ T5914] usb 2-1: config 0 descriptor?? [ 434.305392][T16092] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.562993][T16114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3222'. [ 434.802101][ T5914] playstation 0003:054C:0BA0.0023: hidraw0: USB HID v1.01 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 434.833745][T16117] program syz.2.3223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.879416][T16121] loop2: detected capacity change from 0 to 7 [ 434.901911][T16121] Dev loop2: unable to read RDB block 7 [ 434.902038][T16121] loop2: unable to read partition table [ 434.902425][T16121] loop2: partition table beyond EOD, truncated [ 434.902447][T16121] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 434.996887][ T5914] playstation 0003:054C:0BA0.0023: Invalid reportID received, expected 18 got 9 [ 434.996919][ T5914] playstation 0003:054C:0BA0.0023: Failed to retrieve DualShock4 pairing info: -22 [ 434.996973][ T5914] playstation 0003:054C:0BA0.0023: Failed to get MAC address from DualShock4 [ 434.996989][ T5914] playstation 0003:054C:0BA0.0023: Failed to create dualshock4. [ 434.999719][ T5914] playstation 0003:054C:0BA0.0023: probe with driver playstation failed with error -22 [ 435.242793][ T31] usb 2-1: USB disconnect, device number 35 [ 435.466021][ T5914] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 435.594450][ T5971] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 435.626284][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 435.629965][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.630002][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.630046][ T5914] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 435.630070][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.682746][ T5914] usb 1-1: config 0 descriptor?? [ 435.690133][ T5914] hub 1-1:0.0: USB hub found [ 435.757495][ T5971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.757555][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 435.757584][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 435.757614][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 435.757637][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 435.767556][ T5971] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 435.767589][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 435.767613][ T5971] usb 4-1: Product: syz [ 435.767629][ T5971] usb 4-1: Manufacturer: syz [ 435.767648][ T5971] usb 4-1: SerialNumber: syz [ 435.780669][ T5971] usb 4-1: config 0 descriptor?? [ 435.912515][ T5914] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 436.052736][ T5971] radio-si470x 4-1:0.0: DeviceID=0xc8c8 ChipID=0xc500 [ 436.268885][ T5971] radio-si470x 4-1:0.0: software version 200, hardware version 200 [ 436.357864][ T5914] hid-generic 0003:046D:C31C.0024: item fetching failed at offset 0/1 [ 436.358964][ T5914] hid-generic 0003:046D:C31C.0024: probe with driver hid-generic failed with error -22 [ 436.449604][ T31] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 436.485345][ T5971] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 436.485407][ T5971] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 436.488182][ T5971] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 436.488628][ T5971] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 436.527750][ T5971] usb 4-1: USB disconnect, device number 29 [ 436.617874][ T31] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 436.617908][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.617929][ T31] usb 2-1: Product: syz [ 436.617944][ T31] usb 2-1: Manufacturer: syz [ 436.617960][ T31] usb 2-1: SerialNumber: syz [ 436.671581][ T31] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 436.696857][ T5914] usb 1-1: USB disconnect, device number 32 [ 436.782462][ T5913] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 437.170682][T16160] loop8: detected capacity change from 0 to 1 [ 437.187825][T16160] Dev loop8: unable to read RDB block 1 [ 437.187877][T16160] loop8: unable to read partition table [ 437.188128][T16160] loop8: partition table beyond EOD, truncated [ 437.188151][T16160] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 437.390730][T16164] program syz.3.3246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.621855][T16165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.622307][T16165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.903712][ T5913] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 437.913671][ T5913] ath9k_htc: Failed to initialize the device [ 437.935644][ T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 438.040316][ T5913] usb 2-1: ath9k_htc: USB layer deinitialized [ 438.100348][ T10] usb 2-1: USB disconnect, device number 36 [ 438.128613][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 438.131884][ T31] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.131920][ T31] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.134573][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 438.134604][ T31] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 438.134627][ T31] usb 1-1: Product: syz [ 438.134643][ T31] usb 1-1: Manufacturer: syz [ 438.207270][ T31] hub 1-1:4.0: USB hub found [ 438.448044][ T31] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 438.611092][T16193] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 438.791401][T16195] tipc: Started in network mode [ 438.791422][T16195] tipc: Node identity , cluster identity 4711 [ 438.791438][T16195] tipc: Failed to set node id, please configure manually [ 438.791485][T16195] tipc: Enabling of bearer rejected, failed to enable media [ 438.823243][ T31] usb 1-1: USB disconnect, device number 33 [ 439.003083][T16199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3263'. [ 439.244458][T16206] vlan0: entered allmulticast mode [ 439.244485][T16206] hsr0: entered allmulticast mode [ 439.244500][T16206] hsr_slave_0: entered allmulticast mode [ 439.244523][T16206] hsr_slave_1: entered allmulticast mode [ 439.833640][T16222] 9pnet_fd: Insufficient options for proto=fd [ 439.876489][T16226] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 439.876513][T16226] dvmrp1: ignored: set checksum disabled [ 440.265999][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 440.426401][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 440.429432][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.429468][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.429493][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 440.429530][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 440.429554][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.469627][ T31] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 440.498822][ T10] usb 1-1: config 0 descriptor?? [ 440.629427][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 440.632366][ T31] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 440.632396][ T31] usb 2-1: config 0 has no interface number 0 [ 440.632448][ T31] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.632475][ T31] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.632515][ T31] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 440.632539][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.660759][ T31] usb 2-1: config 0 descriptor?? [ 441.190258][ T5913] usb 1-1: USB disconnect, device number 34 [ 441.330044][ T31] uclogic 0003:28BD:0094.0026: pen parameters not found [ 441.330072][ T31] uclogic 0003:28BD:0094.0026: interface is invalid, ignoring [ 441.561894][ T5913] usb 2-1: USB disconnect, device number 37 [ 442.042370][T16262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3293'. [ 442.145399][T16268] program syz.0.3295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.274929][T16271] input: syz1 as /devices/virtual/input/input30 [ 442.552386][ T38] audit: type=1326 audit(1759245157.655:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16273 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f523aa5af79 code=0x7ffc0000 [ 442.552825][ T38] audit: type=1326 audit(1759245157.655:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16273 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f523aa5af79 code=0x7ffc0000 [ 442.553362][ T38] audit: type=1326 audit(1759245157.655:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16273 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f523aa5af79 code=0x7ffc0000 [ 442.553993][ T38] audit: type=1326 audit(1759245157.655:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16273 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f523aa5af79 code=0x7ffc0000 [ 442.554581][ T38] audit: type=1326 audit(1759245157.665:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16273 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f523aa5af79 code=0x7ffc0000 [ 442.554891][ T38] audit: type=1326 audit(1759245157.665:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16273 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f523aa5af79 code=0x7ffc0000 [ 442.555393][ T38] audit: type=1326 audit(1759245157.665:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16273 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f523aa5af79 code=0x7ffc0000 [ 442.556027][ T38] audit: type=1326 audit(1759245157.665:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16273 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f523aa5af79 code=0x7ffc0000 [ 442.556526][ T38] audit: type=1326 audit(1759245157.665:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16273 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f523aa5af79 code=0x7ffc0000 [ 442.557181][ T38] audit: type=1326 audit(1759245157.665:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16273 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f523aa5af79 code=0x7ffc0000 [ 444.210932][ T31] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 444.392218][ T31] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 444.392253][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.420259][ T31] usb 1-1: config 0 descriptor?? [ 445.322282][ T31] usb 1-1: Cannot set autoneg [ 445.322785][ T31] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 445.343077][ T31] usb 1-1: USB disconnect, device number 35 [ 445.441512][T16328] netlink: 'syz.1.3323': attribute type 1 has an invalid length. [ 445.441539][T16328] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3323'. [ 445.441557][T16328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3323'. [ 445.825113][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 445.826711][T16341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3329'. [ 445.987857][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 445.987896][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.987938][ T10] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 445.987962][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.036708][ T10] usb 4-1: config 0 descriptor?? [ 446.528971][ T10] elo 0003:04E7:0030.0027: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input0 [ 446.733931][ T10] usb 4-1: USB disconnect, device number 30 [ 447.118791][ T5971] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 447.279075][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 447.285215][ T5971] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 447.285248][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.289085][ T5971] usb 3-1: config 0 descriptor?? [ 447.324585][ T5971] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 447.324677][ T5971] dvb-usb: bulk message failed: -22 (3/0) [ 447.328931][ T5971] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 447.329904][ T5971] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 447.330077][ T5971] usb 3-1: media controller created [ 447.330165][ T5971] dvb-usb: bulk message failed: -22 (5/0) [ 447.330239][ T5971] dvb-usb: MAC address reading failed. [ 447.382433][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.402995][ T5971] dvb-usb: bulk message failed: -22 (6/0) [ 447.403368][ T5971] dvb-usb: bulk message failed: -22 (6/0) [ 447.403497][ T5971] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 447.441187][ T5971] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 447.461656][ T5971] dvb-usb: schedule remote query interval to 100 msecs. [ 447.461680][ T5971] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 447.471424][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 447.498526][ T10] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 447.498559][ T10] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 447.498581][ T10] usb 1-1: Product: syz [ 447.498596][ T10] usb 1-1: Manufacturer: syz [ 447.498611][ T10] usb 1-1: SerialNumber: syz [ 447.538958][ T10] usb 1-1: config 0 descriptor?? [ 447.541022][ T31] usb 3-1: USB disconnect, device number 27 [ 447.658547][ T31] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 447.699864][T16384] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3349'. [ 447.699920][T16384] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3349'. [ 447.828221][ T5913] usb 1-1: USB disconnect, device number 36 [ 448.628214][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 448.818522][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 448.828879][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 448.843451][ T10] usb 2-1: config 4 interface 0 has no altsetting 0 [ 448.847821][ T10] usb 2-1: string descriptor 0 read error: -22 [ 448.847973][ T10] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 448.848001][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.898473][ T10] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 448.904571][ T5914] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 448.920639][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 448.921059][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 448.921110][ T10] usb 2-1: media controller created [ 448.969378][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.081101][ T5914] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.081141][ T5914] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 449.081169][ T5914] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 449.081215][ T5914] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 449.081254][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.102791][T16410] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 449.748144][ T38] kauditd_printk_skb: 601 callbacks suppressed [ 449.748182][ T38] audit: type=1400 audit(1759245164.390:1196): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=16423 comm="syz.3.3367" name="673" dev="tmpfs" ino=3428 [ 450.252716][ T5914] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 450.256106][ T5914] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input32 [ 450.426913][ T10] usb 2-1: USB disconnect, device number 38 [ 450.509341][ T5914] usb 1-1: USB disconnect, device number 37 [ 450.514489][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 450.742792][ T5971] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 450.848148][ T38] audit: type=1326 audit(1759245165.419:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16446 comm="syz.3.