last executing test programs: 12.797483814s ago: executing program 2 (id=2502): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 12.518431263s ago: executing program 2 (id=2497): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x8201, 0x0, 0x0}], 0x2}) 7.347605359s ago: executing program 0 (id=2555): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) 7.202428174s ago: executing program 0 (id=2556): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={0x48, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x34, 0x1, 0x0, 0x1, [@nested={0x30, 0x4, 0x0, 0x1, [@nested={0x2b, 0xc1, 0x0, 0x1, [@generic="6aa72d5a6a70efdec2a7728ddb9e8cf629cec0fa7b22f4037ecad6f29fe9ad1479796c0aebc096"]}]}]}]}, 0x48}}, 0x810) 7.091230412s ago: executing program 0 (id=2564): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={0x48, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x34, 0x1, 0x0, 0x1, [@nested={0x30, 0x4, 0x0, 0x1, [@nested={0x2b, 0xc1, 0x0, 0x1, [@generic="6aa72d5a6a70efdec2a7728ddb9e8cf629cec0fa7b22f4037ecad6f29fe9ad1479796c0aebc096"]}]}]}]}, 0x48}}, 0x810) 6.972969489s ago: executing program 0 (id=2559): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) 6.762474132s ago: executing program 0 (id=2561): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="80d0a6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x40, 0x19, 0x2, "27ef"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 6.394359127s ago: executing program 3 (id=2565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x1c, r1, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 6.331409559s ago: executing program 3 (id=2566): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)='\'', 0x1) 6.226166501s ago: executing program 3 (id=2567): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) unshare(0x22020600) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) 4.814647931s ago: executing program 3 (id=2570): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)}]) 4.571119449s ago: executing program 3 (id=2573): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) write(r0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x3}, 0x5}], 0x1, 0x2000, 0x0) 4.33812701s ago: executing program 3 (id=2575): syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x8201, 0x0, 0x0}], 0x2}) 1.595214369s ago: executing program 1 (id=2589): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 1.540110566s ago: executing program 2 (id=2515): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 1.437987628s ago: executing program 1 (id=2590): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000100)=0x1000) 1.358649735s ago: executing program 2 (id=2591): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) 1.275370165s ago: executing program 1 (id=2592): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 1.189098472s ago: executing program 1 (id=2593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240000000000800014000000000090001"], 0xd8}}, 0x80) 1.187907527s ago: executing program 2 (id=2594): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) 1.024628095s ago: executing program 1 (id=2595): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) 966.288725ms ago: executing program 2 (id=2596): bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x7, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000040)) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0xfffff21b, @mcast2, 0x5}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) r8 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r8, &(0x7f00000022c0)=[{&(0x7f00000000c0)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000002280)="9c1b84", 0x3}], 0x3) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) 166.705µs ago: executing program 0 (id=2597): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x3}, 0x5}], 0x1, 0x2000, 0x0) 0s ago: executing program 1 (id=2598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) kernel console output (not intermixed with test programs): 000 [ 332.972877][ T30] audit: type=1326 audit(1763230323.739:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9798 comm="syz.2.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 333.047127][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.158016][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.274119][ T5896] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 333.338698][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 333.367515][ T5896] usb 2-1: SerialNumber: syz [ 333.631237][ T5896] usb 2-1: unknown interface protocol 0x17, assuming v1 [ 333.640984][ T5896] usb 2-1: cannot find UAC_HEADER [ 333.801093][ T5896] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 333.831486][ T5896] usb 2-1: USB disconnect, device number 17 [ 333.876843][ T9755] udevd[9755]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.049383][ T5882] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 334.199411][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 334.239307][ T5896] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 334.391213][ T5896] usb 1-1: config index 0 descriptor too short (expected 28486, got 100) [ 334.403818][ T5896] usb 1-1: config 15 has too many interfaces: 240, using maximum allowed: 32 [ 334.428112][ T5896] usb 1-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 334.449582][ T5896] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 240 [ 334.477279][ T5896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.492564][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.519285][ T5896] usb 1-1: Product: syz [ 334.523612][ T5896] usb 1-1: Manufacturer: syz [ 334.528237][ T5896] usb 1-1: SerialNumber: syz [ 334.738332][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 334.807860][ T5882] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 334.873619][ T5882] usb 3-1: can't read configurations, error -71 [ 335.509502][ T5896] usb 1-1: USB disconnect, device number 8 [ 336.180002][ T5882] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 336.333417][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 336.355011][ T5882] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 336.371120][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.394527][ T5882] usb 1-1: config 0 descriptor?? [ 336.420125][ T9842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.484589][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 336.484608][ T30] audit: type=1326 audit(1763230327.579:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43b758f6c9 code=0x7fc00000 [ 336.663916][ T5882] usbhid 1-1:0.0: can't add hid device: -71 [ 336.673401][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 336.703258][ T5882] usb 1-1: USB disconnect, device number 9 [ 337.463685][ T30] audit: type=1326 audit(1763230328.559:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.1.1642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x0 [ 337.696110][ T9895] fuse: Bad value for 'fd' [ 338.911407][ T9923] cgroup: Unknown subsys name 'cpuset' [ 339.189706][ T9931] 9p: Unknown access argument 00000000000000000000›b“: -22 [ 339.430814][ T9945] warning: `syz.2.1662' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 339.838655][ T30] audit: type=1326 audit(1763230330.929:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 340.045422][ T30] audit: type=1326 audit(1763230330.929:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 340.309696][ T30] audit: type=1326 audit(1763230330.929:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 340.518280][ T30] audit: type=1326 audit(1763230330.929:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 340.669407][ T30] audit: type=1326 audit(1763230330.929:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 340.692423][ T30] audit: type=1326 audit(1763230330.929:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 340.716067][ T30] audit: type=1326 audit(1763230330.929:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 340.740039][ T30] audit: type=1326 audit(1763230330.959:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9947 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 340.911427][ T9963] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1669'. [ 341.023972][ T9965] binder: 9964:9965 unknown command 0 [ 341.037513][ T9965] binder: 9964:9965 ioctl c0306201 200000000080 returned -22 [ 342.600036][ T9995] loop2: detected capacity change from 0 to 7 [ 342.623539][ T9755] Dev loop2: unable to read RDB block 7 [ 342.629762][ T9755] loop2: AHDI p1 p2 p3 [ 342.633990][ T9755] loop2: partition table partially beyond EOD, truncated [ 342.666496][ T9755] loop2: p1 start 1601398130 is beyond EOD, truncated [ 342.680849][ T9755] loop2: p2 start 1702059890 is beyond EOD, truncated [ 342.688970][ T9995] Dev loop2: unable to read RDB block 7 [ 342.709390][ T9995] loop2: AHDI p1 p2 p3 [ 342.729440][ T9995] loop2: partition table partially beyond EOD, truncated [ 342.749806][ T9995] loop2: p1 start 1601398130 is beyond EOD, truncated [ 342.766971][ T9995] loop2: p2 start 1702059890 is beyond EOD, truncated [ 343.655826][ T30] audit: type=1326 audit(1763230334.749:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 343.938425][ T30] audit: type=1326 audit(1763230334.779:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 344.226180][ T30] audit: type=1326 audit(1763230334.779:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 344.388881][ T30] audit: type=1326 audit(1763230334.779:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 344.475811][ T30] audit: type=1326 audit(1763230334.779:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 344.567873][ T30] audit: type=1326 audit(1763230334.779:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 345.059270][ T5893] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 345.222299][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 345.244163][ T5893] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.264804][ T5893] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.294845][ T5893] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 197, using maximum allowed: 30 [ 345.326404][ T5893] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 345.362292][ T5893] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 197 [ 345.630167][ T30] audit: type=1326 audit(1763230336.689:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10041 comm="syz.2.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 345.766236][ T30] audit: type=1326 audit(1763230336.699:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10041 comm="syz.2.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 345.921746][ T30] audit: type=1326 audit(1763230336.699:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10041 comm="syz.2.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 346.085913][ T30] audit: type=1326 audit(1763230336.699:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10041 comm="syz.2.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 346.212028][ T5893] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.221494][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.231366][ T5893] usb 4-1: Product: syz [ 346.235579][ T5893] usb 4-1: Manufacturer: syz [ 346.240748][ T5893] usb 4-1: SerialNumber: syz [ 346.432489][T10046] loop2: detected capacity change from 0 to 7 [ 346.452508][T10046] Dev loop2: unable to read RDB block 7 [ 346.458157][T10046] loop2: AHDI p1 p2 p3 [ 346.471354][ T5893] usb 4-1: 0:2 : does not exist [ 346.480496][T10046] loop2: partition table partially beyond EOD, truncated [ 346.511105][T10046] loop2: p1 start 1601398130 is beyond EOD, truncated [ 346.518471][T10046] loop2: p2 start 1702059890 is beyond EOD, truncated [ 346.586320][ T5893] usb 4-1: USB disconnect, device number 12 [ 347.101206][T10052] netlink: 'syz.3.1710': attribute type 4 has an invalid length. [ 347.203382][T10054] netlink: 'syz.2.1709': attribute type 4 has an invalid length. [ 348.309269][ T5868] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 348.485737][T10090] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1728'. [ 348.494997][ T5868] usb 1-1: config 0 has no interfaces? [ 348.510693][T10090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1728'. [ 348.522189][ T5868] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.532090][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.547171][ T5868] usb 1-1: Product: syz [ 348.559278][ T5868] usb 1-1: Manufacturer: syz [ 348.564031][ T5868] usb 1-1: SerialNumber: syz [ 348.600312][ T5868] usb 1-1: config 0 descriptor?? [ 349.314409][ T5913] usb 1-1: USB disconnect, device number 10 [ 350.329492][T10119] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1741'. [ 350.360248][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1741'. [ 350.395672][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 351.001898][T10129] loop2: detected capacity change from 0 to 7 [ 351.059001][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 351.059033][ T30] audit: type=1326 audit(1763230342.119:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 351.136741][T10129] Dev loop2: unable to read RDB block 7 [ 351.179958][T10129] loop2: AHDI p1 p2 p3 [ 351.202802][T10129] loop2: partition table partially beyond EOD, truncated [ 351.288245][T10129] loop2: p1 start 1601398130 is beyond EOD, truncated [ 351.312217][ T30] audit: type=1326 audit(1763230342.119:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 351.367781][T10129] loop2: p2 start 1702059890 is beyond EOD, truncated [ 351.592568][ T30] audit: type=1326 audit(1763230342.129:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 351.801821][ T30] audit: type=1326 audit(1763230342.129:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 351.843614][ T30] audit: type=1326 audit(1763230342.129:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 351.940339][ T30] audit: type=1326 audit(1763230342.129:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 352.077171][ T30] audit: type=1326 audit(1763230342.129:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 352.099851][ T30] audit: type=1326 audit(1763230342.129:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 352.589232][ T5868] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 352.973516][ T30] audit: type=1326 audit(1763230344.029:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.3.