last executing test programs: 5m7.75345819s ago: executing program 4 (id=1770): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @private2, 0x8}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 5m6.624410101s ago: executing program 4 (id=1778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009b02"]) 5m6.332625341s ago: executing program 4 (id=1779): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @random="c0c13c2baeb6", 'wg1\x00'}}, 0x1e) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[], 0x18, 0x48060}], 0x1, 0x200000d0) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x213, 0x0) 5m6.082138887s ago: executing program 4 (id=1781): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121f408, 0x0) 5m5.866324834s ago: executing program 4 (id=1782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180050002"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5m4.956479137s ago: executing program 4 (id=1797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x4000000) 5m4.442401409s ago: executing program 32 (id=1797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x4000000) 3m11.582266357s ago: executing program 2 (id=2850): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020106000924030003030005490c240206"], 0x0) 3m10.096569293s ago: executing program 2 (id=2869): setuid(0xee01) r0 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd, 0xf8f, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3m9.931035358s ago: executing program 2 (id=2872): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/237, 0xed}], 0x1) 3m9.826700987s ago: executing program 2 (id=2873): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m9.572626838s ago: executing program 2 (id=2877): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000cc0)={0xe, 0x8200, 0x7f, 0x4}, &(0x7f0000000d00)=0x10) 3m8.468637005s ago: executing program 2 (id=2885): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/97) 3m7.975808341s ago: executing program 33 (id=2885): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/97) 2.04912146s ago: executing program 3 (id=5049): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x48004) 1.784551321s ago: executing program 5 (id=5054): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 1.464523614s ago: executing program 6 (id=5058): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000040)={0x0, "f713ce12c1fe3c9a2cd6b337dad1ce400cd698adfc4a6bee479ccd9b275e51e4121209972d25880c4f43648580c5c3893b826beb9a17136643db3077a0b7cf3f"}, 0x48, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38) 1.408470107s ago: executing program 6 (id=5059): mount(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7ffffffe}]}) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 1.267681482s ago: executing program 6 (id=5061): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x50400, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0xff, @rand_addr=0x8000, 0x0, 0x3, 'wrr\x00'}, {@broadcast, 0x0, 0x2000}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 1.180423869s ago: executing program 3 (id=5062): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 1.179975338s ago: executing program 0 (id=5063): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x2000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '|^b!'}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x101, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) 1.178611333s ago: executing program 5 (id=5064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}}, 0x8840) 1.012594971s ago: executing program 1 (id=5065): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000005600)={0x54, r0, 0x1, 0x709d32, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "419ccbb5e9d70fae8dbc1dee39"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x818}, 0xc0) 1.012186341s ago: executing program 6 (id=5066): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4004, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x637000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4008094) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 902.217422ms ago: executing program 5 (id=5067): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) close_range(r0, r0, 0x0) 894.727003ms ago: executing program 3 (id=5068): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, 0x0, &(0x7f00000001c0)) 844.580416ms ago: executing program 1 (id=5069): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r1, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 844.263894ms ago: executing program 0 (id=5070): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c01164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 706.245689ms ago: executing program 1 (id=5071): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 704.547571ms ago: executing program 3 (id=5072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 689.035832ms ago: executing program 0 (id=5073): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 564.553494ms ago: executing program 5 (id=5074): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xaf, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 493.246475ms ago: executing program 1 (id=5075): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x8, &(0x7f0000000000)="11000000", 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x24, 0x14, 0x51b, 0x70bd26, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "695ee93d40b4f10000"}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a051}, 0x44000) 452.447286ms ago: executing program 0 (id=5076): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 352.444849ms ago: executing program 3 (id=5077): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0x6}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x400, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 351.681913ms ago: executing program 6 (id=5078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000000900010073797a3000000000090002"], 0x2c}}, 0x0) 198.63047ms ago: executing program 5 (id=5079): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) unshare(0x24060400) r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 198.005126ms ago: executing program 0 (id=5080): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 197.240915ms ago: executing program 1 (id=5081): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, 0x0, 0xb8) 147.730227ms ago: executing program 3 (id=5082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010c28bd7000fbdbdf255100000008000300", @ANYRES32=r2, @ANYBLOB="05008a"], 0x30}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000) 96.380193ms ago: executing program 0 (id=5083): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x494}, r1}}, 0x30) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x1db2}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 588.01µs ago: executing program 5 (id=5084): r0 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0xa) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 240.504µs ago: executing program 6 (id=5085): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000840)={0x20, 0x5, 0x3, "e16b03"}, 0x0, 0x0}) 0s ago: executing program 1 (id=5086): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r0, r0, 0x0, 0x40008) kernel console output (not intermixed with test programs): 155][T11812] block nbd5: Attempted send on invalid socket [ 377.922181][T11812] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.922295][T11812] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 377.922597][T11812] block nbd5: Attempted send on invalid socket [ 377.922614][T11812] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.922718][T11812] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 377.923974][T11812] block nbd5: Attempted send on invalid socket [ 377.923996][T11812] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.924398][T11812] block nbd5: Attempted send on invalid socket [ 377.924416][T11812] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.924519][T11812] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 377.924740][T11812] block nbd5: Attempted send on invalid socket [ 377.924757][T11812] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.924861][T11812] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 377.927101][T11812] block nbd5: Attempted send on invalid socket [ 377.927121][T11812] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.927521][T11812] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 377.927805][T11812] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 377.927828][T11812] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 378.881328][ T6023] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 379.043264][ T6023] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 379.043293][ T6023] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 379.043313][ T6023] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 379.043334][ T6023] usb 1-1: config 220 has no interface number 2 [ 379.043413][ T6023] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 379.043441][ T6023] usb 1-1: config 220 interface 0 has no altsetting 0 [ 379.043460][ T6023] usb 1-1: config 220 interface 76 has no altsetting 0 [ 379.043478][ T6023] usb 1-1: config 220 interface 1 has no altsetting 0 [ 379.046712][ T6023] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 379.046742][ T6023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.046763][ T6023] usb 1-1: Product: syz [ 379.046778][ T6023] usb 1-1: Manufacturer: syz [ 379.046794][ T6023] usb 1-1: SerialNumber: syz [ 379.240861][ T5918] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 379.280849][ T44] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 379.337437][ T6023] usb 1-1: selecting invalid altsetting 0 [ 379.363796][ T6023] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 379.363834][ T6023] usb 1-1: No valid video chain found. [ 379.396497][ T6023] usb 1-1: selecting invalid altsetting 0 [ 379.396538][ T6023] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 379.400734][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 379.403190][ T5918] usb 2-1: config 0 has an invalid interface number: 58 but max is 27 [ 379.403215][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.403235][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 28 [ 379.403257][ T5918] usb 2-1: config 0 has no interface number 0 [ 379.403405][ T5918] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0x6 has invalid maxpacket 56166, setting to 64 [ 379.403436][ T5918] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0x7 has invalid maxpacket 64800, setting to 64 [ 379.403464][ T5918] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 379.403487][ T5918] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 379.403514][ T5918] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 379.403537][ T5918] usb 2-1: config 0 interface 58 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 379.426369][ T5918] usb 2-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=5c.24 [ 379.426420][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.426442][ T5918] usb 2-1: Product: syz [ 379.426458][ T5918] usb 2-1: Manufacturer: syz [ 379.426474][ T5918] usb 2-1: SerialNumber: syz [ 379.547167][ T44] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 379.547244][ T44] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 379.547271][ T44] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 379.547299][ T44] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 379.547331][ T44] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 243 [ 379.591238][ T44] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 379.591271][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.591295][ T44] usb 3-1: Product: syz [ 379.591312][ T44] usb 3-1: Manufacturer: syz [ 379.591328][ T44] usb 3-1: SerialNumber: syz [ 379.646564][T11842] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 379.659573][ T5918] usb 2-1: config 0 descriptor?? [ 379.683006][ T6023] usb 1-1: USB disconnect, device number 27 [ 379.701483][ T44] usb 3-1: ucan: probing device on interface #0 [ 379.701518][ T44] usb 3-1: ucan: invalid out_ep MaxPacketSize [ 379.701534][ T44] usb 3-1: ucan: probe failed; try to update the device firmware [ 379.876352][ T44] usb 3-1: USB disconnect, device number 20 [ 379.898506][ T5918] appletouch 2-1:0.58: Could not find int-in endpoint [ 379.898545][ T5918] appletouch 2-1:0.58: probe with driver appletouch failed with error -5 [ 379.918375][ T5918] usbhid 2-1:0.58: couldn't find an input interrupt endpoint [ 379.947727][ T5918] usb 2-1: USB disconnect, device number 23 [ 380.681200][T11874] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.913644][T11880] mkiss: ax0: crc mode is auto. [ 380.920348][ T5910] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 381.094748][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 381.094787][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 381.094834][ T5910] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 381.094859][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.146029][ T5910] usb 2-1: config 0 descriptor?? [ 381.147203][T11876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 381.563876][ T5910] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 381.564000][ T5910] cm6533_jd 0003:0D8C:0022.0019: item fetching failed at offset 4/5 [ 381.564956][ T5910] cm6533_jd 0003:0D8C:0022.0019: parse failed [ 381.565070][ T5910] cm6533_jd 0003:0D8C:0022.0019: probe with driver cm6533_jd failed with error -22 [ 381.819462][ T5952] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 381.825154][ T5910] usb 2-1: USB disconnect, device number 24 [ 381.938865][T11913] netlink: 212296 bytes leftover after parsing attributes in process `syz.3.2435'. [ 381.979717][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.979751][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.979779][ T5952] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 381.979794][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.992686][ T5952] usb 6-1: config 0 descriptor?? [ 382.159295][ T5918] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 382.312057][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.312086][ T5918] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 382.312141][ T5918] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 382.312164][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.318990][ T5918] usb 3-1: config 0 descriptor?? [ 382.375513][ T5918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 382.375572][ T5918] dvb-usb: bulk message failed: -22 (3/0) [ 382.396939][ T5918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 382.408564][ T5918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 382.408626][ T5918] usb 3-1: media controller created [ 382.438893][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.459562][ T5918] dvb-usb: bulk message failed: -22 (6/0) [ 382.459648][ T5918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 382.465034][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 382.500728][ T5952] sony 0003:054C:024B.001A: unexpected long global item [ 382.501593][ T5952] sony 0003:054C:024B.001A: parse failed [ 382.501698][ T5952] sony 0003:054C:024B.001A: probe with driver sony failed with error -22 [ 382.533942][ T5918] dvb-usb: schedule remote query interval to 150 msecs. [ 382.533964][ T5918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 382.693694][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 382.693752][ T5918] dvb-usb: error while querying for an remote control event. [ 382.709178][ T5952] usb 6-1: USB disconnect, device number 5 [ 382.859151][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 382.859187][ T5918] dvb-usb: error while querying for an remote control event. [ 383.033904][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 383.033938][ T5918] dvb-usb: error while querying for an remote control event. [ 383.207100][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 383.207135][ T5918] dvb-usb: error while querying for an remote control event. [ 383.361251][ T6023] dvb-usb: bulk message failed: -22 (1/0) [ 383.361286][ T6023] dvb-usb: error while querying for an remote control event. [ 383.362828][ T6023] usb 3-1: USB disconnect, device number 21 [ 383.408328][T11956] team_slave_1: entered promiscuous mode [ 383.522011][ T6023] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 383.587164][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.129722][T11972] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2457'. [ 384.129769][T11972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2457'. [ 384.314741][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 385.035783][T12004] netlink: 'syz.1.2473': attribute type 5 has an invalid length. [ 385.035806][T12004] netlink: 'syz.1.2473': attribute type 11 has an invalid length. [ 385.839155][T12024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2481'. [ 386.013333][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2482'. [ 386.013355][T12029] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2482'. [ 386.119777][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2482'. [ 386.439480][T12045] openvswitch: netlink: Missing key (keys=40, expected=80) [ 386.657050][ T44] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 386.802500][ T5952] kernel write not supported for file /sg0 (pid: 5952 comm: kworker/1:6) [ 386.811022][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 386.812795][ T44] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 386.822944][ T44] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 386.822979][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.823002][ T44] usb 1-1: Product: syz [ 386.823020][ T44] usb 1-1: Manufacturer: syz [ 386.823037][ T44] usb 1-1: SerialNumber: syz [ 386.937013][ T6023] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 387.082000][ T6023] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 387.082030][ T6023] usb 2-1: config 0 has no interface number 0 [ 387.082064][ T6023] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 387.082109][ T6023] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 387.082137][ T6023] usb 2-1: config 0 interface 255 has no altsetting 0 [ 387.082172][ T6023] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 387.082195][ T6023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.155449][ T6023] usb 2-1: config 0 descriptor?? [ 387.169014][ T6023] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 387.372930][ T6023] usb 2-1: USB disconnect, device number 25 [ 387.849568][ T44] usb 1-1: reset high-speed USB device number 28 using dummy_hcd [ 388.076832][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 388.137024][ T44] usb 1-1: device firmware changed [ 388.157754][ T44] usb 1-1: USB disconnect, device number 28 [ 388.326298][ T44] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 388.489748][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 388.496235][ T6023] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 388.498235][ T44] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 388.504558][ T44] usb 1-1: string descriptor 0 read error: -22 [ 388.504746][ T44] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 388.504776][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.656369][ T6023] usb 3-1: Using ep0 maxpacket: 32 [ 388.660029][ T6023] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 388.660056][ T6023] usb 3-1: config 0 has no interface number 0 [ 388.660106][ T6023] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.660136][ T6023] usb 3-1: config 0 interface 85 has no altsetting 0 [ 388.663311][ T6023] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 388.663339][ T6023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.663360][ T6023] usb 3-1: Product: syz [ 388.663375][ T6023] usb 3-1: Manufacturer: syz [ 388.663389][ T6023] usb 3-1: SerialNumber: syz [ 388.706679][ T44] usb 1-1: reset high-speed USB device number 29 using dummy_hcd [ 388.748285][ T6023] usb 3-1: config 0 descriptor?? [ 388.876067][ T5918] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 389.061869][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 389.061967][ T5918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 389.061993][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 389.062015][ T5918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 389.110903][ T5918] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 389.111192][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.111215][ T5918] usb 4-1: Product: syz [ 389.111230][ T5918] usb 4-1: Manufacturer: syz [ 389.111245][ T5918] usb 4-1: SerialNumber: syz [ 389.157911][ T5918] usb 4-1: config 0 descriptor?? [ 389.164101][ T5918] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 389.368528][ T6023] appletouch 3-1:0.85: Geyser mode initialized. [ 389.393165][ T6023] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input29 [ 389.393810][ T5918] scsi host1: usb-storage 4-1:0.0 [ 389.598769][ T5952] usb 3-1: USB disconnect, device number 22 [ 389.606545][ T31] usb 4-1: USB disconnect, device number 23 [ 389.628483][ T44] usb 1-1: USB disconnect, device number 29 [ 389.748352][ T5952] appletouch 3-1:0.85: input: appletouch disconnected [ 389.805224][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2516'. [ 390.364981][T12135] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 390.689085][T12147] input: syz0 as /devices/virtual/input/input31 [ 391.106129][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2534'. [ 391.245811][T12157] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2532'. [ 391.245978][T12157] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2532'. [ 391.275180][ T5918] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 391.451071][ T5918] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 391.451097][ T5918] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 391.451117][ T5918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.485011][ T5918] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.485042][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.485063][ T5918] usb 2-1: Product: syz [ 391.485077][ T5918] usb 2-1: Manufacturer: syz [ 391.485091][ T5918] usb 2-1: SerialNumber: syz [ 392.155116][ T5918] usb 2-1: 0:2 : does not exist [ 392.383211][ T5952] usb 2-1: USB disconnect, device number 26 [ 392.789869][T12196] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2546'. [ 393.223752][ T5910] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 393.373666][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 393.376525][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short [ 393.378105][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.391961][ T5910] usb 4-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 393.391987][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.392007][ T5910] usb 4-1: Product: syz [ 393.392020][ T5910] usb 4-1: Manufacturer: syz [ 393.392033][ T5910] usb 4-1: SerialNumber: syz [ 393.444894][ T5910] usb 4-1: config 0 descriptor?? [ 393.715908][ T5910] usb 4-1: USB disconnect, device number 24 [ 394.004328][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2564'. [ 394.004360][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2564'. [ 394.004375][T12244] netlink: 58 bytes leftover after parsing attributes in process `syz.1.2564'. [ 395.173198][ T6023] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 395.192783][ T5952] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 395.351907][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 395.354684][ T5952] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.354715][ T5952] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 395.354743][ T5952] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.372012][ T5952] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 395.372044][ T5952] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 395.372102][ T5952] usb 4-1: Product: syz [ 395.372119][ T5952] usb 4-1: Manufacturer: syz [ 395.372136][ T5952] usb 4-1: SerialNumber: syz [ 395.385078][ T5952] usb 4-1: config 0 descriptor?? [ 395.432344][ T6023] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.432436][ T6023] usb 1-1: no configurations [ 395.432449][ T6023] usb 1-1: can't read configurations, error -22 [ 395.593424][T12288] netlink: 'syz.2.2586': attribute type 4 has an invalid length. [ 395.593446][T12288] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.2586'. [ 395.800911][ T5952] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 395.818391][T12295] program syz.5.2589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.216533][ T5952] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 396.217245][ T5952] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 396.252597][ T5952] usb 4-1: USB disconnect, device number 25 [ 396.366869][T12308] syz_tun: entered promiscuous mode [ 396.367085][T12308] macvtap1: entered allmulticast mode [ 396.367101][T12308] syz_tun: entered allmulticast mode [ 396.444335][T12308] syz_tun: left allmulticast mode [ 396.444394][T12308] syz_tun: left promiscuous mode [ 397.961897][ T5910] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 398.131732][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 398.138183][ T5910] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 398.138210][ T5910] usb 3-1: config 0 has no interface number 0 [ 398.138260][ T5910] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.138286][ T5910] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.138323][ T5910] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 398.138346][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.213149][ T5910] usb 3-1: config 0 descriptor?? [ 398.820620][T12362] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2620'. [ 398.850135][ T5910] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.001B/input/input32 [ 398.877455][ T5910] uclogic 0003:28BD:0094.001B: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 398.921672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.077045][ T5917] usb 3-1: USB disconnect, device number 23 [ 400.070415][ T5910] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 400.119255][T12391] gfs2: gfs2 mount does not exist [ 400.230719][ T5910] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 400.230752][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.230773][ T5910] usb 3-1: Product: syz [ 400.230787][ T5910] usb 3-1: Manufacturer: syz [ 400.230802][ T5910] usb 3-1: SerialNumber: syz [ 400.262186][ T5910] usb 3-1: config 0 descriptor?? [ 400.491895][ T5910] usb 3-1: ignoring: probably an ADSL modem [ 400.893502][ T5910] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 401.169197][ T5903] usb 3-1: USB disconnect, device number 24 [ 401.469636][ T5910] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 401.633632][ T5910] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.633661][ T5910] usb 1-1: config 0 has no interface number 0 [ 401.637848][ T5910] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 401.637876][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.637897][ T5910] usb 1-1: Product: syz [ 401.637912][ T5910] usb 1-1: Manufacturer: syz [ 401.637927][ T5910] usb 1-1: SerialNumber: syz [ 401.699537][ T5910] usb 1-1: config 0 descriptor?? [ 401.918649][ T5910] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 401.939207][ T5910] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 401.940313][ T5910] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 401.940367][ T5910] usb 1-1: media controller created [ 401.995969][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.124886][ T5910] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 402.194871][ T5910] usb 1-1: USB disconnect, device number 32 [ 402.762697][ T38] audit: type=1326 audit(1756121029.094:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12449 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 402.764304][ T38] audit: type=1326 audit(1756121029.094:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12449 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f17f64b5ba7 code=0x7ffc0000 [ 402.764940][ T38] audit: type=1326 audit(1756121029.094:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12449 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f17f645ade9 code=0x7ffc0000 [ 402.765165][ T38] audit: type=1326 audit(1756121029.094:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12449 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f17f64b5ba7 code=0x7ffc0000 [ 402.766227][ T38] audit: type=1326 audit(1756121029.094:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12449 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f17f645ade9 code=0x7ffc0000 [ 402.766525][ T38] audit: type=1326 audit(1756121029.094:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12449 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 402.904825][ T38] audit: type=1326 audit(1756121029.235:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12449 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f17f64b5ba7 code=0x7ffc0000 [ 402.905077][ T38] audit: type=1326 audit(1756121029.235:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12449 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f17f645ade9 code=0x7ffc0000 [ 402.905318][ T38] audit: type=1326 audit(1756121029.235:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12449 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 403.239626][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2667'. [ 403.394786][ T5918] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 403.558968][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 403.562514][ T5918] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 403.562541][ T5918] usb 3-1: config 0 has no interface number 0 [ 403.562669][ T5918] usb 3-1: config 0 interface 184 has no altsetting 0 [ 403.594946][ T5918] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 403.594976][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.594998][ T5918] usb 3-1: Product: syz [ 403.595012][ T5918] usb 3-1: Manufacturer: syz [ 403.595028][ T5918] usb 3-1: SerialNumber: syz [ 403.648710][ T5918] usb 3-1: config 0 descriptor?? [ 403.653890][ T5918] smsc75xx v1.0.0 [ 404.255688][T12486] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 404.526127][ T5918] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 404.526160][ T5918] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 404.526735][ T5918] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 404.526763][ T5918] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 404.526784][ T5918] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 404.526808][ T5918] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 404.527136][ T5918] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 404.613141][ T5918] usb 3-1: USB disconnect, device number 25 [ 406.191180][T12534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2699'. [ 406.405820][T12543] netlink: 'syz.5.2703': attribute type 2 has an invalid length. [ 406.523958][T12547] netlink: 'syz.3.2705': attribute type 12 has an invalid length. [ 406.527340][ T5917] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 406.665313][T12551] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2707'. [ 406.700142][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.700169][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.701758][ T5917] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 406.701785][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 406.701805][ T5917] usb 1-1: SerialNumber: syz [ 406.955222][T12231] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 406.973066][ T5917] usb 1-1: 0:2 : does not exist [ 407.039982][ T5917] usb 1-1: USB disconnect, device number 33 [ 407.181030][T12571] program syz.3.2717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.598643][ T5917] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 407.618869][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 407.769548][ T5917] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 407.769579][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.774622][ T5917] usb 4-1: config 0 descriptor?? [ 407.801824][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 407.804673][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 407.804702][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 407.837818][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 407.837847][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.837866][ T9] usb 6-1: Product: syz [ 407.837879][ T9] usb 6-1: Manufacturer: syz [ 407.837892][ T9] usb 6-1: SerialNumber: syz [ 407.881178][ T9] usb 6-1: config 0 descriptor?? [ 407.904007][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 407.904040][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 408.011869][ T5917] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 408.213786][ T5917] [drm:udl_init] *ERROR* Selecting channel failed [ 408.278870][ T5917] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 408.278902][ T5917] [drm] Initialized udl on minor 2 [ 408.316236][ T5917] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 408.320344][ T5917] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 408.342828][ T6023] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 408.344365][ T6023] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 408.344540][ T6023] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 408.369542][ T5917] usb 4-1: USB disconnect, device number 26 [ 408.535982][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 408.738641][ T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 408.739088][ T9] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 408.739105][ T9] em28xx 6-1:0.0: No AC97 audio processor [ 408.786672][ T9] usb 6-1: USB disconnect, device number 6 [ 408.788590][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 408.812741][ T9] em28xx 6-1:0.0: Freeing device [ 409.403397][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2733'. [ 409.403590][T13129] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 409.403620][T13129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.543755][T13135] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2736'. [ 409.812950][ T38] audit: type=1326 audit(1756121292.137:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 409.813018][ T38] audit: type=1326 audit(1756121292.137:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 409.813616][ T38] audit: type=1326 audit(1756121292.137:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 409.813666][ T38] audit: type=1326 audit(1756121292.137:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 409.813711][ T38] audit: type=1326 audit(1756121292.137:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 409.814274][ T38] audit: type=1326 audit(1756121292.137:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 409.814690][ T38] audit: type=1326 audit(1756121292.137:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 409.814967][ T38] audit: type=1326 audit(1756121292.137:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 409.851160][ T38] audit: type=1326 audit(1756121292.167:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe9da66ade9 code=0x7ffc0000 [ 409.851230][ T38] audit: type=1326 audit(1756121292.167:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe9da66ade9 code=0x7ffc0000 [ 410.143142][T13147] rtc_cmos 00:00: Alarms can be up to one day in the future [ 410.144411][ T5952] rtc_cmos 00:00: Alarms can be up to one day in the future [ 410.144774][ T5952] rtc_cmos 00:00: Alarms can be up to one day in the future [ 410.145446][ T5952] rtc_cmos 00:00: Alarms can be up to one day in the future [ 410.145850][ T5952] rtc_cmos 00:00: Alarms can be up to one day in the future [ 410.145869][ T5952] rtc rtc0: __rtc_set_alarm: err=-22 [ 410.331553][T13153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2746'. [ 412.579413][T13208] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2771'. [ 415.995125][T13296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2809'. [ 416.036581][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2809'. [ 416.534224][T13303] cgroup: fork rejected by pids controller in /syz0 [ 416.592236][ T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 416.747985][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.748020][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.748061][ T31] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 416.748147][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.758430][ T31] usb 3-1: config 0 descriptor?? [ 417.226081][ T31] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0 [ 417.226121][ T31] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0 [ 417.226149][ T31] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0 [ 417.226177][ T31] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0 [ 417.226204][ T31] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0 [ 417.226231][ T31] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0 [ 417.226258][ T31] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0 [ 417.275722][ T31] steelseries 0003:1038:12B6.001C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 417.484772][T13555] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 417.507878][T13555] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 417.809734][ T9] usb 3-1: USB disconnect, device number 26 [ 417.888973][T13557] team_slave_0: entered allmulticast mode [ 417.913708][T13560] team_slave_0: entered promiscuous mode [ 420.751044][ T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 420.782655][T13623] input: syz1 as /devices/virtual/input/input34 [ 420.922692][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.922720][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.929700][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.929731][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.970228][ T9] usb 3-1: Product: syz [ 420.970250][ T9] usb 3-1: Manufacturer: syz [ 420.970265][ T9] usb 3-1: SerialNumber: syz [ 421.104312][T13632] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2857'. [ 421.195350][ T9] usb 3-1: 0:2 : does not exist [ 421.213280][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 421.240581][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 421.283943][ T9] usb 3-1: USB disconnect, device number 27 [ 421.366234][T13638] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2860'. [ 421.946866][T13660] netlink: 320 bytes leftover after parsing attributes in process `syz.3.2870'. [ 422.524317][T13675] bond_slave_0: entered promiscuous mode [ 422.524403][T13675] bond_slave_1: entered promiscuous mode [ 422.524709][T13675] macvlan2: entered promiscuous mode [ 422.524724][T13675] bond0: entered promiscuous mode [ 422.528009][T13675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 422.557745][T13675] bond0: left promiscuous mode [ 422.558590][T13675] bond_slave_0: left promiscuous mode [ 422.558682][T13675] bond_slave_1: left promiscuous mode [ 422.715500][T13678] netlink: 'syz.3.2878': attribute type 9 has an invalid length. [ 422.715524][T13678] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.2878'. [ 424.078463][T13704] netlink: 'syz.3.2889': attribute type 1 has an invalid length. [ 424.078485][T13704] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2889'. [ 424.833359][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.854327][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.864295][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.894308][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.895434][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.774799][T13726] chnl_net:caif_netlink_parms(): no params data found [ 425.956735][T13751] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 425.956770][T13751] overlayfs: missing 'lowerdir' [ 426.499761][T13726] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.500038][T13726] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.500362][T13726] bridge_slave_0: entered allmulticast mode [ 426.503237][T13726] bridge_slave_0: entered promiscuous mode [ 426.542649][T13726] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.542876][T13726] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.543076][T13726] bridge_slave_1: entered allmulticast mode [ 426.545953][T13726] bridge_slave_1: entered promiscuous mode [ 426.986933][ T5834] Bluetooth: hci2: command tx timeout [ 427.612878][T13726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.647413][T13726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.988773][T13726] team0: Port device team_slave_0 added [ 428.004210][T13726] team0: Port device team_slave_1 added [ 428.327931][T13726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.327948][T13726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.327978][T13726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.333936][T13726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.333952][T13726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.333981][T13726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.926057][ T38] kauditd_printk_skb: 546 callbacks suppressed [ 428.926078][ T38] audit: type=1400 audit(1756121311.266:601): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=13843 comm="syz.5.2947" dest=20002 netif=wpan0 [ 429.054704][T13726] hsr_slave_0: entered promiscuous mode [ 429.066059][ T5834] Bluetooth: hci2: command tx timeout [ 429.071603][T13726] hsr_slave_1: entered promiscuous mode [ 429.073923][T13726] debugfs: 'hsr0' already exists in 'hsr' [ 429.073949][T13726] Cannot create hsr debugfs directory [ 429.955477][ T5952] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 430.111176][ T5952] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 430.111209][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.147443][ T5952] usb 4-1: config 0 descriptor?? [ 430.308291][T13726] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 430.370366][T13726] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 430.447660][T13726] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 430.529294][T13726] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 430.798411][ T5952] ath6kl: mismatched byte count 0 vs. expected 12 [ 430.803097][ T5952] ath6kl: Failed to init ath6kl core: -22 [ 430.804631][ T5952] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 431.009437][ T5917] usb 4-1: USB disconnect, device number 27 [ 431.122340][T13726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.144870][ T5834] Bluetooth: hci2: command tx timeout [ 431.183163][T13726] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.230101][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.230327][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.263991][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.264238][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.986252][T13726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.026154][T13907] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2970'. [ 432.026188][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'. [ 433.224046][ T5834] Bluetooth: hci2: command tx timeout [ 433.295255][T13726] veth0_vlan: entered promiscuous mode [ 433.339116][T13726] veth1_vlan: entered promiscuous mode [ 433.474927][T13726] veth0_macvtap: entered promiscuous mode [ 433.503302][T13726] veth1_macvtap: entered promiscuous mode [ 433.539049][T13726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.639945][T13726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.685762][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.688385][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.688890][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.689060][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.994491][ T5917] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 434.163316][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 