last executing test programs: 14m39.686482856s ago: executing program 0 (id=1): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = accept4$unix(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 14m27.752446117s ago: executing program 0 (id=12): socket(0x1f, 0xa, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000100)={{0xe3b1, 0xfffffffa}, {0x9, 0x1003ff}, 0xffffffff, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) getdents(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2c, 0xa00, 0x2c, 0x7, 0x2c}, 0x94) clock_gettime(0x3, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000000)={0x7, 0x9, 0x1, 0xf, 0x7, 0x400, 0x8001, 0x9}, &(0x7f0000000040)={0xffff, 0x5, 0x5, 0x9948, 0x7, 0x1177, 0xfff, 0xd43d}, &(0x7f0000000100)={0x3, 0x46d4a5f9, 0x0, 0x101, 0x5, 0xe0000, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x1]}, 0x8}) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000200)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000040)=0x7, 0x7, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a0000020000009110b0000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff0}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000ee8f9b4086805b0bcae20000000109021b00010000000009040300010e010000090600000000000000"], 0x0) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) 14m23.994303172s ago: executing program 0 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x140}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00"], 0xb0}, 0x1, 0x7}, 0x0) syz_open_dev$loop(0x0, 0x2, 0x60500) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) r7 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) listen(r5, 0x1ad72f7) 14m20.243908866s ago: executing program 0 (id=18): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x104011, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$video(0x0, 0xd, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r4 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x100000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) move_pages(r0, 0x1, &(0x7f00000002c0)=[&(0x7f000008c000/0x3000)=nil], &(0x7f0000002640), &(0x7f0000000200), 0x0) 14m4.602338325s ago: executing program 32 (id=18): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x104011, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$video(0x0, 0xd, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r4 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x100000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) move_pages(r0, 0x1, &(0x7f00000002c0)=[&(0x7f000008c000/0x3000)=nil], &(0x7f0000002640), &(0x7f0000000200), 0x0) 4.715913541s ago: executing program 2 (id=5225): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.130812512s ago: executing program 2 (id=5237): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) 3.036062287s ago: executing program 2 (id=5240): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r3, r2, 0x0, 0x2, &(0x7f0000000100)='@\x00'}, 0x30) 2.820488635s ago: executing program 4 (id=5241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000040000000100000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.73989806s ago: executing program 5 (id=5242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) close(0x3) 2.624750912s ago: executing program 5 (id=5243): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 2.533194909s ago: executing program 2 (id=5244): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2.390514391s ago: executing program 2 (id=5245): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 2.339769752s ago: executing program 5 (id=5246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.303798845s ago: executing program 4 (id=5247): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000140)="81479e70", 0x4) 2.232139073s ago: executing program 1 (id=5248): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) close(0x3) syz_open_dev$tty20(0xc, 0x4, 0x1) read$FUSE(r1, &(0x7f0000003880)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.109976373s ago: executing program 5 (id=5249): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r1, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x600}, 0x90) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 2.060998713s ago: executing program 3 (id=5250): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 2.047264351s ago: executing program 4 (id=5251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="470f22c266baf80cb8d40d7c89ef66bafc0cb83b280000ef0f07440fc77ad6f20f38f0f40f01d4c4e2092f0a0fc76d06c4211dd26e000f017f00", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.92664471s ago: executing program 1 (id=5252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) close(r0) 1.819887319s ago: executing program 3 (id=5253): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0xfffffffc}, &(0x7f0000000780)=0x8) 1.770896891s ago: executing program 1 (id=5254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 1.703385941s ago: executing program 3 (id=5255): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) recvmmsg(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)=""/208, 0xd0}], 0x6}, 0xca7f}], 0x1, 0x41, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) 1.700832549s ago: executing program 4 (id=5256): unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) 1.58935714s ago: executing program 4 (id=5257): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x2) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x240881) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 1.4557627s ago: executing program 1 (id=5258): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100"}}) 1.369405829s ago: executing program 4 (id=5259): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.316931607s ago: executing program 1 (id=5260): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000104355220500221100000109022400010000000009040700010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "6537ce03"}]}}, 0x0}, 0x0) 1.167954361s ago: executing program 5 (id=5261): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.088462421s ago: executing program 3 (id=5262): signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x3415, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000800)={0x0, 0x21}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.025977952s ago: executing program 3 (id=5263): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x3c) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 159.893191ms ago: executing program 5 (id=5264): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0xffff}], 0x1, 0x10041, 0x0) 0s ago: executing program 3 (id=5265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f000000b240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="cbcda1e7d9", 0x5}, {&(0x7f00000001c0)="21477a9055b35dc00bc11e", 0xb}], 0x2}}], 0x1, 0x4000) recvmmsg(r1, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x2}], 0x2, 0x12222, 0x0) kernel console output (not intermixed with test programs): in superblock #1. [ 792.288945][T14757] qnx6: unable to read the first superblock [ 795.767668][T14821] netem: change failed [ 795.771361][T14812] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 795.771600][T14812] qnx6: wrong signature (magic) in superblock #1. [ 795.771608][T14812] qnx6: unable to read the first superblock [ 796.297303][ T10] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 796.449538][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.449566][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 796.449612][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 796.449632][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.454766][ T10] usb 2-1: config 0 descriptor?? [ 797.379861][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 797.379951][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 797.403349][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 797.407968][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 797.408027][ T10] usb 2-1: media controller created [ 797.412275][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 797.433931][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 797.434034][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 797.441855][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 797.458973][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 797.458990][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 797.537646][ T9] usb 2-1: USB disconnect, device number 30 [ 797.750444][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 798.027803][T10811] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 798.478357][T14859] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 798.478590][T14859] qnx6: wrong signature (magic) in superblock #1. [ 798.478598][T14859] qnx6: unable to read the first superblock [ 798.619707][T10811] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 798.619738][T10811] usb 4-1: config 0 has no interface number 0 [ 798.622837][T10811] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 798.622869][T10811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.622891][T10811] usb 4-1: Product: syz [ 798.622906][T10811] usb 4-1: Manufacturer: syz [ 798.622921][T10811] usb 4-1: SerialNumber: syz [ 798.679700][T10811] usb 4-1: config 0 descriptor?? [ 798.704501][T14863] input: syz0 as /devices/virtual/input/input22 [ 799.155742][T14874] loop6: detected capacity change from 0 to 7 [ 799.165198][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 799.165241][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 799.165625][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 799.165658][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 799.165964][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 799.165995][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 799.166336][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 799.166368][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 799.166801][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 799.166833][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 799.245127][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 799.245256][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 799.248578][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 799.248671][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 799.248849][T14874] ldm_validate_partition_table(): Disk read failed. [ 799.249053][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 799.249084][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 799.249390][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 799.249469][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 799.250712][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 799.250762][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 799.251116][T14874] Dev loop6: unable to read RDB block 0 [ 799.258366][T14874] loop6: unable to read partition table [ 799.258830][T14874] loop6: partition table beyond EOD, truncated [ 799.258853][T14874] loop_reread_partitions: partition scan of loop6 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 799.288947][T14874] ldm_validate_partition_table(): Disk read failed. [ 799.290899][T14874] Dev loop6: unable to read RDB block 0 [ 799.292789][T14874] loop6: unable to read partition table [ 799.293372][T14874] loop6: partition table beyond EOD, truncated [ 800.200629][T10811] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 800.200664][T10811] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 800.200994][T10811] asix 4-1:0.251: probe with driver asix failed with error -71 [ 800.228149][T10811] usb 4-1: USB disconnect, device number 32 [ 800.332444][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3451'. [ 800.631017][ T38] audit: type=1326 audit(1759761705.027:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4cd4baf79 code=0x7ffc0000 [ 800.634404][ T38] audit: type=1326 audit(1759761705.027:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 800.635699][ T38] audit: type=1326 audit(1759761705.027:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4cd4baf79 code=0x7ffc0000 [ 800.636183][ T38] audit: type=1326 audit(1759761705.027:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4cd4baf79 code=0x7ffc0000 [ 800.636673][ T38] audit: type=1326 audit(1759761705.027:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4cd4baf79 code=0x7ffc0000 [ 800.637119][ T38] audit: type=1326 audit(1759761705.027:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4cd4baf79 code=0x7ffc0000 [ 800.662568][ T38] audit: type=1326 audit(1759761705.057:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4cd4baf79 code=0x7ffc0000 [ 800.665113][ T38] audit: type=1326 audit(1759761705.057:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4cd4baf79 code=0x7ffc0000 [ 800.674748][ T38] audit: type=1326 audit(1759761705.057:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4cd4baf79 code=0x7ffc0000 [ 800.675193][ T38] audit: type=1326 audit(1759761705.067:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14890 comm="syz.1.