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50194ceec9 code=0x7ffc0000 [ 450.848730][ T38] audit: type=1326 audit(1759245165.419:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16446 comm="syz.3.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50194ceec9 code=0x7ffc0000 [ 450.849407][ T38] audit: type=1326 audit(1759245165.419:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16446 comm="syz.3.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50194ceec9 code=0x7ffc0000 [ 450.883398][ T38] audit: type=1326 audit(1759245165.457:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16446 comm="syz.3.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f50194c5d67 code=0x7ffc0000 [ 450.883858][ T38] audit: type=1326 audit(1759245165.457:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16446 comm="syz.3.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f501946af79 code=0x7ffc0000 [ 450.887790][ T38] audit: type=1326 audit(1759245165.457:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16446 comm="syz.3.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f50194ceec9 code=0x7ffc0000 [ 450.887857][ T38] audit: type=1326 audit(1759245165.457:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16446 comm="syz.3.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50194ceec9 code=0x7ffc0000 [ 450.887912][ T38] audit: type=1326 audit(1759245165.457:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16446 comm="syz.3.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50194ceec9 code=0x7ffc0000 [ 450.925298][ T5971] usb 3-1: Using ep0 maxpacket: 32 [ 450.928359][ T5971] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 450.928391][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.058565][ T5971] usb 3-1: config 0 descriptor?? [ 451.069613][ T5971] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 451.852509][T16470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3388'. [ 451.865500][ T5898] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 451.939926][ T5971] gspca_nw80x: reg_r err -71 [ 451.941826][ T5971] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 451.949964][ T5971] usb 3-1: USB disconnect, device number 28 [ 452.056229][ T5898] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 452.056265][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.056287][ T5898] usb 1-1: Product: syz [ 452.056303][ T5898] usb 1-1: Manufacturer: syz [ 452.056318][ T5898] usb 1-1: SerialNumber: syz [ 452.071130][T16476] netlink: 'syz.4.3391': attribute type 11 has an invalid length. [ 452.105791][ T5898] usb 1-1: config 0 descriptor?? [ 452.122194][ T5898] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 038 [ 452.567477][ T5898] (null): failure reading functionality [ 452.614530][ T5898] i2c i2c-1: connected i2c-tiny-usb device [ 452.829704][ T31] usb 1-1: USB disconnect, device number 38 [ 453.445124][T16487] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 453.860090][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3418'. [ 453.917968][ T31] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 454.088966][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 454.091591][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 454.091626][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 454.091654][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.091679][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.091725][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.091748][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.407223][ T31] usb 2-1: GET_CAPABILITIES returned 0 [ 454.407273][ T31] usbtmc 2-1:16.0: can't read capabilities [ 454.653067][ T5914] usb 2-1: USB disconnect, device number 39 [ 454.835390][T16559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3430'. [ 454.898822][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'. [ 455.364357][T16577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3439'. [ 455.488583][T16579] block nbd2: server does not support multiple connections per device. [ 455.504036][T16579] block nbd2: shutting down sockets [ 456.830379][T16625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3462'. [ 457.321972][T16642] sctp: [Deprecated]: syz.3.3470 (pid 16642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.321972][T16642] Use struct sctp_sack_info instead [ 458.303237][T16657] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 458.304946][T16657] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 458.379957][T16669] program syz.3.3482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.518970][T16657] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 458.531888][T16657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 458.683494][T16657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 458.831491][T16657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 459.242204][T16695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3494'. [ 459.429565][ T38] audit: type=1326 audit(1759245173.436:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16701 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76553eec9 code=0x7ffc0000 [ 459.429634][ T38] audit: type=1326 audit(1759245173.445:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16701 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76553eec9 code=0x7ffc0000 [ 459.430079][ T38] audit: type=1326 audit(1759245173.445:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16701 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd76553eec9 code=0x7ffc0000 [ 459.431504][ T38] audit: type=1326 audit(1759245173.445:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16701 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76553eec9 code=0x7ffc0000 [ 459.431562][ T38] audit: type=1326 audit(1759245173.445:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16701 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76553eec9 code=0x7ffc0000 [ 459.440785][ T38] audit: type=1326 audit(1759245173.454:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16701 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fd76553eec9 code=0x7ffc0000 [ 459.462311][ T38] audit: type=1326 audit(1759245173.473:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16701 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76553eec9 code=0x7ffc0000 [ 459.462817][ T38] audit: type=1326 audit(1759245173.473:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16701 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fd76553eec9 code=0x7ffc0000 [ 459.472214][ T38] audit: type=1326 audit(1759245173.492:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16701 comm="syz.4.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76553eec9 code=0x7ffc0000 [ 460.117860][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3504'. [ 460.257585][ T5913] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 460.427280][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 460.432145][ T5913] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 460.432180][ T5913] usb 2-1: config 0 has no interface number 0 [ 460.432222][ T5913] usb 2-1: config 0 interface 46 has no altsetting 0 [ 460.438148][ T5913] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=f3.33 [ 460.438183][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.438208][ T5913] usb 2-1: Product: syz [ 460.438225][ T5913] usb 2-1: Manufacturer: syz [ 460.438242][ T5913] usb 2-1: SerialNumber: syz [ 460.454074][ T5913] usb 2-1: config 0 descriptor?? [ 460.482705][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 460.653543][T16729] tmpfs: Cannot retroactively limit size [ 460.738662][ T5836] Bluetooth: hci1: command 0x0405 tx timeout [ 460.804101][T16736] sctp: [Deprecated]: syz.2.3512 (pid 16736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.804101][T16736] Use struct sctp_sack_info instead [ 460.937354][ T5913] f81534a_ctrl 2-1:0.46: failed to set register 0x116: -5 [ 460.937384][ T5913] f81534a_ctrl 2-1:0.46: failed to enable ports: -5 [ 460.937423][ T5913] f81534a_ctrl 2-1:0.46: probe with driver f81534a_ctrl failed with error -5 [ 460.961386][ T5913] usb 2-1: USB disconnect, device number 40 [ 460.995157][ T5971] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 461.157612][ T5971] usb 4-1: Using ep0 maxpacket: 8 [ 461.160356][ T5971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.160419][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 461.160447][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 461.160474][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 461.160497][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 461.165215][ T5971] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 461.165247][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 461.165271][ T5971] usb 4-1: Product: syz [ 461.165286][ T5971] usb 4-1: Manufacturer: syz [ 461.165302][ T5971] usb 4-1: SerialNumber: syz [ 461.262048][ T5971] usb 4-1: config 0 descriptor?? [ 461.818534][ T5971] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 461.818846][ T5971] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 461.971735][ T5913] usb 4-1: USB disconnect, device number 31 [ 462.085558][ T38] audit: type=1326 audit(1759245175.924:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16762 comm="syz.1.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7037eec9 code=0x7ffc0000 [ 462.705588][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 462.962330][ T5836] Bluetooth: hci1: command 0x0405 tx timeout [ 463.557345][T16804] 9pnet_fd: Insufficient options for proto=fd [ 464.893386][T16840] bridge0: port 3(syz_tun) entered blocking state [ 464.907880][T16840] bridge0: port 3(syz_tun) entered disabled state [ 464.908707][T16840] syz_tun: entered allmulticast mode [ 464.939302][T16840] syz_tun: entered promiscuous mode [ 465.143150][ T5971] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 465.186006][ T5836] Bluetooth: hci1: command 0x0405 tx timeout [ 465.323482][ T5971] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 465.323518][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.323540][ T5971] usb 3-1: Product: syz [ 465.323555][ T5971] usb 3-1: Manufacturer: syz [ 465.323571][ T5971] usb 3-1: SerialNumber: syz [ 465.376524][ T5971] usb 3-1: config 0 descriptor?? [ 465.962974][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.963054][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 466.262975][ T5971] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 466.263008][ T5971] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 466.263285][ T5971] asix 3-1:0.0: probe with driver asix failed with error -71 [ 466.308905][ T5971] usb 3-1: USB disconnect, device number 29 [ 467.140083][T16896] vlan2: entered promiscuous mode [ 467.140106][T16896] bond0: entered promiscuous mode [ 467.140120][T16896] bond_slave_0: entered promiscuous mode [ 467.140383][T16896] bond_slave_1: entered promiscuous mode [ 467.409581][ T5836] Bluetooth: hci1: command 0x0405 tx timeout [ 468.748101][ T5913] kernel read not supported for file /dsp1 (pid: 5913 comm: kworker/1:5) [ 468.860897][T16947] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3608'. [ 469.702456][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 469.702488][ T38] audit: type=1400 audit(1759245183.052:1218): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=16978 comm="syz.3.3622" name="729" dev="tmpfs" ino=3710 [ 470.064658][T16989] tap1: tun_chr_ioctl cmd 1074025677 [ 470.064910][T16989] tap1: linktype set to 1 [ 470.114364][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 470.307853][T16994] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3628'. [ 470.309417][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 470.309447][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.314708][ T10] usb 4-1: config 0 descriptor?? [ 470.352080][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 470.824440][T17004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3634'. [ 470.824470][T17004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3634'. [ 471.207230][T17016] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3639'. [ 471.228406][ T10] usb 4-1: USB disconnect, device number 32 [ 471.552100][T17032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3645'. [ 471.617511][T17034] program syz.1.3646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.025790][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.941599][T17082] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 472.941648][T17082] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 473.539421][T17094] ref_ctr_offset mismatch. inode: 0xea8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 473.597396][T17100] netlink: 'syz.4.3676': attribute type 8 has an invalid length. [ 475.278378][ T5905] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 