434.171387][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 434.181461][ T5917] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 434.181493][ T5917] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 16129, setting to 1024 [ 434.181519][ T5917] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 434.195701][ T5917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.195737][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.195761][ T5917] usb 2-1: Product: syz [ 434.195776][ T5917] usb 2-1: Manufacturer: syz [ 434.195803][ T5917] usb 2-1: SerialNumber: syz [ 434.583434][ T5917] cdc_ncm 2-1:1.0: bind() failure [ 434.600103][ T5917] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 434.600151][ T5917] cdc_ncm 2-1:1.1: bind() failure [ 434.612338][ T5917] usb 2-1: USB disconnect, device number 27 [ 434.625224][T12228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.625244][T12228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.844631][ T5903] hid-generic 0005:15C2:8002.001D: collection stack underflow [ 434.844666][ T5903] hid-generic 0005:15C2:8002.001D: item 0 0 0 12 parsing failed [ 434.845513][ T5903] hid-generic 0005:15C2:8002.001D: probe with driver hid-generic failed with error -22 [ 435.018042][T12228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.018065][T12228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.688834][T13980] netlink: 'syz.3.2998': attribute type 25 has an invalid length. [ 437.486332][T14007] IPVS: persistence engine module ip_vs_pe_ not found [ 437.657149][ T38] audit: type=1400 audit(1756121320.992:602): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=14012 comm="syz.6.3014" name="7" dev="tmpfs" ino=48 [ 437.966907][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 438.122577][T14032] netlink: 'syz.6.3022': attribute type 2 has an invalid length. [ 439.485294][T14076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.831556][T14087] program syz.0.3048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.180404][ T5917] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 440.360762][ T5917] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 440.360794][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.372183][ T5917] usb 7-1: config 0 descriptor?? [ 440.412433][ T5917] gspca_main: spca508-2.14.0 probing 8086:0110 [ 440.590639][ T5917] gspca_spca508: reg_read err -32 [ 440.596264][ T5917] gspca_spca508: reg_read err -32 [ 440.801782][ T5917] gspca_spca508: reg_read err -71 [ 440.812201][ T5917] gspca_spca508: reg_read err -71 [ 440.818081][ T5917] gspca_spca508: reg write: error -71 [ 440.818210][ T5917] spca508 7-1:0.0: probe with driver spca508 failed with error -71 [ 440.835239][ T5917] usb 7-1: USB disconnect, device number 2 [ 440.951105][T14117] netlink: 'syz.5.3063': attribute type 10 has an invalid length. [ 442.899573][T14158] comedi comedi0: 8255: I/O port conflict (0xee,4) [ 442.899628][T14158] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 442.899740][T14158] comedi comedi0: 8255: I/O port conflict (0xa,4) [ 443.101340][T14166] netlink: 87 bytes leftover after parsing attributes in process `syz.1.3085'. [ 443.691987][T14191] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3095'. [ 443.692025][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3095'. [ 444.458710][ T5918] kernel read not supported for file /dsp1 (pid: 5918 comm: kworker/0:5) [ 444.581014][T14232] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3116'. [ 444.987059][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.688325][ T5917] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 445.837407][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 445.842182][ T5917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.842209][ T5917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.845585][ T5917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 445.845612][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.845632][ T5917] usb 2-1: Product: syz [ 445.845647][ T5917] usb 2-1: Manufacturer: syz [ 445.845662][ T5917] usb 2-1: SerialNumber: syz [ 446.027392][ T5952] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 446.177984][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 446.186023][ T5952] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 446.186052][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.186072][ T5952] usb 1-1: Product: syz [ 446.186086][ T5952] usb 1-1: Manufacturer: syz [ 446.186100][ T5952] usb 1-1: SerialNumber: syz [ 446.239245][ T5952] usb 1-1: config 0 descriptor?? [ 446.246770][ T5952] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 446.316318][ T5917] usb 2-1: 0:2 : does not exist [ 446.323286][T14274] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3136'. [ 446.332975][T14274] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3136'. [ 446.464297][ T5952] gp8psk: usb in 128 operation failed. [ 446.464714][ T5952] gp8psk: usb in 137 operation failed. [ 446.464729][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 446.465648][ T5952] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 446.465704][ T5952] usb 1-1: media controller created [ 446.552217][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 446.597453][ T5952] gp8psk_fe: Frontend revision 1 attached [ 446.597512][ T5952] usb 1-1: DVB: registering adapter 3 frontend 0 (Genpix DVB-S)... [ 446.597809][ T5952] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 446.693514][ T5952] gp8psk: usb in 138 operation failed. [ 446.693533][ T5952] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 446.693547][ T5952] gp8psk: found Genpix USB device pID = 201 (hex) [ 446.721004][ T5952] usb 1-1: USB disconnect, device number 34 [ 446.751407][ T5917] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 446.918004][ T5917] usb 2-1: USB disconnect, device number 28 [ 447.001637][ T5952] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 448.091176][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3155'. [ 449.977315][T14373] autofs4:pid:14373:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4), cmd(0xc018937e) [ 449.977360][T14373] autofs4:pid:14373:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 451.474667][ T5952] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 451.629053][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.629085][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.629122][ T5952] usb 1-1: New USB device found, idVendor=ea6d, idProduct=c292, bcdDevice= 0.00 [ 451.629143][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.641870][ T5952] usb 1-1: config 0 descriptor?? [ 451.718438][T14428] netlink: 'syz.1.3204': attribute type 25 has an invalid length. [ 451.718461][T14428] netlink: 'syz.1.3204': attribute type 8 has an invalid length. [ 451.985050][T14435] team0: No ports can be present during mode change [ 452.091210][ T5952] hid-generic 0003:EA6D:C292.001E: unknown main item tag 0x0 [ 452.091243][ T5952] hid-generic 0003:EA6D:C292.001E: unknown main item tag 0x0 [ 452.091270][ T5952] hid-generic 0003:EA6D:C292.001E: unknown main item tag 0x0 [ 452.091295][ T5952] hid-generic 0003:EA6D:C292.001E: unknown main item tag 0x0 [ 452.091320][ T5952] hid-generic 0003:EA6D:C292.001E: unknown main item tag 0x0 [ 452.091344][ T5952] hid-generic 0003:EA6D:C292.001E: unbalanced collection at end of report description [ 452.093576][ T5952] hid-generic 0003:EA6D:C292.001E: probe with driver hid-generic failed with error -22 [ 452.144366][ T6023] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 452.276902][ T5952] usb 1-1: USB disconnect, device number 35 [ 452.306759][ T6023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.306808][ T6023] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 452.306832][ T6023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.371036][ T6023] usb 2-1: config 0 descriptor?? [ 452.793001][ T6023] magicmouse 0003:05AC:0265.001F: unbalanced collection at end of report description [ 452.814123][ T6023] magicmouse 0003:05AC:0265.001F: magicmouse hid parse failed [ 452.814237][ T6023] magicmouse 0003:05AC:0265.001F: probe with driver magicmouse failed with error -22 [ 452.991007][ T31] usb 2-1: USB disconnect, device number 29 [ 453.843519][ T6023] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 454.013467][ T6023] usb 4-1: Using ep0 maxpacket: 32 [ 454.016099][ T6023] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 454.016125][ T6023] usb 4-1: config 0 has no interface number 0 [ 454.019307][ T6023] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 454.019336][ T6023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.019357][ T6023] usb 4-1: Product: syz [ 454.019371][ T6023] usb 4-1: Manufacturer: syz [ 454.019385][ T6023] usb 4-1: SerialNumber: syz [ 454.075496][ T6023] usb 4-1: config 0 descriptor?? [ 454.079422][ T6023] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 454.138054][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3226'. [ 454.310230][ T6023] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 454.342837][ T6023] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 454.493869][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 454.699107][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 454.722587][ T6023] usb 4-1: USB disconnect, device number 28 [ 454.755329][ T6023] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 454.779052][ T6023] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 454.779752][ T6023] quatech2 4-1:0.51: device disconnected [ 456.698336][T14545] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3255'. [ 456.752073][ T6023] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 456.914730][ T6023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 456.914763][ T6023] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 456.914788][ T6023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 456.919553][ T6023] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 456.919582][ T6023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.919602][ T6023] usb 1-1: Product: syz [ 456.919615][ T6023] usb 1-1: Manufacturer: syz [ 456.919629][ T6023] usb 1-1: SerialNumber: syz [ 456.990908][ T6023] usb 1-1: config 0 descriptor?? [ 456.993298][T14537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.993468][T14537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 457.014053][ T6023] usb 1-1: ucan: probing device on interface #0 [ 457.163413][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3261'. [ 457.163449][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3261'. [ 457.442400][ T6023] usb 1-1: ucan: device reported invalid tx-fifo size [ 457.442434][ T6023] usb 1-1: ucan: probe failed; try to update the device firmware [ 457.725542][ T5952] usb 1-1: USB disconnect, device number 36 [ 458.263022][T14581] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3273'. [ 458.828801][T14598] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3280'. [ 459.042150][T14577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.028275][T14638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.297461][T14647] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3305'. [ 460.335544][T14648] input: syz0 as /devices/virtual/input/input35 [ 460.468023][ T38] audit: type=1326 audit(1756121343.824:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 460.468343][ T38] audit: type=1326 audit(1756121343.824:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 460.524074][ T38] audit: type=1326 audit(1756121343.884:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 460.528516][ T38] audit: type=1326 audit(1756121343.884:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 460.528576][ T38] audit: type=1326 audit(1756121343.884:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 460.528626][ T38] audit: type=1326 audit(1756121343.884:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 460.528674][ T38] audit: type=1326 audit(1756121343.884:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 460.640336][ T38] audit: type=1326 audit(1756121343.884:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 460.642239][ T38] audit: type=1326 audit(1756121344.004:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc82db5ba7 code=0x7ffc0000 [ 460.642511][ T38] audit: type=1326 audit(1756121344.004:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc82d5ade9 code=0x7ffc0000 [ 461.643182][T14679] ipvlan2: entered promiscuous mode [ 461.643255][T14679] ipvlan2: entered allmulticast mode [ 461.643269][T14679] hsr0: entered allmulticast mode [ 461.643283][T14679] hsr_slave_0: entered allmulticast mode [ 461.643313][T14679] hsr_slave_1: entered allmulticast mode [ 462.871283][T14706] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3331'. [ 463.215577][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3337'. [ 466.002305][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3368'. [ 466.407778][T14791] syz.5.3372 (14791) used greatest stack depth: 16696 bytes left [ 467.025171][T14806] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 467.246884][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.296031][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.366125][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.421626][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.480142][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.539208][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.592410][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.658338][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.704966][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.767092][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.818070][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.880116][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.930301][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.997168][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.048923][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.980464][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.005182][T14632] Set syz1 is full, maxelem 65536 reached [ 469.662433][T14854] netlink: 'syz.3.3401': attribute type 21 has an invalid length. [ 469.662552][T14854] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3401'. [ 469.663464][T14854] netlink: 'syz.3.3401': attribute type 21 has an invalid length. [ 469.663522][T14854] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3401'. [ 469.813475][T14856] netlink: 'syz.0.3404': attribute type 25 has an invalid length. [ 469.813498][T14856] netlink: 'syz.0.3404': attribute type 1 has an invalid length. [ 469.813613][T14856] bridge0: port 1(bridge_slave_0) entered learning state [ 470.666216][T14884] netlink: 'syz.6.3418': attribute type 2 has an invalid length. [ 470.666246][T14884] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3418'. [ 471.043295][T14900] netlink: 'syz.3.3425': attribute type 29 has an invalid length. [ 471.044235][T14900] netlink: 'syz.3.3425': attribute type 29 has an invalid length. [ 471.051407][T14900] netlink: 'syz.3.3425': attribute type 29 has an invalid length. [ 471.125668][T14903] 9pnet_fd: Insufficient options for proto=fd [ 471.557724][ T38] kauditd_printk_skb: 12 callbacks suppressed [ 471.557744][ T38] audit: type=1326 audit(1756121354.919:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 471.558041][ T38] audit: type=1326 audit(1756121354.919:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 471.610147][ T38] audit: type=1326 audit(1756121354.969:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 471.611059][ T38] audit: type=1326 audit(1756121354.969:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 471.612020][ T38] audit: type=1326 audit(1756121354.969:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 471.613713][ T38] audit: type=1326 audit(1756121354.969:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 471.619374][ T38] audit: type=1326 audit(1756121354.979:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 471.621390][ T38] audit: type=1326 audit(1756121354.979:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 471.625316][ T38] audit: type=1326 audit(1756121354.979:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 471.625987][ T38] audit: type=1326 audit(1756121354.989:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc82dbebe9 code=0x7ffc0000 [ 472.564477][ T44] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 472.715114][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 472.717911][ T44] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 472.717938][ T44] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 472.717957][ T44] usb 2-1: config 3 has no interface number 0 [ 472.718005][ T44] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.718033][ T44] usb 2-1: config 3 interface 45 has no altsetting 0 [ 472.724186][ T44] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 472.724215][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.724234][ T44] usb 2-1: Product: syz [ 472.724249][ T44] usb 2-1: Manufacturer: syz [ 472.724263][ T44] usb 2-1: SerialNumber: syz [ 473.083015][ T44] usb 2-1: USB disconnect, device number 30 [ 475.352720][ T5903] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 475.512092][ T5903] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 475.512123][ T5903] usb 1-1: config 0 has no interface number 0 [ 475.521822][ T5903] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 475.521859][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.521884][ T5903] usb 1-1: Product: syz [ 475.521899][ T5903] usb 1-1: Manufacturer: syz [ 475.521915][ T5903] usb 1-1: SerialNumber: syz [ 475.545740][ T5903] usb 1-1: config 0 descriptor?? [ 475.564286][ T5903] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 475.568427][ T5903] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 475.685400][ T37] wlan1: Trigger new scan to find an IBSS to join [ 475.797722][ T6023] usb 1-1: USB disconnect, device number 37 [ 476.127533][T15055] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 476.835048][T15078] team_slave_1: left promiscuous mode [ 477.553109][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 477.553127][ T38] audit: type=1326 audit(1756121360.892:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15101 comm="syz.6.3512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37b4dbebe9 code=0x0 [ 478.381308][ T5910] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 478.440171][ T6023] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 478.531129][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 478.533598][ T5910] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 478.533622][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.575951][ T5910] pvrusb2: Hardware description: Terratec Grabster AV400 [ 478.575967][ T5910] pvrusb2: ********** [ 478.575973][ T5910] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 478.575985][ T5910] pvrusb2: Important functionality might not be entirely working. [ 478.575993][ T5910] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 478.576003][ T5910] pvrusb2: ********** [ 478.591137][ T6023] usb 4-1: Using ep0 maxpacket: 16 [ 478.594935][ T6023] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.594959][ T6023] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.599912][ T6023] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 478.600000][ T6023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.600019][ T6023] usb 4-1: Product: syz [ 478.600032][ T6023] usb 4-1: Manufacturer: syz [ 478.600044][ T6023] usb 4-1: SerialNumber: syz [ 478.748099][ T2362] pvrusb2: Invalid write control endpoint [ 478.890523][ T2362] pvrusb2: Invalid write control endpoint [ 478.890540][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 478.890551][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 478.890561][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 478.890572][ T2362] pvrusb2: Device being rendered inoperable [ 478.902787][ T2362] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 478.902852][ T2362] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 478.904059][ T2362] pvrusb2: Attached sub-driver cx25840 [ 478.904072][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 478.904085][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 478.979418][ T44] usb 2-1: USB disconnect, device number 31 [ 478.980620][ T6023] usb 4-1: 0:2 : does not exist [ 478.998665][ T6023] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 479.095662][ T6023] usb 4-1: USB disconnect, device number 29 [ 479.565347][ T5918] kernel write not supported for file /input/event2 (pid: 5918 comm: kworker/0:5) [ 479.681414][T12228] wlan1: Trigger new scan to find an IBSS to join [ 480.640404][T12228] wlan1: Trigger new scan to find an IBSS to join [ 481.690353][ T13] wlan1: Creating new IBSS network, BSSID 96:80:e8:4f:05:33 [ 482.059555][ T5918] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 482.243949][ T5918] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 482.243977][ T5918] usb 4-1: config 0 has no interface number 0 [ 482.244025][ T5918] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 482.244049][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.284670][ T5918] usb 4-1: config 0 descriptor?? [ 482.300594][ T5918] usb 4-1: selecting invalid altsetting 1 [ 482.302699][ T5918] dvb_ttusb_budget: ttusb_init_controller: error [ 482.302717][ T5918] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 482.524691][ T5918] DVB: Unable to find symbol cx22700_attach() [ 482.653349][ T5918] DVB: Unable to find symbol tda10046_attach() [ 482.653364][ T5918] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 482.686196][ T5918] usb 4-1: USB disconnect, device number 30 [ 484.640834][T12231] wlan1: Trigger new scan to find an IBSS to join [ 485.612317][ T3642] wlan1: Creating new IBSS network, BSSID 86:97:c1:60:9f:b0 [ 486.268130][T15273] tipc: Enabling of bearer rejected, already enabled [ 486.274410][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3591'. [ 486.274434][T15275] tipc: Disabling bearer [ 489.033826][T15357] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 489.033826][T15357] The task syz.3.3627 (15357) triggered the difference, watch for misbehavior. [ 489.147944][T15360] bridge_slave_0: invalid flags given to default FDB implementation [ 489.490624][T15161] Set syz1 is full, maxelem 65536 reached [ 489.678338][T15372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3634'. [ 491.289688][T15419] netlink: 'syz.0.3656': attribute type 11 has an invalid length. [ 491.469218][T15426] dummy0: entered promiscuous mode [ 491.470759][T15424] dummy0: left promiscuous mode [ 492.094972][T15443] loop7: detected capacity change from 0 to 7 [ 492.101936][ C0] blk_print_req_error: 2 callbacks suppressed [ 492.101957][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 492.101989][ C0] buffer_io_error: 10 callbacks suppressed [ 492.102003][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 492.102311][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 492.102342][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 492.102590][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 492.102619][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 492.102825][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 492.102854][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 492.103107][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 492.103134][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 492.104814][ T5903] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 492.111132][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 492.111173][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 492.116311][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 492.116348][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 492.116477][T15443] ldm_validate_partition_table(): Disk read failed. [ 492.116670][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 492.116703][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 492.116967][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 492.116998][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 492.117257][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 492.117287][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 492.117666][T15443] Dev loop7: unable to read RDB block 0 [ 492.118646][T15443] loop7: unable to read partition table [ 492.118929][T15443] loop7: partition table beyond EOD, truncated [ 492.118949][T15443] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 492.504400][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.504435][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 492.504464][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.542905][ T5903] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 492.542937][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.542958][ T5903] usb 1-1: Product: syz [ 492.542972][ T5903] usb 1-1: Manufacturer: syz [ 492.542987][ T5903] usb 1-1: SerialNumber: syz [ 492.585375][ T5903] usb 1-1: config 0 descriptor?? [ 492.586611][T15434] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.619722][T15450] overlayfs: failed to clone lowerpath [ 492.789153][ T5903] powermate: unknown product id 0240 [ 492.789170][ T5903] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 492.834520][ T5903] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38 [ 492.924129][ T5910] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 493.094658][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 493.101625][ T5910] usb 2-1: config 0 has an invalid interface number: 236 but max is 1 [ 493.101651][ T5910] usb 2-1: config 0 has an invalid interface number: 129 but max is 1 [ 493.101672][ T5910] usb 2-1: config 0 has no interface number 0 [ 493.101688][ T5910] usb 2-1: config 0 has no interface number 1 [ 493.101759][ T5910] usb 2-1: config 0 interface 236 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 493.101788][ T5910] usb 2-1: config 0 interface 236 altsetting 6 endpoint 0xD has invalid wMaxPacketSize 0 [ 493.101814][ T5910] usb 2-1: config 0 interface 236 has no altsetting 0 [ 493.101834][ T5910] usb 2-1: config 0 interface 129 has no altsetting 0 [ 493.154302][ T5910] usb 2-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 493.154334][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.154355][ T5910] usb 2-1: Product: syz [ 493.154372][ T5910] usb 2-1: Manufacturer: syz [ 493.154391][ T5910] usb 2-1: SerialNumber: syz [ 493.179226][ T5910] usb 2-1: config 0 descriptor?? [ 493.202476][ C1] powermate: config urb returned -71 [ 493.205500][ C1] powermate: config urb returned -71 [ 493.206167][ C1] powermate: config urb returned -71 [ 493.220682][ T6023] usb 1-1: USB disconnect, device number 38 [ 493.220687][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 493.436547][ T5910] ir_usb 2-1:0.236: required endpoints missing [ 493.472310][ T5910] usb 2-1: selecting invalid altsetting 0 [ 493.504816][ T5910] usb 2-1: selecting invalid altsetting 0 [ 493.505558][ T5910] usb 2-1: Found UVC 2.26 device syz (1ace:e9b2) [ 493.505591][ T5910] usb 2-1: No valid video chain found. [ 493.513393][ T5910] usb 2-1: USB disconnect, device number 32 [ 494.839321][T15500] netlink: 'syz.5.3695': attribute type 1 has an invalid length. [ 495.063183][T15490] netlink: 'syz.0.3691': attribute type 25 has an invalid length. [ 495.063208][T15490] netlink: 'syz.0.3691': attribute type 8 has an invalid length. [ 495.551816][T15517] kvm_intel: kvm [15513]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x5 [ 495.910121][T15528] netlink: 'syz.6.3709': attribute type 25 has an invalid length. [ 495.910144][T15528] netlink: 'syz.6.3709': attribute type 8 has an invalid length. [ 496.168277][T15534] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3712'. [ 497.601937][T15569] input: syz0 as /devices/virtual/input/input39 [ 499.142433][T15617] sp0: Synchronizing with TNC [ 499.148465][T15616] [U] `` [ 499.951142][T15652] sock: sock_set_timeout: `syz.3.3764' (pid 15652) tries to set negative timeout [ 499.997094][ T3642] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.095934][T15692] 9pnet_fd: Insufficient options for proto=fd [ 501.259854][ T6023] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 501.419826][ T6023] usb 1-1: Using ep0 maxpacket: 32 [ 501.422705][ T6023] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 501.422732][ T6023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.431821][ T6023] usb 1-1: config 0 descriptor?? [ 501.463627][ T6023] gspca_main: sunplus-2.14.0 probing 041e:400b [ 502.040318][T15712] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3803'. [ 502.263996][ T6023] gspca_sunplus: reg_w_riv err -71 [ 502.264113][ T6023] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 502.272341][ T6023] usb 1-1: USB disconnect, device number 39 [ 502.876198][T15736] netlink: 'syz.6.3805': attribute type 2 has an invalid length. [ 503.078343][T15743] binder: 15740:15743 ioctl 40046205 0 returned -22 [ 504.459082][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 504.597001][T15793] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3829'. [ 505.772169][T15821] bond0: entered promiscuous mode [ 505.772194][T15821] bond_slave_0: entered promiscuous mode [ 505.772501][T15821] bond_slave_1: entered promiscuous mode [ 505.799781][T15821] bond0: left promiscuous mode [ 505.799802][T15821] bond_slave_0: left promiscuous mode [ 505.800072][T15821] bond_slave_1: left promiscuous mode [ 506.401989][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.643316][ T38] audit: type=1326 audit(1756121390.017:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b4dbebe9 code=0x7ffc0000 [ 506.648470][ T38] audit: type=1326 audit(1756121390.017:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b4dbebe9 code=0x7ffc0000 [ 506.652380][ T38] audit: type=1326 audit(1756121390.027:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37b4dbebe9 code=0x7ffc0000 [ 506.667178][ T38] audit: type=1326 audit(1756121390.027:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b4dbebe9 code=0x7ffc0000 [ 506.667253][ T38] audit: type=1326 audit(1756121390.037:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b4dbebe9 code=0x7ffc0000 [ 506.676721][ T38] audit: type=1326 audit(1756121390.047:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37b4dbebe9 code=0x7ffc0000 [ 506.676786][ T38] audit: type=1326 audit(1756121390.047:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b4dbebe9 code=0x7ffc0000 [ 506.676842][ T38] audit: type=1326 audit(1756121390.047:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b4dbebe9 code=0x7ffc0000 [ 506.678872][ T38] audit: type=1326 audit(1756121390.057:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f37b4db5ba7 code=0x7ffc0000 [ 506.678932][ T38] audit: type=1326 audit(1756121390.057:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37b4d5ade9 code=0x7ffc0000 [ 507.913122][T15881] ipvlan2: entered promiscuous mode [ 507.913196][T15881] ipvlan2: entered allmulticast mode [ 508.748474][T15910] batman_adv: batadv0: Adding interface: dummy0 [ 508.748493][T15910] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.748524][T15910] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 509.106410][T15924] ipvlan2: entered promiscuous mode [ 509.106504][T15924] ipvlan2: entered allmulticast mode [ 509.106519][T15924] hsr0: entered allmulticast mode [ 509.106532][T15924] hsr_slave_0: entered allmulticast mode [ 509.106555][T15924] hsr_slave_1: entered allmulticast mode [ 509.367427][T15923] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3889'. [ 509.505651][ T5910] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 509.580887][T15936] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3898'. [ 509.666368][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 509.681841][ T5910] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.681873][ T5910] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.681897][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 509.681939][ T5910] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 509.681967][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.718049][ T5910] usb 1-1: config 0 descriptor?? [ 510.168336][ T5910] cougar 0003:060B:500A.0020: unexpected long global item [ 510.169217][ T5910] cougar 0003:060B:500A.0020: parse failed [ 510.169326][ T5910] cougar 0003:060B:500A.0020: probe with driver cougar failed with error -22 [ 510.280463][T15960] @: renamed from vlan0 [ 510.329801][ T44] usb 1-1: USB disconnect, device number 40 [ 510.890096][T15974] input: syz1 as /devices/virtual/input/input40 [ 511.050912][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3917'. [ 511.051083][T15977] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 511.051114][T15977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.982189][T16011] batman_adv: batadv0: Adding interface: dummy0 [ 511.982210][T16011] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.982246][T16011] batman_adv: batadv0: Interface activated: dummy0 [ 512.396713][T12228] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.400818][T12228] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.400869][T12228] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.400909][T12228] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.905135][T16009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.253736][T12231] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.256514][T12231] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.256565][T12231] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.256607][T12231] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.065110][T12231] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 514.114997][T16070] netlink: 'syz.5.3962': attribute type 25 has an invalid length. [ 514.115021][T16070] netlink: 'syz.5.3962': attribute type 1 has an invalid length. [ 514.115247][T16070] bridge0: port 1(bridge_slave_0) entered learning state [ 515.395596][T16107] netlink: 'syz.1.3980': attribute type 25 has an invalid length. [ 515.395620][T16107] netlink: 'syz.1.3980': attribute type 1 has an invalid length. [ 515.395724][T16107] bridge0: port 1(bridge_slave_0) entered learning state [ 515.433069][T16084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.759002][T16117] netlink: 'syz.0.3995': attribute type 2 has an invalid length. [ 515.759026][T16117] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3995'. [ 516.243813][ T38] kauditd_printk_skb: 25 callbacks suppressed [ 516.243832][ T38] audit: type=1326 audit(1756121399.631:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16137 comm="syz.3.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 516.263561][ T38] audit: type=1326 audit(1756121399.651:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16137 comm="syz.3.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 516.266298][ T38] audit: type=1326 audit(1756121399.651:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16137 comm="syz.3.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 516.266365][ T38] audit: type=1326 audit(1756121399.651:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16137 comm="syz.3.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 516.266417][ T38] audit: type=1326 audit(1756121399.651:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16137 comm="syz.3.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 516.266486][ T38] audit: type=1326 audit(1756121399.651:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16137 comm="syz.3.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 516.266539][ T38] audit: type=1326 audit(1756121399.651:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16137 comm="syz.3.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 516.266898][ T38] audit: type=1326 audit(1756121399.651:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16137 comm="syz.3.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 516.267285][ T38] audit: type=1326 audit(1756121399.651:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16137 comm="syz.3.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 516.267722][ T38] audit: type=1326 audit(1756121399.651:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16137 comm="syz.3.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 516.619922][T16141] netlink: 'syz.6.3994': attribute type 25 has an invalid length. [ 516.619946][T16141] netlink: 'syz.6.3994': attribute type 1 has an invalid length. [ 516.620071][T16141] bridge0: port 1(bridge_slave_0) entered learning state [ 516.689016][T16146] netem: change failed [ 517.189133][T16161] batman_adv: batadv0: Adding interface: dummy0 [ 517.189151][T16161] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.189185][T16161] batman_adv: batadv0: Interface activated: dummy0 [ 517.901722][ T3642] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 518.222474][T16198] @: renamed from vlan0 (while UP) [ 518.741040][ T5910] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 518.913947][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 518.936120][ T5910] usb 4-1: config 0 has no interfaces? [ 518.973624][ T5910] usb 4-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e [ 518.973656][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.973677][ T5910] usb 4-1: Product: syz [ 518.973692][ T5910] usb 4-1: Manufacturer: syz [ 518.973707][ T5910] usb 4-1: SerialNumber: syz [ 518.979046][ T5910] usb 4-1: config 0 descriptor?? [ 519.713153][ T5952] usb 4-1: USB disconnect, device number 31 [ 519.838523][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4042'. [ 520.758668][T16275] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 521.209724][ T5910] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 521.254050][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4060'. [ 521.360633][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 521.377879][ T5910] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 521.377907][ T5910] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 521.377926][ T5910] usb 4-1: config 3 has no interface number 0 [ 521.377975][ T5910] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.378002][ T5910] usb 4-1: config 3 interface 45 has no altsetting 0 [ 521.429061][ T5910] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 521.429092][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.429112][ T5910] usb 4-1: Product: syz [ 521.429126][ T5910] usb 4-1: Manufacturer: syz [ 521.429141][ T5910] usb 4-1: SerialNumber: syz [ 521.729857][ T44] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 521.821118][ T5910] usb 4-1: USB disconnect, device number 32 [ 521.897896][ T44] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 521.897924][ T44] usb 2-1: config 0 has no interface number 0 [ 521.907411][ T44] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 521.907445][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.907469][ T44] usb 2-1: Product: syz [ 521.907487][ T44] usb 2-1: Manufacturer: syz [ 521.907505][ T44] usb 2-1: SerialNumber: syz [ 522.050937][ T44] usb 2-1: config 0 descriptor?? [ 522.113675][ T44] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 522.114033][ T44] ems_usb 2-1:0.204: probe with driver ems_usb failed with error -22 [ 522.370412][ T6023] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 522.432408][ T44] usb 2-1: USB disconnect, device number 33 [ 522.539398][ T6023] usb 1-1: Using ep0 maxpacket: 8 [ 522.543884][ T6023] usb 1-1: config 0 has no interfaces? [ 522.567379][ T6023] usb 1-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e [ 522.567412][ T6023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.567434][ T6023] usb 1-1: Product: syz [ 522.567449][ T6023] usb 1-1: Manufacturer: syz [ 522.567464][ T6023] usb 1-1: SerialNumber: syz [ 522.611260][ T6023] usb 1-1: config 0 descriptor?? [ 523.385910][ T31] usb 1-1: USB disconnect, device number 41 [ 523.564191][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4077'. [ 524.000138][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 524.000156][ T38] audit: type=1326 audit(1756121407.395:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16343 comm="syz.5.4087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732097ebe9 code=0x0 [ 524.688043][ T6023] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 524.841614][ T6023] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 524.841646][ T6023] usb 4-1: config 0 has no interface number 0 [ 524.847254][ T6023] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 524.847300][ T6023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.847327][ T6023] usb 4-1: Product: syz [ 524.847342][ T6023] usb 4-1: Manufacturer: syz [ 524.847357][ T6023] usb 4-1: SerialNumber: syz [ 524.909161][ T6023] usb 4-1: config 0 descriptor?? [ 524.913481][ T6023] ems_usb 4-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 524.913827][ T6023] ems_usb 4-1:0.204: probe with driver ems_usb failed with error -22 [ 525.233157][ T31] usb 4-1: USB disconnect, device number 33 [ 526.707113][ T5903] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 526.859738][ T5903] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 526.859765][ T5903] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 526.859784][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.863648][ T5903] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 526.863678][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.863698][ T5903] usb 4-1: Product: syz [ 526.863713][ T5903] usb 4-1: Manufacturer: syz [ 526.863728][ T5903] usb 4-1: SerialNumber: syz [ 526.865159][T16415] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 527.582717][ T5903] usb 4-1: 0:2 : does not exist [ 527.798738][ T5903] usb 4-1: USB disconnect, device number 34 [ 528.416132][ T31] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 528.568742][ T31] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 528.569431][ T31] usb 2-1: config 0 has no interface number 0 [ 528.569478][ T31] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 528.569498][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.604210][ T31] usb 2-1: config 0 descriptor?? [ 528.622969][ T31] usb 2-1: selecting invalid altsetting 1 [ 528.623157][ T31] dvb_ttusb_budget: ttusb_init_controller: error [ 528.623174][ T31] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 528.849150][ T31] DVB: Unable to find symbol cx22700_attach() [ 528.961628][ T31] DVB: Unable to find symbol tda10046_attach() [ 528.961645][ T31] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 528.984222][ T31] usb 2-1: USB disconnect, device number 34 [ 530.655029][ T6023] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 530.834965][ T6023] usb 2-1: Using ep0 maxpacket: 16 [ 530.839812][ T6023] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.839838][ T6023] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 530.843003][ T6023] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 530.843031][ T6023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.843051][ T6023] usb 2-1: Product: syz [ 530.843066][ T6023] usb 2-1: Manufacturer: syz [ 530.843080][ T6023] usb 2-1: SerialNumber: syz [ 531.002072][T12231] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 531.118851][ T6023] usb 2-1: 0:2 : does not exist [ 531.132344][ T6023] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 531.162609][ T6023] usb 2-1: USB disconnect, device number 35 [ 534.524383][T16590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4183'. [ 534.813190][ T5918] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 534.985527][ T5918] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 534.985555][ T5918] usb 4-1: config 0 has no interface number 0 [ 535.033519][ T5918] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 535.033550][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.033571][ T5918] usb 4-1: Product: syz [ 535.033585][ T5918] usb 4-1: Manufacturer: syz [ 535.033600][ T5918] usb 4-1: SerialNumber: syz [ 535.091050][ T5918] usb 4-1: config 0 descriptor?? [ 535.105445][ T5918] ems_usb 4-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 535.105792][ T5918] ems_usb 4-1:0.204: probe with driver ems_usb failed with error -22 [ 535.388852][ T6038] usb 4-1: USB disconnect, device number 35 [ 535.469316][T16616] bridge_slave_0: invalid flags given to default FDB implementation [ 536.884037][T16634] cgroup: fork rejected by pids controller in /syz3 [ 537.061087][T16682] netlink: 'syz.1.4220': attribute type 11 has an invalid length. [ 538.032598][ T44] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 538.206685][ T44] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 538.206717][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.206738][ T44] usb 4-1: Product: syz [ 538.206753][ T44] usb 4-1: Manufacturer: syz [ 538.206768][ T44] usb 4-1: SerialNumber: syz [ 538.232970][ T44] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 538.543542][ T5903] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 538.838672][T16708] dummy0: entered promiscuous mode [ 538.839850][T16707] dummy0: left promiscuous mode [ 540.380065][ T5903] usb 4-1: Service connection timeout for: 257 [ 540.380089][ T5903] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 542.380069][ T44] usb 4-1: USB disconnect, device number 36 [ 542.421434][ T5903] ath9k_htc: Failed to initialize the device [ 542.424878][ T44] usb 4-1: ath9k_htc: USB layer deinitialized [ 544.375773][T16756] netlink: 'syz.1.4242': attribute type 1 has an invalid length. [ 546.048497][ T3642] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 547.887484][T16785] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4254'. [ 548.078256][T16789] bridge_slave_0: invalid flags given to default FDB implementation [ 549.290109][T16653] Set syz1 is full, maxelem 65536 reached [ 549.886262][ T3642] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 549.918485][T16826] netlink: 'syz.3.4270': attribute type 11 has an invalid length. [ 551.844501][ T6038] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 551.996978][ T6038] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 551.997013][ T6038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 551.997044][ T6038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 551.998909][T16878] sock: sock_set_timeout: `syz.6.4298' (pid 16878) tries to set negative timeout [ 552.003230][ T6038] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 552.003258][ T6038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.003277][ T6038] usb 4-1: Product: syz [ 552.003291][ T6038] usb 4-1: Manufacturer: syz [ 552.003305][ T6038] usb 4-1: SerialNumber: syz [ 552.086562][ T6038] usb 4-1: config 0 descriptor?? [ 552.087532][T16872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 552.299499][ T6038] powermate: unknown product id 0240 [ 552.299516][ T6038] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 552.322407][ T6038] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input43 [ 552.779077][ C0] powermate: config urb returned -71 [ 552.779321][ C0] powermate: config urb returned -71 [ 552.779558][ C0] powermate: config urb returned -71 [ 552.861406][ T44] usb 4-1: USB disconnect, device number 37 [ 552.861529][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 552.905406][T16891] overlayfs: failed to clone lowerpath [ 553.494253][ T44] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 553.680342][ T44] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 553.680375][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.680396][ T44] usb 2-1: Product: syz [ 553.680411][ T44] usb 2-1: Manufacturer: syz [ 553.680425][ T44] usb 2-1: SerialNumber: syz [ 553.712874][ T44] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 553.758960][T16914] sp0: Synchronizing with TNC [ 553.769372][ T5903] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 553.785517][T16912] [U] `` [ 554.385327][T16927] netlink: 'syz.0.4319': attribute type 1 has an invalid length. [ 554.623544][ T5918] usb 2-1: USB disconnect, device number 36 [ 555.247775][ T5903] usb 2-1: Service connection timeout for: 257 [ 555.247801][ T5903] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 555.248506][ T5903] ath9k_htc: Failed to initialize the device [ 555.248923][ T5918] usb 2-1: ath9k_htc: USB layer deinitialized [ 555.283066][ T6023] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 555.445307][ T6023] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 555.449539][ T6023] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.449568][ T6023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 555.449588][ T6023] usb 1-1: SerialNumber: syz [ 556.333650][ T6023] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 556.366106][ T6023] usb 1-1: USB disconnect, device number 42 [ 556.573446][T16970] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4341'. [ 557.081909][ T44] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 557.231685][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 557.234786][ T44] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 557.234815][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.269526][ T44] usb 4-1: config 0 descriptor?? [ 557.279508][ T44] gspca_main: sunplus-2.14.0 probing 041e:400b [ 558.088836][ T44] gspca_sunplus: reg_w_riv err -71 [ 558.088930][ T44] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 558.109324][ T44] usb 4-1: USB disconnect, device number 38 [ 559.114723][T17010] input: syz0 as /devices/virtual/input/input44 [ 559.333830][T17018] netlink: 'syz.3.4360': attribute type 2 has an invalid length. [ 559.780433][T17031] sp0: Synchronizing with TNC [ 559.788238][T17029] [U] `` [ 560.940730][T17063] binder: 17061:17063 ioctl 40046205 0 returned -22 [ 561.959793][ T3642] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 562.086138][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4396'. [ 562.086314][T17098] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 562.086343][T17098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.583265][T17106] bond0: entered promiscuous mode [ 562.583288][T17106] bond_slave_0: entered promiscuous mode [ 562.583533][T17106] bond_slave_1: entered promiscuous mode [ 562.659165][T17106] bond0: left promiscuous mode [ 562.659188][T17106] bond_slave_0: left promiscuous mode [ 562.659509][T17106] bond_slave_1: left promiscuous mode [ 563.659162][ T44] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 563.784556][T17152] bond0: entered promiscuous mode [ 563.784580][T17152] bond_slave_0: entered promiscuous mode [ 563.784937][T17152] bond_slave_1: entered promiscuous mode [ 563.809122][T17152] bond0: left promiscuous mode [ 563.809143][T17152] bond_slave_0: left promiscuous mode [ 563.809418][T17152] bond_slave_1: left promiscuous mode [ 563.813183][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 563.815597][ T44] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.815626][ T44] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.815649][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 563.815682][ T44] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 563.815704][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.824391][ T44] usb 4-1: config 0 descriptor?? [ 564.311004][ T44] cougar 0003:060B:500A.0021: unexpected long global item [ 564.314007][ T44] cougar 0003:060B:500A.0021: parse failed [ 564.314115][ T44] cougar 0003:060B:500A.0021: probe with driver cougar failed with error -22 [ 564.458776][ T6038] usb 4-1: USB disconnect, device number 39 [ 565.794637][T17208] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input45 [ 567.797808][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 567.816351][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.069564][T17332] netlink: ct family unspecified [ 570.069599][T17332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.140750][T17363] netlink: ct family unspecified [ 571.140785][T17363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.162423][T17417] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4539'. [ 574.799928][T17446] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4553'. [ 576.126361][T17486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4567'. [ 576.910214][T17509] syz_tun: entered promiscuous mode [ 576.921597][T17509] syz_tun: left promiscuous mode [ 578.055278][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 579.903035][T17582] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4614'. [ 581.869950][T12234] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 582.127325][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4646'. [ 582.127354][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4646'. [ 583.404237][T17704] CIFS: VFS: Malformed UNC in devname [ 584.729542][T17745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4680'. [ 584.729572][T17745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4680'. [ 585.374802][T17772] CIFS: VFS: Malformed UNC in devname [ 585.708937][T17786] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4700'. [ 585.708967][T17786] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4700'. [ 586.113697][T17798] batman_adv: batadv0: Adding interface: gretap1 [ 586.113716][T17798] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 586.113757][T17798] batman_adv: batadv0: Interface activated: gretap1 [ 586.207228][ T38] audit: type=1326 audit(1756121469.616:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17800 comm="syz.3.4707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 586.209302][ T38] audit: type=1326 audit(1756121469.626:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17800 comm="syz.3.4707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 586.209355][ T38] audit: type=1326 audit(1756121469.626:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17800 comm="syz.3.4707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9da6cebe9 code=0x7ffc0000 [ 588.594552][T17895] netem: incorrect ge model size [ 588.746535][ T5903] kernel write not supported for file /amidi2 (pid: 5903 comm: kworker/1:4) [ 589.325793][ T6038] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 589.485594][ T6038] usb 2-1: Using ep0 maxpacket: 16 [ 589.500772][ T6038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.500802][ T6038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.500836][ T6038] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 589.500858][ T6038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.549539][ T6038] usb 2-1: config 0 descriptor?? [ 590.164799][ T6038] usb 2-1: string descriptor 0 read error: -71 [ 590.193912][ T6038] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 590.194000][ T6038] letsketch 0003:6161:4D15.0022: probe with driver letsketch failed with error -32 [ 590.220710][ T6038] usb 2-1: USB disconnect, device number 37 [ 590.409170][T17952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4780'. [ 590.409198][T17952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4780'. [ 590.409232][T17952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4780'. [ 590.409281][T17952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4780'. [ 590.843157][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4786'. [ 592.038262][T18011] Can't find a SQUASHFS superblock on nullb0 [ 592.241680][T18019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4812'. [ 592.331190][T18023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4813'. [ 592.972553][ T3642] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 593.423919][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4829'. [ 594.085833][T18081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4838'. [ 594.530289][T18093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4845'. [ 594.530312][T18093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4845'. [ 594.807312][ T5903] IPVS: starting estimator thread 0... [ 594.913766][T18106] IPVS: using max 6 ests per chain, 14400 per kthread [ 594.968131][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4852'. [ 594.968235][T18111] netem: invalid attributes len -6 [ 594.968247][T18111] netem: change failed [ 595.254909][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4857'. [ 595.254945][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4857'. [ 597.211712][ T6023] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 597.380184][ T6023] usb 1-1: Using ep0 maxpacket: 16 [ 597.382809][ T6023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.382838][ T6023] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.382860][ T6023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 597.382892][ T6023] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 597.382913][ T6023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.439410][ T6023] usb 1-1: config 0 descriptor?? [ 597.809895][T18197] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4894'. [ 597.862421][T18182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.865516][T18182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.124426][ T6023] usb 1-1: USB disconnect, device number 43 [ 598.291199][ T5903] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 598.443573][ T5903] usb 4-1: config 0 has no interfaces? [ 598.449312][ T5903] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.449339][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.449359][ T5903] usb 4-1: Product: syz [ 598.449373][ T5903] usb 4-1: Manufacturer: syz [ 598.449387][ T5903] usb 4-1: SerialNumber: syz [ 598.476104][ T5903] usb 4-1: config 0 descriptor?? [ 598.700219][ T5903] usb 4-1: USB disconnect, device number 40 [ 599.071999][ T38] audit: type=1326 audit(1756121482.503:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18223 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 599.102834][ T38] audit: type=1326 audit(1756121482.503:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18223 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 599.104585][ T38] audit: type=1326 audit(1756121482.533:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18223 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 599.104637][ T38] audit: type=1326 audit(1756121482.533:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18223 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 599.104684][ T38] audit: type=1326 audit(1756121482.533:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18223 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 599.121705][ T38] audit: type=1326 audit(1756121482.533:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18223 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 