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4cd4baf79 code=0x7ffc0000 [ 801.124156][T14900] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.588340][T14920] program syz.3.3468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 802.608312][ T10] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 802.675665][T14934] tmpfs: Bad value for 'mpol' [ 802.756494][T14930] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 802.756857][T14930] qnx6: wrong signature (magic) in superblock #1. [ 802.756870][T14930] qnx6: unable to read the first superblock [ 802.862823][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.862851][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 802.862902][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 802.862928][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.911917][ T10] usb 5-1: config 0 descriptor?? [ 802.929155][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 802.929208][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 802.933201][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 802.934147][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 802.934204][ T10] usb 5-1: media controller created [ 802.936779][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 803.021362][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 803.021455][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 803.044303][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 803.069119][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 803.069144][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 803.140207][T14912] dvb-usb: bulk message failed: -22 (2/0) [ 803.150383][ T978] usb 5-1: USB disconnect, device number 36 [ 803.318639][ T978] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 803.774628][T14952] batadv_slave_1: entered promiscuous mode [ 803.777479][T14952] batadv_slave_1: left promiscuous mode [ 804.125539][T14962] bridge0: entered promiscuous mode [ 804.126101][T14962] macvtap1: entered allmulticast mode [ 804.126118][T14962] bridge0: entered allmulticast mode [ 804.152112][T14962] bridge0: port 3(macvtap1) entered blocking state [ 804.154633][T14962] bridge0: port 3(macvtap1) entered disabled state [ 804.243140][T14962] bridge0: left allmulticast mode [ 804.243271][T14962] bridge0: left promiscuous mode [ 804.902944][T14986] sctp: [Deprecated]: syz.5.3494 (pid 14986) Use of int in max_burst socket option deprecated. [ 804.902944][T14986] Use struct sctp_assoc_value instead [ 805.040413][T14984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3495'. [ 807.153555][T15033] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3516'. [ 807.231635][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3516'. [ 807.390635][T15043] erspan0: entered promiscuous mode [ 808.087434][T15075] netlink: 'syz.2.3536': attribute type 1 has an invalid length. [ 809.032395][T15077] tmpfs: Unknown parameter '01777777777777777777777' [ 809.513819][T15077] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 809.514054][T15077] qnx6: wrong signature (magic) in superblock #1. [ 809.514062][T15077] qnx6: unable to read the first superblock [ 809.702388][T15090] macvlan1: entered promiscuous mode [ 809.704535][T15090] macvlan1: entered allmulticast mode [ 809.704556][T15090] veth1_vlan: entered allmulticast mode [ 810.730110][T15111] tmpfs: Unknown parameter '01777777777777777777777' [ 811.211242][T15113] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 811.214633][T15113] qnx6: wrong signature (magic) in superblock #1. [ 811.214704][T15113] qnx6: unable to read the first superblock [ 811.405211][T15123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3558'. [ 812.590736][T10811] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 812.702670][T15155] tmpfs: Bad value for 'mpol' [ 812.919453][T15154] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 812.919698][T15154] qnx6: wrong signature (magic) in superblock #1. [ 812.919706][T15154] qnx6: unable to read the first superblock [ 813.420539][T15159] tmpfs: Unknown parameter '01777777777777777777777' [ 813.571591][T10811] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 813.571614][T10811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.571629][T10811] usb 2-1: config 0 has no interface number 0 [ 813.574454][T10811] usb 2-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 813.574477][T10811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.574492][T10811] usb 2-1: Product: syz [ 813.574502][T10811] usb 2-1: Manufacturer: syz [ 813.574513][T10811] usb 2-1: SerialNumber: syz [ 813.666221][T10811] usb 2-1: config 0 descriptor?? [ 813.788671][T15157] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 813.789043][T15157] qnx6: wrong signature (magic) in superblock #1. [ 813.789053][T15157] qnx6: unable to read the first superblock [ 813.891347][T10811] uvcvideo 2-1:0.64: Found Unit with invalid ID 0 [ 813.891401][T10811] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (056d:0000) [ 813.891422][T10811] uvcvideo 2-1:0.64: No valid video chain found. [ 813.897041][T10811] usb 2-1: USB disconnect, device number 31 [ 815.257963][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3586'. [ 815.669484][ T10] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 816.751738][ T10] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 816.751768][ T10] usb 5-1: config 0 has no interface number 0 [ 816.751818][ T10] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 816.751848][ T10] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 816.751876][ T10] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 816.751903][ T10] usb 5-1: config 0 interface 2 has no altsetting 0 [ 816.755250][ T10] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 816.755283][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.755304][ T10] usb 5-1: Product: syz [ 816.755320][ T10] usb 5-1: Manufacturer: syz [ 816.755335][ T10] usb 5-1: SerialNumber: syz [ 816.770374][ T10] usb 5-1: config 0 descriptor?? [ 816.771777][T15184] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 816.772012][T15184] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 816.998303][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 817.216707][ T5906] usb 5-1: USB disconnect, device number 37 [ 817.786096][T15219] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 817.786512][T15219] qnx6: wrong signature (magic) in superblock #1. [ 817.786525][T15219] qnx6: unable to read the first superblock [ 817.945173][T15225] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.949452][T15224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3598'. [ 819.156094][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.156179][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.200447][T15233] tmpfs: Unknown parameter '01777777777777777777777' [ 819.442696][T15237] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 819.458542][T15237] qnx6: wrong signature (magic) in superblock #1. [ 819.458655][T15237] qnx6: unable to read the first superblock [ 819.803380][T15238] tmpfs: Bad value for 'mpol' [ 820.189379][T15240] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 820.258020][T15240] qnx6: wrong signature (magic) in superblock #1. [ 820.258138][T15240] qnx6: unable to read the first superblock [ 820.379403][T15242] program syz.1.3608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.575306][T15248] tap0: tun_chr_ioctl cmd 1074025681 [ 821.268100][T15257] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 821.268373][T15257] qnx6: wrong signature (magic) in superblock #1. [ 821.268380][T15257] qnx6: unable to read the first superblock [ 821.361237][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3614'. [ 821.382043][T15261] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.433500][T15273] tmpfs: Unknown parameter '01777777777777777777777' [ 822.690304][T15276] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 822.704704][T15276] qnx6: wrong signature (magic) in superblock #1. [ 822.704830][T15276] qnx6: unable to read the first superblock [ 824.017152][T15281] tmpfs: Bad value for 'mpol' [ 824.208010][T15282] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 824.214696][T15282] qnx6: wrong signature (magic) in superblock #1. [ 824.214806][T15282] qnx6: unable to read the first superblock [ 825.198340][ T5906] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 825.700557][ T978] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 825.737182][T15304] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 825.737425][T15304] qnx6: wrong signature (magic) in superblock #1. [ 825.737451][T15304] qnx6: unable to read the first superblock [ 825.800549][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 825.802658][ T5906] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 825.802686][ T5906] usb 5-1: config 0 has no interface number 0 [ 825.802736][ T5906] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 825.802774][ T5906] usb 5-1: config 0 interface 85 has no altsetting 0 [ 825.821277][ T5906] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 825.821315][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.821339][ T5906] usb 5-1: Product: syz [ 825.821356][ T5906] usb 5-1: Manufacturer: syz [ 825.821374][ T5906] usb 5-1: SerialNumber: syz [ 825.914988][ T5906] usb 5-1: config 0 descriptor?? [ 825.940281][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 825.943824][ T978] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 825.943911][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.017708][ T978] pvrusb2: Hardware description: Terratec Grabster AV400 [ 826.017739][ T978] pvrusb2: ********** [ 826.017746][ T978] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 826.017760][ T978] pvrusb2: Important functionality might not be entirely working. [ 826.017825][ T978] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 826.017839][ T978] pvrusb2: ********** [ 826.234756][ T2369] pvrusb2: Invalid write control endpoint [ 826.348828][ T2369] pvrusb2: Invalid write control endpoint [ 826.348845][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 826.348853][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 826.348859][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 826.348871][ T2369] pvrusb2: Device being rendered inoperable [ 826.367897][ T2369] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 826.368023][ T2369] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 826.398297][ T2369] pvrusb2: Attached sub-driver cx25840 [ 826.398318][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 826.398330][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 826.419675][T15302] pvrusb2: Attempted to execute control transfer when device not ok [ 826.424001][ T7273] usb 2-1: USB disconnect, device number 32 [ 826.529195][ T5906] appletouch 5-1:0.85: Geyser mode initialized. [ 826.549459][ T5906] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input24 [ 826.743912][ T7273] usb 5-1: USB disconnect, device number 38 [ 826.912393][ T7273] appletouch 5-1:0.85: input: appletouch disconnected [ 828.788351][T15341] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 828.788668][T15341] qnx6: wrong signature (magic) in superblock #1. [ 828.788677][T15341] qnx6: unable to read the first superblock [ 828.961595][T15349] netlink: 'syz.2.3644': attribute type 1 has an invalid length. [ 828.961622][T15349] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3644'. [ 829.249467][T15360] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 829.450844][T15368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3651'. [ 829.450884][T15368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3651'. [ 830.895903][T15377] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 830.896251][T15377] qnx6: wrong signature (magic) in superblock #1. [ 830.896263][T15377] qnx6: unable to read the first superblock [ 831.528138][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 831.690808][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 831.690844][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 831.690872][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 831.696476][ T9] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 831.696509][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.696531][ T9] usb 5-1: Product: syz [ 831.696546][ T9] usb 5-1: Manufacturer: syz [ 831.696562][ T9] usb 5-1: SerialNumber: syz [ 831.747180][T15420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3671'. [ 831.798427][ T9] usb 5-1: config 0 descriptor?? [ 831.799332][T15403] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 831.799481][T15403] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 831.805695][ T9] usb 5-1: ucan: probing device on interface #0 [ 832.739657][T15414] tmpfs: Bad value for 'mpol' [ 833.201352][ T9] usb 5-1: ucan: could not read protocol version, ret=-110 [ 833.201379][ T9] usb 5-1: ucan: probe failed; try to update the device firmware [ 833.282593][T15414] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 833.282831][T15414] qnx6: wrong signature (magic) in superblock #1. [ 833.282838][T15414] qnx6: unable to read the first superblock [ 834.284488][T15432] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 834.286006][T15432] qnx6: wrong signature (magic) in superblock #1. [ 834.286035][T15432] qnx6: unable to read the first superblock [ 834.647204][ T10] usb 5-1: USB disconnect, device number 39 [ 835.200417][T15442] tmpfs: Bad value for 'mpol' [ 835.367723][T15441] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 835.368009][T15441] qnx6: wrong signature (magic) in superblock #1. [ 835.368017][T15441] qnx6: unable to read the first superblock [ 835.483275][T15444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3682'. [ 835.918401][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3686'. [ 836.378453][T15458] tmpfs: Bad value for 'mpol' [ 837.892307][T15458] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 837.892574][T15458] qnx6: wrong signature (magic) in superblock #1. [ 837.892582][T15458] qnx6: unable to read the first superblock [ 838.481814][T15496] dvmrp1: tun_chr_ioctl cmd 35108 [ 838.806667][ T38] kauditd_printk_skb: 463 callbacks suppressed [ 838.806688][ T38] audit: type=1326 audit(1759761999.212:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15509 comm="syz.1.3710" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4cd51eec9 code=0x0 [ 839.577393][T15527] block device autoloading is deprecated and will be removed. [ 839.788237][T15537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.057132][T15552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3729'. [ 840.079255][T15549] netlink: 'syz.5.3728': attribute type 3 has an invalid length. [ 840.108613][ T7273] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 840.256028][ T7273] usb 4-1: Using ep0 maxpacket: 8 [ 840.260003][ T7273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.260037][ T7273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.260061][ T7273] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 840.260105][ T7273] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 840.260129][ T7273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.275156][ T7273] usb 4-1: config 0 descriptor?? [ 840.697241][ T7273] hid_parser_main: 55 callbacks suppressed [ 840.697271][ T7273] nzxt-kraken2 0003:1E71:170E.0016: unknown main item tag 0x2 [ 840.697311][ T7273] nzxt-kraken2 0003:1E71:170E.0016: unknown main item tag 0x0 [ 840.697338][ T7273] nzxt-kraken2 0003:1E71:170E.0016: item fetching failed at offset 2/5 [ 840.698115][ T7273] nzxt-kraken2 0003:1E71:170E.0016: hid parse failed with -22 [ 840.698658][ T7273] nzxt-kraken2 0003:1E71:170E.0016: probe with driver nzxt-kraken2 failed with error -22 [ 840.888484][ T7273] usb 4-1: USB disconnect, device number 33 [ 841.098513][T15587] loop6: detected capacity change from 0 to 524288000 [ 841.143151][T15587] loop6: detected capacity change from 524288000 to 1 [ 842.652398][ T44] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 842.766682][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3755'. [ 842.809717][ T44] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 842.809751][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.837125][ T44] usb 4-1: config 0 descriptor?? [ 842.856256][ T44] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 843.260096][ T44] cpia1 4-1:0.0: unexpected state after lo power cmd: 5b [ 843.667704][ T44] gspca_cpia1: usb_control_msg 02, error -71 [ 843.690102][ T44] gspca_cpia1: usb_control_msg 05, error -71 [ 843.690130][ T44] cpia1 4-1:0.0: unexpected systemstate: 5b [ 843.718621][ T44] usb 4-1: USB disconnect, device number 34 [ 844.371267][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 844.395548][ T44] kernel read not supported for file /dsp1 (pid: 44 comm: kworker/1:1) [ 844.517303][T15651] Falling back ldisc for ttyS3. [ 844.521903][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 844.538659][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.538694][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.538718][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 844.544444][ T10] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 844.544478][ T10] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 844.544503][ T10] usb 2-1: Product: syz [ 844.567635][ T10] usb 2-1: config 0 descriptor?? [ 845.001998][ T10] waterforce 0003:1044:7A4D.0017: unknown main item tag 0x0 [ 845.002040][ T10] waterforce 0003:1044:7A4D.0017: unknown main item tag 0x0 [ 845.002068][ T10] waterforce 0003:1044:7A4D.0017: item fetching failed at offset 2/5 [ 845.002872][ T10] waterforce 0003:1044:7A4D.0017: hid parse failed with -22 [ 845.002985][ T10] waterforce 0003:1044:7A4D.0017: probe with driver waterforce failed with error -22 [ 845.204696][ T44] usb 2-1: USB disconnect, device number 33 [ 845.572130][ T978] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 845.720486][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 845.723108][ T978] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 845.723138][ T978] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 845.723164][ T978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 845.726272][ T978] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 845.726301][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.726322][ T978] usb 4-1: Product: syz [ 845.726336][ T978] usb 4-1: Manufacturer: syz [ 845.726351][ T978] usb 4-1: SerialNumber: syz [ 845.801718][ T978] usb 4-1: config 0 descriptor?? [ 846.140370][T10811] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 846.213448][ T978] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 846.323645][T10811] usb 5-1: config 0 has an invalid interface number: 217 but max is 1 [ 846.323677][T10811] usb 5-1: config 0 has no interface number 1 [ 846.323790][T10811] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 846.323825][T10811] usb 5-1: config 0 interface 217 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 846.323919][T10811] usb 5-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 846.323946][T10811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.337196][T10811] usb 5-1: config 0 descriptor?? [ 846.364897][T10811] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 846.484878][T15734] dummy0: entered allmulticast mode [ 846.596165][T10811] gspca_sn9c20x: Write register 1000 failed -71 [ 846.596266][T10811] gspca_sn9c20x: Device initialization failed [ 846.596365][T10811] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 846.621458][ T978] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 846.622274][ T978] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 846.632836][T10811] usb 5-1: USB disconnect, device number 40 [ 846.661349][ T978] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 846.677896][ T978] usb 4-1: USB disconnect, device number 35 [ 847.000240][ T5906] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 847.170158][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 847.172527][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.172575][ T5906] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 847.172599][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.184585][ T5906] usb 2-1: config 0 descriptor?? [ 847.641103][ T5906] mcp2221 0003:04D8:00DD.0018: item fetching failed at offset 3/5 [ 847.641938][ T5906] mcp2221 0003:04D8:00DD.0018: can't parse reports [ 847.642047][ T5906] mcp2221 0003:04D8:00DD.0018: probe with driver mcp2221 failed with error -22 [ 847.836015][ T10] usb 2-1: USB disconnect, device number 34 [ 847.889821][ T978] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 848.043130][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.043186][ T978] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 848.043211][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.071563][ T978] usb 5-1: config 0 descriptor?? [ 848.310854][T15781] mkiss: ax0: crc mode is auto. [ 849.129716][ T978] hid-rmi 0003:17EF:6085.0019: hidraw0: USB HID vff.fe Device [HID 17ef:6085] on usb-dummy_hcd.4-1/input0 [ 849.137129][ T978] usb 5-1: USB disconnect, device number 41 [ 849.221060][T15789] tmpfs: Bad value for 'mpol' [ 849.373249][T15790] /dev/nullb0: Can't open blockdev [ 849.947444][T15802] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3842'. [ 850.328572][T15824] misc userio: Begin command sent, but we're already running [ 851.165060][T15821] tmpfs: Bad value for 'mpol' [ 851.388189][T15825] /dev/nullb0: Can't open blockdev [ 851.778542][T15829] macvtap1: entered allmulticast mode [ 851.778566][T15829] veth0_macvtap: entered allmulticast mode [ 851.977824][ T38] audit: type=1326 audit(1759762012.378:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.1.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 851.977886][ T38] audit: type=1326 audit(1759762012.388:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.1.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 851.980922][ T38] audit: type=1326 audit(1759762012.388:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.1.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4cd51d710 code=0x7ffc0000 [ 851.980983][ T38] audit: type=1326 audit(1759762012.388:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.1.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 851.981033][ T38] audit: type=1326 audit(1759762012.388:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.1.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 851.981363][ T38] audit: type=1326 audit(1759762012.388:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.1.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 851.981673][ T38] audit: type=1326 audit(1759762012.388:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.1.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 851.982191][ T38] audit: type=1326 audit(1759762012.388:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.1.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 852.172633][ T38] audit: type=1326 audit(1759762012.388:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.1.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 852.777277][T10811] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 852.888573][ T978] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 852.940526][T10811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.940554][T10811] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 852.940609][T10811] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 852.940634][T10811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.988704][T10811] usb 5-1: config 0 descriptor?? [ 853.010287][T10811] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 853.010343][T10811] dvb-usb: bulk message failed: -22 (3/0) [ 853.041369][T10811] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 853.043363][T10811] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 853.043418][T10811] usb 5-1: media controller created [ 853.072696][T10811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.094229][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.094257][ T978] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 853.094314][ T978] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 853.094340][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.143970][ T978] usb 2-1: config 0 descriptor?? [ 853.159940][ T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 853.159992][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 853.185864][ T978] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 853.201862][T10811] dvb-usb: bulk message failed: -22 (6/0) [ 853.201980][T10811] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 853.202657][ T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 853.202729][ T978] usb 2-1: media controller created [ 853.234217][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.250934][T10811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 853.253587][T10811] dvb-usb: schedule remote query interval to 150 msecs. [ 853.253612][T10811] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 853.290059][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 853.290288][ T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 853.317551][ T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 853.321086][ T978] dvb-usb: schedule remote query interval to 150 msecs. [ 853.321111][ T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 853.412603][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 853.412666][ T978] dvb-usb: error while querying for an remote control event. [ 853.476635][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 853.476674][ T978] dvb-usb: error while querying for an remote control event. [ 853.566632][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 853.566672][ T978] dvb-usb: error while querying for an remote control event. [ 853.636910][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 853.636945][ T978] dvb-usb: error while querying for an remote control event. [ 853.670673][ T7273] usb 5-1: USB disconnect, device number 42 [ 853.796813][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 853.796849][ T978] dvb-usb: error while querying for an remote control event. [ 853.808683][ T7273] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 853.828709][ T2107] usb 2-1: USB disconnect, device number 35 [ 853.919370][ T2107] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 853.939997][T15879] program syz.5.3879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 854.024254][T15883] cifs: Unknown parameter 'mode' [ 854.261078][T15893] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.376716][ T2107] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 854.424181][T15899] input: syz1 as /devices/virtual/input/input27 [ 854.526493][ T2107] usb 4-1: Using ep0 maxpacket: 16 [ 854.528762][ T2107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.528798][ T2107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 854.528841][ T2107] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 854.528864][ T2107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.542839][ T2107] usb 4-1: config 0 descriptor?? [ 854.886261][T10811] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 854.993824][ T2107] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001A/input/input28 [ 855.036469][T10811] usb 5-1: Using ep0 maxpacket: 8 [ 855.040755][T10811] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 855.040783][T10811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.078130][T10811] pvrusb2: Hardware description: Terratec Grabster AV400 [ 855.078149][T10811] pvrusb2: ********** [ 855.078156][T10811] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 855.078168][T10811] pvrusb2: Important functionality might not be entirely working. [ 855.078178][T10811] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 855.078190][T10811] pvrusb2: ********** [ 855.328618][ T2369] pvrusb2: Invalid write control endpoint [ 855.538630][ T2369] pvrusb2: Invalid write control endpoint [ 855.538649][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 855.538660][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 855.538669][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 855.538679][ T2369] pvrusb2: Device being rendered inoperable [ 855.538719][ T2369] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 855.538772][ T2369] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 855.549379][ T2369] pvrusb2: Attached sub-driver cx25840 [ 855.549398][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 855.549410][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 855.552200][T15907] pvrusb2: Attempted to execute control transfer when device not ok [ 855.574288][ T10] usb 5-1: USB disconnect, device number 43 [ 855.629190][ T2107] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 855.697654][ T2107] usb 4-1: USB disconnect, device number 36 [ 856.352735][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.467038][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.614882][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.720245][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.777842][T15940] tmpfs: Bad value for 'mpol' [ 856.778951][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.857438][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.928614][T15940] /dev/nullb0: Can't open blockdev [ 857.775104][T15953] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3913'. [ 857.775125][T15953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3913'. [ 857.775139][T15953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3913'. [ 857.817502][T15956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.964720][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 858.124567][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 858.133665][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 858.133695][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 858.133715][ T10] usb 2-1: Product: syz [ 858.133730][ T10] usb 2-1: Manufacturer: syz [ 858.133744][ T10] usb 2-1: SerialNumber: syz [ 858.145430][ T10] usb 2-1: config 0 descriptor?? [ 858.358322][ T10] usb 2-1: USB disconnect, device number 36 [ 858.983630][T15987] macsec1: entered allmulticast mode [ 858.983658][T15987] vlan0: entered allmulticast mode [ 858.983673][T15987] veth0_vlan: entered allmulticast mode [ 859.051032][T15987] vlan0: left allmulticast mode [ 859.051057][T15987] veth0_vlan: left allmulticast mode [ 859.658379][T15999] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.658859][T15999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.733950][T16023] net_ratelimit: 116 callbacks suppressed [ 861.733972][T16023] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 862.802385][T16033] program syz.2.3946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 863.030772][T16039] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3949'. [ 863.030820][T16039] NCSI netlink: No device for ifindex 0 [ 864.382414][T16074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3964'. [ 865.086958][T16097] overlay: filesystem on ./file0 not supported as upperdir [ 865.976235][T16130] netlink: 'syz.4.3990': attribute type 1 has an invalid length. [ 865.976257][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3990'. [ 867.626893][T16134] tmpfs: Bad value for 'mpol' [ 868.053235][T16140] /dev/nullb0: Can't open blockdev [ 868.210815][T16143] program