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507898f6c9 code=0x7ffc0000 [ 353.128511][ T30] audit: type=1326 audit(1763230344.029:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.3.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507898f6c9 code=0x7ffc0000 [ 353.376341][ T5868] usb 3-1: config 0 has no interfaces? [ 353.889834][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.898943][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.907474][ T5868] usb 3-1: Product: syz [ 353.914196][ T5868] usb 3-1: Manufacturer: syz [ 353.918841][ T5868] usb 3-1: SerialNumber: syz [ 353.931073][ T5868] usb 3-1: config 0 descriptor?? [ 354.425169][T10190] loop2: detected capacity change from 0 to 7 [ 354.659879][ T5868] usb 3-1: USB disconnect, device number 18 [ 354.915167][T10190] Dev loop2: unable to read RDB block 7 [ 354.978662][T10190] loop2: AHDI p1 p2 p3 [ 355.035891][T10190] loop2: partition table partially beyond EOD, truncated [ 355.136275][T10190] loop2: p1 start 1601398130 is beyond EOD, truncated [ 355.237519][T10190] loop2: p2 start 1702059890 is beyond EOD, truncated [ 355.820128][ T5893] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 355.989237][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 356.005463][ T5893] usb 3-1: config 0 has no interfaces? [ 356.016658][ T5893] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 356.030703][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.064172][ T5893] usb 3-1: config 0 descriptor?? [ 356.072558][ T5868] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 356.251091][ T5868] usb 2-1: config 0 has no interfaces? [ 356.266519][ T5868] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.280158][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.288344][ T5868] usb 2-1: Product: syz [ 356.293490][ T5868] usb 2-1: Manufacturer: syz [ 356.298236][ T5868] usb 2-1: SerialNumber: syz [ 356.304260][T10207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.323272][ T5868] usb 2-1: config 0 descriptor?? [ 356.349132][T10207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.373673][ T793] usb 3-1: USB disconnect, device number 19 [ 357.142779][ T5868] usb 2-1: USB disconnect, device number 18 [ 357.757659][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 357.757674][ T30] audit: type=1326 audit(1763230348.849:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 357.808038][ T30] audit: type=1326 audit(1763230348.879:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 357.809494][ T5868] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 357.902645][ T30] audit: type=1326 audit(1763230348.889:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 357.971788][ T30] audit: type=1326 audit(1763230348.889:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 358.011426][ T5868] usb 4-1: config 0 has no interfaces? [ 358.019529][ T5868] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.028857][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.037078][ T5868] usb 4-1: Product: syz [ 358.040538][ T30] audit: type=1326 audit(1763230348.889:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 358.042557][ T5868] usb 4-1: Manufacturer: syz [ 358.088540][T10289] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 358.098286][ T5868] usb 4-1: SerialNumber: syz [ 358.112543][ T5868] usb 4-1: config 0 descriptor?? [ 358.125874][ T30] audit: type=1326 audit(1763230348.889:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 358.150855][T10289] overlayfs: missing 'lowerdir' [ 358.156389][ T30] audit: type=1326 audit(1763230348.889:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 358.438394][T10298] loop2: detected capacity change from 0 to 7 [ 358.468840][T10298] Dev loop2: unable to read RDB block 7 [ 358.474688][T10298] loop2: AHDI p1 p2 p3 [ 358.479003][T10298] loop2: partition table partially beyond EOD, truncated [ 358.487670][T10298] loop2: p1 start 1601398130 is beyond EOD, truncated [ 358.495016][T10298] loop2: p2 start 1702059890 is beyond EOD, truncated [ 358.873993][ T5868] usb 4-1: USB disconnect, device number 13 [ 358.981152][ T30] audit: type=1326 audit(1763230350.069:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10320 comm="syz.1.1826" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43b758f6c9 code=0x0 [ 359.333298][T10335] loop2: detected capacity change from 0 to 7 [ 359.345767][T10335] Dev loop2: unable to read RDB block 7 [ 359.351537][T10335] loop2: AHDI p1 p2 p3 [ 359.355756][T10335] loop2: partition table partially beyond EOD, truncated [ 359.364446][T10335] loop2: p1 start 1601398130 is beyond EOD, truncated [ 359.377981][T10335] loop2: p2 start 1702059890 is beyond EOD, truncated [ 359.948613][ T30] audit: type=1326 audit(1763230351.029:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 359.987633][ T30] audit: type=1326 audit(1763230351.029:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efa98f6c9 code=0x7ffc0000 [ 360.054987][T10360] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1841'. [ 360.120404][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 360.142056][T10360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1841'. [ 360.762039][ T5868] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 361.741202][ T5868] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 361.839282][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.908564][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.947096][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.977323][ T5868] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.993455][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.014044][ T5868] usb 4-1: config 0 descriptor?? [ 362.132481][T10399] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 362.460765][ T5868] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.468256][ T5868] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.490812][ T5868] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.498566][ T5868] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.506925][ T5868] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.520763][ T5868] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.531541][ T5868] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.547794][ T5868] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.560308][ T5868] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.601855][ T5868] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.643121][ T5868] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 362.715203][ T5882] usb 4-1: USB disconnect, device number 14 [ 362.768592][T10408] fido_id[10408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 362.869590][ T5868] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 362.943844][T10414] netlink: 'syz.1.1864': attribute type 11 has an invalid length. [ 363.062127][ T5868] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 363.079935][ T5868] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.096742][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.103978][ T5868] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 363.119239][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.153503][ T5868] usb 3-1: config 0 descriptor?? [ 363.276011][T10426] netlink: 600 bytes leftover after parsing attributes in process `syz.0.1869'. [ 363.289899][T10426] netlink: 600 bytes leftover after parsing attributes in process `syz.0.1869'. [ 363.299367][T10426] netlink: 4568 bytes leftover after parsing attributes in process `syz.0.1869'. [ 363.422733][T10431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.442973][T10431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.837064][T10448] cgroup2: Unknown parameter '' [ 364.922860][T10407] tipc: Enabled bearer , priority 10 [ 364.942972][ T5868] usbhid 3-1:0.0: can't add hid device: -71 [ 364.954868][ T5868] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 364.970524][ T5868] usb 3-1: USB disconnect, device number 20 [ 365.198056][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1881'. [ 365.312656][T10461] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 365.319461][T10461] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 365.579596][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 365.579616][ T30] audit: type=1326 audit(1763230356.659:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 365.648859][ T30] audit: type=1326 audit(1763230356.659:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 365.724391][ T30] audit: type=1326 audit(1763230356.659:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 365.773363][ T30] audit: type=1326 audit(1763230356.659:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 365.798732][ T30] audit: type=1326 audit(1763230356.659:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 365.822997][ T30] audit: type=1326 audit(1763230356.659:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 365.857542][ T30] audit: type=1326 audit(1763230356.659:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 365.882376][ T30] audit: type=1326 audit(1763230356.659:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 367.099354][T10474] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1890'. [ 367.243023][T10479] netlink: 'syz.2.1892': attribute type 10 has an invalid length. [ 367.590533][T10493] netlink: 'syz.1.1898': attribute type 10 has an invalid length. [ 367.598429][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'. [ 367.649966][T10493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1898'. [ 367.659708][T10493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1898'. [ 367.735124][ T30] audit: type=1326 audit(1763230358.819:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10495 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507898f6c9 code=0x7ffc0000 [ 367.789662][ T30] audit: type=1326 audit(1763230358.819:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10495 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507898f6c9 code=0x7ffc0000 [ 368.128985][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1909'. [ 368.160942][T10518] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 368.168887][T10518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1909'. [ 368.189358][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 368.377647][ T9] usb 2-1: config 0 has no interfaces? [ 368.397020][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.416553][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.436865][ T9] usb 2-1: Product: syz [ 368.455627][ T9] usb 2-1: Manufacturer: syz [ 368.466004][ T9] usb 2-1: SerialNumber: syz [ 368.504057][ T9] usb 2-1: config 0 descriptor?? [ 368.804914][T10548] netlink: zone id is out of range [ 368.811138][T10548] netlink: zone id is out of range [ 368.816388][T10548] netlink: zone id is out of range [ 368.825965][T10548] netlink: zone id is out of range [ 368.836365][T10548] netlink: zone id is out of range [ 368.849936][T10548] netlink: zone id is out of range [ 368.856455][T10548] netlink: zone id is out of range [ 368.864494][T10548] netlink: zone id is out of range [ 368.881955][T10552] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.241288][ T793] usb 2-1: USB disconnect, device number 19 [ 369.284476][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1935'. [ 369.444193][T10580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1939'. [ 369.476661][T10582] veth1_vlan: entered allmulticast mode [ 369.657940][T10593] netlink: 'syz.3.1943': attribute type 21 has an invalid length. [ 369.680609][T10593] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1943'. [ 370.019886][T10609] syz.2.1951 (10609) used obsolete PPPIOCDETACH ioctl [ 370.090204][ T793] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 370.230801][T10618] netlink: 'syz.2.1956': attribute type 2 has an invalid length. [ 370.239991][T10618] netlink: 'syz.2.1956': attribute type 1 has an invalid length. [ 370.247765][T10618] __nla_validate_parse: 3 callbacks suppressed [ 370.247786][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 370.263722][ T793] usb 1-1: config 0 has no interfaces? [ 370.272235][ T793] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.289265][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.305995][ T793] usb 1-1: Product: syz [ 370.311323][ T793] usb 1-1: Manufacturer: syz [ 370.316221][ T793] usb 1-1: SerialNumber: syz [ 370.329697][ T793] usb 1-1: config 0 descriptor?? [ 370.336829][T10620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1957'. [ 370.366996][T10620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1957'. [ 370.538659][T10630] net_ratelimit: 335 callbacks suppressed [ 370.538682][T10630] netlink: zone id is out of range [ 370.554342][T10630] netlink: zone id is out of range [ 370.559872][T10630] netlink: zone id is out of range [ 370.565277][T10630] netlink: zone id is out of range [ 370.571241][T10630] netlink: zone id is out of range [ 370.576639][T10630] netlink: zone id is out of range [ 370.582435][T10630] netlink: zone id is out of range [ 370.587823][T10630] netlink: zone id is out of range [ 370.593538][T10630] netlink: zone id is out of range [ 370.598948][T10630] netlink: zone id is out of range [ 370.926892][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 370.926910][ T30] audit: type=1326 audit(1763230362.019:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 370.983392][ T30] audit: type=1326 audit(1763230362.019:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 371.007435][ T30] audit: type=1326 audit(1763230362.049:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 371.034664][ T30] audit: type=1326 audit(1763230362.049:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 371.057977][ T30] audit: type=1326 audit(1763230362.049:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 371.087038][ T30] audit: type=1326 audit(1763230362.049:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 371.110395][ T30] audit: type=1326 audit(1763230362.049:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 371.134198][ T30] audit: type=1326 audit(1763230362.049:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 371.136188][ T5893] usb 1-1: USB disconnect, device number 11 [ 371.648744][T10653] loop2: detected capacity change from 0 to 7 [ 371.668796][T10653] Dev