475.278802][ T5914] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 475.438122][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 475.438132][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 475.454718][ T5914] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 475.454755][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.454780][ T5914] usb 1-1: Product: syz [ 475.454797][ T5914] usb 1-1: Manufacturer: syz [ 475.454813][ T5914] usb 1-1: SerialNumber: syz [ 475.469339][ T5914] usb 1-1: config 0 descriptor?? [ 475.484597][ T5914] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 475.501311][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 475.512327][ T5905] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 475.512357][ T5905] usb 4-1: config 0 has no interface number 0 [ 475.512654][ T5905] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 475.512684][ T5905] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 475.553860][ T5905] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 475.553893][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.553914][ T5905] usb 4-1: Product: syz [ 475.553929][ T5905] usb 4-1: Manufacturer: syz [ 475.553944][ T5905] usb 4-1: SerialNumber: syz [ 475.602247][ T5905] usb 4-1: config 0 descriptor?? [ 475.606501][T17148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 475.607262][T17148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 475.713699][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.713800][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.713847][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 475.713875][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.779282][ T10] usb 3-1: config 0 descriptor?? [ 475.900032][T17148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 475.901355][T17148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 476.302853][ T10] lg-g15 0003:046D:C22E.0028: item fetching failed at offset 4/5 [ 476.317552][ T10] lg-g15 0003:046D:C22E.0028: probe with driver lg-g15 failed with error -22 [ 476.387065][ T5914] gspca_sonixj: reg_r err -71 [ 476.387170][ T5914] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 476.405880][ T5914] usb 1-1: USB disconnect, device number 39 [ 476.502660][ T5913] usb 3-1: USB disconnect, device number 30 [ 476.560869][ T5905] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 476.560903][ T5905] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 476.561227][ T5905] asix 4-1:0.251: probe with driver asix failed with error -71 [ 476.602663][ T5905] usb 4-1: USB disconnect, device number 33 [ 477.202045][ T38] audit: type=1326 audit(1759245190.058:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17182 comm="syz.1.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7037eec9 code=0x7ffc0000 [ 477.384635][T17189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3718'. [ 477.399953][T17189] netlink: 'syz.3.3718': attribute type 14 has an invalid length. [ 477.399979][T17189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3718'. [ 477.636876][T17199] overlayfs: failed to clone lowerpath [ 477.993178][ T5898] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 478.025362][ T5913] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 478.153500][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 478.161200][ T5898] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 478.161232][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.189425][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 478.191994][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 478.192036][ T5913] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 478.192060][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.203246][ T5913] usb 1-1: config 0 descriptor?? [ 478.241079][ T5898] usb 2-1: config 0 descriptor?? [ 478.490462][ T5898] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 478.520614][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 478.522806][ T5898] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 478.522869][ T5898] usb 2-1: media controller created [ 478.576394][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.683495][ T5913] hid (null): nested delimiters [ 478.707201][ T5898] az6027: usb out operation failed. (-71) [ 478.707618][ T5898] az6027: usb out operation failed. (-71) [ 478.707633][ T5898] stb0899_attach: Driver disabled by Kconfig [ 478.707645][ T5898] az6027: no front-end attached [ 478.707645][ T5898] [ 478.739607][ T5898] az6027: usb out operation failed. (-71) [ 478.739632][ T5898] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 478.768602][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 478.785082][ T5898] dvb-usb: schedule remote query interval to 400 msecs. [ 478.785105][ T5898] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 478.791029][ T38] audit: type=1326 audit(1759245191.554:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17186 comm="syz.2.3717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523aabeec9 code=0x7ffc0000 [ 478.792417][ T5898] usb 2-1: USB disconnect, device number 41 [ 478.800980][ T38] audit: type=1326 audit(1759245191.554:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17186 comm="syz.2.3717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523aabeec9 code=0x7ffc0000 [ 478.902007][ T10] usb 1-1: USB disconnect, device number 40 [ 479.021497][ T5898] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 479.323640][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3734'. [ 479.504024][T17228] netlink: 'syz.1.3735': attribute type 25 has an invalid length. [ 479.515231][T17228] netlink: 'syz.1.3735': attribute type 25 has an invalid length. [ 479.551255][T17226] bond0: (slave bond1): Error -95 calling ndo_bpf [ 479.976283][ T5898] hid_parser_main: 10 callbacks suppressed [ 479.976307][ T5898] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 479.976338][ T5898] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 479.976365][ T5898] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 479.976391][ T5898] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 479.976416][ T5898] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 479.976441][ T5898] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 479.976467][ T5898] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 479.976508][ T5898] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 479.976534][ T5898] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 479.976560][ T5898] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 480.004929][T17244] UHID_CREATE from different security context by process 2299 (syz.2.3744), this is not allowed. [ 480.113704][ T5898] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 482.069702][T17299] kvm: kvm [17298]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000015) = 0x0 [ 482.162468][ T31] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 482.323228][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 482.326428][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 482.356363][ T31] usb 2-1: config 9 has an invalid interface number: 48 but max is 0 [ 482.356404][ T31] usb 2-1: config 9 has no interface number 0 [ 482.356439][ T31] usb 2-1: config 9 interface 48 has no altsetting 0 [ 482.359454][ T31] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 482.359486][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.359508][ T31] usb 2-1: Product: syz [ 482.359524][ T31] usb 2-1: Manufacturer: syz [ 482.359539][ T31] usb 2-1: SerialNumber: syz [ 482.655377][ T31] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 483.103944][T17319] 9pnet_fd: Insufficient options for proto=fd [ 483.278168][ T31] gspca_vc032x: reg_r err -71 [ 483.278191][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278204][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278225][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278235][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278244][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278254][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278263][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278272][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278282][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278290][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278300][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278309][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278318][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278327][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278337][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278346][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278355][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278364][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278373][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.278383][ T31] gspca_vc032x: Unknown sensor... [ 483.278469][ T31] vc032x 2-1:9.48: probe with driver vc032x failed with error -22 [ 483.284668][ T31] usb 2-1: USB disconnect, device number 42 [ 485.487230][ T5898] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 485.647624][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 485.653834][ T5898] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 485.653866][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.698457][ T5898] pvrusb2: Hardware description: Terratec Grabster AV400 [ 485.698476][ T5898] pvrusb2: ********** [ 485.698484][ T5898] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 485.698497][ T5898] pvrusb2: Important functionality might not be entirely working. [ 485.698508][ T5898] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 485.698521][ T5898] pvrusb2: ********** [ 485.957640][ T2369] pvrusb2: Invalid write control endpoint [ 486.183293][ T31] usb 4-1: USB disconnect, device number 34 [ 486.200483][ T2369] pvrusb2: Invalid write control endpoint [ 486.200500][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 486.200511][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 486.200520][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 486.200531][ T2369] pvrusb2: Device being rendered inoperable [ 486.203657][ T2369] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 486.203725][ T2369] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 486.204786][ T2369] pvrusb2: Attached sub-driver cx25840 [ 486.204801][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 486.204814][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 486.738106][ T5898] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 486.823930][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 486.899344][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 486.901769][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.901860][ T5898] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 486.901888][ T5898] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 486.901927][ T5898] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 486.905435][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 486.905467][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.905488][ T5898] usb 3-1: Product: syz [ 486.905504][ T5898] usb 3-1: Manufacturer: syz [ 486.905520][ T5898] usb 3-1: SerialNumber: syz [ 486.989071][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.989106][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.989147][ T10] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 486.989172][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.052578][ T10] usb 2-1: config 0 descriptor?? [ 487.307978][ T5898] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 487.308117][ T5898] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 487.308137][ T5898] usb 3-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 487.308272][ T5898] usb 3-1: 2:1 : invalid channels 0 [ 487.431580][ T5898] usb 3-1: USB disconnect, device number 31 [ 487.539166][ T10] hid_parser_main: 73 callbacks suppressed [ 487.539194][ T10] steelseries 0003:1038:12B6.002B: unknown main item tag 0x0 [ 487.539224][ T10] steelseries 0003:1038:12B6.002B: unknown main item tag 0x0 [ 487.539247][ T10] steelseries 0003:1038:12B6.002B: unknown main item tag 0x0 [ 487.539269][ T10] steelseries 0003:1038:12B6.002B: unknown main item tag 0x0 [ 487.539291][ T10] steelseries 0003:1038:12B6.002B: unknown main item tag 0x0 [ 487.539313][ T10] steelseries 0003:1038:12B6.002B: unknown main item tag 0x0 [ 487.539336][ T10] steelseries 0003:1038:12B6.002B: unknown main item tag 0x0 [ 487.605238][ T10] steelseries 0003:1038:12B6.002B: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 487.969451][ T5971] usb 2-1: USB disconnect, device number 43 [ 488.893348][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3835'. [ 492.443537][T17519] Dead loop on virtual device ip6_vti0, fix it urgently! [ 492.867897][T17530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3870'. [ 493.218080][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 493.381636][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 493.381667][ T31] usb 4-1: config 0 has no interface number 0 [ 493.381717][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.381746][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.381770][ T31] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.381815][ T31] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 493.381838][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.390451][ T31] usb 4-1: config 0 descriptor?? [ 494.103198][ T31] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.002C/input/input34 [ 494.215993][ T31] uclogic 0003:28BD:0042.002C: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 494.243368][ T31] usb 4-1: USB disconnect, device number 35 [ 494.645852][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3887'. [ 