syz.1.3994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.434728][T16151] pimreg1: tun_chr_ioctl cmd 1074025677 [ 868.434971][T16151] pimreg1: linktype set to 769 [ 868.468923][T16154] program syz.3.3999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.314469][T16177] tmpfs: Bad value for 'mpol' [ 869.501979][T16174] /dev/nullb0: Can't open blockdev [ 869.574821][T16179] tap0: tun_chr_ioctl cmd 1074025675 [ 869.574845][T16179] tap0: persist disabled [ 869.950152][ T2107] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 870.111833][ T2107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 870.112719][ T2107] usb 4-1: not running at top speed; connect to a high speed hub [ 870.114249][ T2107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.114273][ T2107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 870.117893][ T2107] usb 4-1: string descriptor 0 read error: -22 [ 870.118041][ T2107] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 870.118065][ T2107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.190871][T16202] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4021'. [ 870.205335][ T2107] usb 4-1: 0:2 : does not exist [ 870.427340][ T2107] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 870.445567][ T2107] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 870.520079][ T2107] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 870.529399][ T2107] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 870.709778][ T2107] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 870.745197][ T2107] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 870.758713][ T2107] usb 4-1: USB disconnect, device number 37 [ 871.878759][T10811] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 872.277231][T10811] usb 4-1: Using ep0 maxpacket: 32 [ 872.279743][T10811] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 872.279772][T10811] usb 4-1: config 0 has no interface number 0 [ 872.282890][T10811] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 872.282919][T10811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.282941][T10811] usb 4-1: Product: syz [ 872.282956][T10811] usb 4-1: Manufacturer: syz [ 872.282971][T10811] usb 4-1: SerialNumber: syz [ 872.343241][T10811] usb 4-1: config 0 descriptor?? [ 872.573518][T10811] radio-si470x 4-1:0.35: this is not a si470x device. [ 872.602890][T10811] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 872.822060][T10811] usb 4-1: USB disconnect, device number 38 [ 873.236097][T16244] sp0: Synchronizing with TNC [ 873.646958][T10811] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 873.725610][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4048'. [ 873.725636][T16264] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4048'. [ 873.725652][T16264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4048'. [ 873.725695][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4048'. [ 873.796887][T10811] usb 5-1: Using ep0 maxpacket: 16 [ 873.800515][T10811] usb 5-1: config 0 has an invalid interface number: 203 but max is 0 [ 873.800552][T10811] usb 5-1: config 0 has no interface number 0 [ 873.800609][T10811] usb 5-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 873.827743][T10811] usb 5-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 873.827777][T10811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.827799][T10811] usb 5-1: Product: syz [ 873.827814][T10811] usb 5-1: Manufacturer: syz [ 873.827830][T10811] usb 5-1: SerialNumber: syz [ 873.887786][T10811] usb 5-1: config 0 descriptor?? [ 873.889426][T16251] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 873.895621][T10811] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 874.377240][T10811] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 874.497099][ T38] audit: type=1326 audit(1759762034.919:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16290 comm="syz.5.4060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f529db9eec9 code=0x0 [ 874.547152][T10811] usb 4-1: Using ep0 maxpacket: 16 [ 874.550160][T10811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.550193][T10811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.550234][T10811] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 874.550257][T10811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.601288][T10811] usb 4-1: config 0 descriptor?? [ 874.617735][ T44] usb 5-1: USB disconnect, device number 44 [ 874.816274][ T38] audit: type=1400 audit(1759762035.200:629): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=16296 comm="syz.1.4062" saddr=172.20.20.187 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 875.049620][T10811] corsair 0003:1B1C:1B02.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 875.227430][T10811] corsair 0003:1B1C:1B02.001B: Read invalid backlight brightness: d5. [ 875.474234][ T10] usb 4-1: USB disconnect, device number 39 [ 875.488478][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4070'. [ 875.951365][ T38] audit: type=1326 audit(1759762036.370:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16334 comm="syz.2.4079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ad1a8eec9 code=0x0 [ 876.283779][T16349] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4085'. [ 876.283818][T16349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4085'. [ 876.521971][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4090'. [ 876.986497][ T2107] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 877.081533][T16384] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4101'. [ 877.155214][ T2107] usb 5-1: Using ep0 maxpacket: 16 [ 877.158202][ T2107] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 877.158229][ T2107] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 877.158259][ T2107] usb 5-1: config 166 has no interface number 0 [ 877.158276][ T2107] usb 5-1: config 166 has no interface number 1 [ 877.158339][ T2107] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 877.158361][ T2107] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 877.158417][ T2107] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 877.158443][ T2107] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 877.158469][ T2107] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 877.158560][ T2107] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 877.158588][ T2107] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 877.158614][ T2107] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 877.158638][ T2107] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 877.158665][ T2107] usb 5-1: config 166 interface 177 has no altsetting 0 [ 877.158772][ T2107] usb 5-1: config 166 interface 34 has no altsetting 0 [ 877.162353][ T2107] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 877.162380][ T2107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.162401][ T2107] usb 5-1: Product: syz [ 877.162415][ T2107] usb 5-1: Manufacturer: syz [ 877.162429][ T2107] usb 5-1: SerialNumber: syz [ 877.450037][ T2107] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 877.652767][ T2107] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 877.871093][ T2107] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 877.926681][T16408] loop5: detected capacity change from 0 to 3911 [ 878.056099][ T2107] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 878.056135][ T2107] uvcvideo 5-1:166.34: No valid video chain found. [ 878.088092][ T2107] usb 5-1: USB disconnect, device number 45 [ 878.739779][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4114'. [ 880.060005][T16482] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4142'. [ 880.156713][ T2107] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 880.223197][T15969] Bluetooth: hci2: command 0x0406 tx timeout [ 880.323240][ T2107] usb 2-1: Using ep0 maxpacket: 8 [ 880.329166][ T2107] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 880.329199][ T2107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.329220][ T2107] usb 2-1: Product: syz [ 880.329235][ T2107] usb 2-1: Manufacturer: syz [ 880.329250][ T2107] usb 2-1: SerialNumber: syz [ 880.336286][ T2107] usb 2-1: config 0 descriptor?? [ 880.342758][ T2107] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 880.550056][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.550131][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.579750][ T2107] gspca_sn9c2028: read1 error -32 [ 880.587136][ T2107] gspca_sn9c2028: read1 error -32 [ 880.798557][ T10] usb 2-1: USB disconnect, device number 37 [ 880.968380][T16504] tmpfs: Bad value for 'mpol' [ 882.019877][ T2107] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 882.354254][T16504] /dev/nullb0: Can't open blockdev [ 882.504431][ T2107] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 882.504463][ T2107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.504484][ T2107] usb 5-1: Product: syz [ 882.504499][ T2107] usb 5-1: Manufacturer: syz [ 882.504514][ T2107] usb 5-1: SerialNumber: syz [ 882.524238][ T2107] usb 5-1: config 0 descriptor?? [ 882.538268][ T2107] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 882.576487][ T2107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 882.581370][ T2107] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 882.581456][ T2107] usb 5-1: media controller created [ 882.689256][ T2107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 882.765794][T16506] dvb-usb: bulk message failed: -22 (7/0) [ 882.811752][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4162'. [ 882.977673][ T2107] DVB: Unable to find symbol mt352_attach() [ 883.086684][ T2107] DVB: Unable to find symbol nxt6000_attach() [ 883.086696][ T2107] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 883.090462][ T2107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 883.096504][ T2107] dvb-usb: schedule remote query interval to 1000 msecs. [ 883.096532][ T2107] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 883.096553][ T2107] dvb-usb: bulk message failed: -22 (7/0) [ 883.096574][ T2107] dvb-usb: bulk message failed: -22 (7/0) [ 883.100714][ T2107] usb 5-1: USB disconnect, device number 46 [ 883.279731][T16531] bridge_slave_0 (unregistering): left allmulticast mode [ 883.279776][T16531] bridge_slave_0 (unregistering): left promiscuous mode [ 883.279900][T16531] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.344782][ T2107] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 883.450954][T16537] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 883.575597][T16545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4168'. [ 883.766816][T16549] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4169'. [ 883.872488][T16549] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4169'. [ 883.976847][T16558] 9pnet: p9_errstr2errno: server reported unknown error @cF S+x [ 884.469863][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.804601][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.996168][ C1] vkms_vblank_simulate: vblank timer overrun [ 885.257240][ C1] vkms_vblank_simulate: vblank timer overrun [ 885.623951][T16588] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 886.690117][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 887.019462][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.099543][T16640] openvswitch: netlink: Duplicate key (type 6). [ 887.309684][ T7273] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 887.459596][ T7273] usb 2-1: Using ep0 maxpacket: 16 [ 887.462173][ T7273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.462208][ T7273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.462334][ T7273] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 887.462360][ T7273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.473825][ T7273] usb 2-1: config 0 descriptor?? [ 887.756290][T16656] loop2: detected capacity change from 0 to 7 [ 887.777798][T16656] Dev loop2: unable to read RDB block 7 [ 887.777856][T16656] loop2: unable to read partition table [ 887.778093][T16656] loop2: partition table beyond EOD, truncated [ 887.778114][T16656] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 887.942111][ T7273] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 887.942154][ T7273] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 887.942182][ T7273] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 887.942210][ T7273] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 887.942238][ T7273] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 887.957617][ T7273] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 888.229239][ T7273] usb 2-1: USB disconnect, device number 38 [ 888.343509][T16667] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 889.213602][T16687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4225'. [ 889.543690][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4230'. [ 889.685183][T16705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.218898][ T10] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 890.370385][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 890.370415][ T10] usb 4-1: config 1 has no interface number 0 [ 890.370469][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 890.370497][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 890.370526][ T10] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 890.370565][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 890.370584][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 890.373341][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 890.373363][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.373377][ T10] usb 4-1: Product: syz [ 890.373388][ T10] usb 4-1: Manufacturer: syz [ 890.373399][ T10] usb 4-1: SerialNumber: syz [ 890.453363][T16713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 890.632373][T16739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.680370][T16713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 890.888437][T16713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 891.060093][T16752] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4253'. [ 891.302268][T16713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 891.330688][ T10] cdc_ncm 4-1:1.1: bind() failure [ 891.509251][ T2107] usb 4-1: USB disconnect, device number 40 [ 892.739401][T16774] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4263'. [ 892.776943][ T44] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 892.836919][ T10] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 892.928851][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.928912][ T44] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 892.928934][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.932728][ T44] usb 5-1: config 0 descriptor?? [ 892.975105][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 892.989234][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.989310][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 