last executing test programs: 11.408341871s ago: executing program 1 (id=2833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000740)="440f20c03505000020440f22c0fb01c966bad104ed00000f23c00f21f866b846008ed00f23f80f01cbb8010000000f01c146a70f3236660fc6b8730f0000c9b98f020000b8b9000000ba000000000f30460f01c8", 0x54}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.814941854s ago: executing program 0 (id=2836): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(r1, &(0x7f0000000200)) 10.673042832s ago: executing program 0 (id=2838): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000140)={0x5}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) 10.20704701s ago: executing program 2 (id=2841): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200)=0x7, 0x4) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCG_STATS(r2, 0x80089203, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 9.810081319s ago: executing program 2 (id=2842): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) 9.773620107s ago: executing program 1 (id=2843): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) 8.192687424s ago: executing program 1 (id=2844): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) close(r0) 8.138862113s ago: executing program 2 (id=2845): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x3, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f877b2ff", 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x9}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4) 7.958356637s ago: executing program 3 (id=2846): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 7.819715362s ago: executing program 3 (id=2847): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x5}, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0xfffffffc, 'syz0\x00', 0xfffffefd}, 0x1, 0x10, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x1224, &(0x7f0000003900)=ANY=[@ANYBLOB="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", @ANYRES16]) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) syz_open_dev$sg(&(0x7f00000001c0), 0x6, 0x10400) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.72065133s ago: executing program 1 (id=2848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x0, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x98, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 4.720440704s ago: executing program 3 (id=2849): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) 4.712356768s ago: executing program 0 (id=2850): capset(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 4.674609917s ago: executing program 2 (id=2851): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000003000), 0x201, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) lsm_set_self_attr(0x69, &(0x7f0000001000)=ANY=[@ANYBLOB="6d00000000000000ff0000a955000000000020000000000000080000000000000000"], 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x10001, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 3.460870875s ago: executing program 0 (id=2852): keyctl$describe(0x6, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406000005240004000d240f01800000000100fcff500424020209058103ff03000306090582020000020d0309050302"], 0x0) 3.430436792s ago: executing program 3 (id=2853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x301}], {0x14}}, 0x3c}}, 0x0) 3.419551752s ago: executing program 1 (id=2854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x15}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40008000}, 0xd732828148db4cd2) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000084}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_init(0x0, 0x80000) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0xfc30) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.730859297s ago: executing program 1 (id=2855): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="66b9e006000066b89119000066ba000000000f302e26f4f20f2c6c0bbaf80c66b81423e78266efbafc0c66b80400008066ef0f380a6f330f01bda60066b80b4200000f23d80f21f86635800000b00f23f8b8eb0f8ed00fa53c650f1c9c3500", 0x5f}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.73062322s ago: executing program 2 (id=2856): syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') socket$inet(0x2, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) wait4(r1, &(0x7f0000000180), 0x0, &(0x7f0000000280)) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.730457877s ago: executing program 3 (id=2857): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x800) 1.729587506s ago: executing program 0 (id=2863): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000380)={0x0, 0x0, 0xaf, 0x3, r1}) 1.561945777s ago: executing program 0 (id=2858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket(0x1e, 0x4, 0x0) 1.485097261s ago: executing program 3 (id=2859): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x8402) ppoll(&(0x7f0000000200)=[{r0, 0x692}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) 0s ago: executing program 2 (id=2860): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7", 0x3f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d62", 0x80}, {0x0}, {&(0x7f0000000800)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): device team0 [ 527.721999][ T5681] usb write operation failed. (-71) [ 527.770043][ T201] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 527.826285][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.826387][ T6547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.849070][ T201] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 527.849499][ T5681] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 527.850127][ T5681] dvbdev: DVB: registering new adapter (Terratec H7) [ 527.850171][ T5681] usb 3-1: media controller created [ 527.863663][ T5681] usb read operation failed. (-71) [ 527.865001][ T5681] usb write operation failed. (-71) [ 527.892393][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.902095][ T6547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.054958][T20768] fido_id[20768]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 528.086897][ T5681] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 528.149118][T20776] loop8: detected capacity change from 0 to 7 [ 528.157969][ T5681] usb 3-1: USB disconnect, device number 118 [ 528.170210][T20776] Dev loop8: unable to read RDB block 7 [ 528.170260][T20776] loop8: unable to read partition table [ 528.170473][T20776] loop8: partition table beyond EOD, truncated [ 528.170492][T20776] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 528.171134][T20775] Flush: task=syz.0.2422[20775] dev=loop8 state=2 [ 528.330440][T20775] Teardown: task=syz.0.2422[20775] dev=loop8 state=2 [ 528.715696][T20801] netlink: 'syz.0.2424': attribute type 37 has an invalid length. [ 528.902899][ T5681] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 529.072776][ T5702] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 