last executing test programs: 2m45.414160115s ago: executing program 4 (id=2396): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) 2m45.126823216s ago: executing program 4 (id=2399): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local}}}}}}, 0x0) 2m45.001705956s ago: executing program 4 (id=2401): io_setup(0x3ff, &(0x7f00000000c0)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) io_submit(r0, 0x1, &(0x7f0000001840)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2m44.832497716s ago: executing program 4 (id=2403): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 2m44.615213086s ago: executing program 4 (id=2407): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r2}) 2m44.453765428s ago: executing program 4 (id=2410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m29.156442218s ago: executing program 32 (id=2410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m11.69743736s ago: executing program 1 (id=2776): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 2m11.368816056s ago: executing program 1 (id=2784): r0 = io_uring_setup(0xaff, &(0x7f0000000380)={0x0, 0xeb9e, 0x400, 0x0, 0x10000003}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000ec0)={0x2, 0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {&(0x7f0000000c00)=""/144, 0x90}], 0x0}, 0x20) r1 = io_uring_setup(0x5625, &(0x7f0000000600)={0x0, 0x7aef, 0x0, 0xfffffffd, 0x2cb}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 2m11.208106017s ago: executing program 1 (id=2788): sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f7c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0xf000, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 2m10.960047782s ago: executing program 1 (id=2789): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 2m10.700312617s ago: executing program 1 (id=2793): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r1, 0xe, 0x1, 0x781, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m10.483849548s ago: executing program 1 (id=2796): r0 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m55.440096577s ago: executing program 33 (id=2796): r0 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 11.213331866s ago: executing program 0 (id=4643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000031c0)=""/166, 0xa6}], 0x1, 0x3a, 0x0) 11.051453504s ago: executing program 0 (id=4645): r0 = fsopen(&(0x7f0000000280)='erofs\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 10.78180086s ago: executing program 0 (id=4646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x8000000180001) 10.634282517s ago: executing program 0 (id=4647): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10.508181241s ago: executing program 0 (id=4648): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc8442, 0x17e) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) splice(r1, 0x0, r0, 0x0, 0x20000000000007, 0xa) 10.369694184s ago: executing program 0 (id=4649): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="c19d81227b4b63c9ae34fc55e2502698fa4dbaf9bab15dc29e6d58613730c18bc0d1575fbe53f9d594d0e7c7d9a22cc82d61bfc69d8000376dd12a8afc1f9200ca50e752c76d36f9bd3a177233b6c826dad3", 0x52}, {&(0x7f0000001140)="ae250674274558348de8cfc0aa5f51f0bb0d0d0c341a385b8b38a84c0a852f1b3d03ce8ab02629f635b62774d78c6b80e88b760cde0f9f52afb109ec1bb32d06afe534bc54e13660b4ebcfe1627645591ce2f764420d0faf40cbcdb19ce73d894c54bb6594373381583c4e90a47e40c3a5a4c0c68a5d454008d52e96002d7f421eeab5b08752", 0x86}, {&(0x7f0000000640)="a449e380000000000000000000000000008700008000"/31, 0x1f}, {&(0x7f00000000c0)="b307d82055e7920a39", 0x9}, {&(0x7f0000001400)="166383ac8ab05ed6ccbad916092c0232b5700364", 0x14}, {&(0x7f0000000580)="8a73980e5a9650566a640429be9dbd1d0be80973b9ae90817e95582a80569d9929fc592fdee0a4faf89aa8f1ce48adbd95fd374e03a859a998c2a88758a715ac3620682540e2b565018398e8e4e188f9702ae60700000000000000847007444bb62508c510105b46e99bbc3ae55b16826a6a01059ac590a4f5170000000010bb2b7015e5b3f7de82", 0x88}, {&(0x7f00000004c0)="0b7eb3645f2517077f25fc2fe8690fc4a85187563d819459c5b1a1cbbfebe5dee64e728887e5ac0b5bea937097901820abe5daada14d7f1c2db5157340bcd555b469f2428210a6a72dcaf29c320992cddb9074f0ce33b16d45ce3a068128d5cdb0c704403add16e6dfafe5fc0384b5739e917e426aff88d833beaa67e7b0000da64b7d224a46288a5f47a7c7a9869900000000000000004d179542c9b69ca90143930a5a", 0xa4}, {&(0x7f00000003c0)="53b4b7ebf2", 0x5}], 0x8}, 0x4000000) 10.164290613s ago: executing program 34 (id=4649): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="c19d81227b4b63c9ae34fc55e2502698fa4dbaf9bab15dc29e6d58613730c18bc0d1575fbe53f9d594d0e7c7d9a22cc82d61bfc69d8000376dd12a8afc1f9200ca50e752c76d36f9bd3a177233b6c826dad3", 0x52}, {&(0x7f0000001140)="ae250674274558348de8cfc0aa5f51f0bb0d0d0c341a385b8b38a84c0a852f1b3d03ce8ab02629f635b62774d78c6b80e88b760cde0f9f52afb109ec1bb32d06afe534bc54e13660b4ebcfe1627645591ce2f764420d0faf40cbcdb19ce73d894c54bb6594373381583c4e90a47e40c3a5a4c0c68a5d454008d52e96002d7f421eeab5b08752", 0x86}, {&(0x7f0000000640)="a449e380000000000000000000000000008700008000"/31, 0x1f}, {&(0x7f00000000c0)="b307d82055e7920a39", 0x9}, {&(0x7f0000001400)="166383ac8ab05ed6ccbad916092c0232b5700364", 0x14}, {&(0x7f0000000580)="8a73980e5a9650566a640429be9dbd1d0be80973b9ae90817e95582a80569d9929fc592fdee0a4faf89aa8f1ce48adbd95fd374e03a859a998c2a88758a715ac3620682540e2b565018398e8e4e188f9702ae60700000000000000847007444bb62508c510105b46e99bbc3ae55b16826a6a01059ac590a4f5170000000010bb2b7015e5b3f7de82", 0x88}, {&(0x7f00000004c0)="0b7eb3645f2517077f25fc2fe8690fc4a85187563d819459c5b1a1cbbfebe5dee64e728887e5ac0b5bea937097901820abe5daada14d7f1c2db5157340bcd555b469f2428210a6a72dcaf29c320992cddb9074f0ce33b16d45ce3a068128d5cdb0c704403add16e6dfafe5fc0384b5739e917e426aff88d833beaa67e7b0000da64b7d224a46288a5f47a7c7a9869900000000000000004d179542c9b69ca90143930a5a", 0xa4}, {&(0x7f00000003c0)="53b4b7ebf2", 0x5}], 0x8}, 0x4000000) 4.926772882s ago: executing program 5 (id=4705): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330, r0}, 0x0) 3.769874061s ago: executing program 5 (id=4714): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) setreuid(0x0, 0xee01) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) 3.629083408s ago: executing program 5 (id=4715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) 3.267353008s ago: executing program 5 (id=4723): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 3.046871476s ago: executing program 5 (id=4729): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020021487b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.786636052s ago: executing program 5 (id=4733): unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) 2.227799816s ago: executing program 2 (id=4745): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_dellink={0x2c, 0x13, 0x5, 0x70bd29, 0x0, {0x7, 0x0, 0x0, r2, 0x44000, 0x18d40}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x2001c004) 2.001532353s ago: executing program 2 (id=4748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008202"]) 1.937149235s ago: executing program 7 (id=4749): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x27e2, 0xda80, 0x24, 0x0, 0x0) 1.754782053s ago: executing program 7 (id=4751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x30, r1, 0xfd39e943ccf1163b, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 1.754384579s ago: executing program 6 (id=4752): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}}, 0x4c040) 1.706767367s ago: executing program 2 (id=4753): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1.598741844s ago: executing program 7 (id=4754): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000a80)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x0, 0x0, {0x7, r2}}, 0x18}}, 0x0) 1.517011156s ago: executing program 6 (id=4755): msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000c"], 0x8, 0x0) 1.427675717s ago: executing program 7 (id=4756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.349917499s ago: executing program 2 (id=4757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000009c02"]) 1.045333207s ago: executing program 2 (id=4759): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 996.904723ms ago: executing program 3 (id=4760): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x122, 0xfff}, 0x10) 805.532971ms ago: executing program 3 (id=4761): sendmmsg$inet(0xffffffffffffffff, &(0x7f000000b240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="cbcda1e7", 0x4}], 0x1}}], 0x1, 0x4000) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x20b) 684.752076ms ago: executing program 3 (id=4762): r0 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {}, {0x0, 0xfef2}, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x73}, {0xfffffefffffffffd, 0xeca, 0x0, 0x0, 0x0, 0x0, 0x778a, 0xffff}}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x0, @in=@multicast1}}, 0xe8) close(r0) 576.10983ms ago: executing program 6 (id=4763): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018004e"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00w\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 575.46818ms ago: executing program 3 (id=4764): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 537.548933ms ago: executing program 2 (id=4765): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000500)="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", 0x7c2}], 0x1}}], 0x1, 0x40011) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18fbd9"]) 397.813995ms ago: executing program 6 (id=4766): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r1 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r1, 0x567, 0x0, 0x8, 0x0, 0x0) 291.621566ms ago: executing program 3 (id=4767): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2, 0x0, 0x0, 0x80}}, 0x2e) 266.927262ms ago: executing program 7 (id=4768): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}]]}, 0x34}}, 0x40) 190.741803ms ago: executing program 6 (id=4769): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1, 0x10100, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 72.167009ms ago: executing program 3 (id=4770): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) 52.165665ms ago: executing program 7 (id=4771): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x2000, 0x0) 0s ago: executing program 6 (id=4772): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): 8e929 code=0x7ffc0000 [ 282.269948][ T30] audit: type=1326 audit(1751241679.515:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 282.355634][ T30] audit: type=1326 audit(1751241679.515:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 282.395045][ T30] audit: type=1326 audit(1751241679.515:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 282.418989][ T30] audit: type=1326 audit(1751241679.515:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 282.443309][ T30] audit: type=1326 audit(1751241679.515:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 282.484282][ T30] audit: type=1326 audit(1751241679.515:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff767b858e7 code=0x7ffc0000 [ 282.520605][ T30] audit: type=1326 audit(1751241679.515:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff767b2ab19 code=0x7ffc0000 [ 282.542501][ T30] audit: type=1326 audit(1751241679.515:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12144 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff767b858e7 code=0x7ffc0000 [ 282.644577][T12161] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2814'. [ 282.755435][ T7691] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 282.905233][ T7691] usb 6-1: Using ep0 maxpacket: 32 [ 282.926124][ T7691] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 282.934197][T12172] loop8: detected capacity change from 0 to 1 [ 282.940710][ T7691] usb 6-1: config 0 has no interface number 0 [ 282.940762][ T7691] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 282.940797][ T7691] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 282.944378][ T7691] usb 6-1: New USB device found, idVendor=0582, idProduct=ecd6, bcdDevice=6b.1b [ 282.970168][T12172] Dev loop8: unable to read RDB block 1 [ 282.979413][ T7691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.979443][ T7691] usb 6-1: Product: syz [ 282.979459][ T7691] usb 6-1: Manufacturer: syz [ 282.979475][ T7691] usb 6-1: SerialNumber: syz [ 282.982794][ T7691] usb 6-1: config 0 descriptor?? [ 282.991877][T12172] loop8: unable to read partition table [ 283.018998][T12172] loop8: partition table beyond EOD, truncated [ 283.028760][T12172] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 283.095207][ T5887] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 283.229122][ T7691] usb 6-1: USB disconnect, device number 3 [ 283.275195][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 283.283549][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.294076][ T5887] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 283.307726][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.327255][ T5887] usb 3-1: config 0 descriptor?? [ 283.334991][ T5887] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 283.640018][T12186] xt_CT: No such helper "snmp" [ 283.952916][ T5887] gspca_vc032x: reg_r err -71 [ 283.960343][ T5887] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 283.973341][ T5887] usb 3-1: USB disconnect, device number 16 [ 284.736569][T12217] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2840'. [ 284.895228][ T5887] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 284.904112][T12223] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2843'. [ 284.917960][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'. [ 285.075323][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 285.092020][ T5887] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 285.115558][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.135278][ T5887] usb 1-1: Product: syz [ 285.139510][ T5887] usb 1-1: Manufacturer: syz [ 285.147818][ T5887] usb 1-1: SerialNumber: syz [ 285.161087][ T5887] usb 1-1: config 0 descriptor?? [ 285.178374][ T5887] gspca_main: se401-2.14.0 probing 047d:5003 [ 285.610289][ T5887] gspca_se401: Frame size: 0x0 1/16th janggu [ 285.630656][ T5887] gspca_se401: Frame size: 0x0 1/16th janggu [ 285.645977][ T5887] gspca_se401: Frame size: 0x0 1/16th janggu [ 285.660876][ T5887] gspca_se401: Frame size: 17x0 bayer [ 285.671170][ T5887] gspca_se401: Frame size: 0x0 1/16th janggu [ 285.677671][ T5887] gspca_se401: Frame size: 0x0 1/16th janggu [ 285.690603][ T5887] gspca_se401: Frame size: 0x0 1/16th janggu [ 285.705369][ T5887] gspca_se401: Frame size: 0x0 1/16th janggu [ 285.814063][ T5887] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input40 [ 285.848320][ T5887] usb 1-1: USB disconnect, device number 18 [ 286.108726][T12279] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2868'. [ 286.835301][T12303] sctp: [Deprecated]: syz.0.2881 (pid 12303) Use of int in maxseg socket option. [ 286.835301][T12303] Use struct sctp_assoc_value instead [ 286.866474][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.907669][T12307] usb usb7: usbfs: process 12307 (syz.5.2882) did not claim interface 0 before use [ 287.740612][T12336] program syz.2.2895 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.162386][T12356] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 288.206691][ T5887] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 288.361951][T12366] veth0_to_team: entered promiscuous mode [ 288.378272][T12366] veth0_to_team: entered allmulticast mode [ 288.395280][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 288.413418][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.426664][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.447689][ T5887] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.465990][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.480022][T12371] loop2: detected capacity change from 0 to 524287999 [ 288.490920][ T5887] usb 1-1: config 0 descriptor?? [ 288.498825][ T5887] hub 1-1:0.0: USB hub found [ 288.704088][ T5887] hub 1-1:0.0: 1 port detected [ 288.834335][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2918'. [ 289.129819][ T5887] usb 1-1: USB disconnect, device number 19 [ 289.817709][ T5887] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 289.986311][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 290.000622][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.018840][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.032710][ T5887] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 290.049464][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.060681][ T5887] usb 6-1: config 0 descriptor?? [ 290.368597][T12456] input: syz0 as /devices/virtual/input/input41 [ 290.405324][ T7691] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 290.472584][T12461] loop9: detected capacity change from 0 to 8 [ 290.490692][T12461] Dev loop9: unable to read RDB block 8 [ 290.496672][ T5887] corsair 0003:1B1C:1B02.0019: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 290.509758][T12461] loop9: unable to read partition table [ 290.525000][T12461] loop9: partition table beyond EOD, truncated [ 290.534831][T12461] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 290.565317][ T7691] usb 1-1: Using ep0 maxpacket: 8 [ 290.597361][ T7691] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 290.616645][ T7691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.651009][ T7691] pvrusb2: Hardware description: Terratec Grabster AV400 [ 290.675974][ T7691] pvrusb2: ********** [ 290.680058][ T7691] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 290.686003][ T5887] corsair 0003:1B1C:1B02.0019: Read invalid backlight brightness: f7. [ 290.700593][ T7691] pvrusb2: Important functionality might not be entirely working. [ 290.712610][ T7691] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 290.724989][ T7691] pvrusb2: ********** [ 290.854167][ T2343] pvrusb2: Invalid write control endpoint [ 290.882046][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 290.924321][ T7705] usb 6-1: USB disconnect, device number 4 [ 290.935152][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 290.942634][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 290.975459][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 290.987059][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 290.994515][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 291.019977][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 291.023929][ T2343] pvrusb2: Invalid write control endpoint [ 291.027560][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 291.027599][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 291.027624][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 291.027648][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 291.027672][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 291.027696][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 291.027720][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 291.027744][ T5887] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 291.062116][ T5887] hid-generic 009C:0008:0003.001A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 291.066404][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 291.142719][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 291.150618][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 291.162912][ T2343] pvrusb2: Device being rendered inoperable [ 291.173722][T12446] pvrusb2: Attempted to execute control transfer when device not ok [ 291.189350][ T5887] usb 1-1: USB disconnect, device number 20 [ 291.205231][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 291.223220][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 291.250039][ T2343] pvrusb2: Attached sub-driver cx25840 [ 291.275918][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 291.297955][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 291.601491][T12493] CIFS: VFS: Malformed UNC in devname [ 291.849645][T12504] bpf: Bad value for 'uid' [ 292.203312][T12519] sctp: [Deprecated]: syz.0.2982 (pid 12519) Use of int in maxseg socket option. [ 292.203312][T12519] Use struct sctp_assoc_value instead [ 292.893232][T12537] netlink: 'syz.5.2991': attribute type 5 has an invalid length. [ 292.903393][T12537] netlink: 'syz.5.2991': attribute type 11 has an invalid length. [ 293.376886][T12559] netlink: 'syz.0.3002': attribute type 49 has an invalid length. [ 293.411093][T12565] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3003'. [ 293.473067][T12564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.538959][T12564] bond0: (slave bond1): Enslaving as an active interface with an up link [ 293.643739][T12572] sp0: Synchronizing with TNC [ 293.727624][T12572] Falling back ldisc for ttyS3. [ 294.640105][T12618] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3028'. [ 294.695592][ T5887] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 294.857555][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 294.869036][ T5887] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 294.881690][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.891936][ T5887] usb 3-1: Product: syz [ 294.900299][ T5887] usb 3-1: Manufacturer: syz [ 294.907628][T12631] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 294.922230][ T5887] usb 3-1: SerialNumber: syz [ 294.931378][ T5887] usb 3-1: config 0 descriptor?? [ 294.942871][ T5887] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 294.952666][ T5887] usb 3-1: setting power ON [ 294.962473][ T5887] dvb-usb: bulk message failed: -22 (2/0) [ 294.969914][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 294.979897][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.995500][ T5887] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 295.004214][ T5887] usb 3-1: media controller created [ 295.031486][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.055586][ T5887] usb 3-1: selecting invalid altsetting 6 [ 295.064711][ T5887] usb 3-1: digital interface selection failed (-22) [ 295.073393][T12635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.080434][ T5887] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 295.090960][ T5887] usb 3-1: setting power OFF [ 295.096444][ T5887] dvb-usb: bulk message failed: -22 (2/0) [ 295.103318][ T5887] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 295.130356][ T5887] (NULL device *): no alternate interface [ 295.146516][T12613] dvb-usb: bulk message failed: -22 (3/0) [ 295.167611][T12613] dvb-usb: bulk message failed: -22 (4/0) [ 295.185674][T12613] dvb-usb: bulk message failed: -22 (4/0) [ 295.191523][T12613] cxusb: i2c read failed [ 295.218799][ T5887] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 295.231533][ T5887] usb 3-1: USB disconnect, device number 17 [ 295.676043][ T7690] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 295.846039][ T7690] usb 6-1: Using ep0 maxpacket: 32 [ 295.852978][ T7690] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 295.861453][ T7690] usb 6-1: config 0 has no interface number 0 [ 295.878696][ T7690] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 295.891716][ T7690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.900160][ T7690] usb 6-1: Product: syz [ 295.904423][ T7690] usb 6-1: Manufacturer: syz [ 295.910181][ T7690] usb 6-1: SerialNumber: syz [ 295.917827][ T7690] usb 6-1: config 0 descriptor?? [ 295.925818][ T7690] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 296.144272][ T7690] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 296.159001][ T7690] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 296.513533][T12682] Falling back ldisc for ptm1. [ 296.576453][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 296.577734][ T5887] usb 6-1: USB disconnect, device number 5 [ 296.621803][ T5887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 296.648603][ T5887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 296.675880][ T5887] quatech2 6-1:0.51: device disconnected [ 296.932182][ T5823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.941477][ T5823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.950179][ T5823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.959416][ T5823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.969922][ T5823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.986738][ T5138] Bluetooth: hci6: command 0x1003 tx timeout [ 296.993371][ T5820] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 297.078981][T12693] lo speed is unknown, defaulting to 1000 [ 297.160454][T12698] loop8: detected capacity change from 0 to 1 [ 297.186597][T12698] Dev loop8: unable to read RDB block 1 [ 297.192265][T12698] loop8: unable to read partition table [ 297.222625][T12698] loop8: partition table beyond EOD, truncated [ 297.235742][T12698] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 298.283698][T12693] chnl_net:caif_netlink_parms(): no params data found [ 298.552932][T12693] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.601737][T12693] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.615333][T12693] bridge_slave_0: entered allmulticast mode [ 298.656500][T12693] bridge_slave_0: entered promiscuous mode [ 298.686767][T12693] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.694203][T12693] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.720598][T12693] bridge_slave_1: entered allmulticast mode [ 298.738321][T12693] bridge_slave_1: entered promiscuous mode [ 298.933846][T12693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.977562][T12693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.992995][T12779] block device autoloading is deprecated and will be removed. [ 299.036013][T12779] syz.2.3098: attempt to access beyond end of device [ 299.036013][T12779] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 299.065557][ T5138] Bluetooth: hci7: command tx timeout [ 299.091290][T12693] team0: Port device team_slave_0 added [ 299.104084][T12693] team0: Port device team_slave_1 added [ 299.221282][T12693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.246051][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.336399][T12693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.366312][T12693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.381312][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.415269][T12693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.600812][T12693] hsr_slave_0: entered promiscuous mode [ 299.616796][T12693] hsr_slave_1: entered promiscuous mode [ 299.623312][T12693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.631943][T12693] Cannot create hsr debugfs directory [ 299.644784][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 299.943195][T12814] o2cb: This node has not been configured. [ 299.976096][T12814] o2cb: Cluster check failed. Fix errors before retrying. [ 299.983330][T12814] (syz.5.3115,12814,1):user_dlm_register:674 ERROR: status = -22 [ 299.995700][ T7691] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 299.999179][T12814] (syz.5.3115,12814,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 300.124319][T12693] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 300.148626][T12693] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.159822][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3118'. [ 300.163329][T12693] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 300.181746][T12693] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 300.199883][ T7691] usb 1-1: Using ep0 maxpacket: 16 [ 300.209605][ T7691] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.229429][ T7691] usb 1-1: config 0 interface 0 has no altsetting 0 [ 300.237763][ T7691] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 300.256190][ T7691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.276072][ T7691] usb 1-1: config 0 descriptor?? [ 300.367616][T12693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.420147][T12693] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.447897][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.455188][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.514655][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.521927][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.583872][T12835] vlan2: entered promiscuous mode [ 300.594779][T12835] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 300.602855][T12835] vlan2: entered allmulticast mode [ 300.608595][T12835] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 300.708980][ T7691] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 301.084569][T12693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.136701][ T7691] usb 1-1: USB disconnect, device number 21 [ 301.145903][ T5138] Bluetooth: hci7: command tx timeout [ 301.697462][T12693] veth0_vlan: entered promiscuous mode [ 301.724304][T12693] veth1_vlan: entered promiscuous mode [ 301.796504][T12693] veth0_macvtap: entered promiscuous mode [ 301.811127][T12693] veth1_macvtap: entered promiscuous mode [ 301.864056][T12693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.906011][T12693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.941216][T12693] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.969125][T12693] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.979007][T12693] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.988147][T12693] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.093466][T12889] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 302.120270][T12885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 302.144229][T12885] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 302.171952][T12885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.178521][T12885] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 302.188355][T12885] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 302.194799][T12885] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 302.212855][T12885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 302.219954][T12885] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 302.249327][T12885] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 302.259729][T12885] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 302.283081][T12885] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 302.330933][T12885] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 302.338357][T12885] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 302.369971][T12885] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 302.519512][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.536725][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.660603][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.679667][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.951922][T12916] tipc: Started in network mode [ 302.975554][T12916] tipc: Node identity ac14140f, cluster identity 4711 [ 302.983170][T12916] tipc: New replicast peer: 255.255.255.255 [ 302.997791][T12916] tipc: Enabled bearer , priority 10 [ 303.835843][ T7691] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 303.997215][ T7695] tipc: Node number set to 2886997007 [ 304.005715][ T7691] usb 4-1: Using ep0 maxpacket: 16 [ 304.025026][ T7691] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.055486][ T7691] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.070674][ T7691] usb 4-1: config 0 interface 0 has no altsetting 0 [ 304.085548][ T7691] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 304.087531][T12965] syz_tun: entered promiscuous mode [ 304.094616][ T7691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.119294][ T7691] usb 4-1: config 0 descriptor?? [ 304.136424][T12965] syz_tun: left promiscuous mode [ 304.185706][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 304.191930][ T5138] Bluetooth: hci1: command 0x0406 tx timeout [ 304.267317][ T5138] Bluetooth: hci5: command 0x0c1a tx timeout [ 304.267336][ T5823] Bluetooth: hci3: command 0x0405 tx timeout [ 304.267402][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 304.332275][T12971] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3180'. [ 304.345324][ T5823] Bluetooth: hci7: command 0x0419 tx timeout [ 304.803513][ T7691] usb 4-1: USB disconnect, device number 16 [ 304.913878][T12991] netem: incorrect ge model size [ 305.832896][T13029] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3208'. [ 305.949177][T13037] veth0_to_bond: entered allmulticast mode [ 306.265476][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 306.275404][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 306.295407][ T7695] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 306.348806][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 306.348827][ T5138] Bluetooth: hci5: command 0x0c1a tx timeout [ 306.354923][ T5823] Bluetooth: hci3: command 0x0405 tx timeout [ 306.428431][ T5823] Bluetooth: hci7: command 0x0419 tx timeout [ 306.465415][ T7695] usb 4-1: Using ep0 maxpacket: 32 [ 306.477532][ T7695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.499273][ T7695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.524076][ T7695] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 306.555674][ T7695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.581883][ T7695] usb 4-1: config 0 descriptor?? [ 306.601411][ T7695] hub 4-1:0.0: USB hub found [ 306.835585][ T7695] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 307.048309][ T7695] usbhid 4-1:0.0: can't add hid device: -71 [ 307.066613][ T7695] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 307.123760][ T7695] usb 4-1: USB disconnect, device number 17 [ 307.395219][T13095] netlink: 'syz.0.3240': attribute type 2 has an invalid length. [ 307.763854][T13106] relay: one or more items not logged [item size (56) > sub-buffer size (5)] [ 308.182798][T13128] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 308.425460][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 308.458018][T13135] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3258'. [ 308.505803][ T5823] Bluetooth: hci7: command 0x0419 tx timeout [ 308.574725][T13139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.082109][T13166] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3273'. [ 310.025990][ T1007] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 310.186077][ T5823] Bluetooth: hci0: command tx timeout [ 310.580093][T13239] veth0_to_bridge: entered promiscuous mode [ 310.586689][ T5823] Bluetooth: hci7: command 0x0419 tx timeout [ 310.616104][T13238] veth0_to_bridge: left promiscuous mode [ 311.039057][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3314'. [ 311.217286][T13270] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3318'. [ 311.250620][T13270] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3318'. [ 311.925639][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 311.934703][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3334'. [ 311.952230][T13300] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3334'. [ 311.971517][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3334'. [ 311.983421][T13300] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3334'. [ 312.109289][ T7690] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 312.115431][ T7704] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 312.277109][ T7704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.300565][ T7704] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.312100][ T7704] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.321451][ T7704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.329702][ T7704] usb 3-1: Product: syz [ 312.333973][ T7704] usb 3-1: Manufacturer: syz [ 312.337415][ T7690] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 312.341336][ T7704] usb 3-1: SerialNumber: syz [ 312.374389][ T7690] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 312.394395][ T7690] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.398512][T13313] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3340'. [ 312.424582][ T7690] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 312.435051][ T7690] usb 4-1: config 0 has no interface number 0 [ 312.441255][ T7690] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 312.451902][ T7690] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 312.463202][ T7690] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 312.474955][ T7690] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.520803][ T7690] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 312.541994][ T7690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.563107][ T7690] usb 4-1: config 0 descriptor?? [ 312.572725][ T7690] gspca_main: spca561-2.14.0 probing abcd:cdee [ 312.576660][T13319] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 312.773516][T13325] netlink: 'syz.6.3346': attribute type 1 has an invalid length. [ 312.781929][ T7690] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 312.783042][ T7704] usb 3-1: 0:2 : does not exist [ 312.799930][T13325] netlink: 'syz.6.3346': attribute type 3 has an invalid length. [ 312.812340][T13325] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3346'. [ 312.823320][T13325] NCSI netlink: No device for ifindex 813332851 [ 313.017386][ T7690] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.037811][ T7690] usb 4-1: MIDIStreaming interface descriptor not found [ 313.120438][ T7690] usb 4-1: USB disconnect, device number 18 [ 313.131807][T13338] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 313.139499][T13338] pim6reg0: linktype set to 0 [ 313.227245][ T5138] Bluetooth: hci6: command 0xfc11 tx timeout [ 313.234974][ T5823] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 313.250180][ T7706] usb 3-1: USB disconnect, device number 18 [ 314.093123][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 314.093143][ T30] audit: type=1326 audit(1751241711.385:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13378 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35198e929 code=0x7ffc0000 [ 314.149448][ T30] audit: type=1326 audit(1751241711.385:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13378 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35198e929 code=0x7ffc0000 [ 314.191551][ T30] audit: type=1326 audit(1751241711.425:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13378 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb35198e929 code=0x7ffc0000 [ 314.229936][ T30] audit: type=1326 audit(1751241711.425:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13378 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35198e929 code=0x7ffc0000 [ 314.267809][ T30] audit: type=1326 audit(1751241711.425:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13378 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35198e929 code=0x7ffc0000 [ 314.319028][ T30] audit: type=1326 audit(1751241711.435:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13378 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb35198e929 code=0x7ffc0000 [ 314.349552][ T30] audit: type=1326 audit(1751241711.435:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13378 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb35192ab19 code=0x7ffc0000 [ 314.382264][ T30] audit: type=1326 audit(1751241711.435:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13378 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb35192ab19 code=0x7ffc0000 [ 314.473634][ T30] audit: type=1326 audit(1751241711.435:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13378 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb35192ab19 code=0x7ffc0000 [ 314.510883][ T30] audit: type=1326 audit(1751241711.435:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13378 comm="syz.0.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb35192ab19 code=0x7ffc0000 [ 314.853069][T13407] binder: 13406:13407 ioctl c0306201 200000000340 returned -14 [ 315.387746][T13422] tap0: tun_chr_ioctl cmd 2147767506 [ 315.581522][T13429] mkiss: ax0: crc mode is auto. [ 315.837033][ T7704] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 316.017094][ T7704] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.036366][ T7704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.058330][ T7704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 316.087217][ T7704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.104320][T13460] ipvlan1: entered promiscuous mode [ 316.117717][ T7704] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.126991][T13460] ipvlan1: entered allmulticast mode [ 316.132402][ T7704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.144979][T13460] veth0_vlan: entered allmulticast mode [ 316.156707][ T7704] usb 4-1: config 0 descriptor?? [ 316.281982][T13467] __nla_validate_parse: 5 callbacks suppressed [ 316.282005][T13467] netlink: 844 bytes leftover after parsing attributes in process `syz.0.3410'. [ 316.590184][ T7704] plantronics 0003:047F:FFFF.001D: collection stack underflow [ 316.615415][ T7704] plantronics 0003:047F:FFFF.001D: item 0 1 0 12 parsing failed [ 316.624071][ T7704] plantronics 0003:047F:FFFF.001D: parse failed [ 316.639550][ T7704] plantronics 0003:047F:FFFF.001D: probe with driver plantronics failed with error -22 [ 316.787201][T13491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.809940][ T7704] usb 4-1: USB disconnect, device number 19 [ 317.071586][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.078935][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.243497][T13510] 9pnet_virtio: no channels available for device syz [ 317.500894][T13518] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3433'. [ 317.894562][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 318.359843][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3450'. [ 318.378455][T13556] netlink: 'syz.5.3450': attribute type 9 has an invalid length. [ 318.394840][T13556] macvlan2: entered allmulticast mode [ 318.417761][T13556] veth0_macvtap: entered allmulticast mode [ 319.193806][ T30] kauditd_printk_skb: 1207 callbacks suppressed [ 319.193828][ T30] audit: type=1800 audit(1751241716.485:1328): pid=13581 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3461" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 319.382530][T13596] ALSA: mixer_oss: invalid OSS volume '' [ 319.844761][T13618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.208500][T13637] program syz.2.3488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.225427][ T7690] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 320.385871][ T7690] usb 6-1: Using ep0 maxpacket: 16 [ 320.400042][ T7690] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.419879][ T7690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 320.431927][ T7690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 320.441678][ T7690] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 320.456019][T13651] block nbd2: shutting down sockets [ 320.489397][ T7690] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.518511][ T7690] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 320.528685][ T7690] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 320.553869][ T7690] usb 6-1: Manufacturer: syz [ 320.589996][ T7690] usb 6-1: config 0 descriptor?? [ 320.648179][T13655] netlink: 'syz.0.3495': attribute type 1 has an invalid length. [ 320.675982][T13655] nbd: error processing sock list [ 320.685878][T13655] block nbd2: shutting down sockets [ 320.983594][T13671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3500'. [ 320.995520][ T7690] rc_core: IR keymap rc-hauppauge not found [ 321.001459][ T7690] Registered IR keymap rc-empty [ 321.017182][ T7690] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 321.025064][T13671] bond0: option ad_select: unable to set because the bond device is up [ 321.066798][ T7690] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 321.106851][ T7690] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 321.148839][ T7690] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input43 [ 321.196377][ T7690] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 321.225569][ T7690] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 321.266642][ T7690] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 321.295476][ T7690] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 321.325902][ T7690] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 321.345339][ T7690] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 321.366784][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 321.376817][ T7690] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 321.405236][ T7690] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 321.427754][ T7690] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 321.438993][T13685] overlayfs: workdir and upperdir must be separate subtrees [ 321.455368][ T7690] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 321.475204][ T7705] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 321.492047][ T7690] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 321.501982][ T7690] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 321.521660][ T7690] usb 6-1: USB disconnect, device number 6 [ 321.566215][ T10] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 321.581358][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 321.600405][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 321.612108][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 321.620653][ T10] usb 1-1: Product: syz [ 321.624855][ T10] usb 1-1: Manufacturer: syz [ 321.630018][ T10] usb 1-1: SerialNumber: syz [ 321.640305][ T10] usb 1-1: config 0 descriptor?? [ 321.649888][ T7705] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 321.650871][ T10] usb 1-1: selecting invalid altsetting 0 [ 321.669923][ T7705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.688931][ T7705] usb 3-1: Product: syz [ 321.694407][ T7705] usb 3-1: Manufacturer: syz [ 321.703303][ T7705] usb 3-1: SerialNumber: syz [ 321.727284][ T7705] usb 3-1: config 0 descriptor?? [ 321.740940][ T7705] ch341 3-1:0.0: ch341-uart converter detected [ 321.879212][ T7690] usb 1-1: USB disconnect, device number 22 [ 322.403375][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3520'. [ 322.431765][T13713] bridge0: port 3(vlan2) entered blocking state [ 322.444727][T13713] bridge0: port 3(vlan2) entered disabled state [ 322.452489][T13713] vlan2: entered allmulticast mode [ 322.463414][T13713] bridge0: entered allmulticast mode [ 322.494810][T13713] vlan2: left allmulticast mode [ 322.506279][T13713] bridge0: left allmulticast mode [ 322.547046][ T7705] usb 3-1: failed to send control message: -71 [ 322.554502][ T7705] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 322.579943][ T7705] usb 3-1: USB disconnect, device number 19 [ 322.594307][ T7705] ch341 3-1:0.0: device disconnected [ 323.531070][T13751] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3538'. [ 323.739038][T13757] netlink: 'syz.5.3541': attribute type 18 has an invalid length. [ 323.971697][T13766] mkiss: ax0: crc mode is auto. [ 324.244497][T13774] netlink: 'syz.6.3549': attribute type 3 has an invalid length. [ 324.270086][T13774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.406178][T13780] vlan2: entered promiscuous mode [ 324.416216][T13780] bond0: entered promiscuous mode [ 324.429216][T13780] bond_slave_0: entered promiscuous mode [ 324.452218][T13780] bond_slave_1: entered promiscuous mode [ 324.463229][T13780] vlan2: entered allmulticast mode [ 324.469860][T13780] bond0: entered allmulticast mode [ 324.479048][T13780] bond_slave_0: entered allmulticast mode [ 324.485418][T13780] bond_slave_1: entered allmulticast mode [ 324.499967][T13786] syz.2.3555 (13786): /proc/13785/oom_adj is deprecated, please use /proc/13785/oom_score_adj instead. [ 324.846047][T13798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3560'. [ 324.909976][T13800] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 325.175221][ T30] audit: type=1326 audit(1751241722.455:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.5.