892.989337][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 892.989366][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 892.989390][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 892.993276][ T10] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 892.993307][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 892.993327][ T10] usb 2-1: Product: syz [ 892.993342][ T10] usb 2-1: Manufacturer: syz [ 892.993357][ T10] usb 2-1: SerialNumber: syz [ 893.117047][ T10] usb 2-1: config 0 descriptor?? [ 893.353556][ T10] radio-si470x 2-1:0.0: DeviceID=0xc8c8 ChipID=0xc500 [ 893.403155][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 893.559256][ T10] radio-si470x 2-1:0.0: software version 200, hardware version 200 [ 893.615387][ T44] pwc: recv_control_msg error -71 req 02 val 2c00 [ 893.615922][ T44] pwc: recv_control_msg error -71 req 04 val 1000 [ 893.622254][ T44] pwc: recv_control_msg error -71 req 04 val 1300 [ 893.625433][ T44] pwc: recv_control_msg error -71 req 04 val 1400 [ 893.626561][ T44] pwc: recv_control_msg error -71 req 02 val 2000 [ 893.627108][ T44] pwc: recv_control_msg error -71 req 02 val 2100 [ 893.628685][ T44] pwc: recv_control_msg error -71 req 04 val 1500 [ 893.629221][ T44] pwc: recv_control_msg error -71 req 02 val 2500 [ 893.631067][ T44] pwc: recv_control_msg error -71 req 02 val 2400 [ 893.631623][ T44] pwc: recv_control_msg error -71 req 02 val 2600 [ 893.632154][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 893.632864][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 893.634960][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 893.638168][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 893.648751][ T44] pwc: Registered as video103. [ 893.652493][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 893.719503][ T44] usb 5-1: USB disconnect, device number 47 [ 893.760058][ T10] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 893.760135][ T10] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 893.776880][ T10] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 893.777261][ T10] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 893.829526][ T10] usb 2-1: USB disconnect, device number 39 [ 894.746421][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 894.895931][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 894.898645][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 894.898676][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.939333][ T10] usb 2-1: config 0 descriptor?? [ 895.196790][T16828] loop9: detected capacity change from 0 to 7 [ 895.204768][T16828] Dev loop9: unable to read RDB block 7 [ 895.204814][T16828] loop9: unable to read partition table [ 895.205016][T16828] loop9: partition table beyond EOD, truncated [ 895.205037][T16828] loop_reread_partitions: partition scan of loop9 (x , ) failed (rc=-5) [ 895.386377][ T10] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 895.386417][ T10] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 895.386464][ T10] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 895.386492][ T10] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 895.386522][ T10] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 895.386549][ T10] logitech 0003:046D:C29C.001D: unknown main item tag 0x0 [ 895.452477][ T10] logitech 0003:046D:C29C.001D: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 895.483328][T16835] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 895.483328][T16835] The task syz.2.4287 (16835) triggered the difference, watch for misbehavior. [ 895.657398][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.780579][ T10] logitech 0003:046D:C29C.001D: no inputs found [ 895.800214][ T10] usb 2-1: USB disconnect, device number 40 [ 895.976658][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.088443][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.301099][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.508530][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.751311][ C1] vkms_vblank_simulate: vblank timer overrun [ 897.762741][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.096568][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.301246][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.564320][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.943153][T16894] sit0: entered promiscuous mode [ 898.943350][T16894] netlink: 'syz.4.4312': attribute type 1 has an invalid length. [ 898.943367][T16894] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4312'. [ 899.165926][T16907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4318'. [ 899.278251][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4320'. [ 899.374078][ T7273] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 899.526742][ T7273] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 899.526789][ T7273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.528087][ T7273] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 899.528116][ T7273] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 899.528132][ T7273] usb 5-1: Manufacturer: syz [ 899.532057][ T7273] usb 5-1: config 0 descriptor?? [ 899.643560][ T7273] rc_core: IR keymap rc-hauppauge not found [ 899.643585][ T7273] Registered IR keymap rc-empty [ 899.645819][ T7273] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 899.648341][ T7273] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 899.752789][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 899.806966][ T978] usb 5-1: USB disconnect, device number 48 [ 900.066417][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026090400: rx timeout, send abort [ 900.071228][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026092400: rx timeout, send abort [ 900.071467][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888026090400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 900.073939][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888026092400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 900.088282][ T5818] Bluetooth: hci3: unexpected cc 0x204b length: 9 > 3 [ 900.088336][ T5818] Bluetooth: hci3: unexpected event for opcode 0x204b [ 900.523462][ T7273] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 900.576684][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038274c00: rx timeout, send abort [ 900.676357][ T7273] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 900.676393][ T7273] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.676437][ T7273] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 900.676461][ T7273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.766257][T16949] IPVS: length: 24 != 504 [ 900.952489][ T7273] usb 2-1: GET_CAPABILITIES returned 0 [ 900.952541][ T7273] usbtmc 2-1:16.0: can't read capabilities [ 901.076547][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038274c00: abort rx timeout. Force session deactivation [ 901.082398][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038275400: rx timeout, send abort [ 901.141661][ T2107] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 901.155068][ T978] usb 2-1: USB disconnect, device number 41 [ 901.312659][ T2107] usb 4-1: Using ep0 maxpacket: 16 [ 901.315549][ T2107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.315667][ T2107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 901.315712][ T2107] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 901.315737][ T2107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.321968][ T2107] usb 4-1: config 0 descriptor?? [ 901.582253][ C0] vcan0: j1939_tp_rxtimer: 0xffff888038275400: abort rx timeout. Force session deactivation [ 901.999226][T16971] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 901.999649][ T38] audit: type=1400 audit(1759762062.423:631): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=16970 comm="syz.5.4347" saddr=172.20.20.187 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 902.823630][ T2107] usbhid 4-1:0.0: can't add hid device: -71 [ 902.823780][ T2107] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 902.863402][ T2107] usb 4-1: USB disconnect, device number 41 [ 904.000008][T16996] tmpfs: Bad value for 'mpol' [ 904.548385][T16999] /dev/nullb0: Can't open blockdev [ 904.571005][T17002] nbd: device at index 2 is going down [ 904.621418][T10811] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 904.777933][T10811] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 904.777985][T10811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 904.778014][T10811] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 904.778059][T10811] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 904.778082][T10811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.852767][T10811] usb 2-1: config 0 descriptor?? [ 904.854681][T17001] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 905.288181][T10811] hid (null): report_id 675303578 is invalid [ 905.311502][T10811] uclogic 0003:5543:0005.001E: report_id 675303578 is invalid [ 905.311547][T10811] uclogic 0003:5543:0005.001E: item 0 4 1 8 parsing failed [ 905.313523][T10811] uclogic 0003:5543:0005.001E: parse failed [ 905.313660][T10811] uclogic 0003:5543:0005.001E: probe with driver uclogic failed with error -22 [ 905.511190][ T978] usb 2-1: USB disconnect, device number 42 [ 906.577999][T17040] tmpfs: Bad value for 'mpol' [ 906.594521][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4375'. [ 906.740210][T17040] /dev/nullb0: Can't open blockdev [ 908.181171][T17067] tmpfs: Bad value for 'mpol' [ 908.210987][ T7273] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 908.684377][T17068] /dev/nullb0: Can't open blockdev [ 908.699349][ T2107] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 908.817006][ T978] hid-generic 0000:0000:0000.001F: unknown main item tag 0x1 [ 908.817043][ T978] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 908.817071][ T978] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 908.817097][ T978] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 908.817123][ T978] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 908.817149][ T978] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 908.817317][ T978] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 908.817344][ T978] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 908.817370][ T978] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 908.817396][ T978] hid-generic 0000:0000:0000.001F: unknown main item tag 0x2 [ 908.829379][ T7273] usb 5-1: Using ep0 maxpacket: 32 [ 908.832547][ T7273] usb 5-1: config 0 has no interfaces? [ 908.832592][ T7273] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 908.832621][ T7273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.843481][ T7273] usb 5-1: config 0 descriptor?? [ 908.859290][ T2107] usb 4-1: Using ep0 maxpacket: 16 [ 908.862001][ T2107] usb 4-1: config 0 has an invalid interface number: 227 but max is 0 [ 908.862032][ T2107] usb 4-1: config 0 has no interface number 0 [ 908.862070][ T2107] usb 4-1: config 0 interface 227 has no altsetting 0 [ 908.865521][ T2107] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=28.6b [ 908.865555][ T2107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.865581][ T2107] usb 4-1: Product: syz [ 908.865597][ T2107] usb 4-1: Manufacturer: syz [ 908.865615][ T2107] usb 4-1: SerialNumber: syz [ 908.883851][ T2107] usb 4-1: config 0 descriptor?? [ 908.910674][ T2107] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.227/input/input32 [ 909.012962][ T978] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 909.094972][ T7273] usb 5-1: USB disconnect, device number 49 [ 909.736396][ T5168] bcm5974 4-1:0.227: could not read from device [ 909.775225][T17080] tmpfs: Bad value for 'mpol' [ 909.952236][T17081] /dev/nullb0: Can't open blockdev [ 910.006935][ T5168] bcm5974 4-1:0.227: could not read from device [ 910.278442][ T2107] usb 4-1: USB disconnect, device number 42 [ 911.104362][T17091] tmpfs: Bad value for 'mpol' [ 911.569098][T17091] /dev/nullb0: Can't open blockdev [ 911.835683][T17111] random: crng reseeded on system resumption [ 912.187382][T10811] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 912.244531][ T5818] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 912.357485][T10811] usb 2-1: Using ep0 maxpacket: 16 [ 912.365210][T10811] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 912.365242][T10811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.365257][T10811] usb 2-1: Product: syz [ 912.365267][T10811] usb 2-1: Manufacturer: syz [ 912.365278][T10811] usb 2-1: SerialNumber: syz [ 912.405750][T10811] usb 2-1: config 0 descriptor?? [ 912.490603][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4415'. [ 912.862962][T10811] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 912.875997][T10811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 912.887371][T10811] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 912.887439][T10811] usb 2-1: media controller created [ 912.938334][T10811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 913.560810][T10811] zl10353_read_register: readreg error (reg=127, ret==0) [ 913.560878][T10811] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 913.560894][T10811] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 913.661776][ T10] usb 2-1: USB disconnect, device number 43 [ 913.779337][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 914.311608][T17178] netlink: 'syz.1.4438': attribute type 1 has an invalid length. [ 914.311633][T17178] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4438'. [ 915.467138][T17216] sctp: [Deprecated]: syz.1.4454 (pid 17216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 915.467138][T17216] Use struct sctp_sack_info instead [ 915.487864][T17217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4453'. [ 915.679892][T17217] bridge1: entered promiscuous mode [ 916.406694][T17229] tmpfs: Bad value for 'mpol' [ 916.604659][T17230] /dev/nullb0: Can't open blockdev [ 917.058500][T17232] netlink: 'syz.1.4462': attribute type 29 has an invalid length. [ 917.076695][T17232] netlink: 'syz.1.4462': attribute type 29 has an invalid length. [ 917.088125][T17232] netlink: 'syz.1.4462': attribute type 29 has an invalid length. [ 917.093264][T17232] netlink: 'syz.1.4462': attribute type 29 has an invalid length. [ 918.703557][T17258] loop2: detected capacity change from 0 to 7 [ 918.717862][T17258] Dev loop2: unable to read RDB block 7 [ 918.717911][T17258] loop2: unable to read partition table [ 918.718153][T17258] loop2: partition table beyond EOD, truncated [ 918.718173][T17258] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 918.933483][T17256] tmpfs: Bad value for 'mpol' [ 919.456859][T17256] /dev/nullb0: Can't open blockdev [ 921.594738][T15969] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 922.212451][T17310] bond0: entered promiscuous mode [ 922.212477][T17310] bond_slave_0: entered promiscuous mode [ 922.212726][T17310] bond_slave_1: entered promiscuous mode [ 922.224295][T17310] batadv0: entered promiscuous mode [ 922.234647][T17310] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 922.234687][T17310] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 922.239602][T17310] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 922.580166][T17317] netlink: 452 bytes leftover after parsing attributes in process `syz.4.4496'. [ 923.006782][T17332] 9p: Unknown Cache mode or invalid value 77777777777 [ 923.046314][T17335] input: syz1 as /devices/virtual/input/input33 [ 923.511997][ T7273] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 923.661842][ T7273] usb 5-1: Using ep0 maxpacket: 32 [ 923.667572][ T7273] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 923.667604][ T7273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.667625][ T7273] usb 5-1: Product: syz [ 923.667640][ T7273] usb 5-1: Manufacturer: syz [ 923.667656][ T7273] usb 5-1: SerialNumber: syz [ 923.713562][ T7273] usb 5-1: config 0 descriptor?? [ 923.719669][ T7273] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 923.844632][ T38] audit: type=1326 audit(1759762084.284:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17359 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 923.846793][ T38] audit: type=1326 audit(1759762084.284:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17359 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 923.850729][ T38] audit: type=1326 audit(1759762084.284:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17359 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 923.855245][ T38] audit: type=1326 audit(1759762084.284:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17359 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 923.856305][ T38] audit: type=1326 audit(1759762084.294:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17359 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 923.856643][ T38] audit: type=1326 audit(1759762084.294:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17359 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 923.860254][ T38] audit: type=1326 audit(1759762084.294:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17359 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 923.863070][ T38] audit: type=1326 audit(1759762084.294:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17359 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 923.864527][ T38] audit: type=1326 audit(1759762084.304:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17359 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 923.865918][ T38] audit: type=1326 audit(1759762084.304:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17359 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7ffc0000 [ 924.746398][ T7273] gspca_ov534_9: reg_w failed -71 [ 925.030800][ T7273] gspca_ov534_9: Unknown sensor 0000 [ 925.030931][ T7273] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 925.034452][ T7273] usb 5-1: USB disconnect, device number 50 [ 925.655496][T15969] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 925.655688][T15969] Bluetooth: hci3: Injecting HCI hardware error event [ 925.659944][ T5818] Bluetooth: hci3: hardware error 0x00 [ 925.745979][T17398] geneve2: entered promiscuous mode [ 925.746011][T17398] geneve2: entered allmulticast mode [ 926.347038][T17415] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.347644][T17415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.390089][T17415] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 927.157121][T17439] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4547'. [ 927.157148][T17439] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 927.529626][ T7273] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 927.685618][ T7273] usb 5-1: Using ep0 maxpacket: 8 [ 927.707708][ T7273] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 927.707739][ T7273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.707760][ T7273] usb 5-1: Product: syz [ 927.707775][ T7273] usb 5-1: Manufacturer: syz [ 927.707790][ T7273] usb 5-1: SerialNumber: syz [ 927.730364][ T7273] usb 5-1: config 0 descriptor?? [ 927.763588][ T7273] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 927.880102][ T5818] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 928.138181][T17478] syzkaller1: entered promiscuous mode [ 928.138209][T17478] syzkaller1: entered allmulticast mode [ 928.827123][ T7273] gspca_sonixj: reg_w1 err -71 [ 928.859372][ T7273] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 928.864560][ T7273] usb 5-1: USB disconnect, device number 51 [ 929.857819][T17536] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 930.870428][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4611'. [ 932.111468][T17613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4625'. [ 932.131695][T17613] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4625'. [ 932.697041][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 932.846906][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 932.852770][ T10] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 932.852803][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.852825][ T10] usb 5-1: Product: syz [ 932.852840][ T10] usb 5-1: Manufacturer: syz [ 932.852856][ T10] usb 5-1: SerialNumber: syz [ 932.910216][ T10] usb 5-1: config 0 descriptor?? [ 934.001873][T17650] program syz.1.4640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 934.131252][ T10] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 935.080095][T17695] IPVS: sh: FWM 3 0x00000003 - no destination available [ 935.254963][ T44] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 935.425566][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 935.428093][ T44] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 935.428120][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.428140][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 935.431934][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 935.431963][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.431983][ T44] usb 2-1: Product: syz [ 935.431997][ T44] usb 2-1: Manufacturer: syz [ 935.432010][ T44] usb 2-1: SerialNumber: syz [ 935.915638][ T44] usb 2-1: 0:2 : does not exist [ 935.938403][T10811] usb 5-1: USB disconnect, device number 52 [ 936.335949][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 936.413663][ T44] usb 2-1: USB disconnect, device number 44 [ 937.284691][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 937.434607][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 937.450210][ T10] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 937.450240][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.450261][ T10] usb 4-1: Product: syz [ 937.450276][ T10] usb 4-1: Manufacturer: syz [ 937.450291][ T10] usb 4-1: SerialNumber: syz [ 937.491869][ T10] usb 4-1: config 0 descriptor?? [ 937.712395][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 938.194191][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.234015][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.477673][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.574550][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.603260][T17782] tmpfs: Bad value for 'mpol' [ 938.657277][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.757382][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.925364][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.002915][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.046819][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.063407][T17782] /dev/nullb0: Can't open blockdev [ 939.114571][ T10] gspca_sunplus: reg_w_riv err -71 [ 939.114664][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 939.120788][ T10] usb 4-1: USB disconnect, device number 43 [ 939.300732][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.610925][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.663417][T17789] tmpfs: Bad value for 'mpol' [ 939.740287][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.110436][T17789] /dev/nullb0: Can't open blockdev [ 940.533109][ T44] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 940.683349][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 940.685764][ T44] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 940.685791][ T44] usb 4-1: config 0 has no interface number 0 [ 940.691912][ T44] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 940.691943][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.691964][ T44] usb 4-1: Product: syz [ 940.691978][ T44] usb 4-1: Manufacturer: syz [ 940.691995][ T44] usb 4-1: SerialNumber: syz [ 940.751768][ T44] usb 4-1: config 0 descriptor?? [ 940.776116][ T44] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 940.777288][T17802] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 941.001525][ T44] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 941.043651][ T44] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 941.198687][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 32 [ 941.401627][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 941.402334][ T44] usb 4-1: USB disconnect, device number 44 [ 941.433899][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 941.456164][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 941.456855][ T44] quatech2 4-1:0.51: device disconnected [ 941.773200][T17833] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4720'. [ 941.773238][T17833] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4720'. [ 941.913566][T17841] atomic_op ffff888030560218 conn xmit_atomic 0000000000000000 [ 941.958677][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.958754][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.056565][ T44] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 942.202758][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 942.210920][ T44] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 942.210968][ T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 942.210984][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 942.211002][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 942.211019][ T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.211050][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 942.211066][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.492722][ T44] usb 2-1: usb_control_msg returned -32 [ 942.492769][ T44] usbtmc 2-1:16.0: can't read capabilities [ 943.163629][T17881] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4740'. [ 944.039918][T17914] netlink: 'syz.4.4755': attribute type 39 has an invalid length. [ 944.817062][ T44] usb 2-1: USB disconnect, device number 45 [ 944.880862][ T7273] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 945.030819][ T7273] usb 4-1: Using ep0 maxpacket: 8 [ 945.033327][ T7273] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 945.033355][ T7273] usb 4-1: config 0 has no interface number 0 [ 945.033408][ T7273] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 945.033434][ T7273] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 945.033461][ T7273] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 945.033488][ T7273] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 945.033532][ T7273] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 945.034087][ T7273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.127358][ T7273] usb 4-1: config 0 descriptor?? [ 945.141014][ T7273] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 945.337995][ T44] usb 4-1: USB disconnect, device number 45 [ 945.344762][ T44] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 946.488168][T17970] tmpfs: Bad value for 'mpol' [ 946.640879][T17970] /dev/nullb0: Can't open blockdev [ 947.598956][T17989] loop8: detected capacity change from 0 to 8 [ 947.614487][T17989] Dev loop8: unable to read RDB block 8 [ 947.614536][T17989] loop8: unable to read partition table [ 947.614772][T17989] loop8: partition table beyond EOD, truncated [ 947.614791][T17989] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 948.124635][T18009] trusted_key: syz.1.4798 sent an empty control message without MSG_MORE. [ 948.839269][ T44] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 949.008891][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 949.022709][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 949.026677][ T44] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 949.026712][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.026760][ T44] usb 2-1: Product: syz [ 949.026778][ T44] usb 2-1: Manufacturer: syz [ 949.026796][ T44] usb 2-1: SerialNumber: syz [ 949.045764][ T44] usb 2-1: config 0 descriptor?? [ 949.064056][ T44] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 949.064090][ T44] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 949.588945][ T978] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 949.694906][ T44] em28xx 2-1:0.0: chip ID is em2765 [ 949.754658][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.754753][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.754778][ T978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 949.754825][ T978] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 949.754848][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.789941][ T978] usb 4-1: config 0 descriptor?? [ 950.290091][ T44] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 950.290125][ T44] em28xx 2-1:0.0: board has no eeprom [ 950.316598][ T978] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 950.358144][ T44] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 950.358176][ T44] em28xx 2-1:0.0: dvb set to bulk mode. [ 950.359797][ T978] em28xx 2-1:0.0: Binding DVB extension [ 950.414170][ T44] usb 2-1: USB disconnect, device number 46 [ 950.415791][ T44] em28xx 2-1:0.0: Disconnecting em28xx [ 950.571812][ T978] em28xx 2-1:0.0: Registering input extension [ 950.572298][ T44] em28xx 2-1:0.0: Closing input extension [ 950.611778][ T44] em28xx 2-1:0.0: Freeing device [ 950.917834][ T5906] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 950.973683][ T38] kauditd_printk_skb: 17 callbacks suppressed [ 950.973702][ T38] audit: type=1326 audit(1759762111.428:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18093 comm="syz.1.4835" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4cd51eec9 code=0x0 [ 951.017135][ T38] audit: type=1326 audit(1759762111.468:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18075 comm="syz.5.