495.274648][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.742924][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.202330][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.662433][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.498845][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.511351][ T5134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 499.552708][ T5134] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 499.566117][ T5134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 499.612680][ T5134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 499.630492][ T5134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 500.612210][T17647] chnl_net:caif_netlink_parms(): no params data found [ 500.909656][T17680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.945863][ T31] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 501.106374][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 501.109060][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.109096][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.109137][ T31] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 501.109162][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.115157][ T31] usb 2-1: config 0 descriptor?? [ 501.356172][T17647] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.370203][T17647] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.370441][T17647] bridge_slave_0: entered allmulticast mode [ 501.373160][T17647] bridge_slave_0: entered promiscuous mode [ 501.397099][T17647] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.397330][T17647] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.397544][T17647] bridge_slave_1: entered allmulticast mode [ 501.400484][T17647] bridge_slave_1: entered promiscuous mode [ 501.570290][ T31] ft260 0003:0403:6030.002D: unknown main item tag 0x7 [ 501.663629][T17695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3943'. [ 501.780967][ T31] ft260 0003:0403:6030.002D: chip code: 6424 8183 [ 501.808551][T17647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.828222][T17647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.876025][ T5836] Bluetooth: hci5: command tx timeout [ 501.996899][ T31] ft260 0003:0403:6030.002D: failed to retrieve system status [ 501.997318][ T31] ft260 0003:0403:6030.002D: probe with driver ft260 failed with error -71 [ 502.015343][ T31] usb 2-1: USB disconnect, device number 44 [ 502.240664][T17647] team0: Port device team_slave_0 added [ 502.244428][T17647] team0: Port device team_slave_1 added [ 502.428248][T17711] bond0: (slave bond1): Error -95 calling ndo_bpf [ 502.707259][T17647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.707277][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.707306][T17647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.746204][T17647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.746226][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.746261][T17647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.058635][T17724] IPVS: persistence engine module ip_vs_pe_ not found [ 503.226001][T17647] hsr_slave_0: entered promiscuous mode [ 503.235992][T17647] hsr_slave_1: entered promiscuous mode [ 503.246266][T17647] debugfs: 'hsr0' already exists in 'hsr' [ 503.246298][T17647] Cannot create hsr debugfs directory [ 504.099581][ T5836] Bluetooth: hci5: command tx timeout [ 504.122000][ T5905] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 504.286211][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 504.297928][ T5905] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 504.297958][ T5905] usb 2-1: config 0 has no interface number 0 [ 504.298008][ T5905] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 504.298037][ T5905] usb 2-1: config 0 interface 85 has no altsetting 0 [ 504.310876][ T5905] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 504.310907][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.310928][ T5905] usb 2-1: Product: syz [ 504.310942][ T5905] usb 2-1: Manufacturer: syz [ 504.310957][ T5905] usb 2-1: SerialNumber: syz [ 504.376233][ T5905] usb 2-1: config 0 descriptor?? [ 505.245728][ T5905] appletouch 2-1:0.85: Geyser mode initialized. [ 505.249025][ T5905] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input35 [ 505.296291][T17647] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 505.302030][ C1] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 505.415629][T17647] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 505.594708][T17647] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 505.631455][ T31] usb 2-1: USB disconnect, device number 45 [ 505.664951][T17647] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 505.800636][ T31] appletouch 2-1:0.85: input: appletouch disconnected [ 506.093538][T17647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.151435][T17647] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.179297][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.184432][ T7236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.190807][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.190979][ T7236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.323382][ T5836] Bluetooth: hci5: command tx timeout [ 507.140621][T17647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.345907][T17647] veth0_vlan: entered promiscuous mode [ 508.421074][T17647] veth1_vlan: entered promiscuous mode [ 508.548021][ T5836] Bluetooth: hci5: command tx timeout [ 508.633803][T17647] veth0_macvtap: entered promiscuous mode [ 508.668658][T17647] veth1_macvtap: entered promiscuous mode [ 508.788505][T17647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.884103][T17647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.956599][ T7236] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.956919][ T7236] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.958196][ T7236] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.958244][ T7236] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.444018][ T7136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.444043][ T7136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.559536][ T7136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.559561][ T7136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.185972][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4019'. [ 510.482202][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 510.649652][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.649706][ T31] usb 6-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 510.649732][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.674424][ T988] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 510.697430][ T31] usb 6-1: config 0 descriptor?? [ 510.824016][ T5971] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 510.847011][ T988] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 510.847042][ T988] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 510.847065][ T988] usb 2-1: config 0 has no interface number 0 [ 510.847183][ T988] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 510.847210][ T988] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 510.847321][ T988] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 510.847347][ T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.925372][ T988] usb 2-1: config 0 descriptor?? [ 511.002624][ T5971] usb 4-1: Using ep0 maxpacket: 8 [ 511.020475][ T5971] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 511.020508][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.020530][ T5971] usb 4-1: Product: syz [ 511.020545][ T5971] usb 4-1: Manufacturer: syz [ 511.020560][ T5971] usb 4-1: SerialNumber: syz [ 511.036158][ T5971] usb 4-1: config 0 descriptor?? [ 511.173933][ T31] hid-rmi 0003:17EF:6085.002E: hidraw0: USB HID vff.fe Device [HID 17ef:6085] on usb-dummy_hcd.5-1/input0 [ 511.314253][ T5971] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 511.368667][ T31] usb 6-1: USB disconnect, device number 2 [ 511.499000][T17898] netlink: 'syz.2.4029': attribute type 6 has an invalid length. [ 511.499140][T17898] netlink: 14573 bytes leftover after parsing attributes in process `syz.2.4029'. [ 511.638011][ T988] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input36 [ 511.733325][ T988] input: failed to attach handler kbd to device input36, error: -5 [ 511.879277][ T10] usb 2-1: USB disconnect, device number 46 [ 511.964097][ T5971] usb write operation failed. (-71) [ 511.976388][ T5971] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 511.980377][ T5971] dvbdev: DVB: registering new adapter (Terratec H7) [ 511.980447][ T5971] usb 4-1: media controller created [ 511.981012][ T5971] usb read operation failed. (-71) [ 511.981706][ T5971] usb write operation failed. (-71) [ 512.068534][ T5971] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 512.072420][ T5971] usb 4-1: USB disconnect, device number 36 [ 512.375716][ T5905] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 512.538998][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.539050][ T5905] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 512.539075][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.587719][ T5905] usb 6-1: config 0 descriptor?? [ 513.273167][ T5905] razer 0003:1532:010E.002F: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 513.440790][T17945] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4052'. [ 513.440815][T17945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4052'. [ 513.440849][T17945] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4052'. [ 513.440897][T17945] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4052'. [ 513.520442][ T988] usb 6-1: USB disconnect, device number 3 [ 514.320390][T17967] netlink: 344 bytes leftover after parsing attributes in process `syz.3.4063'. [ 515.708689][T17993] batadv0: entered promiscuous mode [ 516.000980][ C0] vkms_vblank_simulate: vblank timer overrun [ 516.191017][T17997] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 516.191622][T17997] macvtap1: entered allmulticast mode [ 516.192685][T17997] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 516.330936][T17997] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 516.331100][T17997] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 516.340697][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 516.448036][ C0] vkms_vblank_simulate: vblank timer overrun [ 516.504196][ T31] usb 3-1: config 0 has no interfaces? [ 516.504237][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 516.504262][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.509558][ T31] usb 3-1: config 0 descriptor?? [ 516.749747][T18000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.750194][T18000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.756129][ T31] usb 3-1: USB disconnect, device number 32 [ 517.260290][ T5905] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 517.430756][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 517.433655][ T5905] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 517.433685][ T5905] usb 3-1: config 0 has no interface number 0 [ 517.433735][ T5905] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.433759][ T5905] usb 3-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 517.433784][ T5905] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 517.433806][ T5905] usb 3-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 517.433830][ T5905] usb 3-1: config 0 interface 1 has no altsetting 0 [ 517.433866][ T5905] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 517.433890][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.458257][ T5905] usb 3-1: config 0 descriptor?? [ 517.694978][ T5971] usb 3-1: USB disconnect, device number 33 [ 518.210180][T18038] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4096'. [ 519.014431][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4107'. [ 519.707110][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.460884][T18101] vxcan0: tx address claim with dest, not broadcast [ 520.520885][ T988] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 520.707501][ T988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 520.707538][ T988] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 520.707566][ T988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 520.714644][ T988] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 520.714675][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.714697][ T988] usb 3-1: Product: syz [ 520.714712][ T988] usb 3-1: Manufacturer: syz [ 520.714727][ T988] usb 3-1: SerialNumber: syz [ 520.790283][ T988] usb 3-1: config 0 descriptor?? [ 520.791166][T18097] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 520.791314][T18097] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 520.793638][ T988] usb 3-1: ucan: probing device on interface #0 [ 521.267527][ T988] usb 3-1: ucan: device reported invalid tx-fifo size [ 521.267553][ T988] usb 3-1: ucan: probe failed; try to update the device firmware [ 521.490625][ T5905] usb 3-1: USB disconnect, device number 34 [ 521.944960][T18137] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4141'. [ 522.314953][T18150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4148'. [ 522.523310][T18153] vxcan3: entered allmulticast mode [ 522.840310][ T5914] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 523.000674][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 523.003234][ T5914] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 523.003263][ T5914] usb 6-1: config 0 has no interface number 0 [ 523.006541][ T5914] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 523.006571][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.006592][ T5914] usb 6-1: Product: syz [ 523.006608][ T5914] usb 6-1: Manufacturer: syz [ 523.006623][ T5914] usb 6-1: SerialNumber: syz [ 523.077672][ T5914] usb 6-1: config 0 descriptor?? [ 523.084969][ T5914] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 523.085025][ T5914] dvb-usb: bulk message failed: -22 (2/0) [ 523.119728][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 523.120532][ T5914] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 523.120591][ T5914] usb 6-1: media controller created [ 523.170913][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.219304][ T5914] cxusb: set interface failed [ 523.219326][ T5914] dvb-usb: bulk message failed: -22 (1/0) [ 523.396855][ T5914] DVB: Unable to find symbol lgdt330x_attach() [ 523.396874][ T5914] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 523.503425][ T5914] rc_core: IR keymap rc-dvico-portable not found [ 523.503450][ T5914] Registered IR keymap rc-empty [ 523.505207][ T5914] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 523.508387][ T5914] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input37 [ 523.557132][ T5914] dvb-usb: schedule remote query interval to 100 msecs. [ 523.557156][ T5914] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 523.560203][ T5914] usb 6-1: USB disconnect, device number 4 [ 523.714638][ T5914] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 527.737519][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.955003][T18289] netlink: 'syz.2.4206': attribute type 4 has an invalid length. [ 528.436119][ T38] audit: type=1800 audit(1759245237.997:1222): pid=18306 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4214" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 528.630204][T18314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.073336][T18361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4238'. [ 530.407554][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.570255][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.816930][T18378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.866409][T18378] bond0: (slave rose0): Enslaving as an active interface with an up link [ 531.652396][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.652481][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 533.154405][T18449] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4270'. [ 533.428849][T18460] io-wq is not configured for unbound workers [ 533.839343][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4279'. [ 534.006419][T18479] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 536.741672][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4305'. [ 538.170632][ T5971] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 538.358052][ T5971] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 538.358089][ T5971] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.358112][ T5971] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.358139][ T5971] usb 6-1: config 0 interface 0 has no altsetting 0 [ 538.358174][ T5971] usb 6-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 538.358198][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.365342][ T5971] usb 6-1: config 0 descriptor?? [ 538.829466][ T5971] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 538.829506][ T5971] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 538.829534][ T5971] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 538.829561][ T5971] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 538.829588][ T5971] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 538.829615][ T5971] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 538.829643][ T5971] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 538.829669][ T5971] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 538.829696][ T5971] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 538.829723][ T5971] lenovo 0003:17EF:60B5.0030: unknown main item tag 0x0 [ 538.863317][ T5971] lenovo 0003:17EF:60B5.0030: hidraw0: USB HID v5f.b2 Device [HID 17ef:60b5] on usb-dummy_hcd.5-1/input0 [ 539.037259][ T5914] usb 6-1: USB disconnect, device number 5 [ 539.763568][ T5905] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 539.923895][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 539.926935][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.926972][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.926997][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 539.927042][ T5905] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 539.927067][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.932693][ T5905] usb 3-1: config 0 descriptor?? [ 540.009451][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 540.172456][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.172485][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 540.174226][ T31] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 540.174277][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 540.174299][ T31] usb 6-1: SerialNumber: syz [ 540.434783][ T31] usb 6-1: 0:2 : does not exist [ 540.466237][ T5905] microsoft 0003:045E:07DA.0031: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 540.466274][ T5905] microsoft 0003:045E:07DA.0031: no inputs found [ 540.466290][ T5905] microsoft 0003:045E:07DA.0031: could not initialize ff, continuing anyway [ 540.533748][ T31] usb 6-1: USB disconnect, device number 6 [ 540.653154][ T5914] usb 3-1: USB disconnect, device number 35 [ 541.593315][T18671] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4357'. [ 541.600266][T18669] misc userio: Can't change port type on an already running userio instance [ 541.739959][T18675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4360'. [ 541.739998][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4360'. [ 541.740015][T18675] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4360'. [ 541.740794][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4360'. [ 541.740816][T18675] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4360'. [ 541.803671][T18677] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4359'. [ 541.961543][T18683] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4363'. [ 542.927970][ T5134] Bluetooth: hci0: command 0x1003 tx timeout [ 542.927998][ T5836] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 542.993031][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.783325][ T5905] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 543.868328][T18736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4388'. [ 543.944181][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 543.965939][ T5905] usb 2-1: unable to get BOS descriptor or descriptor too short [ 543.967799][ T5905] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 543.967825][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.967847][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.973811][ T5905] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.973843][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.973866][ T5905] usb 2-1: Product: syz [ 543.973881][ T5905] usb 2-1: Manufacturer: syz [ 543.973897][ T5905] usb 2-1: SerialNumber: syz [ 544.333901][T18728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.335464][T18728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.369541][ T5905] usb 2-1: 0:2 : does not exist [ 544.374596][ T5898] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 544.429586][ T5905] usb 2-1: USB disconnect, device number 47 [ 544.531469][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 544.551881][ T5898] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 544.551916][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.551945][ T5898] usb 6-1: Product: syz [ 544.551961][ T5898] usb 6-1: Manufacturer: syz [ 544.551976][ T5898] usb 6-1: SerialNumber: syz [ 544.595702][ T5898] usb 6-1: config 0 descriptor?? [ 544.773845][T18750] bridge0: entered promiscuous mode [ 544.774095][T18750] macvtap1: entered allmulticast mode [ 544.774112][T18750] bridge0: entered allmulticast mode [ 544.805913][T18750] batman_adv: batadv0: Adding interface: macvtap1 [ 544.817055][T18750] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.817105][T18750] batman_adv: batadv0: Interface activated: macvtap1 [ 544.876158][ T5898] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 545.001910][ T5905] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 545.165028][ T5905] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 545.165066][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.165176][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.168078][ T5905] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 545.168174][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.168196][ T5905] usb 2-1: Product: syz [ 545.168211][ T5905] usb 2-1: Manufacturer: syz [ 545.168226][ T5905] usb 2-1: SerialNumber: syz [ 545.326875][ T5898] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 545.353549][ T5898] usb 6-1: USB disconnect, device number 7 [ 545.387040][ T38] audit: type=1326 audit(1759245253.833:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18762 comm="syz.2.4400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f523aabeec9 code=0x0 [ 545.517780][ T5905] usb 2-1: 0:2 : does not exist [ 545.643829][ T5905] usb 2-1: USB disconnect, device number 48 [ 546.630072][T18791] veth1_to_bond: entered allmulticast mode [ 546.630556][T18791] veth1_to_bond: left allmulticast mode [ 546.801773][T18794] input: syz0 as /devices/virtual/input/input42 [ 547.114050][T18807] loop8: detected capacity change from 0 to 8 [ 547.115509][T18807] Dev loop8: unable to read RDB block 8 [ 547.115565][T18807] loop8: unable to read partition table [ 547.140188][T18807] loop8: partition table beyond EOD, truncated [ 547.140222][T18807] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 547.553828][ T5836] Bluetooth: hci5: unexpected cc 0x040d length: 63 > 7 [ 547.779853][T18832] overlayfs: failed to clone lowerpath [ 548.221641][ T5836] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 548.529279][T18853] batadv_slave_1: entered promiscuous mode [ 548.536846][T18850] batadv_slave_1: left promiscuous mode [ 551.140671][T18942] input: syz0 as /devices/virtual/input/input43 [ 551.183993][T18946] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 551.908214][ T5836] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 551.908549][ T5836] Bluetooth: hci5: Injecting HCI hardware error event [ 551.913499][ T5836] Bluetooth: hci5: hardware error 0x00 [ 552.667083][ T5905] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 552.830351][ T5905] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 552.846529][ T5905] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.846567][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 552.846592][ T5905] usb 4-1: SerialNumber: syz [ 553.631424][ T5905] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 554.036924][ T5898] usb 4-1: USB disconnect, device number 37 [ 554.040837][ T5898] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 554.473900][ T5836] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 556.172517][T19082] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 556.376777][ T5898] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 556.542918][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 556.542950][ T5898] usb 4-1: config 1 has no interface number 0 [ 556.543001][ T5898] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 556.543029][ T5898] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 556.543057][ T5898] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 556.543092][ T5898] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 556.543212][ T5898] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 556.547325][ T5898] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.547356][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.547377][ T5898] usb 4-1: Product: syz [ 556.547392][ T5898] usb 4-1: Manufacturer: syz [ 556.547406][ T5898] usb 4-1: SerialNumber: syz [ 556.655527][T19080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 556.890546][T19080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 557.110188][T19080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 557.552417][T19080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 557.565528][ T5898] cdc_ncm 4-1:1.1: bind() failure [ 557.791123][ T5971] usb 4-1: USB disconnect, device number 38 [ 558.355837][T19140] netlink: 'syz.5.4553': attribute type 1 has an invalid length. [ 558.355864][T19140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4553'. [ 559.634109][T19171] overlayfs: failed to clone lowerpath [ 559.961206][T19179] loop9: detected capacity change from 0 to 7 [ 559.964539][T19179] Dev loop9: unable to read RDB block 7 [ 559.964572][T19179] loop9: AHDI p1 p2 [ 559.964604][T19179] loop9: partition table partially beyond EOD, truncated [ 559.964729][T19179] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 560.410944][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4578'. [ 561.014311][T19213] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 561.147906][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 562.045742][T19244] overlayfs: failed to clone upperpath [ 562.203584][T19251] netlink: 'syz.1.4601': attribute type 10 has an invalid length. [ 562.254193][T19251] team0: Port device dummy0 added [ 562.270153][T19251] netlink: 'syz.1.4601': attribute type 10 has an invalid length. [ 562.440943][T19251] team0: Port device dummy0 removed [ 562.446612][T19251] dummy0: entered promiscuous mode [ 562.524769][T19251] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 562.782050][T19268] loop8: detected capacity change from 0 to 8 [ 562.819807][T19268] Dev loop8: unable to read RDB block 8 [ 562.819857][T19268] loop8: unable to read partition table [ 562.820099][T19268] loop8: partition table beyond EOD, truncated [ 562.820119][T19268] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 564.223719][ T5914] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 564.419650][ T5914] usb 2-1: New USB device found, idVendor=050e, idProduct=a4a1, bcdDevice= 0.40 [ 564.419685][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.419706][ T5914] usb 2-1: Product: syz [ 564.419723][ T5914] usb 2-1: Manufacturer: syz [ 564.419739][ T5914] usb 2-1: SerialNumber: syz [ 564.640695][ T5913] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 564.800916][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 564.815967][ T5913] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 564.816005][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.816030][ T5913] usb 6-1: Product: syz [ 564.816048][ T5913] usb 6-1: Manufacturer: syz [ 564.816137][ T5913] usb 6-1: SerialNumber: syz [ 564.852154][ T5913] usb 6-1: config 0 descriptor?? [ 564.918852][ T5913] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 565.549431][ T5913] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 565.552331][ T5913] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 565.588836][ T5913] usb 6-1: USB disconnect, device number 8 [ 565.606245][ T5914] cdc_ncm 2-1:1.0: bind() failure [ 565.659347][ T5914] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 565.664460][ T5914] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 565.678170][ T5914] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 565.711338][ T5914] usb 2-1: USB disconnect, device number 49 [ 566.324602][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 566.494247][ T10] usb 4-1: config 118 interface 0 has no altsetting 0 [ 566.547082][ T10] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 566.547115][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.547136][ T10] usb 4-1: Product: syz [ 566.547151][ T10] usb 4-1: Manufacturer: syz [ 566.547166][ T10] usb 4-1: SerialNumber: syz [ 566.792471][ T10] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 566.833503][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 566.843791][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 566.843848][ T10] usb 4-1: media controller created [ 567.010768][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.442445][ T10] DVB: Unable to find symbol mt352_attach() [ 567.442463][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 567.445532][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 567.457849][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 567.457877][ T10] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 567.685303][ T10] dvb_usb_m920x 4-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 567.687413][ T5898] m920x_read = error: -71 [ 567.687440][ T5898] dvb-usb: error while querying for an remote control event. [ 567.702495][ T10] usb 4-1: USB disconnect, device number 39 [ 567.805132][ T5898] m920x_read = error: -19 [ 567.805161][ T5898] dvb-usb: error while querying for an remote control event. [ 567.922718][ T5898] m920x_read = error: -19 [ 567.922747][ T5898] dvb-usb: error while querying for an remote control event. [ 567.948496][T19378] netlink: 'syz.2.4656': attribute type 29 has an invalid length. [ 568.040213][ T10] m920x_read = error: -19 [ 568.040241][ T10] dvb-usb: error while querying for an remote control event. [ 568.223766][ T10] m920x_read = error: -19 [ 568.223796][ T10] dvb-usb: error while querying for an remote control event. [ 568.339644][ T10] m920x_read = error: -19 [ 568.339674][ T10] dvb-usb: error while querying for an remote control event. [ 568.457153][ T10] m920x_read = error: -19 [ 568.457181][ T10] dvb-usb: error while querying for an remote control event. [ 568.574763][ T5898] m920x_read = error: -19 [ 568.574791][ T5898] dvb-usb: error while querying for an remote control event. [ 568.705832][ T5898] m920x_read = error: -19 [ 568.705863][ T5898] dvb-usb: error while querying for an remote control event. [ 568.820665][ T10] m920x_read = error: -19 [ 568.820692][ T10] dvb-usb: error while querying for an remote control event. [ 568.938221][ T10] m920x_read = error: -19 [ 568.938252][ T10] dvb-usb: error while querying for an remote control event. [ 569.055821][ T10] m920x_read = error: -19 [ 569.055848][ T10] dvb-usb: error while querying for an remote control event. [ 569.173453][ T10] m920x_read = error: -19 [ 569.173482][ T10] dvb-usb: error while querying for an remote control event. [ 569.291009][ T10] m920x_read = error: -19 [ 569.291040][ T10] dvb-usb: error while querying for an remote control event. [ 569.462358][ T5898] m920x_read = error: -19 [ 569.462390][ T5898] dvb-usb: error while querying for an remote control event. [ 569.579753][ T10] m920x_read = error: -19 [ 569.579782][ T10] dvb-usb: error while querying for an remote control event. [ 569.698367][ T5898] m920x_read = error: -19 [ 569.698398][ T5898] dvb-usb: error while querying for an remote control event. [ 569.834560][ T5898] m920x_read = error: -19 [ 569.834597][ T5898] dvb-usb: error while querying for an remote control event. [ 569.943273][ T5898] m920x_read = error: -19 [ 569.943303][ T5898] dvb-usb: error while querying for an remote control event. [ 570.062270][ T5898] m920x_read = error: -19 [ 570.062299][ T5898] dvb-usb: error while querying for an remote control event. [ 570.178460][ T5898] m920x_read = error: -19 [ 570.178488][ T5898] dvb-usb: error while querying for an remote control event. [ 570.296151][ T5898] m920x_read = error: -19 [ 570.296177][ T5898] dvb-usb: error while querying for an remote control event. [ 570.413562][ T5898] m920x_read = error: -19 [ 570.413593][ T5898] dvb-usb: error while querying for an remote control event. [ 570.532650][ T5898] m920x_read = error: -19 [ 570.532681][ T5898] dvb-usb: error while querying for an remote control event. [ 570.648876][ T10] m920x_read = error: -19 [ 570.648906][ T10] dvb-usb: error while querying for an remote control event. [ 570.766535][ T5898] m920x_read = error: -19 [ 570.766565][ T5898] dvb-usb: error while querying for an remote control event. [ 570.884323][ T5898] m920x_read = error: -19 [ 570.884356][ T5898] dvb-usb: error while querying for an remote control event. [ 570.992706][T19450] input: syz1 as /devices/virtual/input/input45 [ 571.001744][ T5898] m920x_read = error: -19 [ 571.001789][ T5898] dvb-usb: error while querying for an remote control event. [ 571.120995][ T5898] m920x_read = error: -19 [ 571.121027][ T5898] dvb-usb: error while querying for an remote control event. [ 571.236827][ T5898] m920x_read = error: -19 [ 571.236859][ T5898] dvb-usb: error while querying for an remote control event. [ 571.354423][ T5898] m920x_read = error: -19 [ 571.354453][ T5898] dvb-usb: error while querying for an remote control event. [ 571.472053][ T5898] m920x_read = error: -19 [ 571.472082][ T5898] dvb-usb: error while querying for an remote control event. [ 571.589575][ T5898] m920x_read = error: -19 [ 571.589604][ T5898] dvb-usb: error while querying for an remote control event. [ 571.708140][ T5898] m920x_read = error: -19 [ 571.708170][ T5898] dvb-usb: error while querying for an remote control event. [ 571.814823][T19470] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4690'. [ 571.814864][T19470] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4690'. [ 571.824865][ T5898] m920x_read = error: -19 [ 571.824896][ T5898] dvb-usb: error while querying for an remote control event. [ 571.952247][ T5905] m920x_read = error: -19 [ 571.952274][ T5905] dvb-usb: error while querying for an remote control event. [ 572.059915][ T5898] m920x_read = error: -19 [ 572.059946][ T5898] dvb-usb: error while querying for an remote control event. [ 572.177712][ T5898] m920x_read = error: -19 [ 572.177741][ T5898] dvb-usb: error while querying for an remote control event. [ 572.295154][ T5898] m920x_read = error: -19 [ 572.295183][ T5898] dvb-usb: error while querying for an remote control event. [ 572.382503][ T5905] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 572.412684][ T5898] m920x_read = error: -19 [ 572.412711][ T5898] dvb-usb: error while querying for an remote control event. [ 572.530359][ T5898] m920x_read = error: -19 [ 572.530398][ T5898] dvb-usb: error while querying for an remote control event. [ 572.560516][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 572.570511][ T5905] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 572.570544][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.581132][ T5905] usb 6-1: config 0 descriptor?? [ 572.630741][ T5905] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 572.647950][ T5898] m920x_read = error: -19 [ 572.648044][ T5898] dvb-usb: error while querying for an remote control event. [ 572.765524][ T5898] m920x_read = error: -19 [ 572.765618][ T5898] dvb-usb: error while querying for an remote control event. [ 572.975290][ T5898] m920x_read = error: -19 [ 572.975318][ T5898] dvb-usb: error while querying for an remote control event. [ 573.229582][ T5971] m920x_read = error: -19 [ 573.229612][ T5971] dvb-usb: error while querying for an remote control event. [ 573.345812][ T10] m920x_read = error: -19 [ 573.346015][ T10] dvb-usb: error while querying for an remote control event. [ 573.474744][ T10] m920x_read = error: -19 [ 573.475755][ T10] dvb-usb: error while querying for an remote control event. [ 573.592530][ T5898] m920x_read = error: -19 [ 573.592791][ T5898] dvb-usb: error while querying for an remote control event. [ 573.721436][ T5898] m920x_read = error: -19 [ 573.721523][ T5898] dvb-usb: error while querying for an remote control event. [ 573.744583][ T5905] gspca_sonixj: reg_w1 err -71 [ 573.759676][ T5905] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 573.773067][ T5905] usb 6-1: USB disconnect, device number 9 [ 573.834649][ T10] m920x_read = error: -19 [ 573.834679][ T10] dvb-usb: error while querying for an remote control event. [ 573.953132][ T5898] m920x_read = error: -19 [ 573.953162][ T5898] dvb-usb: error while querying for an remote control event. [ 574.069931][ T5898] m920x_read = error: -19 [ 574.069961][ T5898] dvb-usb: error while querying for an remote control event. [ 574.191862][ T5905] m920x_read = error: -19 [ 574.191889][ T5905] dvb-usb: error while querying for an remote control event. [ 574.312334][ T5905] m920x_read = error: -19 [ 574.312364][ T5905] dvb-usb: error while querying for an remote control event. [ 574.422710][ T5898] m920x_read = error: -19 [ 574.422740][ T5898] dvb-usb: error while querying for an remote control event. [ 574.540176][ T5898] m920x_read = error: -19 [ 574.540206][ T5898] dvb-usb: error while querying for an remote control event. [ 574.664427][ T5898] m920x_read = error: -19 [ 574.664457][ T5898] dvb-usb: error while querying for an remote control event. [ 574.791875][ T5898] m920x_read = error: -19 [ 574.791906][ T5898] dvb-usb: error while querying for an remote control event. [ 574.906540][ T5898] m920x_read = error: -19 [ 574.906572][ T5898] dvb-usb: error while querying for an remote control event. [ 574.970694][T19519] input: syz0 as /devices/virtual/input/input46 [ 575.022754][ T5898] m920x_read = error: -19 [ 575.022784][ T5898] dvb-usb: error while querying for an remote control event. [ 575.140604][ T5898] m920x_read = error: -19 [ 575.140635][ T5898] dvb-usb: error while querying for an remote control event. [ 575.256953][ T5898] m920x_read = error: -19 [ 575.256982][ T5898] dvb-usb: error while querying for an remote control event. [ 575.374024][ T5898] m920x_read = error: -19 [ 575.374054][ T5898] dvb-usb: error while querying for an remote control event. [ 575.491701][ T10] m920x_read = error: -19 [ 575.491732][ T10] dvb-usb: error while querying for an remote control event. [ 575.609247][ T10] m920x_read = error: -19 [ 575.609277][ T10] dvb-usb: error while querying for an remote control event. [ 575.726845][ T10] m920x_read = error: -19 [ 575.726876][ T10] dvb-usb: error while querying for an remote control event. [ 575.844559][ T10] m920x_read = error: -19 [ 575.844588][ T10] dvb-usb: error while querying for an remote control event. [ 576.095539][ T10] m920x_read = error: -19 [ 576.099214][ T10] dvb-usb: error while querying for an remote control event. [ 576.207992][ T10] m920x_read = error: -19 [ 576.208021][ T10] dvb-usb: error while querying for an remote control event. [ 576.326018][ T10] m920x_read = error: -19 [ 576.326047][ T10] dvb-usb: error while querying for an remote control event. [ 576.359961][T19545] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4725'. [ 576.398694][T19545] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4725'. [ 576.494494][ T10] m920x_read = error: -19 [ 576.494524][ T10] dvb-usb: error while querying for an remote control event. [ 576.609736][ T5898] m920x_read = error: -19 [ 576.609766][ T5898] dvb-usb: error while querying for an remote control event. [ 576.721114][ T5898] m920x_read = error: -19 [ 576.721143][ T5898] dvb-usb: error while querying for an remote control event. [ 576.838700][ T5898] m920x_read = error: -19 [ 576.838729][ T5898] dvb-usb: error while querying for an remote control event. [ 576.956303][ T5898] m920x_read = error: -19 [ 576.956341][ T5898] dvb-usb: error while querying for an remote control event. [ 577.073886][ T5898] m920x_read = error: -19 [ 577.073916][ T5898] dvb-usb: error while querying for an remote control event. [ 577.191737][ T5898] m920x_read = error: -19 [ 577.191766][ T5898] dvb-usb: error while querying for an remote control event. [ 577.337938][ T5905] m920x_read = error: -19 [ 577.337964][ T5905] dvb-usb: error while querying for an remote control event. [ 577.472636][ T10] m920x_read = error: -19 [ 577.472666][ T10] dvb-usb: error while querying for an remote control event. [ 577.587306][ T10] m920x_read = error: -19 [ 577.587335][ T10] dvb-usb: error while querying for an remote control event. [ 577.661709][ T5914] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 577.704617][ T10] m920x_read = error: -19 [ 577.704646][ T10] dvb-usb: error while querying for an remote control event. [ 577.822174][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 577.823645][ T10] m920x_read = error: -19 [ 577.823670][ T10] dvb-usb: error while querying for an remote control event. [ 577.830578][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.830612][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.830653][ T5914] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 577.830678][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.898854][ T5914] usb 4-1: config 0 descriptor?? [ 577.939772][ T10] m920x_read = error: -19 [ 577.939801][ T10] dvb-usb: error while querying for an remote control event. [ 578.058704][ T10] m920x_read = error: -19 [ 578.058735][ T10] dvb-usb: error while querying for an remote control event. [ 578.175058][ T10] m920x_read = error: -19 [ 578.175087][ T10] dvb-usb: error while querying for an remote control event. [ 578.292674][ T10] m920x_read = error: -19 [ 578.292703][ T10] dvb-usb: error while querying for an remote control event. [ 578.351572][ T5914] hid_parser_main: 11 callbacks suppressed [ 578.351600][ T5914] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0 [ 578.351633][ T5914] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0 [ 578.351660][ T5914] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0 [ 578.351687][ T5914] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0 [ 578.351716][ T5914] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0 [ 578.352716][ T5914] mcp2221 0003:04D8:00DD.0032: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 578.412981][ T10] m920x_read = error: -19 [ 578.413004][ T10] dvb-usb: error while querying for an remote control event. [ 578.415796][T19595] netlink: 15672 bytes leftover after parsing attributes in process `syz.5.4747'. [ 578.594242][ T5914] usb 4-1: USB disconnect, device number 40 [ 578.666059][ T10] m920x_read = error: -19 [ 578.666114][ T10] dvb-usb: error while querying for an remote control event. [ 578.775251][ T10] m920x_read = error: -19 [ 578.775275][ T10] dvb-usb: error while querying for an remote control event. [ 578.894646][ T10] m920x_read = error: -19 [ 578.894675][ T10] dvb-usb: error while querying for an remote control event. [ 579.008863][ T10] m920x_read = error: -19 [ 579.008891][ T10] dvb-usb: error while querying for an remote control event. [ 579.126383][ T10] m920x_read = error: -19 [ 579.126412][ T10] dvb-usb: error while querying for an remote control event. [ 579.254791][ T10] m920x_read = error: -19 [ 579.254821][ T10] dvb-usb: error while querying for an remote control event. [ 579.375539][ T10] m920x_read = error: -19 [ 579.375569][ T10] dvb-usb: error while querying for an remote control event. [ 579.489972][ T5898] m920x_read = error: -19 [ 579.490001][ T5898] dvb-usb: error while querying for an remote control event. [ 579.499268][T19625] overlayfs: failed to clone upperpath [ 579.568431][T19626] overlayfs: failed to clone upperpath [ 579.608635][ T10] m920x_read = error: -19 [ 579.608665][ T10] dvb-usb: error while querying for an remote control event. [ 579.656650][ T5914] kernel write not supported for file /2774/coredump_filter (pid: 5914 comm: kworker/1:6) [ 579.725158][ T10] m920x_read = error: -19 [ 579.725188][ T10] dvb-usb: error while querying for an remote control event. [ 579.842719][ T5898] m920x_read = error: -19 [ 579.842748][ T5898] dvb-usb: error while querying for an remote control event. [ 579.864821][T19636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4765'. [ 579.983153][ T10] m920x_read = error: -19 [ 579.983182][ T10] dvb-usb: error while querying for an remote control event. [ 580.099465][ T10] m920x_read = error: -19 [ 580.099495][ T10] dvb-usb: error while querying for an remote control event. [ 580.218324][ T10] m920x_read = error: -19 [ 580.218354][ T10] dvb-usb: error while querying for an remote control event. [ 580.334506][ T10] m920x_read = error: -19 [ 580.334533][ T10] dvb-usb: error while querying for an remote control event. [ 580.398631][T19645] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 580.452085][ T10] m920x_read = error: -19 [ 580.452114][ T10] dvb-usb: error while querying for an remote control event. [ 580.569627][ T10] m920x_read = error: -19 [ 580.569657][ T10] dvb-usb: error while querying for an remote control event. [ 580.687205][ T10] m920x_read = error: -19 [ 580.687234][ T10] dvb-usb: error while querying for an remote control event. [ 580.805644][ T10] m920x_read = error: -19 [ 580.805672][ T10] dvb-usb: error while querying for an remote control event. [ 580.815589][ T5836] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 580.877813][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.922411][ T10] m920x_read = error: -19 [ 580.922438][ T10] dvb-usb: error while querying for an remote control event. [ 581.040058][ T5898] m920x_read = error: -19 [ 581.040088][ T5898] dvb-usb: error while querying for an remote control event. [ 581.157734][ T10] m920x_read = error: -19 [ 581.157763][ T10] dvb-usb: error while querying for an remote control event. [ 581.275291][ T10] m920x_read = error: -19 [ 581.275322][ T10] dvb-usb: error while querying for an remote control event. [ 581.393063][ T10] m920x_read = error: -19 [ 581.393094][ T10] dvb-usb: error while querying for an remote control event. [ 581.510600][ T10] m920x_read = error: -19 [ 581.510630][ T10] dvb-usb: error while querying for an remote control event. [ 581.629596][ T10] m920x_read = error: -19 [ 581.629627][ T10] dvb-usb: error while querying for an remote control event. [ 581.754428][ T10] m920x_read = error: -19 [ 581.754456][ T10] dvb-usb: error while querying for an remote control event. [ 581.863987][ T10] m920x_read = error: -19 [ 581.864013][ T10] dvb-usb: error while querying for an remote control event. [ 581.908896][T19677] binder: 19676:19677 ioctl c0306201 2000000001c0 returned -14 [ 581.981031][ T10] m920x_read = error: -19 [ 581.981060][ T10] dvb-usb: error while querying for an remote control event. [ 582.098616][ T10] m920x_read = error: -19 [ 582.098643][ T10] dvb-usb: error while querying for an remote control event. [ 582.216169][ T5898] m920x_read = error: -19 [ 582.216198][ T5898] dvb-usb: error while querying for an remote control event. [ 582.347597][ T5971] m920x_read = error: -19 [ 582.347628][ T5971] dvb-usb: error while querying for an remote control event. [ 582.461968][ T5971] m920x_read = error: -19 [ 582.461998][ T5971] dvb-usb: error while querying for an remote control event. [ 582.662372][ T5898] m920x_read = error: -19 [ 582.662402][ T5898] dvb-usb: error while querying for an remote control event. [ 582.771967][ T5898] m920x_read = error: -19 [ 582.771995][ T5898] dvb-usb: error while querying for an remote control event. [ 582.894058][ T5971] m920x_read = error: -19 [ 582.894086][ T5971] dvb-usb: error while querying for an remote control event. [ 583.007156][ T5971] m920x_read = error: -19 [ 583.007186][ T5971] dvb-usb: error while querying for an remote control event. [ 583.124746][ T5971] m920x_read = error: -19 [ 583.124775][ T5971] dvb-usb: error while querying for an remote control event. [ 583.157907][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4789'. [ 583.242332][ T5905] m920x_read = error: -19 [ 583.242360][ T5905] dvb-usb: error while querying for an remote control event. [ 583.292466][T19698] netlink: 'syz.3.4789': attribute type 1 has an invalid length. [ 583.292490][T19698] netlink: 'syz.3.4789': attribute type 2 has an invalid length. [ 583.355165][T19704] netlink: 452 bytes leftover after parsing attributes in process `syz.4.4793'. [ 583.359911][ T5905] m920x_read = error: -19 [ 583.359942][ T5905] dvb-usb: error while querying for an remote control event. [ 583.477574][ T5971] m920x_read = error: -19 [ 583.477604][ T5971] dvb-usb: error while querying for an remote control event. [ 583.507682][T19707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.595117][ T5971] m920x_read = error: -19 [ 583.595146][ T5971] dvb-usb: error while querying for an remote control event. [ 583.712676][ T5905] m920x_read = error: -19 [ 583.712705][ T5905] dvb-usb: error while querying for an remote control event. [ 583.721888][T19714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4799'. [ 583.830358][ T5905] m920x_read = error: -19 [ 583.830389][ T5905] dvb-usb: error while querying for an remote control event. [ 583.947979][ T5905] m920x_read = error: -19 [ 583.948010][ T5905] dvb-usb: error while querying for an remote control event. [ 584.065516][ T5905] m920x_read = error: -19 [ 584.065545][ T5905] dvb-usb: error while querying for an remote control event. [ 584.184783][ T5905] m920x_read = error: -19 [ 584.184812][ T5905] dvb-usb: error while querying for an remote control event. [ 584.311443][ T5905] m920x_read = error: -19 [ 584.311473][ T5905] dvb-usb: error while querying for an remote control event. [ 584.429036][ T5905] m920x_read = error: -19 [ 584.429066][ T5905] dvb-usb: error while querying for an remote control event. [ 584.547682][ T5971] m920x_read = error: -19 [ 584.547713][ T5971] dvb-usb: error while querying for an remote control event. [ 584.664223][ T5971] m920x_read = error: -19 [ 584.664253][ T5971] dvb-usb: error while querying for an remote control event. [ 584.838085][ T5905] m920x_read = error: -19 [ 584.838381][ T5905] dvb-usb: error while querying for an remote control event. [ 584.960692][ T5971] m920x_read = error: -19 [ 584.960719][ T5971] dvb-usb: error while querying for an remote control event. [ 585.070674][ T5971] m920x_read = error: -19 [ 585.070704][ T5971] dvb-usb: error while querying for an remote control event. [ 585.197964][ T5971] m920x_read = error: -19 [ 585.197986][ T5971] dvb-usb: error while querying for an remote control event. [ 585.305597][ T5971] m920x_read = error: -19 [ 585.305617][ T5971] dvb-usb: error while querying for an remote control event. [ 585.423284][ T5971] m920x_read = error: -19 [ 585.423305][ T5971] dvb-usb: error while querying for an remote control event. [ 585.541694][ T5905] m920x_read = error: -19 [ 585.541725][ T5905] dvb-usb: error while querying for an remote control event. [ 585.658394][ T5905] m920x_read = error: -19 [ 585.658424][ T5905] dvb-usb: error while querying for an remote control event. [ 585.779697][ T5905] m920x_read = error: -19 [ 585.779726][ T5905] dvb-usb: error while querying for an remote control event. [ 585.893606][ T5905] m920x_read = error: -19 [ 585.893646][ T5905] dvb-usb: error while querying for an remote control event. [ 586.011127][ T5905] m920x_read = error: -19 [ 586.011149][ T5905] dvb-usb: error while querying for an remote control event. [ 586.198632][ T5905] m920x_read = error: -19 [ 586.198662][ T5905] dvb-usb: error while querying for an remote control event. [ 586.310786][ T5905] m920x_read = error: -19 [ 586.310815][ T5905] dvb-usb: error while querying for an remote control event. [ 586.428191][ T5971] m920x_read = error: -19 [ 586.428236][ T5971] dvb-usb: error while querying for an remote control event. [ 586.545945][ T5971] m920x_read = error: -19 [ 586.545974][ T5971] dvb-usb: error while querying for an remote control event. [ 586.663281][ T5905] m920x_read = error: -19 [ 586.663308][ T5905] dvb-usb: error while querying for an remote control event. [ 586.780972][ T5905] m920x_read = error: -19 [ 586.781003][ T5905] dvb-usb: error while querying for an remote control event. [ 586.845868][T19752] orangefs_mount: mount request failed with -4 [ 586.904060][ T5905] m920x_read = error: -19 [ 586.904090][ T5905] dvb-usb: error while querying for an remote control event. [ 587.016637][ T5905] m920x_read = error: -19 [ 587.016664][ T5905] dvb-usb: error while querying for an remote control event. [ 587.133686][ T5905] m920x_read = error: -19 [ 587.133715][ T5905] dvb-usb: error while querying for an remote control event. [ 587.202948][ T38] audit: type=1326 audit(1759245292.970:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19777 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7037eec9 code=0x7ffc0000 [ 587.212115][ T38] audit: type=1326 audit(1759245292.980:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19777 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f5f7037eec9 code=0x7ffc0000 [ 587.212197][ T38] audit: type=1326 audit(1759245292.980:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19777 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7037eec9 code=0x7ffc0000 [ 587.215243][ T38] audit: type=1326 audit(1759245292.980:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19777 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7037eec9 code=0x7ffc0000 [ 587.251311][ T5905] m920x_read = error: -19 [ 587.251345][ T5905] dvb-usb: error while querying for an remote control event. [ 587.363450][T19781] block nbd2: server does not support multiple connections per device. [ 587.365340][T19781] block nbd2: shutting down sockets [ 587.413273][ T5971] m920x_read = error: -19 [ 587.413301][ T5971] dvb-usb: error while querying for an remote control event. [ 587.540345][ T5905] m920x_read = error: -19 [ 587.540369][ T5905] dvb-usb: error while querying for an remote control event. [ 587.657985][ T5905] m920x_read = error: -19 [ 587.658016][ T5905] dvb-usb: error while querying for an remote control event. [ 587.787715][ T5905] m920x_read = error: -19 [ 587.787744][ T5905] dvb-usb: error while querying for an remote control event. [ 587.809540][T19787] use of bytesused == 0 is deprecated and will be removed in the future, [ 587.809557][T19787] use the actual size instead. [ 587.911482][ T5971] m920x_read = error: -19 [ 587.911511][ T5971] dvb-usb: error while querying for an remote control event. [ 588.021008][ T5971] m920x_read = error: -19 [ 588.021037][ T5971] dvb-usb: error while querying for an remote control event. [ 588.138662][ T5971] m920x_read = error: -19 [ 588.138691][ T5971] dvb-usb: error while querying for an remote control event. [ 588.256459][ T5971] m920x_read = error: -19 [ 588.256488][ T5971] dvb-usb: error while querying for an remote control event. [ 588.373874][ T5971] m920x_read = error: -19 [ 588.373902][ T5971] dvb-usb: error while querying for an remote control event. [ 588.447830][T19800] gfs2: gfs2 mount does not exist [ 588.471124][T19795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 588.491750][ T5971] m920x_read = error: -19 [ 588.491777][ T5971] dvb-usb: error while querying for an remote control event. [ 588.687453][ T5905] m920x_read = error: -19 [ 588.687517][ T5905] dvb-usb: error while querying for an remote control event. [ 588.806951][ T5971] m920x_read = error: -19 [ 588.806997][ T5971] dvb-usb: error while querying for an remote control event. [ 588.922476][ T5971] m920x_read = error: -19 [ 588.922505][ T5971] dvb-usb: error while querying for an remote control event. [ 589.036670][ T5971] m920x_read = error: -19 [ 589.036698][ T5971] dvb-usb: error while querying for an remote control event. [ 589.134386][T19813] loop8: detected capacity change from 0 to 8 [ 589.135449][T19813] Dev loop8: unable to read RDB block 8 [ 589.135493][T19813] loop8: unable to read partition table [ 589.135740][T19813] loop8: partition table beyond EOD, truncated [ 589.135759][T19813] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 589.154441][ T5971] m920x_read = error: -19 [ 589.154469][ T5971] dvb-usb: error while querying for an remote control event. [ 589.271864][ T5971] m920x_read = error: -19 [ 589.271891][ T5971] dvb-usb: error while querying for an remote control event. [ 589.389600][ T5971] m920x_read = error: -19 [ 589.389631][ T5971] dvb-usb: error while querying for an remote control event. [ 589.507170][ T5971] m920x_read = error: -19 [ 589.507199][ T5971] dvb-usb: error while querying for an remote control event. [ 589.624856][ T5905] m920x_read = error: -19 [ 589.624884][ T5905] dvb-usb: error while querying for an remote control event. [ 589.626886][T19824] loop5: detected capacity change from 0 to 5119 [ 589.704640][T19825] loop5: detected capacity change from 5119 to 5999 [ 589.742518][ T5905] m920x_read = error: -19 [ 589.742549][ T5905] dvb-usb: error while querying for an remote control event. [ 589.838480][ T5971] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 589.946026][ T5898] m920x_read = error: -19 [ 589.946056][ T5898] dvb-usb: error while querying for an remote control event. [ 590.012337][ T5971] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 590.012367][ T5971] usb 4-1: config 0 has no interface number 0 [ 590.015578][ T5971] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 590.015611][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.015634][ T5971] usb 4-1: Product: syz [ 590.015650][ T5971] usb 4-1: Manufacturer: syz [ 590.015665][ T5971] usb 4-1: SerialNumber: syz [ 590.040965][ T5971] usb 4-1: config 0 descriptor?? [ 590.111684][ T5905] m920x_read = error: -19 [ 590.111712][ T5905] dvb-usb: error while querying for an remote control event. [ 590.223540][ T5905] m920x_read = error: -19 [ 590.223570][ T5905] dvb-usb: error while querying for an remote control event. [ 590.306871][T19831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4848'. [ 590.310203][T19831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4848'. [ 590.341031][ T5905] m920x_read = error: -19 [ 590.341060][ T5905] dvb-usb: error while querying for an remote control event. [ 590.458749][ T5905] m920x_read = error: -19 [ 590.458778][ T5905] dvb-usb: error while querying for an remote control event. [ 590.505298][ T5971] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 590.520632][ T5971] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 590.521025][ T5971] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 590.521095][ T5971] usb 4-1: media controller created [ 590.576248][ T5905] m920x_read = error: -19 [ 590.576277][ T5905] dvb-usb: error while querying for an remote control event. [ 590.672673][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.693839][ T5905] m920x_read = error: -19 [ 590.693868][ T5905] dvb-usb: error while querying for an remote control event. [ 590.771010][ T5971] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 590.811344][ T5905] m920x_read = error: -19 [ 590.811373][ T5905] dvb-usb: error while querying for an remote control event. [ 590.932538][ T5905] m920x_read = error: -19 [ 590.932585][ T5905] dvb-usb: error while querying for an remote control event. [ 591.020442][ T5971] usb 4-1: USB disconnect, device number 41 [ 591.054049][ T5905] m920x_read = error: -19 [ 591.054077][ T5905] dvb-usb: error while querying for an remote control event. [ 591.165786][ T10] m920x_read = error: -19 [ 591.165835][ T10] dvb-usb: error while querying for an remote control event. [ 591.281721][ T5971] m920x_read = error: -19 [ 591.281749][ T5971] dvb-usb: error while querying for an remote control event. [ 591.377631][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.399403][ T5971] m920x_read = error: -19 [ 591.399432][ T5971] dvb-usb: error while querying for an remote control event. [ 591.529161][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.555088][ T5971] m920x_read = error: -19 [ 591.555115][ T5971] dvb-usb: error while querying for an remote control event. [ 591.666986][ T5971] m920x_read = error: -19 [ 591.667016][ T5971] dvb-usb: error while querying for an remote control event. [ 591.784036][ T5971] m920x_read = error: -19 [ 591.784064][ T5971] dvb-usb: error while querying for an remote control event. [ 591.901688][ T5971] m920x_read = error: -19 [ 591.901717][ T5971] dvb-usb: error while querying for an remote control event. [ 592.019337][ T5971] m920x_read = error: -19 [ 592.019364][ T5971] dvb-usb: error while querying for an remote control event. [ 592.136868][ T5971] m920x_read = error: -19 [ 592.136897][ T5971] dvb-usb: error while querying for an remote control event. [ 592.217078][ C1] ------------[ cut here ]------------ [ 592.217095][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 592.218201][ C1] WARNING: CPU: 1 PID: 29 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 592.218243][ C1] Modules linked in: [ 592.218274][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 592.218297][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 592.218312][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 592.218334][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 0b dc 8b 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 b0 58 f7 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 592.218350][ C1] RSP: 0018:ffffc90000a3f210 EFLAGS: 00010246 [ 592.218365][ C1] RAX: b538147b1467cb00 RBX: 000000000000000c RCX: ffff88801c6b1dc0 [ 592.218379][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 592.218390][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 592.218401][ C1] R10: dffffc0000000000 R11: ffffed101712486b R12: ffff88803c4a2528 [ 592.218415][ C1] R13: 0000000000000000 R14: ffff88805cc01020 R15: ffff88805cc03bd8 [ 592.218427][ C1] FS: 0000000000000000(0000) GS:ffff888127125000(0000) knlGS:0000000000000000 [ 592.218448][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.218460][ C1] CR2: 000055555f4aa5c8 CR3: 0000000037632000 CR4: 00000000003526f0 [ 592.218478][ C1] Call Trace: [ 592.218489][ C1] [ 592.218512][ C1] rate_control_send_low+0x194/0x7a0 [ 592.218538][ C1] rate_control_get_rate+0x20b/0x5f0 [ 592.218568][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 592.218602][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 592.218648][ C1] ieee80211_beacon_get_ap+0x1785/0x1e10 [ 592.218698][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 592.218723][ C1] ? __lock_acquire+0xab9/0xd20 [ 592.218769][ C1] ? __ieee80211_beacon_get+0x36/0x1850 [ 592.218799][ C1] ? __ieee80211_beacon_get+0x36/0x1850 [ 592.218824][ C1] __ieee80211_beacon_get+0x1190/0x1850 [ 592.218850][ C1] ? __ieee80211_beacon_get+0x36/0x1850 [ 592.218888][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 592.218919][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 592.218956][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 592.218980][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 592.219008][ C1] __iterate_interfaces+0x2a8/0x590 [ 592.219029][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 592.219050][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 592.219072][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 592.219092][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 592.219119][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 592.219147][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 592.219173][ C1] __hrtimer_run_queues+0x552/0xd40 [ 592.219209][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 592.219224][ C1] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 592.219258][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 592.219281][ C1] handle_softirqs+0x22f/0x710 [ 592.219313][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 592.219347][ C1] run_ktimerd+0xcf/0x190 [ 592.219373][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 592.219396][ C1] ? schedule+0x91/0x360 [ 592.219430][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 592.219454][ C1] smpboot_thread_fn+0x542/0xa60 [ 592.219479][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 592.219511][ C1] kthread+0x711/0x8a0 [ 592.219531][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 592.219555][ C1] ? __pfx_kthread+0x10/0x10 [ 592.219577][ C1] ? __pfx_kthread+0x10/0x10 [ 592.219595][ C1] ret_from_fork+0x436/0x7d0 [ 592.219622][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 592.219654][ C1] ? __switch_to_asm+0x39/0x70 [ 592.219684][ C1] ? __switch_to_asm+0x33/0x70 [ 592.219703][ C1] ? __pfx_kthread+0x10/0x10 [ 592.219721][ C1] ret_from_fork_asm+0x1a/0x30 [ 592.219757][ C1] [ 592.219774][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 592.219789][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 592.219811][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 592.219823][ C1] Call Trace: [ 592.219830][ C1] [ 592.219837][ C1] dump_stack_lvl+0x99/0x250 [ 592.219867][ C1] ? __asan_memcpy+0x40/0x70 [ 592.219890][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.219921][ C1] ? __pfx__printk+0x10/0x10 [ 592.219958][ C1] vpanic+0x281/0x750 [ 592.219977][ C1] ? __pfx__printk+0x10/0x10 [ 592.219999][ C1] ? __pfx_vpanic+0x10/0x10 [ 592.220016][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 592.220053][ C1] panic+0xb9/0xc0 [ 592.220069][ C1] ? __pfx_panic+0x10/0x10 [ 592.220101][ C1] __warn+0x31b/0x4b0 [ 592.220118][ C1] ? __rate_control_send_low+0x5df/0x820 [ 592.220140][ C1] ? __rate_control_send_low+0x5df/0x820 [ 592.220159][ C1] report_bug+0x2be/0x4f0 [ 592.220176][ C1] ? __rate_control_send_low+0x5df/0x820 [ 592.220196][ C1] ? __rate_control_send_low+0x5df/0x820 [ 592.220215][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 592.220234][ C1] handle_bug+0x84/0x160 [ 592.220255][ C1] exc_invalid_op+0x1a/0x50 [ 592.220275][ C1] asm_exc_invalid_op+0x1a/0x20 [ 592.220298][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 592.220318][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 0b dc 8b 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 b0 58 f7 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 592.220333][ C1] RSP: 0018:ffffc90000a3f210 EFLAGS: 00010246 [ 592.220350][ C1] RAX: b538147b1467cb00 RBX: 000000000000000c RCX: ffff88801c6b1dc0 [ 592.220362][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 592.220373][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 592.220385][ C1] R10: dffffc0000000000 R11: ffffed101712486b R12: ffff88803c4a2528 [ 592.220398][ C1] R13: 0000000000000000 R14: ffff88805cc01020 R15: ffff88805cc03bd8 [ 592.220442][ C1] rate_control_send_low+0x194/0x7a0 [ 592.220468][ C1] rate_control_get_rate+0x20b/0x5f0 [ 592.220497][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 592.220531][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 592.220577][ C1] ieee80211_beacon_get_ap+0x1785/0x1e10 [ 592.220622][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 592.220648][ C1] ? __lock_acquire+0xab9/0xd20 [ 592.220702][ C1] ? __ieee80211_beacon_get+0x36/0x1850 [ 592.220733][ C1] ? __ieee80211_beacon_get+0x36/0x1850 [ 592.220758][ C1] __ieee80211_beacon_get+0x1190/0x1850 [ 592.220783][ C1] ? __ieee80211_beacon_get+0x36/0x1850 [ 592.220820][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 592.220848][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 592.220886][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 592.220910][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 592.220942][ C1] __iterate_interfaces+0x2a8/0x590 [ 592.220966][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 592.220988][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 592.221013][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 592.221035][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 592.221063][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 592.221094][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 592.221123][ C1] __hrtimer_run_queues+0x552/0xd40 [ 592.221162][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 592.221178][ C1] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 592.221213][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 592.221238][ C1] handle_softirqs+0x22f/0x710 [ 592.221277][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 592.221318][ C1] run_ktimerd+0xcf/0x190 [ 592.221350][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 592.221379][ C1] ? schedule+0x91/0x360 [ 592.221421][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 592.221448][ C1] smpboot_thread_fn+0x542/0xa60 [ 592.221479][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 592.221519][ C1] kthread+0x711/0x8a0 [ 592.221543][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 592.221571][ C1] ? __pfx_kthread+0x10/0x10 [ 592.221596][ C1] ? __pfx_kthread+0x10/0x10 [ 592.221617][ C1] ret_from_fork+0x436/0x7d0 [ 592.221652][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 592.221698][ C1] ? __switch_to_asm+0x39/0x70 [ 592.221721][ C1] ? __switch_to_asm+0x33/0x70 [ 592.221745][ C1] ? __pfx_kthread+0x10/0x10 [ 592.221767][ C1] ret_from_fork_asm+0x1a/0x30 [ 592.221809][ C1] [ 592.222193][ C1] Kernel Offset: disabled