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7119d8e929 code=0x7ffc0000 [ 325.223474][ T30] audit: type=1326 audit(1751241722.455:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.5.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7119d8e929 code=0x7ffc0000 [ 325.286251][ T30] audit: type=1326 audit(1751241722.455:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.5.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7119d8e929 code=0x7ffc0000 [ 325.316889][ T30] audit: type=1326 audit(1751241722.455:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.5.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7119d8e929 code=0x7ffc0000 [ 325.405190][ T30] audit: type=1326 audit(1751241722.455:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.5.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7119d8e929 code=0x7ffc0000 [ 325.471501][ T30] audit: type=1326 audit(1751241722.455:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.5.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7119d8e929 code=0x7ffc0000 [ 325.506935][ T30] audit: type=1326 audit(1751241722.465:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.5.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7119d8e929 code=0x7ffc0000 [ 325.534938][ T30] audit: type=1326 audit(1751241722.465:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.5.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7119d858e7 code=0x7ffc0000 [ 325.562271][ T30] audit: type=1326 audit(1751241722.465:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.5.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7119d2ab19 code=0x7ffc0000 [ 325.592978][ T30] audit: type=1326 audit(1751241722.465:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13808 comm="syz.5.3567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7119d858e7 code=0x7ffc0000 [ 325.983116][T13839] pimreg: entered allmulticast mode [ 326.007094][T13839] pimreg: left allmulticast mode [ 326.248682][T13850] netlink: 'syz.0.3585': attribute type 10 has an invalid length. [ 326.260219][T13850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3585'. [ 326.281208][T13850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.304476][T13850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.314886][T13850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.333165][T13850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.364200][T13850] team0: Port device geneve0 added [ 326.365728][ T7695] kernel write not supported for file /bluetooth/6lowpan_control (pid: 7695 comm: kworker/0:14) [ 327.025978][ T7705] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 327.191553][ T7705] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 327.215240][ T7705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.240281][ T7705] usb 4-1: Product: syz [ 327.244594][ T7705] usb 4-1: Manufacturer: syz [ 327.249700][ T7705] usb 4-1: SerialNumber: syz [ 327.265678][ T7705] usb 4-1: config 0 descriptor?? [ 327.697008][ T7705] usb 4-1: Firmware: major: 109, minor: 83, hardware type: UNKNOWN (238) [ 327.907846][ T7705] usb 4-1: failed to fetch extended address, random address set [ 327.915801][ T7705] usb 4-1: atusb_probe: initialization failed, error = -524 [ 327.923681][ T7705] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 327.977997][ T7705] usb 4-1: USB disconnect, device number 20 [ 328.592894][T13939] loop6: detected capacity change from 0 to 524287487 [ 328.625716][T13939] buffer_io_error: 5 callbacks suppressed [ 328.625735][T13939] Buffer I/O error on dev loop6, logical block 0, async page read [ 328.658945][T13939] Buffer I/O error on dev loop6, logical block 0, async page read [ 328.679683][T13939] Buffer I/O error on dev loop6, logical block 0, async page read [ 328.708368][T13939] Buffer I/O error on dev loop6, logical block 0, async page read [ 328.729357][T13939] Buffer I/O error on dev loop6, logical block 0, async page read [ 328.775623][T13939] Buffer I/O error on dev loop6, logical block 0, async page read [ 328.795184][T13939] Buffer I/O error on dev loop6, logical block 0, async page read [ 328.825996][T13939] Buffer I/O error on dev loop6, logical block 0, async page read [ 328.838640][T13939] ldm_validate_partition_table(): Disk read failed. [ 328.863929][T13939] Buffer I/O error on dev loop6, logical block 0, async page read [ 328.882466][T13939] Buffer I/O error on dev loop6, logical block 0, async page read [ 328.913278][T13939] Dev loop6: unable to read RDB block 0 [ 328.932117][T13939] loop6: unable to read partition table [ 328.938380][T13939] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 329.029905][T13947] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3630'. [ 329.065274][T13947] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3630'. [ 329.225181][T13954] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 329.376119][ T7690] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 329.564291][ T7690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.585611][ T7690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.602540][ T7690] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.612108][T13920] syz.0.3618 (13920): drop_caches: 2 [ 329.617105][ T7690] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 329.641289][ T7690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.662434][ T7690] usb 4-1: config 0 descriptor?? [ 329.769409][T13970] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3641'. [ 330.083382][ T7690] hid-rmi 0003:1532:011D.001E: unknown main item tag 0x0 [ 330.095315][ T7690] hid-rmi 0003:1532:011D.001E: unknown main item tag 0x2 [ 330.116006][ T7690] hid-rmi 0003:1532:011D.001E: item fetching failed at offset 3/4 [ 330.143451][ T7690] hid-rmi 0003:1532:011D.001E: parse failed [ 330.158426][ T7690] hid-rmi 0003:1532:011D.001E: probe with driver hid-rmi failed with error -22 [ 330.297892][ T7690] usb 4-1: USB disconnect, device number 21 [ 330.885275][ T7706] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 331.045300][ T7706] usb 1-1: Using ep0 maxpacket: 16 [ 331.062415][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.087796][ T7706] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 331.100161][ T7706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.119396][ T7706] usb 1-1: config 0 descriptor?? [ 331.551458][ T7706] logitech-djreceiver 0003:046D:C513.001F: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.0-1/input0 [ 331.749784][ T7690] usb 1-1: USB disconnect, device number 23 [ 331.796138][ T13] wlan1: Trigger new scan to find an IBSS to join [ 331.925299][ T7695] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 332.076366][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 332.106421][ T7695] usb 6-1: Using ep0 maxpacket: 32 [ 332.113154][ T7695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.124282][ T7695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.134567][ T7695] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 332.144063][ T7695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.154556][ T7695] usb 6-1: config 0 descriptor?? [ 332.162429][ T7695] hub 6-1:0.0: USB hub found [ 332.235482][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 332.242443][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 332.254539][ T10] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 332.264333][ T10] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 332.272757][ T10] usb 3-1: Product: syz [ 332.277081][ T10] usb 3-1: Manufacturer: syz [ 332.281733][ T10] usb 3-1: SerialNumber: syz [ 332.305325][ T7706] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 332.364847][ T7695] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 332.440497][T14051] netlink: 'syz.6.3677': attribute type 10 has an invalid length. [ 332.448949][T14051] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3677'. [ 332.478800][ T7706] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 332.500436][ T7706] usb 4-1: config 150 has no interface number 0 [ 332.503819][ T10] usb 3-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 332.508732][T14051] team0: Port device geneve0 added [ 332.537137][ T10] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 332.542676][ T7706] usb 4-1: config 150 interface 204 has no altsetting 0 [ 332.549004][ T10] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 332.554078][ T7706] usb 4-1: config 150 interface 1 has no altsetting 0 [ 332.618027][ T7706] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 332.643851][ T7706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.675552][ T7706] usb 4-1: Product: syz [ 332.679789][ T7706] usb 4-1: Manufacturer: syz [ 332.705192][ T7706] usb 4-1: SerialNumber: syz [ 332.738927][ T10] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 332.765338][ T10] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 332.791144][ T7695] hid-generic 0003:046D:C31C.0020: unknown main item tag 0x0 [ 332.809493][ T10] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 332.835430][ T7695] hid-generic 0003:046D:C31C.0020: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 332.858989][ T10] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 332.885580][ T10] usb 3-1: USB disconnect, device number 20 [ 332.903201][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 332.923496][ T7706] xr_serial 4-1:150.204: xr_serial converter detected [ 332.958153][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 332.991544][ T10] visor 3-1:1.0: device disconnected [ 333.119931][ T7690] usb 6-1: USB disconnect, device number 7 [ 333.181725][T14060] pim6reg: entered allmulticast mode [ 333.201911][T14059] pim6reg: left allmulticast mode [ 333.448434][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3686'. [ 333.459951][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3686'. [ 333.529169][ T7706] xr_serial ttyUSB2: Failed to set reg 0x0d: -71 [ 333.546633][ T7706] xr_serial ttyUSB2: probe with driver xr_serial failed with error -71 [ 333.597641][ T7706] usb 4-1: USB disconnect, device number 22 [ 333.615727][ T7706] xr_serial 4-1:150.204: device disconnected [ 333.910117][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3696'. [ 334.355521][T14113] loop4: detected capacity change from 524287935 to 524287936 [ 334.675364][ T7690] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 334.705246][ T7706] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 334.825994][ T5933] wlan1: Trigger new scan to find an IBSS to join [ 334.845480][ T7690] usb 6-1: Using ep0 maxpacket: 8 [ 334.858119][ T7690] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 334.878799][ T7706] usb 1-1: Using ep0 maxpacket: 8 [ 334.880044][ T7690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.904038][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.920434][ T7690] usb 6-1: config 0 descriptor?? [ 334.931725][ T7706] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 334.964054][ T7706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.996835][ T7706] usb 1-1: config 0 descriptor?? [ 335.374315][T14150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3725'. [ 335.417027][ T7706] belkin 0003:050D:3201.0021: unknown main item tag 0x0 [ 335.424871][ T7706] belkin 0003:050D:3201.0021: unknown main item tag 0x0 [ 335.438237][ T7706] belkin 0003:050D:3201.0021: unknown main item tag 0x0 [ 335.447987][ T7706] belkin 0003:050D:3201.0021: unknown main item tag 0x0 [ 335.457301][ T7706] belkin 0003:050D:3201.0021: unknown main item tag 0x0 [ 335.481805][ T7706] belkin 0003:050D:3201.0021: hiddev0,hidraw0: USB HID vff.fb Device [HID 050d:3201] on usb-dummy_hcd.0-1/input0 [ 335.622080][ T7706] usb 1-1: USB disconnect, device number 24 [ 335.753414][ T7690] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 335.768684][ T7690] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 335.785447][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 335.810806][ T7690] asix 6-1:0.0: probe with driver asix failed with error -71 [ 335.831406][ T7690] usb 6-1: USB disconnect, device number 8 [ 335.852785][T14159] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3729'. [ 335.945316][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 335.956402][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 335.964635][ T10] usb 4-1: config 0 has no interface number 0 [ 335.979455][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 335.989018][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.998865][ T10] usb 4-1: Product: syz [ 336.003100][ T10] usb 4-1: Manufacturer: syz [ 336.009302][ T10] usb 4-1: SerialNumber: syz [ 336.016263][ T10] usb 4-1: config 0 descriptor?? [ 336.024089][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 336.176032][ T7695] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 336.239449][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 336.259543][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 336.368104][ T7695] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 336.392403][ T7695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 336.404994][ T7695] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 336.427872][ T7695] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 336.461500][ T7695] usb 3-1: Product: syz [ 336.466587][ T7695] usb 3-1: Manufacturer: syz [ 336.471381][ T7695] usb 3-1: SerialNumber: syz [ 336.482682][ T7695] usb 3-1: config 0 descriptor?? [ 336.497392][ T7695] usb 3-1: selecting invalid altsetting 0 [ 336.668179][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 336.678205][ T7706] usb 4-1: USB disconnect, device number 23 [ 336.694198][ T7706] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 336.729203][ T7705] usb 3-1: USB disconnect, device number 21 [ 336.740657][ T7706] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 336.776074][ T7706] quatech2 4-1:0.51: device disconnected [ 336.903163][T14186] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3743'. [ 336.929597][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3742'. [ 336.959706][T14188] team0 (unregistering): Port device team_slave_0 removed [ 336.988941][T14190] vim2m vim2m.0: vidioc_s_fmt queue busy [ 336.989814][T14188] team0 (unregistering): Port device team_slave_1 removed [ 337.012018][T14188] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.021059][T14188] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.035306][T14188] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.055167][T14188] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.073841][T14192] autofs4:pid:14192:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189379) [ 337.088841][T14192] autofs4:pid:14192:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 337.106070][T14188] team0 (unregistering): Port device geneve0 removed [ 337.169116][T14194] netlink: 'syz.5.3746': attribute type 5 has an invalid length. [ 337.785633][ T3502] wlan1: Trigger new scan to find an IBSS to join [ 338.746343][ T13] wlan1: Creating new IBSS network, BSSID ca:6f:69:51:9d:b0 [ 339.757586][T14310] input: syz1 as /devices/virtual/input/input44 [ 340.565804][T14344] netlink: 'syz.6.3814': attribute type 9 has an invalid length. [ 340.593088][T14344] netlink: 211988 bytes leftover after parsing attributes in process `syz.6.3814'. [ 341.045337][ T7706] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 341.232357][ T7706] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 341.255278][ T7706] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 341.275161][ T7706] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.305781][ T7706] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.322746][ T7706] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 341.339851][ T7706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.371562][ T7706] usb 4-1: config 0 descriptor?? [ 341.381601][T14356] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.395978][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 341.673618][T14387] program syz.2.3833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.844435][ T7706] hid-led 0003:04D8:F372.0022: unknown main item tag 0x0 [ 341.872523][ T7706] hid-led 0003:04D8:F372.0022: unknown main item tag 0x0 [ 341.895266][ T7706] hid-led 0003:04D8:F372.0022: unknown main item tag 0x0 [ 341.912647][ T7706] hid-led 0003:04D8:F372.0022: unknown main item tag 0x0 [ 341.940666][ T7706] hid-led 0003:04D8:F372.0022: unknown main item tag 0x0 [ 341.963369][ T7706] hid-led 0003:04D8:F372.0022: unknown main item tag 0x0 [ 341.975896][ T7706] hid-led 0003:04D8:F372.0022: unknown main item tag 0x0 [ 341.993340][ T7706] hid-led 0003:04D8:F372.0022: unknown main item tag 0x0 [ 342.010214][ T7706] hid-led 0003:04D8:F372.0022: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 342.092972][ T7706] hid-led 0003:04D8:F372.0022: Greynut Luxafor initialized [ 342.138006][ T7706] usb 4-1: USB disconnect, device number 24 [ 342.167129][ T13] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 342.208128][ T13] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 342.229292][ T13] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 342.251588][ T36] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 342.268149][ T13] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 342.296458][ T13] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 342.306000][ T36] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 342.316822][ T36] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 342.336792][ T3502] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 342.359782][ T13] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 342.386678][ T13] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 342.411578][ T13] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 342.428228][ T13] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 342.448389][ T13] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 342.477568][ T13] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 342.508433][ T36] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 342.518108][ T13] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 342.535841][ T3502] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 342.756262][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 342.884232][T14425] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3849'. [ 342.916249][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 342.933775][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 342.949721][ T10] usb 3-1: config 0 has no interface number 0 [ 342.967904][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 342.986429][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.004623][ T10] usb 3-1: Product: syz [ 343.010943][ T10] usb 3-1: Manufacturer: syz [ 343.015745][ T10] usb 3-1: SerialNumber: syz [ 343.026549][ T10] usb 3-1: config 0 descriptor?? [ 343.038959][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 343.267649][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 343.292758][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 343.618948][ T1158] Bluetooth: hci6: Frame reassembly failed (-84) [ 343.682346][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 343.691189][ T10] usb 3-1: USB disconnect, device number 22 [ 343.703532][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 343.722744][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 343.744996][ T10] quatech2 3-1:0.51: device disconnected [ 343.805770][ T7695] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 343.987421][ T7695] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 343.996854][ T7695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.010763][ T7695] usb 1-1: config 0 descriptor?? [ 344.241613][ T7695] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 344.456502][ T7695] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 344.463458][ T7695] [drm] Initialized udl on minor 2 [ 344.490019][T14473] binder: 14472:14473 ioctl c018620c 200000000700 returned -1 [ 344.795295][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 344.847101][ T7695] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 344.856317][ T7695] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 344.864752][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 344.876110][ T7695] usb 1-1: USB disconnect, device number 25 [ 344.882932][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 344.976078][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 344.983229][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 344.992083][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 345.001396][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.009873][ T10] usb 3-1: Product: syz [ 345.014077][ T10] usb 3-1: Manufacturer: syz [ 345.019035][ T10] usb 3-1: SerialNumber: syz [ 345.027126][ T10] usb 3-1: config 0 descriptor?? [ 345.215245][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 345.375420][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 345.397881][ T9] usb 4-1: config 0 has no interfaces? [ 345.403625][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 345.413103][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.424731][ T9] usb 4-1: config 0 descriptor?? [ 345.444195][ T10] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 345.625560][ T5138] Bluetooth: hci6: command 0x1003 tx timeout [ 345.628669][ T5823] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 345.853823][ T10] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 345.880152][ T7706] usb 4-1: USB disconnect, device number 25 [ 345.900120][ T10] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 345.923671][ T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 345.951708][ T10] usb 3-1: USB disconnect, device number 23 [ 346.691647][T14512] binder: BINDER_SET_CONTEXT_MGR already set [ 346.704355][T14512] binder: 14511:14512 ioctl 4018620d 200000000040 returned -16 [ 347.547938][T14547] lo: entered allmulticast mode [ 347.686589][T14551] syz.3.3910: attempt to access beyond end of device [ 347.686589][T14551] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 347.719370][T14551] syz.3.3910: attempt to access beyond end of device [ 347.719370][T14551] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 347.738774][T14551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 347.752550][T14551] syz.3.3910: attempt to access beyond end of device [ 347.752550][T14551] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 347.771147][T14551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 347.783869][T14551] syz.3.3910: attempt to access beyond end of device [ 347.783869][T14551] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 347.806183][T14551] syz.3.3910: attempt to access beyond end of device [ 347.806183][T14551] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 347.823965][T14551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 347.845377][T14551] syz.3.3910: attempt to access beyond end of device [ 347.845377][T14551] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 347.891370][T14551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 347.920324][T14551] syz.3.3910: attempt to access beyond end of device [ 347.920324][T14551] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 347.937971][T14551] syz.3.3910: attempt to access beyond end of device [ 347.937971][T14551] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 347.969273][T14551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 347.982037][T14551] syz.3.3910: attempt to access beyond end of device [ 347.982037][T14551] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 348.001982][T14551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 348.012959][T14551] syz.3.3910: attempt to access beyond end of device [ 348.012959][T14551] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 348.056470][T14551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 348.090455][T14551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 348.116913][T14551] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 348.367296][T14571] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.377439][T14571] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.386266][T14571] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.394986][T14571] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.512648][T14579] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 348.650238][T14583] tap0: tun_chr_ioctl cmd 1074025677 [ 348.681811][T14583] tap0: linktype set to 774 [ 348.712032][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3926'. [ 348.826507][ T1007] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 349.580191][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3938'. [ 349.844886][T14627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3946'. [ 349.907772][T14628] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3946'. [ 349.948552][T14627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3946'. [ 350.122573][T14637] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3950'. [ 350.220072][T14640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.631567][T14659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3961'. [ 350.685739][ T9] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 350.784585][T14663] vlan2: entered allmulticast mode [ 350.821974][T14663] veth1_macvtap: entered allmulticast mode [ 350.840716][ T9] usb 1-1: config 0 has no interfaces? [ 350.860951][ T9] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 350.885994][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.924506][ T9] usb 1-1: Product: syz [ 350.929078][ T9] usb 1-1: Manufacturer: syz [ 350.933744][ T9] usb 1-1: SerialNumber: syz [ 350.949765][ T9] usb 1-1: config 0 descriptor?? [ 351.188378][ T9] usb 1-1: USB disconnect, device number 26 [ 351.506659][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3980'. [ 351.704655][T14708] tun0: tun_chr_ioctl cmd 1074025672 [ 351.714824][T14708] tun0: ignored: set checksum disabled [ 351.929386][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3990'. [ 352.335225][ T7706] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 352.530052][ T7706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.545134][ T7706] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 352.572070][ T7706] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 352.614431][ T7706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.650336][ T7706] usb 3-1: config 0 descriptor?? [ 352.678354][ T7706] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 352.695637][ T7706] dvb-usb: bulk message failed: -22 (3/0) [ 352.728320][ T7706] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 352.756497][ T7706] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 352.763664][ T7706] usb 3-1: media controller created [ 352.796498][ T7706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.824639][T14754] random: crng reseeded on system resumption [ 352.858389][ T7706] dvb-usb: bulk message failed: -22 (6/0) [ 352.864813][ T7706] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 352.922029][ T7706] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 352.975998][ T7706] dvb-usb: schedule remote query interval to 150 msecs. [ 352.983018][ T7706] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 353.137802][ T7706] dvb-usb: bulk message failed: -22 (1/0) [ 353.145627][ T7706] dvb-usb: error while querying for an remote control event. [ 353.185543][ T7705] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 353.252702][ T7695] usb 3-1: USB disconnect, device number 24 [ 353.278083][ T7695] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 353.335276][ T7705] usb 1-1: Using ep0 maxpacket: 32 [ 353.342550][ T7705] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 353.355125][ T7705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.374283][ T7705] usb 1-1: config 0 descriptor?? [ 353.398920][ T7705] as10x_usb: device has been detected [ 353.415833][ T7705] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 353.479136][ T7705] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 353.560404][ T7705] as10x_usb: error during firmware upload part1 [ 353.575571][ T7705] Registered device nBox DVB-T Dongle [ 353.614469][ T7705] usb 1-1: USB disconnect, device number 27 [ 353.653107][ T7705] Unregistered device nBox DVB-T Dongle [ 353.657150][ T7705] as10x_usb: device has been disconnected [ 353.720066][ T7695] kernel write not supported for file /sequencer2 (pid: 7695 comm: kworker/0:14) [ 354.020527][T14786] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4020'. [ 354.071052][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 354.071071][ T30] audit: type=1326 audit(1751241751.355:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 354.140387][ T30] audit: type=1326 audit(1751241751.365:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 354.231927][ T30] audit: type=1326 audit(1751241751.365:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 354.283917][ T30] audit: type=1326 audit(1751241751.365:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 354.380426][ T30] audit: type=1326 audit(1751241751.365:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 354.435906][ T30] audit: type=1326 audit(1751241751.365:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 354.510715][ T30] audit: type=1326 audit(1751241751.365:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 354.595018][ T30] audit: type=1326 audit(1751241751.365:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff767b858e7 code=0x7ffc0000 [ 354.652287][ T30] audit: type=1326 audit(1751241751.365:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff767b2ab19 code=0x7ffc0000 [ 354.731663][T14809] netlink: 'syz.0.4030': attribute type 4 has an invalid length. [ 354.760773][T14809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4030'. [ 354.785423][ T30] audit: type=1326 audit(1751241751.365:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14788 comm="syz.3.4021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7ff767b8e929 code=0x7ffc0000 [ 355.640349][T14836] netlink: 'syz.2.4040': attribute type 1 has an invalid length. [ 355.656460][T14836] netlink: 'syz.2.4040': attribute type 2 has an invalid length. [ 355.980910][T14852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4051'. [ 356.027369][ T3502] bond0: (slave bond1): link status definitely down, disabling slave [ 356.056071][ T7695] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 356.219862][ T7695] usb 4-1: config 0 has no interfaces? [ 356.234438][ T7695] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 356.245728][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 356.268190][ T7695] usb 4-1: New USB device strings: Mfr=1, Product=234, SerialNumber=2 [ 356.288323][ T7695] usb 4-1: Product: syz [ 356.293963][ T7695] usb 4-1: Manufacturer: syz [ 356.304137][ T7695] usb 4-1: SerialNumber: syz [ 356.312030][ T7695] usb 4-1: config 0 descriptor?? [ 356.409953][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 356.433443][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.450150][ T10] usb 1-1: Product: syz [ 356.454492][ T10] usb 1-1: Manufacturer: syz [ 356.460065][ T10] usb 1-1: SerialNumber: syz [ 356.476899][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 356.547058][ T7706] usb 4-1: USB disconnect, device number 26 [ 356.556697][ T7690] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 357.186669][T14897] netlink: 'syz.3.4071': attribute type 3 has an invalid length. [ 357.194482][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4071'. [ 357.365223][ T7706] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 357.385857][ T7695] usb 1-1: USB disconnect, device number 28 [ 357.436883][T14899] netlink: del zone limit has 4 unknown bytes [ 357.525199][ T7706] usb 6-1: Using ep0 maxpacket: 8 [ 357.545567][ T7706] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 357.575041][ T7706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.598741][ T7706] pvrusb2: Hardware description: Terratec Grabster AV400 [ 357.615343][ T7706] pvrusb2: ********** [ 357.624901][ T7706] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 357.645604][ T7706] pvrusb2: Important functionality might not be entirely working. [ 357.653519][ T7706] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 357.685911][ T7706] pvrusb2: ********** [ 357.825446][ T2343] pvrusb2: Invalid write control endpoint [ 357.865373][ T7690] usb 1-1: Service connection timeout for: 256 [ 357.871853][ T7690] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 357.904756][ T7690] ath9k_htc: Failed to initialize the device [ 357.933591][ T7695] usb 1-1: ath9k_htc: USB layer deinitialized [ 357.974378][ T2343] pvrusb2: Invalid write control endpoint [ 357.981463][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 357.991198][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 358.003403][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 358.013763][ T2343] pvrusb2: Device being rendered inoperable [ 358.028448][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 358.040599][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 358.050780][ T7706] usb 6-1: USB disconnect, device number 9 [ 358.075849][ T2343] pvrusb2: Attached sub-driver cx25840 [ 358.081443][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 358.114956][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 358.405234][ T7705] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 358.565354][ T7705] usb 1-1: Using ep0 maxpacket: 32 [ 358.585266][ T7705] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 358.593459][ T7705] usb 1-1: config 0 has no interface number 0 [ 358.614045][ T7705] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 358.619319][T14946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.635143][ T7705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.643244][ T7705] usb 1-1: Product: syz [ 358.658811][ T7705] usb 1-1: Manufacturer: syz [ 358.663471][ T7705] usb 1-1: SerialNumber: syz [ 358.699556][ T7705] usb 1-1: config 0 descriptor?? [ 358.717796][ T7705] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 358.751762][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4096'. [ 358.783698][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4096'. [ 358.923091][ T7705] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 358.988186][ T7705] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 359.117651][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 32 [ 359.328081][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 359.338480][ T7705] usb 1-1: USB disconnect, device number 29 [ 359.362608][ T7705] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 359.383998][ T7705] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 359.407791][ T7705] quatech2 1-1:0.51: device disconnected [ 359.988709][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.093894][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.257483][T14997] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 360.409192][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.536228][T15006] tap0: tun_chr_ioctl cmd 1074025677 [ 360.541783][T15006] tap0: linktype set to 270 [ 360.778594][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.940577][ T5138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.951831][ T5138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.960751][ T5138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.971322][ T5138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.980306][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.023044][T15015] lo speed is unknown, defaulting to 1000 [ 361.280497][ T12] bridge_slave_1: left allmulticast mode [ 361.301557][ T12] bridge_slave_1: left promiscuous mode [ 361.321513][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.424201][ T12] bridge_slave_0: left allmulticast mode [ 361.435602][T15027] Falling back ldisc for ptm0. [ 361.445256][ T12] bridge_slave_0: left promiscuous mode [ 361.461236][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.974379][T15044] kvm: kvm [15041]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 362.731173][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.759244][ T12] bond_slave_0: left promiscuous mode [ 362.765002][ T12] bond_slave_0: left allmulticast mode [ 362.777105][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.790663][ T12] bond_slave_1: left promiscuous mode [ 362.797557][ T12] bond_slave_1: left allmulticast mode [ 362.808504][ T12] bond0 (unregistering): Released all slaves [ 363.066059][ T5823] Bluetooth: hci5: command tx timeout [ 363.108263][T15065] netlink: 31 bytes leftover after parsing attributes in process `syz.6.4143'. [ 363.141610][T15061] gretap0: entered promiscuous mode [ 363.942880][T15085] binder: 15084:15085 ioctl c0306201 200000000100 returned -14 [ 364.728775][T15015] chnl_net:caif_netlink_parms(): no params data found [ 364.843502][T15103] tap0: tun_chr_ioctl cmd 1074812118 [ 365.140251][ T12] hsr_slave_0: left promiscuous mode [ 365.146723][ T5823] Bluetooth: hci5: command tx timeout [ 365.201653][ T12] hsr_slave_1: left promiscuous mode [ 365.216063][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.223640][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.257602][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.276366][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.344202][ T12] veth0_macvtap: left allmulticast mode [ 365.350749][ T12] veth1_macvtap: left promiscuous mode [ 365.357201][ T12] veth0_macvtap: left promiscuous mode [ 365.363019][ T12] veth1_vlan: left promiscuous mode [ 365.368718][ T12] veth0_vlan: left promiscuous mode [ 366.141854][ T12] team0 (unregistering): Port device team_slave_1 removed [ 366.196485][ T12] team0 (unregistering): Port device team_slave_0 removed [ 366.664567][T15125] smc: net device bond0 applied user defined pnetid SYZ2 [ 366.674799][T15129] smc: net device bond0 erased user defined pnetid SYZ2 [ 366.725230][T15130] netlink: 'syz.2.4173': attribute type 1 has an invalid length. [ 366.821019][T15143] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 366.860311][T15015] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.867158][T15143] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 366.872684][T15015] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.900961][T15015] bridge_slave_0: entered allmulticast mode [ 366.929223][T15015] bridge_slave_0: entered promiscuous mode [ 366.953219][T15015] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.969238][T15015] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.985609][T15015] bridge_slave_1: entered allmulticast mode [ 366.993932][T15015] bridge_slave_1: entered promiscuous mode [ 367.130590][T15015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.167374][T15015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.225400][ T5823] Bluetooth: hci5: command tx timeout [ 367.261736][T15015] team0: Port device team_slave_0 added [ 367.308369][T15015] team0: Port device team_slave_1 added [ 367.376972][ T7706] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 367.432285][T15015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.454393][T15015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.491069][T15015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.522025][T15015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.533043][T15015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.545341][ T7706] usb 4-1: Using ep0 maxpacket: 16 [ 367.561934][T15015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.587605][ T7706] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 367.596430][ T7706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.610485][ T7706] usb 4-1: config 0 has no interface number 0 [ 367.630004][ T7706] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 367.648942][ T7706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.657269][ T7706] usb 4-1: Product: syz [ 367.662572][ T7706] usb 4-1: Manufacturer: syz [ 367.667596][ T7706] usb 4-1: SerialNumber: syz [ 367.676810][ T7706] usb 4-1: config 0 descriptor?? [ 367.686120][ T7706] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 367.693168][ T7706] usb 4-1: No valid video chain found. [ 367.714862][T15015] hsr_slave_0: entered promiscuous mode [ 367.732123][T15015] hsr_slave_1: entered promiscuous mode [ 367.739972][T15015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.747949][T15015] Cannot create hsr debugfs directory [ 367.776815][T15171] sch_fq: defrate 0 ignored. [ 367.928736][ T7705] usb 4-1: USB disconnect, device number 27 [ 367.970848][T15177] openvswitch: netlink: Message has 4 unknown bytes. [ 368.532685][T15015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.559272][T15015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.602337][T15015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 368.657889][T15015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.683174][T15206] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4207'. [ 368.785668][ T5933] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 368.939661][T15015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.968083][T15015] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.994113][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.001330][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.056626][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.063832][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.312561][ T5823] Bluetooth: hci5: command tx timeout [ 369.566264][T15015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.892896][T15253] vlan2: entered promiscuous mode [ 369.912513][T15253] vlan2: entered allmulticast mode [ 369.928439][T15253] bridge0: entered allmulticast mode [ 370.482010][T15015] veth0_vlan: entered promiscuous mode [ 370.491822][T15276] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4229'. [ 370.531024][T15015] veth1_vlan: entered promiscuous mode [ 370.576945][T15276] netlink: 576 bytes leftover after parsing attributes in process `syz.0.4229'. [ 370.692243][T15015] veth0_macvtap: entered promiscuous mode [ 370.727852][T15015] veth1_macvtap: entered promiscuous mode [ 370.783054][T15015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.851448][T15015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.878834][T15015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.917514][T15015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.945260][T15015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.969663][T15015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.254485][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.285916][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.354470][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.383645][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.496176][T15300] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 371.627540][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4115'. [ 372.217868][ T7695] kernel write not supported for file /amidi2 (pid: 7695 comm: kworker/0:14) [ 372.839568][T15351] input: syz0 as /devices/virtual/input/input46 [ 373.397966][ T1158] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 374.842851][T15436] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4286'. [ 374.917884][T15441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4289'. [ 375.136221][T15447] lo speed is unknown, defaulting to 1000 [ 375.244909][T15457] 2g,{: renamed from lo [ 376.235153][ T7706] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 376.428585][ T7706] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 376.444003][ T7706] usb 3-1: config 0 has no interface number 0 [ 376.455146][ T7706] usb 3-1: config 0 interface 106 has no altsetting 0 [ 376.471973][ T7706] usb 3-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 376.485749][ T7706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.493806][ T7706] usb 3-1: Product: syz [ 376.511417][ T7706] usb 3-1: Manufacturer: syz [ 376.528136][T15504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4319'. [ 376.535148][ T7706] usb 3-1: SerialNumber: syz [ 376.558769][ T7706] usb 3-1: config 0 descriptor?? [ 376.798841][ T7706] usb 3-1: USB disconnect, device number 25 [ 377.185532][ T7695] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 377.345253][ T7695] usb 1-1: Using ep0 maxpacket: 16 [ 377.379832][ T7695] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.390954][ T7695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.429310][ T7695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 377.456402][ T7695] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 377.486112][ T7695] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.535591][ T7695] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 377.544777][ T7695] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 377.566626][ T7695] usb 1-1: Manufacturer: syz [ 377.586496][ T7695] usb 1-1: config 0 descriptor?? [ 378.005149][ T7695] rc_core: IR keymap rc-hauppauge not found [ 378.013972][ T7695] Registered IR keymap rc-empty [ 378.025005][ T7695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.075187][ T7695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.115562][ T7695] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 378.143207][ T7695] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input47 [ 378.165383][ T7695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.187584][ T7695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.235364][ T7695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.265969][ T7695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.315600][ T7695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.344399][ T7695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.377612][ T7695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.435247][ T7695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.455698][ T7695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.485541][ T7695] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.511984][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.521189][ T7695] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 378.529837][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.538519][ T7695] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 378.552965][ T7695] usb 1-1: USB disconnect, device number 30 [ 378.587000][T15556] sp0: Synchronizing with TNC [ 378.740306][T15559] sp0: Synchronizing with TNC [ 378.807013][T15564] netem: incorrect gi model size [ 378.813021][T15564] netem: change failed [ 379.268973][ T7695] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 379.435860][ T7695] usb 4-1: Using ep0 maxpacket: 16 [ 379.450038][ T7695] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 379.472670][ T7695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 379.504158][ T7695] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 379.513758][ T7695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.524266][ T7695] usb 4-1: Product: syz [ 379.528826][ T7695] usb 4-1: Manufacturer: syz [ 379.586782][ T7695] usb 4-1: SerialNumber: syz [ 379.616385][ T7695] usb 4-1: config 0 descriptor?? [ 379.637796][ T7695] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 379.668356][ T7695] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 379.719581][T15599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4359'. [ 379.849264][ T5933] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 380.045248][ T7690] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 380.135155][ T7706] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 380.212137][ T7690] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 380.226486][ T7690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.234847][ T7690] usb 6-1: Product: syz [ 380.251514][ T7690] usb 6-1: Manufacturer: syz [ 380.258771][ T7690] usb 6-1: SerialNumber: syz [ 380.270293][ T7695] em28xx 4-1:0.0: chip ID is em2750 [ 380.282822][ T7690] usb 6-1: config 0 descriptor?? [ 380.301262][ T7706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.325257][ T7706] usb 3-1: config 0 has no interfaces? [ 380.330847][ T7706] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 380.344673][ T7706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.365495][ T7706] usb 3-1: config 0 descriptor?? [ 380.480594][ T7695] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 380.498665][ T7695] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 380.525146][ T7695] em28xx 4-1:0.0: No AC97 audio processor [ 380.549912][ T7695] usb 4-1: USB disconnect, device number 28 [ 380.566484][ T7695] em28xx 4-1:0.0: Disconnecting em28xx [ 380.604697][ T10] usb 3-1: USB disconnect, device number 26 [ 380.620200][ T7695] em28xx 4-1:0.0: Freeing device [ 380.720509][ T7690] usb 6-1: Firmware: major: 217, minor: 21, hardware type: ATUSB (2) [ 380.930926][ T7690] usb 6-1: failed to fetch extended address, random address set [ 381.000425][ T7690] usb 6-1: USB disconnect, device number 10 [ 381.295779][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4381'. [ 382.514559][T15701] 2g,{ speed is unknown, defaulting to 1000 [ 382.579342][T15708] mkiss: ax0: crc mode is auto. [ 383.276443][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4416'. [ 383.326542][T15732] netlink: 'syz.2.4416': attribute type 2 has an invalid length. [ 384.087139][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.229066][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.418563][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.606929][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.615211][T15761] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4431'. [ 384.998006][ T12] bridge_slave_1: left allmulticast mode [ 385.034368][ T12] bridge_slave_1: left promiscuous mode [ 385.040373][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.073480][ T12] bridge_slave_0: left allmulticast mode [ 385.089754][ T12] bridge_slave_0: left promiscuous mode [ 385.126240][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.363718][ T5138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.375933][ T5138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.390776][ T5138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.425563][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.435633][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.602917][ T12] team0: Port device geneve1 removed [ 386.089859][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.110421][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.140830][ T12] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 386.170991][ T12] bond0 (unregistering): Released all slaves [ 386.308192][T15776] 2g,{ speed is unknown, defaulting to 1000 [ 386.315760][ T7690] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 386.465221][ T5887] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 386.508522][ T7690] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 386.525104][ T7690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.562462][ T7690] usb 3-1: config 0 descriptor?? [ 386.613162][ T7690] cp210x 3-1:0.0: cp210x converter detected [ 386.635134][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 386.656086][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 386.707158][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 386.742006][ T5887] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 386.770391][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.795385][ T5887] usb 6-1: Product: syz [ 386.801518][ T5887] usb 6-1: Manufacturer: syz [ 386.825218][ T5887] usb 6-1: SerialNumber: syz [ 386.843086][ T5887] usb 6-1: config 0 descriptor?? [ 386.868262][ T5887] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 386.897631][ T5887] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 387.020548][ T7690] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 387.063122][ T7690] usb 3-1: cp210x converter now attached to ttyUSB0 [ 387.283778][ T7690] usb 3-1: USB disconnect, device number 27 [ 387.344953][ T7690] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 387.398361][ T7690] cp210x 3-1:0.0: device disconnected [ 387.474349][ T5138] Bluetooth: hci2: command tx timeout [ 387.500022][ T5887] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 387.704626][ T5887] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 387.727465][ T5887] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 387.766645][ T5887] em28xx 6-1:0.0: No AC97 audio processor [ 387.847824][ T5887] usb 6-1: USB disconnect, device number 11 [ 387.880612][ T5887] em28xx 6-1:0.0: Disconnecting em28xx [ 387.915650][ T5887] em28xx 6-1:0.0: Freeing device [ 388.102906][ T12] hsr_slave_0: left promiscuous mode [ 388.118331][ T12] hsr_slave_1: left promiscuous mode [ 388.129979][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.277131][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 388.455106][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 388.501571][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 388.517360][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 388.535502][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.554757][ T10] usb 1-1: Product: syz [ 388.559455][ T10] usb 1-1: Manufacturer: syz [ 388.574757][ T10] usb 1-1: SerialNumber: syz [ 388.582351][ T10] usb 1-1: config 0 descriptor?? [ 388.836505][T15840] block nbd6: shutting down sockets [ 389.000659][ T10] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 389.363763][ T12] team0 (unregistering): Port device team_slave_1 removed [ 389.403051][ T10] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 389.429872][ T10] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 389.453795][ T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 389.489486][ T10] usb 1-1: USB disconnect, device number 31 [ 389.500780][ T12] team0 (unregistering): Port device team_slave_0 removed [ 389.546150][ T5138] Bluetooth: hci2: command tx timeout [ 389.955566][ T7706] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 390.135427][ T7706] usb 3-1: Using ep0 maxpacket: 16 [ 390.144161][ T7706] usb 3-1: config index 0 descriptor too short (expected 59154, got 18) [ 390.182582][ T7706] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 390.210999][ T7706] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 390.279799][ T7706] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 390.287019][T15776] chnl_net:caif_netlink_parms(): no params data found [ 390.293386][ T7706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.325908][ T7706] usb 3-1: Product: syz [ 390.333882][ T7706] usb 3-1: Manufacturer: syz [ 390.342551][ T7706] usb 3-1: SerialNumber: syz [ 390.368550][ T7706] usb 3-1: config 0 descriptor?? [ 390.388201][ T7706] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 390.633666][T15776] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.642676][T15776] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.662867][T15776] bridge_slave_0: entered allmulticast mode [ 390.716145][T15776] bridge_slave_0: entered promiscuous mode [ 390.741403][T15776] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.753440][T15776] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.786655][T15776] bridge_slave_1: entered allmulticast mode [ 390.805315][T15776] bridge_slave_1: entered promiscuous mode [ 391.091111][T15776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.146953][T15776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.190621][ T7706] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 391.242268][ T7706] usb 3-1: USB disconnect, device number 28 [ 391.427764][T15776] team0: Port device team_slave_0 added [ 391.486852][T15776] team0: Port device team_slave_1 added [ 391.625593][ T5138] Bluetooth: hci2: command tx timeout [ 391.657949][T15776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.664955][T15776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.687609][T15888] kvm: kvm [15887]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008f) = 0x0 [ 391.797097][T15776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.847479][T15776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.874857][T15776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.945648][T15776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.324566][T15776] hsr_slave_0: entered promiscuous mode [ 392.343178][T15776] hsr_slave_1: entered promiscuous mode [ 392.360726][T15776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.375552][T15776] Cannot create hsr debugfs directory [ 392.554246][T15917] macvlan0: entered promiscuous mode [ 392.560072][T15917] netlink: 'syz.0.4500': attribute type 1 has an invalid length. [ 392.585383][T15917] netlink: 'syz.0.4500': attribute type 2 has an invalid length. [ 393.138837][T15942] kvm: kvm [15941]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xaf [ 393.334123][T15776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 393.363889][T15948] dummy0: entered promiscuous mode [ 393.367653][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4516'. [ 393.381065][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4516'. [ 393.386986][T15948] dummy0: left promiscuous mode [ 393.390888][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4516'. [ 393.456080][T15776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 393.500036][T15776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 393.537152][T15776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 393.706104][ T5138] Bluetooth: hci2: command tx timeout [ 393.832740][T15776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.897955][T15776] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.918511][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.925740][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.987649][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.996226][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.223182][T15985] random: crng reseeded on system resumption [ 394.496598][T15994] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4532'. [ 394.655821][T15776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.787023][T15776] veth0_vlan: entered promiscuous mode [ 394.829962][T15776] veth1_vlan: entered promiscuous mode [ 394.898433][T15776] veth0_macvtap: entered promiscuous mode [ 394.927449][T15776] veth1_macvtap: entered promiscuous mode [ 394.970628][T15776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.994905][T15776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.056906][T15776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.068594][T15776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.085183][T15776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.093946][T15776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.166743][ T7690] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 395.299995][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.327762][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.368057][ T7690] usb 3-1: unable to get BOS descriptor or descriptor too short [ 395.387075][ T7690] usb 3-1: no configurations [ 395.391730][ T7690] usb 3-1: can't read configurations, error -22 [ 395.414545][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.443544][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.335528][T16059] program syz.6.4560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.391566][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4561'. [ 396.905264][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4575'. [ 398.450182][T16151] @: renamed from vlan0 (while UP) [ 399.429573][T16196] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4623'. [ 399.662477][T16204] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 399.812289][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 399.904269][ T5887] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 400.065241][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 400.074132][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.095296][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.142418][ T5887] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 400.174775][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.207175][ T5887] usb 4-1: config 0 descriptor?? [ 400.250675][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4639'. [ 400.273302][T16229] netlink: 'syz.5.4639': attribute type 20 has an invalid length. [ 400.284952][T16229] netlink: 'syz.5.4639': attribute type 21 has an invalid length. [ 400.620993][ T5887] hid-picolcd 0003:04D8:F002.0023: unknown main item tag 0x0 [ 400.634294][ T5887] hid-picolcd 0003:04D8:F002.0023: unbalanced delimiter at end of report description [ 400.656006][ T5887] hid-picolcd 0003:04D8:F002.0023: device report parse failed [ 400.663617][ T5887] hid-picolcd 0003:04D8:F002.0023: probe with driver hid-picolcd failed with error -22 [ 400.829658][ T7690] usb 4-1: USB disconnect, device number 29 [ 400.855428][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 400.995910][T16255] kvm: user requested TSC rate below hardware speed [ 401.029619][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 401.036631][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.048720][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.065105][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 401.080638][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.090541][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 401.115566][ T10] usb 6-1: SerialNumber: syz [ 401.124077][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 401.130212][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 401.139479][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 401.445592][ T7706] usb 6-1: USB disconnect, device number 12 [ 401.765234][T16264] loop9: detected capacity change from 0 to 7 [ 401.772131][T16264] buffer_io_error: 6 callbacks suppressed [ 401.772150][T16264] Buffer I/O error on dev loop9, logical block 0, async page read [ 401.835267][T16264] Buffer I/O error on dev loop9, logical block 0, async page read [ 401.843280][T16264] Buffer I/O error on dev loop9, logical block 0, async page read [ 401.910102][T16264] Buffer I/O error on dev loop9, logical block 0, async page read [ 401.949425][T16264] Buffer I/O error on dev loop9, logical block 0, async page read [ 401.993160][T16264] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.031262][T16264] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.055383][T16264] ldm_validate_partition_table(): Disk read failed. [ 