loop2: unable to read RDB block 7 [ 371.678350][T10653] loop2: AHDI p1 p2 p3 [ 371.689334][T10653] loop2: partition table partially beyond EOD, truncated [ 371.707006][T10653] loop2: p1 start 1601398130 is beyond EOD, truncated [ 371.721008][T10653] loop2: p2 start 1702059890 is beyond EOD, truncated [ 371.751254][ T5195] Dev loop2: unable to read RDB block 7 [ 371.756954][ T5195] loop2: AHDI p1 p2 p3 [ 371.772061][ T5195] loop2: partition table partially beyond EOD, truncated [ 371.789453][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 371.796295][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 371.828283][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1979'. [ 371.861430][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1979'. [ 372.040593][ T30] audit: type=1326 audit(1763230363.109:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce6f8f6c9 code=0x7ffc0000 [ 372.173012][ T30] audit: type=1326 audit(1763230363.109:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce6f8f6c9 code=0x7ffc0000 [ 372.203620][T10678] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1985'. [ 373.096124][T10717] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 374.499672][ T5893] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 374.749777][ T5893] usb 4-1: config index 0 descriptor too short (expected 28486, got 100) [ 374.758518][ T5893] usb 4-1: config 15 has too many interfaces: 240, using maximum allowed: 32 [ 374.780039][ T5893] usb 4-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 374.799217][ T5893] usb 4-1: config 15 has 0 interfaces, different from the descriptor's value: 240 [ 374.817368][T10766] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2027'. [ 374.828527][ T5893] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.838731][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.880787][ T5893] usb 4-1: Product: syz [ 374.885124][ T5893] usb 4-1: Manufacturer: syz [ 374.890189][ T5893] usb 4-1: SerialNumber: syz [ 375.664253][ T5893] usb 4-1: USB disconnect, device number 15 [ 375.739266][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 375.912217][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 375.931331][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 375.953478][ T9] usb 2-1: config 178 has an invalid interface number: 24 but max is 1 [ 375.966444][ T9] usb 2-1: config 178 has an invalid descriptor of length 223, skipping remainder of the config [ 375.993748][ T9] usb 2-1: config 178 has 1 interface, different from the descriptor's value: 2 [ 376.009332][ T9] usb 2-1: config 178 has no interface number 0 [ 376.015915][ T9] usb 2-1: config 178 interface 24 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 376.027366][ T9] usb 2-1: config 178 interface 24 has no altsetting 0 [ 376.041141][ T9] usb 2-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=24.5c [ 376.051353][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.079388][ T9] usb 2-1: Product: syz [ 376.083902][ T9] usb 2-1: Manufacturer: syz [ 376.088601][ T9] usb 2-1: SerialNumber: syz [ 376.139298][ T5893] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 376.321653][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.347039][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.368662][ T5893] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 376.381926][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.416821][ T5893] usb 4-1: config 0 descriptor?? [ 376.669342][ T5868] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 376.839686][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 376.863029][ T5868] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 376.886881][ T5043] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.909206][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 376.936307][ T5868] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 376.953486][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.971210][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 376.979302][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 376.989850][ T5868] usb 1-1: config 0 descriptor?? [ 377.037164][ T5893] usb 4-1: USB disconnect, device number 16 [ 377.295036][T10713] net_ratelimit: 335 callbacks suppressed [ 377.295058][T10713] Set syz1 is full, maxelem 65536 reached [ 377.556282][T10790] loop2: detected capacity change from 0 to 7 [ 377.574950][ T5868] usbhid 1-1:0.0: can't add hid device: -71 [ 377.580678][ T7381] Dev loop2: unable to read RDB block 7 [ 377.586887][ T7381] loop2: AHDI p1 p2 p3 [ 377.591581][ T7381] loop2: partition table partially beyond EOD, truncated [ 377.599436][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 377.601240][ T7381] loop2: p1 start 1601398130 is beyond EOD, truncated [ 377.623896][ T5868] usb 1-1: USB disconnect, device number 12 [ 377.640065][ T7381] loop2: p2 start 1702059890 is beyond EOD, truncated [ 377.651388][T10790] Dev loop2: unable to read RDB block 7 [ 377.657007][T10790] loop2: AHDI p1 p2 p3 [ 377.665036][T10790] loop2: partition table partially beyond EOD, truncated [ 377.703807][T10790] loop2: p1 start 1601398130 is beyond EOD, truncated [ 377.723401][T10790] loop2: p2 start 1702059890 is beyond EOD, truncated [ 378.260708][ T9] rndis_host 2-1:178.24: skipping garbage [ 378.278749][ T9] usb 2-1: bad CDC descriptors [ 378.450648][ T9] cdc_acm 2-1:178.24: skipping garbage [ 378.839074][ T9] usb 2-1: USB disconnect, device number 20 [ 378.974960][T10825] loop2: detected capacity change from 0 to 7 [ 379.000537][T10825] Dev loop2: unable to read RDB block 7 [ 379.006162][T10825] loop2: AHDI p1 p2 p3 [ 379.079436][T10825] loop2: partition table partially beyond EOD, truncated [ 379.086776][T10825] loop2: p1 start 1601398130 is beyond EOD, truncated [ 379.229470][T10825] loop2: p2 start 1702059890 is beyond EOD, truncated [ 380.041054][T10841] mmap: syz.2.2053 (10841) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 380.274459][T10848] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 380.296785][T10848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.756550][T10862] loop5: detected capacity change from 0 to 7 [ 381.077952][T10873] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 381.095614][T10873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.255824][T10862] Dev loop5: unable to read RDB block 7 [ 381.279327][T10862] loop5: unable to read partition table [ 381.285265][T10862] loop5: partition table beyond EOD, truncated [ 381.329549][T10862] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 381.778227][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2075'. [ 382.783826][T10915] loop5: detected capacity change from 0 to 7 [ 383.215769][T10915] Dev loop5: unable to read RDB block 7 [ 383.235566][T10915] loop5: unable to read partition table [ 383.279546][T10915] loop5: partition table beyond EOD, truncated [ 383.310496][T10915] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 383.950702][ T5195] Dev loop5: unable to read RDB block 7 [ 383.961293][ T5195] loop5: unable to read partition table [ 383.987636][ T5195] loop5: partition table beyond EOD, truncated [ 384.054522][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.577510][T10942] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 384.620225][T10942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.847604][T10949] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2094'. [ 384.901541][T10954] loop2: detected capacity change from 0 to 7 [ 384.918979][T10954] Dev loop2: unable to read RDB block 7 [ 384.928154][T10954] loop2: AHDI p1 p2 p3 [ 384.935389][T10954] loop2: partition table partially beyond EOD, truncated [ 384.956239][T10954] loop2: p1 start 1601398130 is beyond EOD, truncated [ 384.964547][T10954] loop2: p2 start 1702059890 is beyond EOD, truncated [ 385.092540][T10958] loop5: detected capacity change from 0 to 7 [ 385.435401][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'. [ 385.501235][ T7381] Dev loop5: unable to read RDB block 7 [ 385.539715][ T7381] loop5: unable to read partition table [ 385.545676][ T7381] loop5: partition table beyond EOD, truncated [ 386.147384][T10958] Dev loop5: unable to read RDB block 7 [ 386.159225][T10958] loop5: unable to read partition table [ 386.165172][T10958] loop5: partition table beyond EOD, truncated [ 386.196203][T10958] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 386.233883][T10980] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 386.242142][T10980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.399258][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 386.579224][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 386.590334][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.608704][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 386.653178][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.674327][ T9] usb 4-1: config 0 descriptor?? [ 387.184142][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 387.184170][ T30] audit: type=1326 audit(1763230378.239:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 387.586128][ T30] audit: type=1326 audit(1763230378.239:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 387.735731][ T9] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 387.836588][ T30] audit: type=1326 audit(1763230378.239:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 387.861494][ T30] audit: type=1326 audit(1763230378.249:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 387.884971][ T30] audit: type=1326 audit(1763230378.249:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 387.983038][ T9] usb 4-1: USB disconnect, device number 17 [ 388.088221][ T30] audit: type=1326 audit(1763230378.249:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 388.203931][ T30] audit: type=1326 audit(1763230378.249:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 388.262811][ T30] audit: type=1326 audit(1763230378.249:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10998 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 388.308084][T11020] tipc: MTU too low for tipc bearer [ 388.317415][ T30] audit: type=1326 audit(1763230379.149:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 388.409732][ T30] audit: type=1326 audit(1763230379.149:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 390.599253][ T793] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 390.779215][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 390.809910][ T793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.829513][ T793] usb 2-1: config 0 interface 0 has no altsetting 0 [ 390.889762][ T793] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 390.899058][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.908933][ T793] usb 2-1: Product: syz [ 390.913668][ T793] usb 2-1: Manufacturer: syz [ 390.918318][ T793] usb 2-1: SerialNumber: syz [ 390.932285][ T793] usb 2-1: config 0 descriptor?? [ 390.961355][ T793] hub 2-1:0.0: bad descriptor, ignoring hub [ 390.967628][ T793] hub 2-1:0.0: probe with driver hub failed with error -5 [ 391.027528][ T793] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 391.027796][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2133'. [ 391.072307][ T8717] usb 2-1: Failed to submit usb control message: -71 [ 391.080691][ T8717] usb 2-1: unable to send the bmi data to the device: -71 [ 391.104572][ T8717] usb 2-1: unable to get target info from device [ 391.119811][ T8717] usb 2-1: could not get target info (-71) [ 391.136098][ T8717] usb 2-1: could not probe fw (-71) [ 391.270219][ T793] usb 2-1: USB disconnect, device number 21 [ 391.289652][ T5868] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 391.429277][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 391.469255][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 391.476746][ T5868] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 391.485521][ T5868] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 391.497192][ T5868] usb 1-1: config 8 has no interface number 0 [ 391.503942][ T5868] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 391.516014][ T5868] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 391.528120][ T5868] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 391.538288][ T5868] usb 1-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 391.548601][ T5868] usb 1-1: config 8 interface 206 has no altsetting 0 [ 391.571679][ T5868] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 391.581358][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.600418][ T5868] usb 1-1: Product: syz [ 391.604693][ T5868] usb 1-1: Manufacturer: syz [ 391.619658][ T5868] usb 1-1: SerialNumber: syz [ 391.625483][ T9] usb 4-1: config 0 has no interfaces? [ 391.648943][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.658180][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.672053][ T9] usb 4-1: Product: syz [ 391.676341][ T9] usb 4-1: Manufacturer: syz [ 391.681407][ T9] usb 4-1: SerialNumber: syz [ 391.699825][ T9] usb 4-1: config 0 descriptor?? [ 391.850407][ T5868] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 391.881223][ T5868] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 391.910561][ T5868] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 391.934427][ T5868] usb 1-1: USB disconnect, device number 13 [ 391.967286][ T5868] garmin_gps 1-1:8.206: device disconnected [ 392.068845][T11069] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 392.075596][T11069] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 392.444651][ T5868] usb 4-1: USB disconnect, device number 18 [ 392.811262][T11094] vcan0: tx drop: invalid sa for name 0x0000020000000000 [ 392.922766][T11094] xt_l2tp: missing protocol rule (udp|l2tpip) [ 393.174380][ T793] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 393.356113][ T793] usb 1-1: config 7 has an invalid interface number: 109 but max is 0 [ 393.371956][ T793] usb 1-1: config 7 has no interface number 0 [ 393.388864][ T793] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 393.409852][ T793] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 393.461012][ T793] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 393.497542][ T793] usb 1-1: config 7 interface 109 altsetting 4 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 393.520731][ T793] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 393.592746][ T793] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x8F has invalid wMaxPacketSize 0 [ 393.625903][ T793] usb 1-1: config 7 interface 109 has no altsetting 0 [ 393.662520][ T793] usb 1-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=d9.4d [ 393.673993][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.683891][ T793] usb 1-1: Product: syz [ 393.688078][ T793] usb 1-1: Manufacturer: syz [ 393.702472][ T793] usb 1-1: SerialNumber: syz [ 393.730135][T11095] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 394.991076][T11129] bridge0: port 3(erspan0) entered blocking state [ 395.018341][T11129] bridge0: port 3(erspan0) entered disabled state [ 395.051764][T11129] erspan0: entered allmulticast mode [ 395.094951][T11129] erspan0: entered promiscuous mode [ 395.116171][T11129] bridge0: port 3(erspan0) entered blocking state [ 395.123341][T11129] bridge0: port 3(erspan0) entered forwarding state [ 396.085698][T11138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2168'. [ 396.094851][T11138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2168'. [ 396.254575][ T793] usb 1-1: USB disconnect, device number 14 [ 396.569774][T11156] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 396.576268][T11156] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 397.129585][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 397.291809][ T9] usb 2-1: config 0 has no interfaces? [ 397.301388][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.311113][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.390096][ T9] usb 2-1: Product: syz [ 397.399391][ T9] usb 2-1: Manufacturer: syz [ 397.408719][ T9] usb 2-1: SerialNumber: syz [ 397.432108][ T9] usb 2-1: config 0 descriptor?? [ 397.827910][T11174] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[11174] [ 397.996547][T11177] netlink: del zone limit has 4 unknown bytes [ 398.203060][ T793] usb 2-1: USB disconnect, device number 22 [ 398.715684][T11190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2188'. [ 398.735182][T11190] netlink: 'syz.1.2188': attribute type 4 has an invalid length. [ 399.176446][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 399.176493][ T30] audit: type=1326 audit(1763230390.269:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.1.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 399.325988][ T30] audit: type=1326 audit(1763230390.299:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.1.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 399.446392][ T30] audit: type=1326 audit(1763230390.299:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.1.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 399.542081][ T30] audit: type=1326 audit(1763230390.299:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.1.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 399.780566][ T30] audit: type=1326 audit(1763230390.299:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.1.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 399.807063][ T30] audit: type=1326 audit(1763230390.309:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.1.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 399.829811][ T30] audit: type=1326 audit(1763230390.309:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.1.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 399.852698][ T30] audit: type=1326 audit(1763230390.309:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11193 comm="syz.1.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b758f6c9 code=0x7ffc0000 [ 399.899477][T11200] netlink: del zone limit has 4 unknown bytes [ 400.067577][ T30] audit: type=1804 audit(1763230391.159:1288): pid=11206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2195" name="/newroot/514/file1" dev="fuse" ino=1 res=1 errno=0 [ 400.826557][T11231] netlink: zone id is out of range [ 400.832400][T11231] netlink: zone id is out of range [ 400.837948][T11231] netlink: zone id is out of range [ 400.845205][T11231] netlink: zone id is out of range [ 400.850983][T11231] netlink: zone id is out of range [ 400.858773][T11231] netlink: zone id is out of range [ 400.875908][T11233] loop2: detected capacity change from 0 to 7 [ 400.882879][T11233] Dev loop2: unable to read RDB block 7 [ 400.888571][T11233] loop2: AHDI p1 p2 p3 [ 400.893300][T11233] loop2: partition table partially beyond EOD, truncated [ 400.901714][T11233] loop2: p1 start 1601398130 is beyond EOD, truncated [ 400.908577][T11231] netlink: zone id is out of range [ 400.935138][T11233] loop2: p2 start 1702059890 is beyond EOD, truncated [ 400.944302][T11231] netlink: zone id is out of range [ 401.878499][T11254] loop2: detected capacity change from 0 to 7 [ 401.919441][T11254] Dev loop2: unable to read RDB block 7 [ 401.947726][T11254] loop2: AHDI p1 p2 p3 [ 401.955273][T11254] loop2: partition table partially beyond EOD, truncated [ 401.979937][T11254] loop2: p1 start 1601398130 is beyond EOD, truncated [ 402.009446][T11254] loop2: p2 start 1702059890 is beyond EOD, truncated [ 402.490155][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.504779][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.513880][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.529421][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.538580][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.695244][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 403.121225][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 403.202817][ T9] usb 3-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 403.321796][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 403.387307][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 118, changing to 10 [ 403.439210][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8714, setting to 1024 [ 403.453087][T11280] net_ratelimit: 337 callbacks suppressed [ 403.453110][T11280] netlink: del zone limit has 8 unknown bytes [ 403.475328][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.505154][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.550836][ T9] usb 3-1: Product: syz [ 403.555078][ T9] usb 3-1: Manufacturer: syz [ 403.636059][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 403.651965][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 403.685738][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 403.719325][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 403.847955][ T24] usb 3-1: USB disconnect, device number 21 [ 403.934762][T11270] chnl_net:caif_netlink_parms(): no params data found [ 404.150614][T11270] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.157941][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.175799][T11270] bridge_slave_0: entered allmulticast mode [ 404.184372][T11270] bridge_slave_0: entered promiscuous mode [ 404.200341][T11270] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.217890][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.238197][T11270] bridge_slave_1: entered allmulticast mode [ 404.247196][T11270] bridge_slave_1: entered promiscuous mode [ 404.340300][T11270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.361561][T11270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.521004][T11270] team0: Port device team_slave_0 added [ 404.535081][T11270] team0: Port device team_slave_1 added [ 404.614496][ T5835] Bluetooth: hci4: command tx timeout [ 405.436861][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.684556][T11270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.709547][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.769234][T11270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.890260][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.911208][T11270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.918258][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.956906][T11270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.105166][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.116649][T11317] loop2: detected capacity change from 0 to 7 [ 406.124192][T11317] Dev loop2: unable to read RDB block 7 [ 406.137332][T11317] loop2: AHDI p1 p2 p3 [ 406.142583][T11317] loop2: partition table partially beyond EOD, truncated [ 406.157175][T11270] hsr_slave_0: entered promiscuous mode [ 406.163152][T11317] loop2: p1 start 1601398130 is beyond EOD, truncated [ 406.167045][T11270] hsr_slave_1: entered promiscuous mode [ 406.172096][T11317] loop2: p2 start 1702059890 is beyond EOD, truncated [ 406.195972][T11270] debugfs: 'hsr0' already exists in 'hsr' [ 406.200667][ T5195] Dev loop2: unable to read RDB block 7 [ 406.202401][T11270] Cannot create hsr debugfs directory [ 406.207455][ T5195] loop2: AHDI p1 p2 p3 [ 406.207497][ T5195] loop2: partition table partially beyond EOD, truncated [ 406.226011][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 406.233865][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 406.268742][ T5195] Dev loop2: unable to read RDB block 7 [ 406.274610][ T5195] loop2: AHDI p1 p2 p3 [ 406.278899][ T5195] loop2: partition table partially beyond EOD, truncated [ 406.284893][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.290796][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 406.306377][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 406.411995][T11325] netlink: 'syz.0.2235': attribute type 2 has an invalid length. [ 406.461868][T11325] !: entered promiscuous mode [ 406.511386][T11325] netlink: 'syz.0.2235': attribute type 2 has an invalid length. [ 406.674386][T11333] loop5: detected capacity change from 0 to 7 [ 406.690317][ T5835] Bluetooth: hci4: command tx timeout [ 407.251835][T11333] Dev loop5: unable to read RDB block 7 [ 407.280238][T11333] loop5: unable to read partition table [ 407.289405][T11333] loop5: partition table beyond EOD, truncated [ 407.296746][ T50] erspan0: left allmulticast mode [ 407.352249][ T50] erspan0: left promiscuous mode [ 407.360971][T11333] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 407.381312][ T50] bridge0: port 3(erspan0) entered disabled state [ 407.480969][ T50] bridge_slave_1: left allmulticast mode [ 407.496777][ T50] bridge_slave_1: left promiscuous mode [ 407.523701][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.650020][ T50] bridge_slave_0: left allmulticast mode [ 407.655750][ T50] bridge_slave_0: left promiscuous mode [ 407.685648][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.705412][T11350] loop2: detected capacity change from 0 to 7 [ 407.736676][ T9755] Dev loop2: unable to read RDB block 7 [ 407.753024][ T9755] loop2: AHDI p1 p2 p3 [ 407.773915][ T9755] loop2: partition table partially beyond EOD, truncated [ 407.813317][ T9755] loop2: p1 start 1601398130 is beyond EOD, truncated [ 407.856256][ T9755] loop2: p2 start 1702059890 is beyond EOD, truncated [ 407.896119][T11350] Dev loop2: unable to read RDB block 7 [ 407.910653][T11350] loop2: AHDI p1 p2 p3 [ 407.919368][T11350] loop2: partition table partially beyond EOD, truncated [ 407.957931][T11350] loop2: p1 start 1601398130 is beyond EOD, truncated [ 407.980203][T11350] loop2: p2 start 1702059890 is beyond EOD, truncated [ 408.609490][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 408.770030][ T5835] Bluetooth: hci4: command tx timeout [ 408.779228][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 408.790156][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 408.799626][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.810501][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.820653][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.831343][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.844740][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 408.854243][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.073548][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.085332][ T9] usb 1-1: usb_control_msg returned -32 [ 409.099624][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.099883][ T9] usbtmc 1-1:16.0: can't read capabilities [ 409.127618][ T50] bond0 (unregistering): Released all slaves [ 409.494694][T11377] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 409.518824][ T9] usb 1-1: USB disconnect, device number 15 [ 409.778534][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 410.240526][ T24] usb 2-1: config 0 has no interfaces? [ 410.250030][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.259440][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.267481][ T24] usb 2-1: Product: syz [ 410.274186][ T24] usb 2-1: Manufacturer: syz [ 410.279380][ T24] usb 2-1: SerialNumber: syz [ 410.309820][ T24] usb 2-1: config 0 descriptor?? [ 410.390010][T11384] loop2: detected capacity change from 0 to 7 [ 410.403916][ T9755] Dev loop2: unable to read RDB block 7 [ 410.418805][ T9755] loop2: AHDI p1 p2 p3 [ 410.423610][ T9755] loop2: partition table partially beyond EOD, truncated [ 410.431303][ T50] hsr_slave_0: left promiscuous mode [ 410.432198][ T9755] loop2: p1 start 1601398130 is beyond EOD, truncated [ 410.445582][ T50] hsr_slave_1: left promiscuous mode [ 410.446087][ T9755] loop2: p2 start 1702059890 is beyond EOD, truncated [ 410.463437][T11384] Dev loop2: unable to read RDB block 7 [ 410.469468][T11384] loop2: AHDI p1 p2 p3 [ 410.470388][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.475419][T11384] loop2: partition table partially beyond EOD, [ 410.489964][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.491136][T11384] truncated [ 410.507634][T11384] loop2: p1 start 1601398130 is beyond EOD, truncated [ 410.509000][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.515423][T11384] loop2: p2 start 1702059890 is beyond EOD, truncated [ 410.538007][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.630662][ T50] veth1_macvtap: left promiscuous mode [ 410.647039][ T50] veth0_macvtap: left promiscuous mode [ 410.670701][ T50] veth0_vlan: left promiscuous mode [ 410.870057][ T5835] Bluetooth: hci4: command tx timeout [ 411.102857][ T9] usb 2-1: USB disconnect, device number 23 [ 411.960507][T11420] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[11420] [ 413.895283][ T50] team0 (unregistering): Port device team_slave_1 removed [ 414.006608][ T50] team0 (unregistering): Port device team_slave_0 removed [ 414.137981][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 