599.121781][ T38] audit: type=1326 audit(1756121482.533:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18223 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 599.121833][ T38] audit: type=1326 audit(1756121482.533:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18223 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 599.287896][ T38] audit: type=1326 audit(1756121482.713:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18223 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 599.288053][ T38] audit: type=1326 audit(1756121482.713:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18223 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f64bebe9 code=0x7ffc0000 [ 599.475108][T18226] openvswitch: netlink: Multiple metadata blocks provided [ 599.627219][T18232] tmpfs: Invalid gid '0x00000000ffffffff' [ 600.157803][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4920'. [ 600.350831][T18259] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4922'. [ 601.340227][ T6023] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 601.542461][ T6023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.542496][ T6023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.542536][ T6023] usb 4-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 601.542560][ T6023] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.591446][ T6023] usb 4-1: config 0 descriptor?? [ 602.019771][ T6023] ntrig 0003:1B96:000F.0024: unknown main item tag 0x0 [ 602.041840][ T6023] ntrig 0003:1B96:000F.0024: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.3-1/input0 [ 602.202845][ T6023] ntrig 0003:1B96:000F.0024: Firmware version: 7.15.12.55.4 (3dbf fc9e) [ 602.421149][ T6023] usb 4-1: USB disconnect, device number 41 [ 602.512707][ T5952] kernel write not supported for file /snd/midiC2D0 (pid: 5952 comm: kworker/1:6) [ 603.094841][T18330] blk_print_req_error: 6 callbacks suppressed [ 603.094861][T18330] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.094888][T18330] buffer_io_error: 6 callbacks suppressed [ 603.094899][T18330] Buffer I/O error on dev nbd0, logical block 0, async page read [ 603.095057][T18330] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.095082][T18330] Buffer I/O error on dev nbd0, logical block 1, async page read [ 603.095233][T18330] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.095257][T18330] Buffer I/O error on dev nbd0, logical block 2, async page read [ 603.095394][T18330] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.095417][T18330] Buffer I/O error on dev nbd0, logical block 3, async page read [ 603.095586][T18330] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.095610][T18330] Buffer I/O error on dev nbd0, logical block 0, async page read [ 603.095752][T18330] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.095777][T18330] Buffer I/O error on dev nbd0, logical block 1, async page read [ 603.095915][T18330] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.095939][T18330] Buffer I/O error on dev nbd0, logical block 2, async page read [ 603.096078][T18330] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.096101][T18330] Buffer I/O error on dev nbd0, logical block 3, async page read [ 603.096259][T18330] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.096284][T18330] Buffer I/O error on dev nbd0, logical block 0, async page read [ 603.096425][T18330] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.096448][T18330] Buffer I/O error on dev nbd0, logical block 1, async page read [ 603.105236][T18330] ldm_validate_partition_table(): Disk read failed. [ 603.107672][T18330] Dev nbd0: unable to read RDB block 0 [ 603.322792][T18330] nbd0: unable to read partition table [ 603.564422][T18337] loop9: detected capacity change from 0 to 7 [ 603.578622][T18337] ldm_validate_partition_table(): Disk read failed. [ 603.579235][T18337] Dev loop9: unable to read RDB block 0 [ 603.579553][T18337] loop9: unable to read partition table [ 603.579789][T18337] loop9: partition table beyond EOD, truncated [ 603.579808][T18337] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 603.579808][T18337] ) failed (rc=-5) [ 603.936815][T18355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4966'. [ 604.388347][T18373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4974'. [ 604.581795][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4978'. [ 604.764799][T18389] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 604.773448][T18389] macsec2: entered promiscuous mode [ 604.773902][T18389] macsec2: entered allmulticast mode [ 604.773926][T18389] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 605.618651][T18420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4996'. [ 606.996868][ T6038] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 607.148171][ T6038] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 607.149826][ T6038] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 607.149884][ T6038] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 607.149923][ T6038] usb 1-1: config 0 interface 0 has no altsetting 0 [ 607.151336][ T6038] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 607.151394][ T6038] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 607.151422][ T6038] usb 1-1: config 0 interface 0 has no altsetting 0 [ 607.152993][ T6038] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 607.153052][ T6038] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 607.153086][ T6038] usb 1-1: config 0 interface 0 has no altsetting 0 [ 607.154509][ T6038] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 607.154560][ T6038] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 607.154586][ T6038] usb 1-1: config 0 interface 0 has no altsetting 0 [ 607.156022][ T6038] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 607.156082][ T6038] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 607.156110][ T6038] usb 1-1: config 0 interface 0 has no altsetting 0 [ 607.158178][ T6038] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 607.158247][ T6038] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 607.158278][ T6038] usb 1-1: config 0 interface 0 has no altsetting 0 [ 607.163441][ T6038] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 607.163504][ T6038] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 607.163534][ T6038] usb 1-1: config 0 interface 0 has no altsetting 0 [ 607.165500][ T6038] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 607.165558][ T6038] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 607.165590][ T6038] usb 1-1: config 0 interface 0 has no altsetting 0 [ 607.176540][ T6038] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 607.178241][ T6038] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 607.178267][ T6038] usb 1-1: Product: syz [ 607.178283][ T6038] usb 1-1: Manufacturer: syz [ 607.178296][ T6038] usb 1-1: SerialNumber: syz [ 607.214127][ T6038] usb 1-1: config 0 descriptor?? [ 607.390797][ T6038] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 607.519747][ T6038] usb 1-1: USB disconnect, device number 44 [ 607.539544][ T6038] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 608.949346][T18514] loop7: detected capacity change from 0 to 7 [ 608.951338][T18514] Dev loop7: unable to read RDB block 7 [ 608.951382][T18514] loop7: AHDI p1 p2 [ 608.951411][T18514] loop7: partition table partially beyond EOD, truncated [ 608.951522][T18514] loop7: p1 start 1702000233 is beyond EOD, truncated [ 609.310013][T18507] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 609.408412][T18507] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 609.551213][T18530] veth0_to_team: entered promiscuous mode [ 610.187227][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5054'. [ 610.187253][T18556] netlink: 120 bytes leftover after parsing attributes in process `syz.5.5054'. [ 610.582605][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5054'. [ 610.780895][T18568] netlink: 'syz.1.5060': attribute type 83 has an invalid length. [ 611.147587][T18586] netlink: 'syz.0.5070': attribute type 2 has an invalid length. [ 611.147612][T18586] netlink: 'syz.0.5070': attribute type 1 has an invalid length. [ 611.631006][T18600] netlink: 'syz.3.5077': attribute type 1 has an invalid length. [ 611.631048][T18600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.817755][T18607] ALSA: mixer_oss: invalid OSS volume '' [ 611.911225][T18610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5082'. [ 611.935654][ C0] ------------[ cut here ]------------ [ 611.935675][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 611.935712][ C0] Modules linked in: [ 611.935747][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 611.935768][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.935786][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 611.935805][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 3b 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 03 e2 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 611.935821][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 611.935836][ C0] RAX: ffffffff88dc58bb RBX: 0000000000000001 RCX: ffff88801ae85940 [ 611.935850][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 611.935861][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 611.935873][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000005 [ 611.935886][ C0] R13: 0000000000000000 R14: 0000000000000014 R15: ffff888032226668 [ 611.935898][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 611.935912][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.935925][ C0] CR2: 00007f73216d56c0 CR3: 0000000038624000 CR4: 00000000003526f0 [ 611.935941][ C0] Call Trace: [ 611.935948][ C0] [ 611.935969][ C0] ? __pfx_est_timer+0x10/0x10 [ 611.936000][ C0] call_timer_fn+0x17b/0x5f0 [ 611.936025][ C0] ? __pfx_est_timer+0x10/0x10 [ 611.936053][ C0] ? call_timer_fn+0xbe/0x5f0 [ 611.936076][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 611.936109][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.936132][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.936153][ C0] ? __pfx_est_timer+0x10/0x10 [ 611.936174][ C0] __run_timer_base+0x648/0x970 [ 611.936210][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 611.936247][ C0] run_timer_softirq+0xb7/0x180 [ 611.936270][ C0] handle_softirqs+0x22c/0x710 [ 611.936302][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 611.936335][ C0] run_ktimerd+0xcf/0x190 [ 611.936360][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 611.936384][ C0] ? schedule+0x91/0x360 [ 611.936414][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 611.936437][ C0] smpboot_thread_fn+0x542/0xa60 [ 611.936461][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 611.936492][ C0] kthread+0x711/0x8a0 [ 611.936522][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 611.936544][ C0] ? __pfx_kthread+0x10/0x10 [ 611.936576][ C0] ? __pfx_kthread+0x10/0x10 [ 611.936605][ C0] ret_from_fork+0x3fc/0x770 [ 611.936638][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 611.936667][ C0] ? __switch_to_asm+0x39/0x70 [ 611.936684][ C0] ? __switch_to_asm+0x33/0x70 [ 611.936699][ C0] ? __pfx_kthread+0x10/0x10 [ 611.936728][ C0] ret_from_fork_asm+0x1a/0x30 [ 611.936762][ C0] [ 611.936771][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 611.936785][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 611.936814][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.936825][ C0] Call Trace: [ 611.936832][ C0] [ 611.936838][ C0] dump_stack_lvl+0x99/0x250 [ 611.936865][ C0] ? __asan_memcpy+0x40/0x70 [ 611.936884][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.936911][ C0] ? __pfx__printk+0x10/0x10 [ 611.936948][ C0] vpanic+0x281/0x750 [ 611.936974][ C0] ? __pfx__printk+0x10/0x10 [ 611.936992][ C0] ? __pfx_vpanic+0x10/0x10 [ 611.937018][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 611.937053][ C0] panic+0xb9/0xc0 [ 611.937081][ C0] ? __pfx_panic+0x10/0x10 [ 611.937120][ C0] __warn+0x31b/0x4b0 [ 611.937145][ C0] ? est_timer+0x6dc/0x9f0 [ 611.937166][ C0] ? est_timer+0x6dc/0x9f0 [ 611.937184][ C0] report_bug+0x2be/0x4f0 [ 611.937206][ C0] ? est_timer+0x6dc/0x9f0 [ 611.937225][ C0] ? est_timer+0x6dc/0x9f0 [ 611.937242][ C0] ? est_timer+0x6de/0x9f0 [ 611.937260][ C0] handle_bug+0x84/0x160 [ 611.937287][ C0] exc_invalid_op+0x1a/0x50 [ 611.937313][ C0] asm_exc_invalid_op+0x1a/0x20 [ 611.937330][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 611.937348][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 3b 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 03 e2 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 611.937364][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 611.937380][ C0] RAX: ffffffff88dc58bb RBX: 0000000000000001 RCX: ffff88801ae85940 [ 611.937394][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 611.937406][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 611.937418][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000005 [ 611.937431][ C0] R13: 0000000000000000 R14: 0000000000000014 R15: ffff888032226668 [ 611.937452][ C0] ? est_timer+0x6db/0x9f0 [ 611.937493][ C0] ? __pfx_est_timer+0x10/0x10 [ 611.937523][ C0] call_timer_fn+0x17b/0x5f0 [ 611.937549][ C0] ? __pfx_est_timer+0x10/0x10 [ 611.937567][ C0] ? call_timer_fn+0xbe/0x5f0 [ 611.937591][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 611.937631][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.937656][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.937678][ C0] ? __pfx_est_timer+0x10/0x10 [ 611.937700][ C0] __run_timer_base+0x648/0x970 [ 611.937740][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 611.937780][ C0] run_timer_softirq+0xb7/0x180 [ 611.937805][ C0] handle_softirqs+0x22c/0x710 [ 611.937841][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 611.937892][ C0] run_ktimerd+0xcf/0x190 [ 611.937920][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 611.937946][ C0] ? schedule+0x91/0x360 [ 611.937989][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 611.938011][ C0] smpboot_thread_fn+0x542/0xa60 [ 611.938036][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 611.938069][ C0] kthread+0x711/0x8a0 [ 611.938101][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 611.938124][ C0] ? __pfx_kthread+0x10/0x10 [ 611.938159][ C0] ? __pfx_kthread+0x10/0x10 [ 611.938188][ C0] ret_from_fork+0x3fc/0x770 [ 611.938216][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 611.938248][ C0] ? __switch_to_asm+0x39/0x70 [ 611.938269][ C0] ? __switch_to_asm+0x33/0x70 [ 611.938288][ C0] ? __pfx_kthread+0x10/0x10 [ 611.938316][ C0] ret_from_fork_asm+0x1a/0x30 [ 611.938346][ C0] [ 611.939712][ C0] Kernel Offset: disabled