402.062105][T16264] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.104487][T16264] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.127862][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.135483][T16264] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.138859][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.151696][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 402.160015][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 402.169391][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.175873][T16264] Dev loop9: unable to read RDB block 0 [ 402.215618][T16264] loop9: unable to read partition table [ 402.218810][T16276] 2g,{ speed is unknown, defaulting to 1000 [ 402.235363][T16264] loop9: partition table beyond EOD, truncated [ 402.266552][T16264] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 402.266552][T16264] ) failed (rc=-5) [ 402.505305][T16292] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4665'. [ 402.525247][T16292] nbd: illegal input index -65456 [ 402.927861][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 402.979214][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 403.326360][T16318] netlink: 'syz.6.4676': attribute type 1 has an invalid length. [ 403.334417][T16318] netlink: 212 bytes leftover after parsing attributes in process `syz.6.4676'. [ 403.343778][T16318] netlink: 'syz.6.4676': attribute type 1 has an invalid length. [ 403.727087][T16276] chnl_net:caif_netlink_parms(): no params data found [ 404.178920][T16276] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.186852][ T5823] Bluetooth: hci3: command tx timeout [ 404.195233][T16276] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.212731][T16276] bridge_slave_0: entered allmulticast mode [ 404.229602][T16276] bridge_slave_0: entered promiscuous mode [ 404.239278][T16276] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.247001][T16276] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.254342][T16276] bridge_slave_1: entered allmulticast mode [ 404.263700][T16276] bridge_slave_1: entered promiscuous mode [ 404.373577][T16276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.431727][T16276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.599999][T16276] team0: Port device team_slave_0 added [ 404.632006][T16276] team0: Port device team_slave_1 added [ 404.748691][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 404.778954][T16276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.815120][T16276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.863842][T16276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.882943][T16276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.892044][T16276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.930782][T16276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.076742][T16276] hsr_slave_0: entered promiscuous mode [ 405.083655][T16276] hsr_slave_1: entered promiscuous mode [ 405.091614][T16276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.107361][T16276] Cannot create hsr debugfs directory [ 405.326294][ T5887] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 405.489290][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.525229][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.548028][ T5887] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 405.567858][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.580557][T16276] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 405.590263][ T5887] usb 3-1: config 0 descriptor?? [ 405.611754][T16276] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 405.627163][T16276] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 405.647871][T16369] netlink: 'syz.3.4697': attribute type 11 has an invalid length. [ 405.663730][T16276] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 405.894406][T16276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.948255][T16276] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.994060][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.001342][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.006843][ T5887] isku 0003:1E7D:319C.0024: unknown main item tag 0x0 [ 406.025689][ T5887] isku 0003:1E7D:319C.0024: unknown main item tag 0x0 [ 406.028699][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.039736][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.047813][ T5887] isku 0003:1E7D:319C.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 406.268405][ T5823] Bluetooth: hci3: command tx timeout [ 406.390067][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 406.390085][ T30] audit: type=1800 audit(1751241803.685:1435): pid=16377 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4698" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 406.422841][ T5887] usb 3-1: USB disconnect, device number 31 [ 406.583740][T16276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.757700][T16397] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4703'. [ 407.067088][T16407] macsec0: entered promiscuous mode [ 407.075332][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4706'. [ 407.091833][T16407] macvtap1: entered allmulticast mode [ 407.100092][T16407] macsec0: entered allmulticast mode [ 407.113557][T16407] veth1_macvtap: entered allmulticast mode [ 407.190969][T16276] veth0_vlan: entered promiscuous mode [ 407.214522][T16276] veth1_vlan: entered promiscuous mode [ 407.276823][T16276] veth0_macvtap: entered promiscuous mode [ 407.298255][T16276] veth1_macvtap: entered promiscuous mode [ 407.322640][T16276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.341318][T16276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.374547][T16276] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.392916][T16276] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.415373][T16276] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.424289][T16276] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.636352][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.644243][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.744359][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.754799][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.345438][ T5823] Bluetooth: hci3: command tx timeout [ 409.054522][T16470] 2g,{ speed is unknown, defaulting to 1000 [ 410.436331][ T5823] Bluetooth: hci3: command tx timeout [ 411.180650][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 411.575144][ T7690] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 411.745468][ T7690] usb 3-1: Using ep0 maxpacket: 32 [ 411.763636][ T7690] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 411.784126][ T7690] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 411.824211][ T7690] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 411.838207][ T7690] usb 3-1: config 1 has no interface number 0 [ 411.845075][ T7690] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.856131][ T7690] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 516.865022][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 516.872108][ C0] rcu: 1-...!: (0 ticks this GP) idle=8034/1/0x4000000000000000 softirq=74389/74389 fqs=0 [ 516.883354][ C0] rcu: (detected by 0, t=10506 jiffies, g=68753, q=704 ncpus=2) [ 516.891132][ C0] Sending NMI from CPU 0 to CPUs 1: [ 516.891172][ C1] NMI backtrace for cpu 1 [ 516.891204][ C1] CPU: 1 UID: 0 PID: 16276 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 516.891223][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 516.891237][ C1] RIP: 0010:kasan_check_range+0x89/0x2c0 [ 516.891266][ C1] Code: ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 <4d> 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 [ 516.891281][ C1] RSP: 0018:ffffc90000a08d08 EFLAGS: 00000083 [ 516.891297][ C1] RAX: ffffffff81ae5f01 RBX: dffffc0000000001 RCX: ffffffff81ae5f3f [ 516.891310][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f9fdaf0 [ 516.891321][ C1] RBP: ffffc90000a08e90 R08: ffffffff8f9fdaf7 R09: 1ffffffff1f3fb5e [ 516.891333][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fb5e R12: 0000000000000001 [ 516.891345][ C1] R13: 0000000000000000 R14: fffffbfff1f3fb5f R15: 1ffffffff1f3fb5e [ 516.891356][ C1] FS: 00005555796e6500(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 516.891371][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.891382][ C1] CR2: 00007f7d947f5f98 CR3: 00000000351f8000 CR4: 00000000003526f0 [ 516.891396][ C1] Call Trace: [ 516.891408][ C1] [ 516.891420][ C1] ? __pfx_advance_sched+0x10/0x10 [ 516.891441][ C1] __hrtimer_run_queues+0x44f/0xc60 [ 516.891476][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 516.891499][ C1] ? read_tsc+0x9/0x20 [ 516.891523][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 516.891562][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 516.891589][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 516.891612][ C1] [ 516.891618][ C1] [ 516.891625][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.891642][ C1] RIP: 0010:__rcu_read_lock+0x1c/0x60 [ 516.891661][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 65 48 8b 1c 25 08 c0 99 92 48 81 c3 44 04 00 00 48 89 d8 48 c1 e8 03 <48> b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 18 ff 03 8b 03 [ 516.891674][ C1] RSP: 0018:ffffc90005276e68 EFLAGS: 00000a07 [ 516.891688][ C1] RAX: 1ffff11004984088 RBX: ffff888024c20444 RCX: 20626b0cf9444b00 [ 516.891700][ C1] RDX: dffffc0000000000 RSI: ffffffff81835ef6 RDI: ffffc90005276f48 [ 516.891713][ C1] RBP: dffffc0000000000 R08: ffffc90005277010 R09: 000000000000000a [ 516.891725][ C1] R10: ffffc90005276f98 R11: ffffffff81ace5d0 R12: 1ffff92000a4ede9 [ 516.891737][ C1] R13: ffffc90005276f80 R14: ffffc90005276f48 R15: ffffc90005277a60 [ 516.891752][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 516.891772][ C1] ? copy_process+0x1706/0x3c00 [ 516.891800][ C1] ? copy_process+0x1706/0x3c00 [ 516.891823][ C1] unwind_next_frame+0x9e/0x2390 [ 516.891854][ C1] ? unwind_next_frame+0xa5/0x2390 [ 516.891878][ C1] ? copy_mm+0x13c/0x4b0 [ 516.891923][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 516.891940][ C1] arch_stack_walk+0x11c/0x150 [ 516.891969][ C1] ? copy_process+0x1706/0x3c00 [ 516.891997][ C1] stack_trace_save+0x9c/0xe0 [ 516.892014][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 516.892034][ C1] ? __lock_acquire+0xab9/0xd20 [ 516.892064][ C1] kasan_save_track+0x3e/0x80 [ 516.892082][ C1] ? kasan_save_track+0x3e/0x80 [ 516.892098][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 516.892116][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 516.892135][ C1] ? ptlock_alloc+0x20/0x70 [ 516.892154][ C1] ? pte_alloc_one+0x7d/0x170 [ 516.892175][ C1] ? __pte_alloc+0x25/0x1a0 [ 516.892196][ C1] ? copy_pmd_range+0x68e6/0x7000 [ 516.892215][ C1] ? copy_page_range+0xc46/0x1270 [ 516.892238][ C1] ? dup_mmap+0xf57/0x1ac0 [ 516.892258][ C1] ? copy_mm+0x13c/0x4b0 [ 516.892281][ C1] ? copy_process+0x1706/0x3c00 [ 516.892335][ C1] __kasan_slab_alloc+0x6c/0x80 [ 516.892356][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 516.892376][ C1] ? ptlock_alloc+0x20/0x70 [ 516.892397][ C1] ptlock_alloc+0x20/0x70 [ 516.892417][ C1] pte_alloc_one+0x7d/0x170 [ 516.892442][ C1] __pte_alloc+0x25/0x1a0 [ 516.892468][ C1] copy_pmd_range+0x68e6/0x7000 [ 516.892488][ C1] ? arch_stack_walk+0xfc/0x150 [ 516.892513][ C1] ? mas_destroy+0x16ba/0x1c70 [ 516.892542][ C1] ? stack_depot_save_flags+0x40/0x900 [ 516.892572][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 516.892596][ C1] ? copy_page_range+0x28f/0x1270 [ 516.892629][ C1] copy_page_range+0xc46/0x1270 [ 516.892653][ C1] ? __lock_acquire+0xab9/0xd20 [ 516.892689][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 516.892719][ C1] ? up_write+0x1c4/0x420 [ 516.892733][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 516.892761][ C1] dup_mmap+0xf57/0x1ac0 [ 516.892794][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 516.892821][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 516.892846][ C1] ? mm_init+0xccc/0xf20 [ 516.892874][ C1] copy_mm+0x13c/0x4b0 [ 516.892902][ C1] copy_process+0x1706/0x3c00 [ 516.892938][ C1] ? copy_process+0x97f/0x3c00 [ 516.892968][ C1] ? __pfx_copy_process+0x10/0x10 [ 516.892996][ C1] ? __handle_mm_fault+0x1144/0x5620 [ 516.893019][ C1] kernel_clone+0x224/0x7f0 [ 516.893042][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 516.893070][ C1] __x64_sys_clone+0x18b/0x1e0 [ 516.893086][ C1] ? count_memcg_event_mm+0x21/0x260 [ 516.893105][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 516.893133][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 516.893156][ C1] ? do_syscall_64+0xbe/0x3b0 [ 516.893183][ C1] do_syscall_64+0xfa/0x3b0 [ 516.893207][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.893230][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.893246][ C1] ? clear_bhb_loop+0x60/0xb0 [ 516.893266][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.893283][ C1] RIP: 0033:0x7f9590d85193 [ 516.893304][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 516.893318][ C1] RSP: 002b:00007fff885ba018 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 516.893335][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9590d85193 [ 516.893346][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 516.893356][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 516.893366][ C1] R10: 00005555796e67d0 R11: 0000000000000246 R12: 0000000000000000 [ 516.893377][ C1] R13: 00000000000927c0 R14: 00000000000647a7 R15: 00007fff885ba1b0 [ 516.893399][ C1] [ 516.894160][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g68753 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 517.539911][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=30543 [ 517.547823][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g68753 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 517.559245][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 517.569257][ C0] rcu: RCU grace-period kthread stack dump: [ 517.575169][ C0] task:rcu_preempt state:I stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 517.587134][ C0] Call Trace: [ 517.590440][ C0] [ 517.593398][ C0] __schedule+0x16a2/0x4cb0 [ 517.597949][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 517.603467][ C0] ? schedule+0x165/0x360 [ 517.607837][ C0] ? __lock_acquire+0xab9/0xd20 [ 517.612726][ C0] ? __pfx___schedule+0x10/0x10 [ 517.617625][ C0] ? schedule+0x91/0x360 [ 517.621908][ C0] schedule+0x165/0x360 [ 517.626157][ C0] schedule_timeout+0x12b/0x270 [ 517.631077][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 517.636487][ C0] ? __pfx_process_timeout+0x10/0x10 [ 517.641919][ C0] ? prepare_to_swait_event+0x341/0x380 [ 517.647609][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 517.652506][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 517.657477][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.662711][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 517.668026][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 517.673266][ C0] ? finish_swait+0xcd/0x1f0 [ 517.677884][ C0] rcu_gp_kthread+0x99/0x390 [ 517.682514][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 517.687749][ C0] ? __kthread_parkme+0x7b/0x200 [ 517.692732][ C0] ? __kthread_parkme+0x1a1/0x200 [ 517.697799][ C0] kthread+0x711/0x8a0 [ 517.701900][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 517.707141][ C0] ? __pfx_kthread+0x10/0x10 [ 517.711765][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.716995][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.722224][ C0] ? __pfx_kthread+0x10/0x10 [ 517.726864][ C0] ret_from_fork+0x3fc/0x770 [ 517.731580][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 517.736736][ C0] ? __switch_to_asm+0x39/0x70 [ 517.741524][ C0] ? __switch_to_asm+0x33/0x70 [ 517.746398][ C0] ? __pfx_kthread+0x10/0x10 [ 517.751019][ C0] ret_from_fork_asm+0x1a/0x30 [ 517.755833][ C0]