415.159285][ T793] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 415.325359][ T793] usb 1-1: config 0 has no interfaces? [ 415.370263][ T793] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.385607][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.437358][T11270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 415.447494][ T793] usb 1-1: Product: syz [ 415.456782][ T793] usb 1-1: Manufacturer: syz [ 415.470125][ T793] usb 1-1: SerialNumber: syz [ 415.506358][T11454] fuse: Unknown parameter '184467440737095516150x000000000000000b0x0000000000000009ÿÿÿÿÿÿÿÿ' [ 415.532862][T11270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 415.548813][T11270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 415.557637][ T793] usb 1-1: config 0 descriptor?? [ 415.602964][T11270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 416.626868][T11468] usb 1-1: USB disconnect, device number 16 [ 416.725153][T11270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.850472][T11270] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.892028][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.899282][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.945615][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.952911][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.393033][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2273'. [ 418.068127][T11270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.254379][T11270] veth0_vlan: entered promiscuous mode [ 418.367575][T11270] veth1_vlan: entered promiscuous mode [ 418.529630][ T5893] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 418.663630][T11270] veth0_macvtap: entered promiscuous mode [ 418.732629][ T5893] usb 3-1: config 0 has no interfaces? [ 418.742049][ T5893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.751530][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.759890][ T5893] usb 3-1: Product: syz [ 418.764543][ T5893] usb 3-1: Manufacturer: syz [ 418.772186][ T5893] usb 3-1: SerialNumber: syz [ 418.796408][T11270] veth1_macvtap: entered promiscuous mode [ 418.826476][ T5893] usb 3-1: config 0 descriptor?? [ 418.872983][T11270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.908946][T11270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.955398][ T5043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.967932][ T5043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.986231][ T5043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.008934][ T5043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.327910][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.358844][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.431463][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.460597][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.597065][ T5893] usb 3-1: USB disconnect, device number 22 [ 419.829305][ T5869] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 420.012386][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 420.052671][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 420.084404][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 420.107804][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 420.146100][ T5869] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 420.163309][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.196697][ T5869] usb 1-1: Product: syz [ 420.237468][ T5869] usb 1-1: Manufacturer: syz [ 420.261364][ T5869] usb 1-1: SerialNumber: syz [ 420.282857][ T5869] usb 1-1: config 0 descriptor?? [ 420.579387][ T5869] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 420.884965][T11526] usb 1-1: Couldn't submit interrupt_out_urb -90 [ 420.907687][ T5869] usb 1-1: USB disconnect, device number 17 [ 421.254156][T11554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 421.383818][T11554] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 421.429535][T11554] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 421.441203][T11554] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 421.465760][T11554] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 421.796567][T11554] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 422.102045][ T5913] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 422.409199][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 422.435523][ T5913] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 422.471990][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.490642][ T5913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.535297][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.585224][ T5913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.652093][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.663878][ T5913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.772713][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.822281][ T5913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.845164][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.858920][ T5913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.888135][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.946487][ T5913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 423.061492][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.162465][ T5913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 423.252518][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.282245][ T5913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 423.329606][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 423.392090][ T5913] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 423.415904][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 423.428495][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 423.460450][ T5913] usb 3-1: SerialNumber: syz [ 423.488333][ T5913] usb 3-1: config 0 descriptor?? [ 423.493611][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 423.493679][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 425.359457][ T5893] usb 3-1: USB disconnect, device number 23 [ 425.589336][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout [ 425.758971][T11609] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.2302'. [ 426.460864][T11627] binder_alloc: 11626: pid 11626 spamming oneway? 1 buffers allocated for a total size of 4096 [ 426.504166][T11627] binder_alloc: 11626: pid 11626 spamming oneway? 2 buffers allocated for a total size of 5120 [ 426.538480][T11627] binder: BINDER_SET_CONTEXT_MGR already set [ 426.566339][T11627] binder: 11626:11627 ioctl 4018620d 200000000100 returned -16 [ 426.849297][T11468] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 427.037025][T11468] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.059666][T11468] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 427.088955][T11468] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 427.113418][T11468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.143004][T11468] usb 4-1: config 0 descriptor?? [ 427.163206][T11468] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 427.179563][T11468] dvb-usb: bulk message failed: -22 (3/0) [ 427.213776][T11468] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 427.234934][T11468] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 427.259619][T11468] usb 4-1: media controller created [ 427.285651][T11468] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.337441][T11468] dvb-usb: bulk message failed: -22 (6/0) [ 427.345948][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'. [ 427.365375][T11468] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 427.397921][T11468] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 427.443140][T11638] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 427.472561][T11468] dvb-usb: schedule remote query interval to 150 msecs. [ 427.500309][T11468] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 427.508718][T11638] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 427.650612][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout [ 427.660843][T11468] dvb-usb: bulk message failed: -22 (1/0) [ 427.666703][T11468] dvb-usb: error while querying for an remote control event. [ 427.839522][T11468] dvb-usb: bulk message failed: -22 (1/0) [ 427.847943][T11468] dvb-usb: error while querying for an remote control event. [ 427.999668][T11468] usb 4-1: USB disconnect, device number 19 [ 428.056820][T11468] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 428.733457][T11673] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2329'. [ 429.469411][T11703] netlink: 'syz.1.2343': attribute type 10 has an invalid length. [ 429.491677][ T5913] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 429.504492][T11703] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 429.685215][ T5913] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 429.698559][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.714458][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 429.728901][ T5913] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 429.738066][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.750724][ T5913] usb 4-1: config 0 descriptor?? [ 429.779776][ T5869] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 429.859333][ T5882] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 429.942666][ T5869] usb 1-1: config 0 has no interfaces? [ 429.953223][ T5869] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.963712][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.972436][ T5869] usb 1-1: Product: syz [ 429.976918][ T5869] usb 1-1: Manufacturer: syz [ 429.982019][ T5869] usb 1-1: SerialNumber: syz [ 429.989897][ T5869] usb 1-1: config 0 descriptor?? [ 430.040279][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 430.047546][ T5882] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 430.056985][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.077703][ T5882] usb 2-1: config 0 descriptor?? [ 430.309941][ T5882] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 430.321479][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 430.339989][ T5882] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 430.347227][ T5882] usb 2-1: media controller created [ 430.380815][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.468381][ T5882] DVB: Unable to find symbol dib7000p_attach() [ 430.475013][ T5882] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 430.601982][ T5882] rc_core: IR keymap rc-dib0700-rc5 not found [ 430.611360][ T5882] Registered IR keymap rc-empty [ 430.617042][ T5882] dvb-usb: could not initialize remote control. [ 430.625396][ T5882] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 430.752604][T11468] usb 1-1: USB disconnect, device number 18 [ 430.779788][ T5882] usb 2-1: USB disconnect, device number 24 [ 430.871752][ T5882] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 431.008897][T11740] loop5: detected capacity change from 0 to 7 [ 431.062376][ T5913] usbhid 4-1:0.0: can't add hid device: -71 [ 431.073552][ T5913] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 431.102380][ T5913] usb 4-1: USB disconnect, device number 20 [ 431.464201][ T9755] Dev loop5: unable to read RDB block 7 [ 431.469999][ T9755] loop5: unable to read partition table [ 431.475918][ T9755] loop5: partition table beyond EOD, truncated [ 431.792674][T11740] Dev loop5: unable to read RDB block 7 [ 431.809349][T11740] loop5: unable to read partition table [ 431.828311][T11740] loop5: partition table beyond EOD, truncated [ 431.867139][T11740] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 431.875889][T11752] netlink: zone id is out of range [ 431.881208][T11752] netlink: zone id is out of range [ 431.887780][T11752] netlink: zone id is out of range [ 431.896876][T11752] netlink: zone id is out of range [ 431.904600][T11752] netlink: del zone limit has 4 unknown bytes [ 433.080864][T11775] netlink: zone id is out of range [ 433.086064][T11775] netlink: zone id is out of range [ 433.095138][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.116472][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.125483][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.141039][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.154516][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.163963][T11775] netlink: zone id is out of range [ 433.233199][T11775] netlink: zone id is out of range [ 433.256151][T11775] netlink: del zone limit has 4 unknown bytes [ 433.904734][T11776] chnl_net:caif_netlink_parms(): no params data found [ 434.044189][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.134504][T11791] loop2: detected capacity change from 0 to 7 [ 434.145124][T11791] Dev loop2: unable to read RDB block 7 [ 434.150843][T11791] loop2: AHDI p1 p2 p3 [ 434.155441][T11791] loop2: partition table partially beyond EOD, truncated [ 434.163581][T11791] loop2: p1 start 1601398130 is beyond EOD, truncated [ 434.188039][T11791] loop2: p2 start 1702059890 is beyond EOD, truncated [ 434.227742][ T5195] Dev loop2: unable to read RDB block 7 [ 434.241071][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.251685][ T5195] loop2: AHDI p1 p2 p3 [ 434.255881][ T5195] loop2: partition table partially beyond EOD, truncated [ 434.274005][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 434.284014][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 434.506778][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.659457][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.812253][T11802] loop5: detected capacity change from 0 to 7 [ 434.853522][T11776] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.876509][T11776] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.883936][T11776] bridge_slave_0: entered allmulticast mode [ 434.892121][T11776] bridge_slave_0: entered promiscuous mode [ 434.902164][T11776] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.910478][T11776] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.917855][T11776] bridge_slave_1: entered allmulticast mode [ 434.926979][T11776] bridge_slave_1: entered promiscuous mode [ 435.068893][T11776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.114741][T11776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.153196][T11802] Dev loop5: unable to read RDB block 7 [ 435.158968][T11802] loop5: unable to read partition table [ 435.168750][T11802] loop5: partition table beyond EOD, truncated [ 435.179304][T11802] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 435.259223][ T5836] Bluetooth: hci0: command tx timeout [ 435.420887][T11776] team0: Port device team_slave_0 added [ 435.626917][T11776] team0: Port device team_slave_1 added [ 435.991803][T11776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.998813][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.069345][T11776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.122862][T11776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.152723][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.201307][T11776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.241098][ T36] bridge_slave_1: left allmulticast mode [ 436.246815][ T36] bridge_slave_1: left promiscuous mode [ 436.253245][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.272741][ T36] bridge_slave_0: left allmulticast mode [ 436.278668][ T36] bridge_slave_0: left promiscuous mode [ 436.285388][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.446493][T11817] loop2: detected capacity change from 0 to 7 [ 436.460535][T11817] Dev loop2: unable to read RDB block 7 [ 436.548453][T11817] loop2: AHDI p1 p2 p3 [ 436.553208][T11817] loop2: partition table partially beyond EOD, truncated [ 436.568792][T11817] loop2: p1 start 1601398130 is beyond EOD, truncated [ 436.575950][T11817] loop2: p2 start 1702059890 is beyond EOD, truncated [ 437.331663][ T5836] Bluetooth: hci0: command tx timeout [ 437.605176][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.639281][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.690579][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 437.992823][ T36] bond0 (unregistering): Released all slaves [ 438.724289][T11776] hsr_slave_0: entered promiscuous mode [ 438.742071][T11776] hsr_slave_1: entered promiscuous mode [ 439.333713][ T36] hsr_slave_0: left promiscuous mode [ 439.363586][ T36] hsr_slave_1: left promiscuous mode [ 439.380959][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.405819][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.413482][ T5836] Bluetooth: hci0: command tx timeout [ 439.427872][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.435783][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.465891][ T36] veth1_macvtap: left promiscuous mode [ 439.471968][ T36] veth0_macvtap: left promiscuous mode [ 439.478014][ T36] veth1_vlan: left promiscuous mode [ 439.483727][ T36] veth0_vlan: left promiscuous mode [ 440.140977][ T36] team0 (unregistering): Port device team_slave_1 removed [ 440.197005][ T36] team0 (unregistering): Port device team_slave_0 removed [ 441.363039][T11872] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 0xffffffffffffffff1844674407370 [ 441.491600][ T5836] Bluetooth: hci0: command tx timeout [ 442.007979][T11776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 442.038339][T11776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 442.082653][T11776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 442.105720][T11776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 442.411153][T11776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.441103][T11776] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.472701][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.479965][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.541560][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.548825][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.742539][ T5882] IPVS: starting estimator thread 0... [ 442.750190][ T5868] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 442.752029][T11911] tipc: Started in network mode [ 442.778839][T11911] tipc: Node identity ac1414aa, cluster identity 4711 [ 442.800247][T11911] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.831156][T11911] tipc: Enabled bearer , priority 10 [ 442.839699][T11912] IPVS: using max 28 ests per chain, 67200 per kthread [ 442.939360][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.945260][ T5868] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 442.971484][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.991541][ T5868] usb 1-1: Product: syz [ 442.995788][ T5868] usb 1-1: Manufacturer: syz [ 443.009526][ T5868] usb 1-1: SerialNumber: syz [ 443.030957][ T5868] usb 1-1: config 0 descriptor?? [ 443.073429][T11776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.079237][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.198077][T11776] veth0_vlan: entered promiscuous mode [ 443.219292][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.237071][T11776] veth1_vlan: entered promiscuous mode [ 443.252679][ T5868] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 443.323836][T11776] veth0_macvtap: entered promiscuous mode [ 443.348615][T11776] veth1_macvtap: entered promiscuous mode [ 443.359217][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.432064][T11776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.486444][T11776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.499342][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.536702][ T5043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.571332][ T5043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.610665][ T5043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.639196][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.646779][ T5043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.779311][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.866286][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.912825][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.942171][ T5913] tipc: Node number set to 2886997162 [ 443.996269][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.020313][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.059234][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.329960][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.406122][T11949] binder_alloc: 11948: pid 11948 spamming oneway? 1 buffers allocated for a total size of 4096 [ 444.418561][T11949] binder_alloc: 11948: pid 11948 spamming oneway? 2 buffers allocated for a total size of 5120 [ 444.472721][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 444.659328][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 444.677788][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 444.697733][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 444.708581][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.899377][ T9] usb 2-1: Product: syz [ 444.907656][ T5868] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 444.919888][ T9] usb 2-1: Manufacturer: syz [ 444.926714][ T9] usb 2-1: SerialNumber: syz [ 444.945680][ T5868] usb 1-1: USB disconnect, device number 19 [ 444.955266][ T9] usb 2-1: config 0 descriptor?? [ 444.975096][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 444.985039][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 445.509859][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.582615][ T9] em28xx 2-1:0.0: chip ID is em2765 [ 446.191940][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 446.201465][ T9] em28xx 2-1:0.0: board has no eeprom [ 446.510599][T11980] netlink: 'syz.2.2413': attribute type 2 has an invalid length. [ 446.547475][T11980] !: entered promiscuous mode [ 446.560809][T11980] netlink: 'syz.2.2413': attribute type 2 has an invalid length. [ 446.573706][T11980] !: left promiscuous mode [ 446.629366][ T5893] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 446.796796][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 446.811301][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 446.829044][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 446.845505][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.871795][ T5893] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.888789][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.914118][ T5893] usb 4-1: config 0 descriptor?? [ 447.279344][T11941] em28xx 2-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 447.309260][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 447.317257][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 447.324031][ T5869] em28xx 2-1:0.0: Binding DVB extension [ 447.370520][ T9] usb 2-1: USB disconnect, device number 25 [ 447.378391][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 447.476021][ T5869] em28xx 2-1:0.0: Registering input extension [ 447.485771][ T9] em28xx 2-1:0.0: Closing input extension [ 447.499940][ T5893] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 447.560562][ T5893] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 447.589721][ T9] em28xx 2-1:0.0: Freeing device [ 447.929913][T11988] binder_alloc: 11987: pid 11987 spamming oneway? 1 buffers allocated for a total size of 4096 [ 447.969198][ C1] net_ratelimit: 3 callbacks suppressed [ 447.969220][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.093014][T11993] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 448.380798][T12001] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.381349][T11468] IPVS: starting estimator thread 0... [ 448.500222][T12006] IPVS: using max 26 ests per chain, 62400 per kthread [ 448.879224][T12017] syz.2.2432 (12017): drop_caches: 0 [ 448.908369][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 448.922673][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 448.931534][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 448.941038][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 448.950833][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 449.019190][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.199519][T12025] loop2: detected capacity change from 0 to 7 [ 449.217912][ T5828] Dev loop2: unable to read RDB block 7 [ 449.237091][ T5828] loop2: AHDI p1 p2 p3 [ 449.255020][ T5828] loop2: partition table partially beyond EOD, truncated [ 449.281642][ T5828] loop2: p1 start 1601398130 is beyond EOD, truncated [ 449.295735][ T5828] loop2: p2 start 1702059890 is beyond EOD, truncated [ 449.320407][T12025] Dev loop2: unable to read RDB block 7 [ 449.326412][T12025] loop2: AHDI p1 p2 p3 [ 449.340299][T12025] loop2: partition table partially beyond EOD, truncated [ 449.371611][T12025] loop2: p1 start 1601398130 is beyond EOD, truncated [ 449.378570][T12025] loop2: p2 start 1702059890 is beyond EOD, truncated [ 449.394190][ T5195] Dev loop2: unable to read RDB block 7 [ 449.411853][ T5195] loop2: AHDI p1 p2 p3 [ 449.416094][ T5195] loop2: partition table partially beyond EOD, truncated [ 449.423989][T12019] chnl_net:caif_netlink_parms(): no params data found [ 449.439367][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 449.456756][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 449.602236][ T9] usb 4-1: USB disconnect, device number 21 [ 449.845404][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.019265][T11468] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 450.049187][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 450.074840][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.106947][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.115910][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.124129][T12019] bridge_slave_0: entered allmulticast mode [ 450.132753][T12019] bridge_slave_0: entered promiscuous mode [ 450.187352][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.212319][T12019] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.219765][T11468] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.237742][T11468] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 450.247009][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.255692][T12019] bridge_slave_1: entered allmulticast mode [ 450.262198][T11468] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 450.286513][T12019] bridge_slave_1: entered promiscuous mode [ 450.294870][T11468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.322854][T11468] usb 2-1: config 0 descriptor?? [ 450.341677][T11468] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 450.350737][T11468] dvb-usb: bulk message failed: -22 (3/0) [ 450.376092][T11468] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 450.404528][T11468] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 450.415303][T11468] usb 2-1: media controller created [ 450.422711][T11468] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 450.460336][T11468] dvb-usb: bulk message failed: -22 (6/0) [ 450.476470][T11468] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 450.478634][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.498805][T11468] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 450.537344][T11468] dvb-usb: schedule remote query interval to 150 msecs. [ 450.551190][T12038] dvb-usb: bulk message failed: -22 (2/0) [ 450.561463][T12064] loop2: detected capacity change from 0 to 7 [ 450.564036][T11468] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 450.578532][T12064] Dev loop2: unable to read RDB block 7 [ 450.585734][T12019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.588378][T12064] loop2: AHDI p1 p2 p3 [ 450.604149][T12064] loop2: partition table partially beyond EOD, truncated [ 450.615108][T12019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.626097][T11468] usb 2-1: USB disconnect, device number 26 [ 450.634533][T12064] loop2: p1 start 1601398130 is beyond EOD, truncated [ 450.645095][T12064] loop2: p2 start 1702059890 is beyond EOD, truncated [ 450.715277][T11468] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 450.828388][T12019] team0: Port device team_slave_0 added [ 450.854208][T12019] team0: Port device team_slave_1 added [ 450.936078][T12019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.944220][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.970769][T12019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.017424][T12019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.019870][ T5835] Bluetooth: hci3: command tx timeout [ 451.025335][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.089185][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 451.100980][T12019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.207699][T12019] hsr_slave_0: entered promiscuous mode [ 451.223181][T12019] hsr_slave_1: entered promiscuous mode [ 451.243629][T12019] debugfs: 