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529db9eec9 code=0x7fc00000 [ 951.067802][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 951.075979][ T5906] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 951.076097][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.076133][ T5906] usb 5-1: Product: syz [ 951.076149][ T5906] usb 5-1: Manufacturer: syz [ 951.076163][ T5906] usb 5-1: SerialNumber: syz [ 951.091178][ T5906] usb 5-1: config 0 descriptor?? [ 951.526130][ T5906] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 951.536307][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 951.540092][ T5906] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 951.540160][ T5906] usb 5-1: media controller created [ 951.576812][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 952.137972][T18089] dtv5100: wlen = 0, aborting. [ 952.138055][ T5906] zl10353_read_register: readreg error (reg=127, ret==0) [ 952.138113][ T5906] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 952.138127][ T5906] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 952.144548][ T5906] usb 5-1: USB disconnect, device number 53 [ 952.223493][ T5906] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 952.341557][ T978] usb 4-1: USB disconnect, device number 46 [ 952.396546][T18121] syzkaller1: entered promiscuous mode [ 952.396573][T18121] syzkaller1: entered allmulticast mode [ 952.444056][T18119] tmpfs: Bad value for 'mpol' [ 952.917276][T18119] /dev/nullb0: Can't open blockdev [ 954.265758][T18150] tmpfs: Bad value for 'mpol' [ 954.375622][T18152] /dev/nullb0: Can't open blockdev [ 954.712563][T18154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 955.022572][T18164] bond1: invalid ARP target 0.0.0.0 specified for addition [ 955.022600][T18164] bond1: option arp_ip_target: invalid value (0) [ 955.120084][T18164] bond1 (unregistering): Released all slaves [ 955.274415][ T6018] Bluetooth: hci5: Frame reassembly failed (-84) [ 956.208566][T18186] tmpfs: Bad value for 'mpol' [ 956.698641][T18191] /dev/nullb0: Can't open blockdev [ 957.193370][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4885'. [ 957.193398][T18213] netlink: 'syz.5.4885': attribute type 30 has an invalid length. [ 957.217804][ T3620] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.218296][ T3620] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.218340][ T3620] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.218380][ T3620] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.305048][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 959.924925][T18253] tmpfs: Bad value for 'mpol' [ 960.892911][ T5905] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 961.058557][ T5905] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 961.058589][ T5905] usb 5-1: config 0 has no interface number 0 [ 961.061695][ T5905] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 961.061726][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.061748][ T5905] usb 5-1: Product: syz [ 961.061762][ T5905] usb 5-1: Manufacturer: syz [ 961.061776][ T5905] usb 5-1: SerialNumber: syz [ 961.095462][ T5905] usb 5-1: config 0 descriptor?? [ 961.320605][ T5905] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 961.353638][ T5905] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 961.354106][ T5905] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 961.354162][ T5905] usb 5-1: media controller created [ 961.481836][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 961.743767][T18291] batadv_slave_0: entered promiscuous mode [ 961.748192][T18290] batadv_slave_0: left promiscuous mode [ 962.698314][ T5905] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 962.809321][T18328] syzkaller1: entered promiscuous mode [ 962.809351][T18328] syzkaller1: entered allmulticast mode [ 962.836876][ T5905] usb 5-1: USB disconnect, device number 54 [ 962.965711][ T38] audit: type=1326 audit(1759762123.414:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18329 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55edebeec9 code=0x7ffc0000 [ 962.968952][ T38] audit: type=1326 audit(1759762123.434:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18329 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55edebeec9 code=0x7ffc0000 [ 962.969508][ T38] audit: type=1326 audit(1759762123.434:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18329 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55edebeec9 code=0x7ffc0000 [ 962.970167][ T38] audit: type=1326 audit(1759762123.434:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18329 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55edebeec9 code=0x7ffc0000 [ 962.970822][ T38] audit: type=1326 audit(1759762123.434:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18329 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55ede5af79 code=0x7ffc0000 [ 962.971462][ T38] audit: type=1326 audit(1759762123.434:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18329 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55edebeec9 code=0x7ffc0000 [ 963.151721][ T38] audit: type=1326 audit(1759762123.564:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18329 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55edebeec9 code=0x7ffc0000 [ 963.151769][ T38] audit: type=1326 audit(1759762123.604:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18329 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55edebeec9 code=0x7ffc0000 [ 963.151802][ T38] audit: type=1326 audit(1759762123.604:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18329 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55edebeec9 code=0x7ffc0000 [ 963.151834][ T38] audit: type=1326 audit(1759762123.604:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18329 comm="syz.3.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55edebeec9 code=0x7ffc0000 [ 963.405860][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4935'. [ 963.405884][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4935'. [ 963.774020][T18344] pim6reg1: entered promiscuous mode [ 963.774051][T18344] pim6reg1: entered allmulticast mode [ 963.794582][ T44] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 963.951364][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 963.954448][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 963.957892][ T44] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 963.957922][ T44] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 963.957944][ T44] usb 4-1: Product: syz [ 963.957959][ T44] usb 4-1: Manufacturer: syz [ 963.957975][ T44] usb 4-1: SerialNumber: syz [ 964.010587][ T44] usb 4-1: config 0 descriptor?? [ 964.020209][T18343] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 964.033927][ T44] hub 4-1:0.0: bad descriptor, ignoring hub [ 964.033970][ T44] hub 4-1:0.0: probe with driver hub failed with error -5 [ 964.351705][ T44] usb 4-1: USB disconnect, device number 47 [ 964.545114][ T44] kernel write not supported for file bpf-prog (pid: 44 comm: kworker/1:1) [ 964.681002][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 964.831129][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 964.833838][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 964.842016][ T10] usb 4-1: string descriptor 0 read error: -22 [ 964.842213][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 964.842242][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 964.883281][ T10] usb 4-1: config 0 descriptor?? [ 964.884685][T18343] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 964.896368][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 964.896415][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 965.191111][ T7273] usb 4-1: USB disconnect, device number 48 [ 965.234035][T18390] syzkaller1: entered promiscuous mode [ 965.234063][T18390] syzkaller1: entered allmulticast mode [ 965.409948][T18397] netlink: 'syz.4.4961': attribute type 16 has an invalid length. [ 965.410031][T18397] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4961'. [ 967.139814][T18440] tmpfs: Bad value for 'mpol' [ 967.316175][T18437] /dev/nullb0: Can't open blockdev [ 967.342155][T18439] team_slave_0: entered promiscuous mode [ 967.342230][T18439] team_slave_1: entered promiscuous mode [ 967.344632][T18439] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 967.345520][T18439] team0: Device macvtap1 is already an upper device of the team interface [ 967.411343][T18439] team_slave_0: left promiscuous mode [ 967.411427][T18439] team_slave_1: left promiscuous mode [ 967.686871][T18452] loop8: detected capacity change from 0 to 8 [ 967.688094][T18452] Dev loop8: unable to read RDB block 8 [ 967.688140][T18452] loop8: unable to read partition table [ 967.688382][T18452] loop8: partition table beyond EOD, truncated [ 967.688402][T18452] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 967.753751][T18454] input: syz1 as /devices/virtual/input/input36 [ 967.753790][T18454] input: failed to attach handler leds to device input36, error: -6 [ 967.769482][ T10] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 967.940730][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 967.940765][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 967.940811][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 967.940836][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.201247][ T10] usb 5-1: usb_control_msg returned -32 [ 968.201299][ T10] usbtmc 5-1:16.0: can't read capabilities [ 968.963613][T18499] netlink: 'syz.1.5005': attribute type 11 has an invalid length. [ 968.964197][T18499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5005'. [ 968.978491][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5006'. [ 968.995719][T18503] ipvlan2: entered promiscuous mode [ 969.199247][ T978] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 969.352323][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.352388][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 969.352419][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 969.352441][ T978] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 969.354613][ T978] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 969.354641][ T978] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 969.354662][ T978] usb 4-1: Manufacturer: syz [ 969.426693][ T978] usb 4-1: config 0 descriptor?? [ 969.722791][T18521] 9pnet: p9_errstr2errno: server reported unknown error  [ 969.758443][ T978] rc_core: IR keymap rc-hauppauge not found [ 969.758466][ T978] Registered IR keymap rc-empty [ 969.758660][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 969.786838][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 969.800392][ T978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 969.803479][ T978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input37 [ 969.835303][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 969.859207][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 969.878659][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 969.908628][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 969.928475][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 969.948763][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 969.968401][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.011070][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.032489][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.058509][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.088796][ T978] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.111842][ T978] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 970.111870][ T978] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 970.136892][ T978] usb 4-1: USB disconnect, device number 49 [ 970.192239][ T44] IPVS: starting estimator thread 0... [ 970.281918][T18532] tipc: Enabled bearer , priority 10 [ 970.309018][T18533] IPVS: using max 7 ests per chain, 16800 per kthread [ 970.561278][ T978] usb 5-1: USB disconnect, device number 55 [ 970.681940][T18545] bridge0: entered allmulticast mode [ 970.697266][T18545] pim6reg: entered allmulticast mode [ 971.068120][ T978] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 971.238008][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 971.240496][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.240530][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.240569][ T978] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 971.240594][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.246731][ T978] usb 5-1: config 0 descriptor?? [ 971.547920][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 971.683694][ T978] usbhid 5-1:0.0: can't add hid device: -71 [ 971.683836][ T978] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 971.702807][ T978] usb 5-1: USB disconnect, device number 56 [ 971.709885][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 971.713333][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 971.714951][ T10] usb 2-1: config 70 has an invalid interface number: 143 but max is 0 [ 971.714980][ T10] usb 2-1: config 70 has no interface number 0 [ 971.715022][ T10] usb 2-1: config 70 interface 143 has no altsetting 0 [ 971.718494][ T44] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 971.720438][ T10] usb 2-1: New USB device found, idVendor=07c4, idProduct=a003, bcdDevice=12.f6 [ 971.720472][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.720496][ T10] usb 2-1: Product: syz [ 971.720513][ T10] usb 2-1: Manufacturer: syz [ 971.720531][ T10] usb 2-1: SerialNumber: syz [ 971.884606][ T44] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 971.884636][ T44] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 971.884657][ T44] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 971.884678][ T44] usb 4-1: config 220 has no interface number 2 [ 971.884785][ T44] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 971.884813][ T44] usb 4-1: config 220 interface 0 has no altsetting 0 [ 971.884832][ T44] usb 4-1: config 220 interface 76 has no altsetting 0 [ 971.884851][ T44] usb 4-1: config 220 interface 1 has no altsetting 0 [ 971.950751][ T44] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 971.950789][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.950804][ T44] usb 4-1: Product: syz [ 971.950815][ T44] usb 4-1: Manufacturer: syz [ 971.950825][ T44] usb 4-1: SerialNumber: syz [ 972.034272][ T10] ums-datafab 2-1:70.143: USB Mass Storage device detected [ 972.094277][ T10] ums-datafab 2-1:70.143: This device (07c4,a003,12f6 S 24 P f2) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 972.094277][ T10] Please send a copy of this message to and [ 972.207884][ T10] usb 2-1: USB disconnect, device number 47 [ 972.229772][ T44] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 972.229816][ T44] uvcvideo 4-1:220.0: No valid video chain found. [ 972.229884][ T44] usb 4-1: selecting invalid altsetting 0 [ 972.269184][ T44] usb 4-1: selecting invalid altsetting 0 [ 972.269224][ T44] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 972.273539][ T44] usb 4-1: USB disconnect, device number 50 [ 973.461219][T18607] gretap0: entered promiscuous mode [ 975.325297][T18671] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5076'. [ 975.624287][ T38] kauditd_printk_skb: 57 callbacks suppressed [ 975.624318][ T38] audit: type=1326 audit(1759762136.090:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18682 comm="syz.3.5082" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55edebeec9 code=0x0 [ 976.046783][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5086'. [ 976.738808][T18701] tmpfs: Bad value for 'mpol' [ 976.988217][ T38] audit: type=1326 audit(1759762137.461:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18691 comm="syz.1.