'hsr0' already exists in 'hsr' [ 451.254711][T12019] Cannot create hsr debugfs directory [ 451.515862][T12089] netlink: del zone limit has 8 unknown bytes [ 451.524267][ T61] bridge_slave_1: left allmulticast mode [ 451.549407][ T61] bridge_slave_1: left promiscuous mode [ 451.555829][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.599575][T11468] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 451.601260][ T61] bridge_slave_0: left promiscuous mode [ 451.630846][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2464'. [ 451.641449][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.763136][T11468] usb 3-1: Using ep0 maxpacket: 8 [ 451.776034][T11468] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 451.786118][T11468] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.812238][T11468] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 451.838692][T11468] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.851170][T11468] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.894605][T11468] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 451.905275][T11468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.959630][ T5882] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 452.129292][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.142807][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.169714][T11468] usb 3-1: usb_control_msg returned -32 [ 452.175400][T11468] usbtmc 3-1:16.0: can't read capabilities [ 452.182447][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 452.204606][ T5882] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 452.219076][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.240500][ T5882] usb 2-1: config 0 descriptor?? [ 452.298467][ T5882] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 452.312820][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 452.341049][ T5882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 452.366910][ T5882] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 452.376219][ T5882] usb 2-1: media controller created [ 452.394053][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.426082][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 452.439310][ T5882] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 452.471597][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 452.494553][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 452.512408][ T5882] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 452.539828][ T5882] usb 2-1: USB disconnect, device number 27 [ 452.589235][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.599761][ T5882] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 452.632581][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.642904][ T61] bond0 (unregistering): Released all slaves [ 452.730664][ T61] !: left promiscuous mode [ 452.866113][T12124] netlink: zone id is out of range [ 452.874062][T12124] netlink: zone id is out of range [ 452.880623][T12124] netlink: zone id is out of range [ 452.979630][T12125] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 453.090315][ T5835] Bluetooth: hci3: command tx timeout [ 453.119850][ T5893] usb 3-1: USB disconnect, device number 24 [ 453.169681][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.327892][ T61] hsr_slave_0: left promiscuous mode [ 453.335279][ T61] hsr_slave_1: left promiscuous mode [ 453.344274][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.352492][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.365027][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.372732][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.396408][ T61] veth1_macvtap: left promiscuous mode [ 453.403701][ T61] veth0_macvtap: left promiscuous mode [ 453.414933][ T61] veth1_vlan: left promiscuous mode [ 453.423580][ T61] veth0_vlan: left promiscuous mode [ 453.539457][ T5893] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 453.711865][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 453.719817][ T5893] usb 2-1: config 0 has an invalid interface number: 115 but max is 0 [ 453.728121][ T5893] usb 2-1: config 0 has no interface number 0 [ 453.759597][ T5893] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 453.768719][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.799323][ T5893] usb 2-1: Product: syz [ 453.803571][ T5893] usb 2-1: Manufacturer: syz [ 453.808213][ T5893] usb 2-1: SerialNumber: syz [ 453.824928][ T5893] usb 2-1: config 0 descriptor?? [ 454.042772][ T5893] usb 2-1: USB disconnect, device number 28 [ 454.219272][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 454.325858][ T61] team0 (unregistering): Port device team_slave_1 removed [ 454.367193][ T61] team0 (unregistering): Port device team_slave_0 removed [ 454.560314][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 454.683499][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2483'. [ 454.733866][ T24] usb 4-1: config 0 has no interfaces? [ 454.742231][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.751797][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.760436][ T24] usb 4-1: Product: syz [ 454.764787][ T24] usb 4-1: Manufacturer: syz [ 454.769896][ T24] usb 4-1: SerialNumber: syz [ 454.782119][ T24] usb 4-1: config 0 descriptor?? [ 454.889726][ T5896] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 455.076787][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.108573][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 455.136325][ T5896] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 455.156677][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.171750][ T5836] Bluetooth: hci3: command tx timeout [ 455.182644][ T5896] usb 2-1: config 0 descriptor?? [ 455.200677][ T5896] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 455.207373][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 455.223245][ T5896] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 455.241286][ T5896] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 455.259248][ T5896] usb 2-1: media controller created [ 455.261031][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.266412][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.321795][T12019] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 455.324372][ T61] IPVS: stop unused estimator thread 0... [ 455.351979][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 455.365672][ T5896] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 455.375489][T12019] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 455.382618][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 455.423500][ T5896] dvb-usb: schedule remote query interval to 150 msecs. [ 455.425102][T12019] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 455.439193][ T5896] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 455.478222][ T5896] usb 2-1: USB disconnect, device number 29 [ 455.539165][T12019] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 455.555924][ T5896] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 455.591088][ T24] usb 4-1: USB disconnect, device number 22 [ 455.874706][T12019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.935865][T12019] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.984088][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.991390][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.071252][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.078494][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.289209][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 456.654481][T12019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.840460][T12019] veth0_vlan: entered promiscuous mode [ 456.887777][T12019] veth1_vlan: entered promiscuous mode [ 457.006536][T12019] veth0_macvtap: entered promiscuous mode [ 457.042234][T12019] veth1_macvtap: entered promiscuous mode [ 457.085805][T12019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.180334][T12019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.329181][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 457.433401][ T5836] Bluetooth: hci3: command 0x0419 tx timeout [ 457.647720][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.801710][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.863127][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.897756][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.089256][ T5896] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 458.094937][T12235] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2499'. [ 458.129977][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.149540][T12240] netlink: zone id is out of range [ 458.162704][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.180756][T12240] netlink: zone id is out of range [ 458.186028][T12240] netlink: zone id is out of range [ 458.209558][T12240] netlink: zone id is out of range [ 458.252125][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.274243][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.275032][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.339655][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 458.363158][ T5896] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 458.379181][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.399187][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.448924][ T5896] usb 3-1: config 0 descriptor?? [ 458.502805][ T5896] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 458.532709][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 458.564745][ T5896] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 458.595130][ T5896] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 458.616159][ T5896] usb 3-1: media controller created [ 458.635586][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.687941][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 458.719351][ T5896] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 458.752939][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 458.815787][ T5896] dvb-usb: schedule remote query interval to 150 msecs. [ 458.859324][ T5896] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 458.862882][T12263] netlink: zone id is out of range [ 458.893737][ T5896] usb 3-1: USB disconnect, device number 25 [ 458.899991][T12263] netlink: zone id is out of range [ 458.900008][T12263] netlink: zone id is out of range [ 458.900018][T12263] netlink: zone id is out of range [ 458.910000][T12264] netlink: 'syz.3.2508': attribute type 6 has an invalid length. [ 459.034579][ T5896] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 459.419302][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.466694][T12285] tipc: Failed to remove unknown binding: 66,1,1/0:3062545443/3062545445 [ 459.487214][T12288] binder: BINDER_SET_CONTEXT_MGR already set [ 459.489808][ T5835] Bluetooth: hci3: command 0x0419 tx timeout [ 459.503053][T12285] tipc: Failed to remove unknown binding: 66,1,1/0:3062545443/3062545445 [ 459.512313][T12288] binder: 12286:12288 ioctl 4018620d 200000000040 returned -16 [ 459.813586][T12296] netlink: zone id is out of range [ 459.856360][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 459.866006][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 459.876427][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 459.892975][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 459.901888][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.199411][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 460.237138][T12312] binder_alloc: 12311: binder_alloc_buf, no vma [ 460.369824][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 460.377214][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.399905][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.424477][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 460.433834][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.449937][ T24] usb 2-1: config 0 descriptor?? [ 460.562633][ T5043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.646353][T12298] chnl_net:caif_netlink_parms(): no params data found [ 460.694482][ T5043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.791454][T12330] binder_alloc: 12329: binder_alloc_buf, no vma [ 460.847955][ T5043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.883564][ T24] apple 0003:05AC:0246.0007: reserved main item tag 0xd [ 460.895104][ T24] apple 0003:05AC:0246.0007: unexpected long global item [ 460.910444][ T24] apple 0003:05AC:0246.0007: parse failed [ 460.916927][ T24] apple 0003:05AC:0246.0007: probe with driver apple failed with error -22 [ 460.970404][ T5043] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.070160][ T5893] usb 2-1: USB disconnect, device number 30 [ 461.154048][T12298] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.165863][T12298] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.174643][T12298] bridge_slave_0: entered allmulticast mode [ 461.183064][T12298] bridge_slave_0: entered promiscuous mode [ 461.250771][T12298] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.263890][T12298] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.271894][T12298] bridge_slave_1: entered allmulticast mode [ 461.280171][T12298] bridge_slave_1: entered promiscuous mode [ 461.381134][T12298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.390773][ T5043] bridge_slave_1: left allmulticast mode [ 461.396461][ T5043] bridge_slave_1: left promiscuous mode [ 461.403857][ T5043] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.418913][ T5043] bridge_slave_0: left allmulticast mode [ 461.425442][ T5043] bridge_slave_0: left promiscuous mode [ 461.433224][ T5043] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.479313][ T5893] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 461.642902][ T5893] usb 4-1: config 0 has no interfaces? [ 461.658743][T12353] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2545'. [ 461.661127][ T5893] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.698436][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.716329][ T5893] usb 4-1: Product: syz [ 461.724373][ T5893] usb 4-1: Manufacturer: syz [ 461.746607][ T5893] usb 4-1: SerialNumber: syz [ 461.770690][ T5893] usb 4-1: config 0 descriptor?? [ 461.936562][T12361] netlink: 'syz.0.2549': attribute type 6 has an invalid length. [ 461.969539][ T5835] Bluetooth: hci1: command tx timeout [ 462.123657][ T5043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.137777][ T5043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.151857][ T5043] bond0 (unregistering): Released all slaves [ 462.176255][T12298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.261153][ T5043] tipc: Disabling bearer [ 462.299908][ T5043] tipc: Left network mode [ 462.375134][T12298] team0: Port device team_slave_0 added [ 462.460408][T12298] team0: Port device team_slave_1 added [ 462.577888][ T5882] usb 4-1: USB disconnect, device number 23 [ 462.691758][T12298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.695474][T12382] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2557'. [ 462.714093][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.777451][T12298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.803472][T12298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.860840][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.896502][T12298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.107142][ T5043] hsr_slave_0: left promiscuous mode [ 463.115420][ T5043] hsr_slave_1: left promiscuous mode [ 463.126066][ T5043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.149447][ T5043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.168164][ T5043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.188322][ T5043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.195707][ T5896] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 463.243733][ T5043] veth1_macvtap: left promiscuous mode [ 463.269457][ T5043] veth0_macvtap: left promiscuous mode [ 463.276542][ T5043] veth1_vlan: left promiscuous mode [ 463.286498][ T5043] veth0_vlan: left promiscuous mode [ 463.370824][ T5896] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 463.390621][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.398911][ T5896] usb 1-1: Product: syz [ 463.404237][ T5896] usb 1-1: Manufacturer: syz [ 463.408887][ T5896] usb 1-1: SerialNumber: syz [ 463.434310][ T5896] usb 1-1: config 0 descriptor?? [ 463.446299][ T5896] hub 1-1:0.0: bad descriptor, ignoring hub [ 463.463208][ T5896] hub 1-1:0.0: probe with driver hub failed with error -5 [ 463.569180][ C1] net_ratelimit: 15 callbacks suppressed [ 463.569211][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.666122][ T5896] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 463.691925][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 463.718023][ T5896] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 463.728953][ T5896] usb 1-1: media controller created [ 463.749312][ T5882] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 463.778569][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.897017][ T5896] DVB: Unable to find symbol dib7000p_attach() [ 463.911585][ T5882] usb 4-1: config 0 has no interfaces? [ 463.917874][ T5896] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 463.924124][ T5882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.943626][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.960391][ T5882] usb 4-1: Product: syz [ 463.972216][ T5882] usb 4-1: Manufacturer: syz [ 463.982523][ T5882] usb 4-1: SerialNumber: syz [ 464.008920][ T5882] usb 4-1: config 0 descriptor?? [ 464.055924][ T5896] rc_core: IR keymap rc-dib0700-rc5 not found [ 464.062372][ T5835] Bluetooth: hci1: command tx timeout [ 464.067925][ T5896] Registered IR keymap rc-empty [ 464.078542][ T5896] dvb-usb: could not initialize remote control. [ 464.109172][ T5896] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 464.167677][T12419] netlink: 'syz.1.2569': attribute type 6 has an invalid length. [ 464.200812][ T5043] team0 (unregistering): Port device team_slave_1 removed [ 464.250833][ T5043] team0 (unregistering): Port device team_slave_0 removed [ 464.609197][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 464.757988][T12298] hsr_slave_0: entered promiscuous mode [ 464.774318][T12298] hsr_slave_1: entered promiscuous mode [ 464.787760][ T24] usb 4-1: USB disconnect, device number 24 [ 464.794553][T12298] debugfs: 'hsr0' already exists in 'hsr' [ 464.801966][T12298] Cannot create hsr debugfs directory [ 464.972695][T12424] binder: BINDER_SET_CONTEXT_MGR already set [ 464.979411][T12424] binder: 12423:12424 ioctl 4018620d 200000000040 returned -16 [ 465.604814][T12447] netlink: 'syz.1.2578': attribute type 6 has an invalid length. [ 465.649171][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.991776][T12298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.017945][T12298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.034189][T12298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.056640][T12298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 466.133170][ T5835] Bluetooth: hci1: command tx timeout [ 466.689197][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.860112][T12298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.894423][T12298] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.908118][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.915560][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.934127][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.941421][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.449597][T12298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.516759][T12298] veth0_vlan: entered promiscuous mode [ 467.534963][T12298] veth1_vlan: entered promiscuous mode [ 467.612230][T12298] veth0_macvtap: entered promiscuous mode [ 467.624190][T12298] veth1_macvtap: entered promiscuous mode [ 467.656496][T12298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.682285][T12298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.702374][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.722242][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.731241][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 467.752239][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.774516][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.865634][ T5043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.892755][ T5043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.955303][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.968324][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.209494][ T5835] Bluetooth: hci1: command tx timeout [ 468.769298][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.601017][T12437] ------------[ cut here ]------------ [ 469.606527][T12437] usb 1-1: BOGUS control dir, pipe 80001480 doesn't match bRequestType c0 [ 469.635819][ T5896] usb 1-1: USB disconnect, device number 20 [ 469.642533][T12437] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1572/0x1920, CPU#0: syz.3.2575/12437 [ 469.653298][T12437] Modules linked in: [ 469.657517][T12437] CPU: 0 UID: 0 PID: 12437 Comm: syz.3.2575 Not tainted syzkaller #0 PREEMPT(full) [ 469.667116][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.677411][T12437] RIP: 0010:usb_submit_urb+0x1572/0x1920 [ 469.683181][T12437] Code: ff df 0f b6 44 05 00 84 c0 0f 85 2d 03 00 00 45 0f b6 45 00 48 c7 c7 e0 e7 33 8c 4c 89 fe 4c 89 e2 44 89 f1 e8 1f f1 7b fa 90 <0f> 0b 90 90 e9 09 fb ff ff 48 8b 4c 24 08 80 e1 07 80 c1 03 38 c1 [ 469.703495][T12437] RSP: 0018:ffffc9000403f820 EFLAGS: 00010246 [ 469.709641][T12437] RAX: 87d4ca1c60bf4f00 RBX: ffff888022b57c00 RCX: 0000000000080000 [ 469.717628][T12437] RDX: ffffc9001a7c3000 RSI: 000000000000410e RDI: 000000000000410f [ 469.726660][T12437] RBP: 1ffff11004e087a4 R08: 0000000000000003 R09: 0000000000000004 [ 469.735089][T12437] R10: dffffc0000000000 R11: fffffbfff1c3a6ec R12: ffff888030e5c840 [ 469.743142][T12437] R13: ffff888027043d20 R14: 0000000080001480 R15: ffffffff8c3453c0 [ 469.751250][T12437] FS: 00007ffa67d7f6c0(0000) GS:ffff888125a78000(0000) knlGS:0000000000000000 [ 469.760360][T12437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.766952][T12437] CR2: 00007f8c603156c0 CR3: 0000000077f3e000 CR4: 00000000003526f0 [ 469.775033][T12437] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 469.783126][T12437] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 469.791219][T12437] Call Trace: [ 469.794520][T12437] [ 469.797469][T12437] usb_start_wait_urb+0x115/0x4f0 [ 469.802554][T12437] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 469.808147][T12437] usb_control_msg+0x232/0x3e0 [ 469.814048][T12437] dib0700_i2c_xfer+0xba7/0xf70 [ 469.818933][T12437] ? __lock_acquire+0xab9/0xd20 [ 469.820901][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.824670][T12437] __i2c_transfer+0x874/0x2170 [ 469.836044][T12437] ? i2c_transfer+0x120/0x3a0 [ 469.841240][T12437] ? __pfx___i2c_transfer+0x10/0x10 [ 469.846450][T12437] ? rt_mutex_lock_nested+0x172/0x1e0 [ 469.852001][T12437] ? i2c_transfer+0x120/0x3a0 [ 469.856704][T12437] i2c_transfer+0x25b/0x3a0 [ 469.861278][T12437] ? __pfx_i2c_transfer+0x10/0x10 [ 469.866391][T12437] ? _copy_from_user+0x94/0xb0 [ 469.871195][T12437] i2cdev_ioctl_rdwr+0x460/0x740 [ 469.876160][T12437] i2cdev_ioctl+0x64b/0x820 [ 469.880721][T12437] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 469.885750][T12437] ? __fget_files+0x3a0/0x420 [ 469.890568][T12437] ? __fget_files+0x2a/0x420 [ 469.895162][T12437] ? bpf_lsm_file_ioctl+0x9/0x20 [ 469.900157][T12437] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 469.905183][T12437] __se_sys_ioctl+0xfc/0x170 [ 469.909836][T12437] do_syscall_64+0xfa/0xfa0 [ 469.914370][T12437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.920521][T12437] ? clear_bhb_loop+0x60/0xb0 [ 469.925253][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.931614][T12437] RIP: 0033:0x7ffa66f8f6c9 [ 469.936061][T12437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.956161][T12437] RSP: 002b:00007ffa67d7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.964651][T12437] RAX: ffffffffffffffda RBX: 00007ffa671e5fa0 RCX: 00007ffa66f8f6c9 [ 469.972798][T12437] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000003 [ 469.981080][T12437] RBP: 00007ffa67011f91 R08: 0000000000000000 R09: 0000000000000000 [ 469.989075][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.997155][T12437] R13: 00007ffa671e6038 R14: 00007ffa671e5fa0 R15: 00007ffe313517c8 [ 470.005363][T12437] [ 470.008410][T12437] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 470.015783][T12437] CPU: 0 UID: 0 PID: 12437 Comm: syz.3.2575 Not tainted syzkaller #0 PREEMPT(full) [ 470.025206][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.035269][T12437] Call Trace: [ 470.038564][T12437] [ 470.041585][T12437] dump_stack_lvl+0x99/0x250 [ 470.046203][T12437] ? __asan_memcpy+0x40/0x70 [ 470.050803][T12437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.056011][T12437] ? __pfx__printk+0x10/0x10 [ 470.060619][T12437] vpanic+0x237/0x6d0 [ 470.064602][T12437] ? __pfx_vpanic+0x10/0x10 [ 470.069129][T12437] ? is_bpf_text_address+0x292/0x2b0 [ 470.074435][T12437] ? is_bpf_text_address+0x26/0x2b0 [ 470.079646][T12437] panic+0xb9/0xc0 [ 470.083370][T12437] ? __pfx_panic+0x10/0x10 [ 470.087798][T12437] __warn+0x318/0x4d0 [ 470.091785][T12437] ? usb_submit_urb+0x1572/0x1920 [ 470.096823][T12437] ? usb_submit_urb+0x1572/0x1920 [ 470.101858][T12437] report_bug+0x2be/0x4f0 [ 470.106193][T12437] ? usb_submit_urb+0x1572/0x1920 [ 470.111227][T12437] ? usb_submit_urb+0x1572/0x1920 [ 470.116287][T12437] ? usb_submit_urb+0x1574/0x1920 [ 470.121324][T12437] handle_bug+0x84/0x160 [ 470.125573][T12437] exc_invalid_op+0x1a/0x50 [ 470.130082][T12437] asm_exc_invalid_op+0x1a/0x20 [ 470.134948][T12437] RIP: 0010:usb_submit_urb+0x1572/0x1920 [ 470.140621][T12437] Code: ff df 0f b6 44 05 00 84 c0 0f 85 2d 03 00 00 45 0f b6 45 00 48 c7 c7 e0 e7 33 8c 4c 89 fe 4c 89 e2 44 89 f1 e8 1f f1 7b fa 90 <0f> 0b 90 90 e9 09 fb ff ff 48 8b 4c 24 08 80 e1 07 80 c1 03 38 c1 [ 470.160327][T12437] RSP: 0018:ffffc9000403f820 EFLAGS: 00010246 [ 470.166409][T12437] RAX: 87d4ca1c60bf4f00 RBX: ffff888022b57c00 RCX: 0000000000080000 [ 470.174398][T12437] RDX: ffffc9001a7c3000 RSI: 000000000000410e RDI: 000000000000410f [ 470.182398][T12437] RBP: 1ffff11004e087a4 R08: 0000000000000003 R09: 0000000000000004 [ 470.190384][T12437] R10: dffffc0000000000 R11: fffffbfff1c3a6ec R12: ffff888030e5c840 [ 470.198361][T12437] R13: ffff888027043d20 R14: 0000000080001480 R15: ffffffff8c3453c0 [ 470.206363][T12437] usb_start_wait_urb+0x115/0x4f0 [ 470.211405][T12437] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 470.216988][T12437] usb_control_msg+0x232/0x3e0 [ 470.221778][T12437] dib0700_i2c_xfer+0xba7/0xf70 [ 470.226653][T12437] ? __lock_acquire+0xab9/0xd20 [ 470.231516][T12437] __i2c_transfer+0x874/0x2170 [ 470.236296][T12437] ? i2c_transfer+0x120/0x3a0 [ 470.241002][T12437] ? __pfx___i2c_transfer+0x10/0x10 [ 470.246209][T12437] ? rt_mutex_lock_nested+0x172/0x1e0 [ 470.251586][T12437] ? i2c_transfer+0x120/0x3a0 [ 470.256263][T12437] i2c_transfer+0x25b/0x3a0 [ 470.260766][T12437] ? __pfx_i2c_transfer+0x10/0x10 [ 470.265796][T12437] ? _copy_from_user+0x94/0xb0 [ 470.270566][T12437] i2cdev_ioctl_rdwr+0x460/0x740 [ 470.275600][T12437] i2cdev_ioctl+0x64b/0x820 [ 470.280106][T12437] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 470.285132][T12437] ? __fget_files+0x3a0/0x420 [ 470.289821][T12437] ? __fget_files+0x2a/0x420 [ 470.294428][T12437] ? bpf_lsm_file_ioctl+0x9/0x20 [ 470.299365][T12437] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 470.304422][T12437] __se_sys_ioctl+0xfc/0x170 [ 470.309022][T12437] do_syscall_64+0xfa/0xfa0 [ 470.313531][T12437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.319604][T12437] ? clear_bhb_loop+0x60/0xb0 [ 470.324286][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.330184][T12437] RIP: 0033:0x7ffa66f8f6c9 [ 470.334601][T12437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.354306][T12437] RSP: 002b:00007ffa67d7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.362733][T12437] RAX: ffffffffffffffda RBX: 00007ffa671e5fa0 RCX: 00007ffa66f8f6c9 [ 470.370710][T12437] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000003 [ 470.378683][T12437] RBP: 00007ffa67011f91 R08: 0000000000000000 R09: 0000000000000000 [ 470.386654][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.394645][T12437] R13: 00007ffa671e6038 R14: 00007ffa671e5fa0 R15: 00007ffe313517c8 [ 470.402647][T12437] [ 470.406022][T12437] Kernel Offset: disabled [ 470.410362][T12437] Rebooting in 86400 seconds..