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cd51eec9 code=0x7fc00000 [ 977.663162][T18716] 9pnet: p9_errstr2errno: server reported unknown error @cF S+x [ 978.194251][ T44] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 978.284145][ T978] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 978.384096][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 978.387928][ T44] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.4d [ 978.387960][ T44] usb 4-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 978.387980][ T44] usb 4-1: Product: syz [ 978.392698][ T44] usb 4-1: config 0 descriptor?? [ 978.444168][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 978.447386][ T978] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.447410][ T978] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.447427][ T978] usb 2-1: config 0 interface 0 has no altsetting 0 [ 978.447502][ T978] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 978.447520][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.458511][ T978] usb 2-1: config 0 descriptor?? [ 978.617986][ T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 978.651203][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 978.653623][ T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 978.654167][ T44] usb 4-1: media controller created [ 978.766416][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 978.888006][T18758] input: syz0 as /devices/virtual/input/input38 [ 978.957895][ T978] hid (null): unknown global tag 0xe [ 978.998461][ T978] cougar 0003:060B:500A.0021: unexpected long global item [ 979.001107][ T978] cougar 0003:060B:500A.0021: parse failed [ 979.001458][ T978] cougar 0003:060B:500A.0021: probe with driver cougar failed with error -22 [ 979.181488][ T978] usb 2-1: USB disconnect, device number 48 [ 979.506562][ T44] az6027: usb out operation failed. (-71) [ 979.506582][ T44] stb0899_attach: Driver disabled by Kconfig [ 979.506594][ T44] az6027: no front-end attached [ 979.506594][ T44] [ 979.506992][ T44] az6027: usb out operation failed. (-71) [ 979.507007][ T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 979.510259][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 979.517481][ T44] dvb-usb: schedule remote query interval to 400 msecs. [ 979.517505][ T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 979.543809][ T44] usb 4-1: USB disconnect, device number 51 [ 979.746301][ T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 980.449535][T18803] tmpfs: Bad value for 'mpol' [ 980.857559][ T44] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 981.024887][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.024922][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.024946][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 981.024998][ T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 981.025021][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.035657][ T44] usb 5-1: config 0 descriptor?? [ 981.589600][T18824] tmpfs: Bad value for 'mpol' [ 981.846350][ T44] hid_parser_main: 29 callbacks suppressed [ 981.846377][ T44] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 981.846410][ T44] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 981.846439][ T44] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 981.846466][ T44] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 981.846494][ T44] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 981.846521][ T44] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 981.846549][ T44] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 981.846576][ T44] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 981.846603][ T44] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 981.846630][ T44] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 981.931134][ T44] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 982.102274][ T44] usb 5-1: USB disconnect, device number 57 [ 982.353474][T18841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 982.741416][ T38] audit: type=1326 audit(1759762144.208:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18849 comm="syz.4.5154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d295beec9 code=0x0 [ 983.572447][ T38] audit: type=1326 audit(1759762145.038:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18873 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad1a8eec9 code=0x7ffc0000 [ 983.579297][ T38] audit: type=1326 audit(1759762145.048:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18873 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad1a8eec9 code=0x7ffc0000 [ 983.579356][ T38] audit: type=1326 audit(1759762145.048:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18873 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9ad1a8eec9 code=0x7ffc0000 [ 983.579408][ T38] audit: type=1326 audit(1759762145.048:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18873 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad1a8eec9 code=0x7ffc0000 [ 983.579457][ T38] audit: type=1326 audit(1759762145.048:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18873 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad1a8eec9 code=0x7ffc0000 [ 983.581236][ T38] audit: type=1326 audit(1759762145.048:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18873 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9ad1a8eec9 code=0x7ffc0000 [ 983.581290][ T38] audit: type=1326 audit(1759762145.048:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18873 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad1a8eec9 code=0x7ffc0000 [ 983.581339][ T38] audit: type=1326 audit(1759762145.048:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18873 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad1a8eec9 code=0x7ffc0000 [ 983.584264][ T38] audit: type=1326 audit(1759762145.048:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18873 comm="syz.2.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9ad1a8eec9 code=0x7ffc0000 [ 985.391035][ T5905] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 985.541709][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 985.585681][ T5905] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 985.585713][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.613281][ T5905] usb 2-1: config 0 descriptor?? [ 985.620287][ T5905] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 986.840944][ T5905] gspca_nw80x: reg_w err -71 [ 986.841042][ T5905] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 986.867924][ T5905] usb 2-1: USB disconnect, device number 49 [ 988.198972][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5222'. [ 988.639372][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 988.662934][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 988.663856][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 988.798908][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 988.801134][ T10] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.801168][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 988.801203][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.00 [ 988.801228][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.856164][ T10] usb 5-1: config 0 descriptor?? [ 988.969738][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 988.972911][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 989.425749][T19012] ceph: No mds server is up or the cluster is laggy [ 989.491152][T19008] netlink: 'syz.4.5223': attribute type 4 has an invalid length. [ 989.491177][T19008] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5223'. [ 989.511544][ T44] usb 5-1: USB disconnect, device number 58 [ 989.536939][ T10] libceph: connect (1)[c::]:6789 error -101 [ 989.537159][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 989.627362][ C0] vkms_vblank_simulate: vblank timer overrun [ 989.875108][ C0] vkms_vblank_simulate: vblank timer overrun [ 990.043031][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.818002][T19088] loop3: detected capacity change from 0 to 7 [ 991.832734][T19088] Dev loop3: unable to read RDB block 7 [ 991.832810][T19088] loop3: unable to read partition table [ 991.833089][T19088] loop3: partition table beyond EOD, truncated [ 991.833114][T19088] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 992.148274][ T44] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 992.197409][ T10] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 992.304871][ T44] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 992.304904][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.340243][ T44] usb 5-1: config 0 descriptor?? [ 992.382360][ T10] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 992.382390][ T10] usb 2-1: config 0 has no interface number 0 [ 992.382442][ T10] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 992.382471][ T10] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.413490][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=22.00 [ 992.413527][ T10] usb 2-1: New USB device strings: Mfr=17, Product=0, SerialNumber=0 [ 992.413552][ T10] usb 2-1: Manufacturer: syz [ 992.433863][ T10] usb 2-1: config 0 descriptor?? [ 992.556579][ T44] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 992.767847][ T44] [drm:udl_init] *ERROR* Selecting channel failed [ 992.826391][ T44] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 992.826420][ T44] [drm] Initialized udl on minor 2 [ 992.873256][ T44] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 992.902076][ T44] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 992.934231][ T44] usb 5-1: USB disconnect, device number 59 [ 992.946368][ T5906] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 992.959801][ T5906] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 993.002822][ T10] uclogic 0003:5543:0522.0024: unbalanced delimiter at end of report description [ 993.006063][ T10] uclogic 0003:5543:0522.0024: parse failed [ 993.006188][ T10] uclogic 0003:5543:0522.0024: probe with driver uclogic failed with error -22 [ 993.172511][ T10] usb 2-1: USB disconnect, device number 50 [ 993.277294][ T44] 1024-page vmalloc region starting at 0xffffc9000e94d000 allocated at kcov_ioctl+0x58/0x650 [ 993.277351][ T44] list_add corruption. next->prev should be prev (ffffffff8d3fcd80), but was ffffffff00080000. (next=ffffc9000e94d000). [ 993.277942][ T44] ------------[ cut here ]------------ [ 993.277949][ T44] kernel BUG at lib/list_debug.c:31! [ 993.277989][ T44] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 993.278008][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 993.278026][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 993.278037][ T44] Workqueue: usb_hub_wq hub_event [ 993.278058][ T44] RIP: 0010:__list_add_valid_or_report+0xf4/0x130 [ 993.278077][ T44] Code: 7f 7e fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 63 7f 9e fd 48 8b 53 08 48 c7 c7 20 d2 1d 8b 4c 89 f6 48 89 d9 e8 7d f9 a6 fc 90 <0f> 0b 4c 89 f7 e8 22 7f 7e fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 33 [ 993.278090][ T44] RSP: 0018:ffffc90000b57710 EFLAGS: 00010246 [ 993.278102][ T44] RAX: 0000000000000075 RBX: ffffc9000e94d000 RCX: 62f6e73681efee00 [ 993.278114][ T44] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 993.278123][ T44] RBP: 1ffff92001d29a01 R08: 0000000000000000 R09: 0000000000000000 [ 993.278133][ T44] R10: dffffc0000000000 R11: ffffed101712487b R12: ffffc9000e94d008 [ 993.278144][ T44] R13: dffffc0000000000 R14: ffffffff8d3fcd80 R15: ffffc9001a676000 [ 993.278156][ T44] FS: 0000000000000000(0000) GS:ffff888127120000(0000) knlGS:0000000000000000 [ 993.278168][ T44] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.278178][ T44] CR2: 00007f55ec125f98 CR3: 000000000d1a6000 CR4: 00000000003526f0 [ 993.278192][ T44] Call Trace: [ 993.278198][ T44] [ 993.278207][ T44] kcov_remote_stop+0x52d/0x660 [ 993.278236][ T44] hub_event+0x45d2/0x4a20 [ 993.278267][ T44] ? do_raw_spin_lock+0x121/0x290 [ 993.278289][ T44] ? register_lock_class+0x51/0x320 [ 993.278318][ T44] ? __pfx_hub_event+0x10/0x10 [ 993.278336][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 993.278360][ T44] ? _raw_spin_unlock_irq+0x23/0x50 [ 993.278380][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 993.278400][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 993.278422][ T44] process_scheduled_works+0xae1/0x17b0 [ 993.278453][ T44] ? __pfx_process_scheduled_works+0x10/0x10 [ 993.278491][ T44] worker_thread+0x8a0/0xda0 [ 993.278535][ T44] kthread+0x711/0x8a0 [ 993.278556][ T44] ? __pfx_worker_thread+0x10/0x10 [ 993.278584][ T44] ? __pfx_kthread+0x10/0x10 [ 993.278597][ T44] ? rt_spin_unlock+0x150/0x200 [ 993.278615][ T44] ? rt_spin_unlock+0x161/0x200 [ 993.278629][ T44] ? __pfx_kthread+0x10/0x10 [ 993.278643][ T44] ret_from_fork+0x439/0x7d0 [ 993.278664][ T44] ? __pfx_ret_from_fork+0x10/0x10 [ 993.278686][ T44] ? __switch_to_asm+0x39/0x70 [ 993.278701][ T44] ? __switch_to_asm+0x33/0x70 [ 993.278715][ T44] ? __pfx_kthread+0x10/0x10 [ 993.278729][ T44] ret_from_fork_asm+0x1a/0x30 [ 993.278751][ T44] [ 993.278761][ T44] Modules linked in: [ 993.278778][ T44] ---[ end trace 0000000000000000 ]--- [ 993.278786][ T44] RIP: 0010:__list_add_valid_or_report+0xf4/0x130 [ 993.278804][ T44] Code: 7f 7e fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 63 7f 9e fd 48 8b 53 08 48 c7 c7 20 d2 1d 8b 4c 89 f6 48 89 d9 e8 7d f9 a6 fc 90 <0f> 0b 4c 89 f7 e8 22 7f 7e fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 33 [ 993.278817][ T44] RSP: 0018:ffffc90000b57710 EFLAGS: 00010246 [ 993.278830][ T44] RAX: 0000000000000075 RBX: ffffc9000e94d000 RCX: 62f6e73681efee00 [ 993.278842][ T44] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 993.278851][ T44] RBP: 1ffff92001d29a01 R08: 0000000000000000 R09: 0000000000000000 [ 993.278861][ T44] R10: dffffc0000000000 R11: ffffed101712487b R12: ffffc9000e94d008 [ 993.278873][ T44] R13: dffffc0000000000 R14: ffffffff8d3fcd80 R15: ffffc9001a676000 [ 993.278885][ T44] FS: 0000000000000000(0000) GS:ffff888127120000(0000) knlGS:0000000000000000 [ 993.278897][ T44] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.278908][ T44] CR2: 00007f55ec125f98 CR3: 000000000d1a6000 CR4: 00000000003526f0 [ 993.278924][ T44] Kernel panic - not syncing: Fatal exception [ 993.279231][ T44] Kernel Offset: disabled