529.075107][ T5681] usb 4-1: Using ep0 maxpacket: 8 [ 529.111767][ T5681] usb 4-1: unable to get BOS descriptor or descriptor too short [ 529.116955][ T5681] usb 4-1: config 2 has an invalid interface number: 24 but max is 0 [ 529.116982][ T5681] usb 4-1: config 2 has no interface number 0 [ 529.117014][ T5681] usb 4-1: too many endpoints for config 2 interface 24 altsetting 234: 186, using maximum allowed: 30 [ 529.117050][ T5681] usb 4-1: config 2 interface 24 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 186 [ 529.117090][ T5681] usb 4-1: config 2 interface 24 has no altsetting 0 [ 529.183187][ T5681] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=c7.3b [ 529.183218][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.183229][ T5681] usb 4-1: Product: syz [ 529.183237][ T5681] usb 4-1: Manufacturer: syz [ 529.183244][ T5681] usb 4-1: SerialNumber: syz [ 529.246037][ T5702] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 529.246068][ T5702] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 529.246087][ T5702] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 529.246106][ T5702] usb 3-1: config 220 has no interface number 2 [ 529.246187][ T5702] usb 3-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 529.246212][ T5702] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 529.246238][ T5702] usb 3-1: config 220 interface 0 has no altsetting 0 [ 529.246257][ T5702] usb 3-1: config 220 interface 76 has no altsetting 0 [ 529.246276][ T5702] usb 3-1: config 220 interface 1 has no altsetting 0 [ 529.330523][ T5702] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 529.330554][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.330575][ T5702] usb 3-1: Product: syz [ 529.330590][ T5702] usb 3-1: Manufacturer: syz [ 529.330605][ T5702] usb 3-1: SerialNumber: syz [ 529.436985][T20797] netlink: 'syz.3.2425': attribute type 10 has an invalid length. [ 529.535901][T19402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.548834][ T5681] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 529.548922][ T5681] command write [95] error -22 [ 529.615196][ T5702] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 529.615228][ T5702] uvcvideo 3-1:220.0: No valid video chain found. [ 529.615281][ T5702] usb 3-1: selecting invalid altsetting 0 [ 529.649086][ T5702] usb 3-1: selecting invalid altsetting 0 [ 529.649122][ T5702] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 529.671423][ T5702] usb 3-1: USB disconnect, device number 119 [ 529.689981][ T5681] usb 4-1: USB disconnect, device number 110 [ 529.925875][T19402] veth0_vlan: entered promiscuous mode [ 529.955444][T19402] veth1_vlan: entered promiscuous mode [ 530.054909][T19402] veth0_macvtap: entered promiscuous mode [ 530.079904][T19402] veth1_macvtap: entered promiscuous mode [ 530.116474][ T5702] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 530.121500][ T5702] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 530.164242][T19402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.210455][T20865] fido_id[20865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 530.261848][T19402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.396699][ T6008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.401473][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.424472][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.429822][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.485238][T20874] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 530.608128][T20874] kvm: pic: level sensitive irq not supported [ 530.608202][T20874] kvm: pic: non byte read [ 530.608418][T20874] kvm: pic: level sensitive irq not supported [ 530.608844][T20874] kvm: pic: non byte read [ 530.622177][T20874] kvm: pic: level sensitive irq not supported [ 530.622250][T20874] kvm: pic: non byte read [ 530.622775][T20874] kvm: pic: level sensitive irq not supported [ 530.622833][T20874] kvm: pic: non byte read [ 530.623227][T20874] kvm: pic: level sensitive irq not supported [ 530.623341][T20874] kvm: pic: non byte read [ 530.623557][T20874] kvm: pic: level sensitive irq not supported [ 530.623607][T20874] kvm: pic: non byte read [ 530.623811][T20874] kvm: pic: level sensitive irq not supported [ 530.623927][T20874] kvm: pic: non byte read [ 532.153529][ T6544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.153548][ T6544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.592585][ T5670] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 532.599439][ T5670] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 532.789805][T20938] fido_id[20938]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 532.973341][ T5702] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 533.015400][ T1491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.015420][ T1491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.131072][ T5702] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 533.131102][ T5702] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 533.131122][ T5702] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 533.131143][ T5702] usb 4-1: config 220 has no interface number 2 [ 533.131210][ T5702] usb 4-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 533.131334][ T5702] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 533.131364][ T5702] usb 4-1: config 220 interface 0 has no altsetting 0 [ 533.131383][ T5702] usb 4-1: config 220 interface 76 has no altsetting 0 [ 533.131402][ T5702] usb 4-1: config 220 interface 1 has no altsetting 0 [ 533.224645][ T5702] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 533.224676][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.224696][ T5702] usb 4-1: Product: syz [ 533.224711][ T5702] usb 4-1: Manufacturer: syz [ 533.224725][ T5702] usb 4-1: SerialNumber: syz [ 533.518711][ T5702] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 533.518745][ T5702] uvcvideo 4-1:220.0: No valid video chain found. [ 533.518808][ T5702] usb 4-1: selecting invalid altsetting 0 [ 533.582283][ T5702] usb 4-1: selecting invalid altsetting 0 [ 533.582319][ T5702] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 533.618942][ T5702] usb 4-1: USB disconnect, device number 111 [ 533.813660][T20987] fuse: fd is not a fuse device [ 533.814401][T20987] fuse: Bad value for 'fd' [ 534.182787][ T5702] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 534.352636][ T5702] usb 2-1: Using ep0 maxpacket: 8 [ 534.371434][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 534.391319][ T5702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 534.392351][ T5702] usb 2-1: config 2 has an invalid interface number: 24 but max is 0 [ 534.392377][ T5702] usb 2-1: config 2 has no interface number 0 [ 534.392406][ T5702] usb 2-1: config 2 interface 24 has no altsetting 0 [ 534.432830][ T5702] usb 2-1: string descriptor 0 read error: -22 [ 534.432952][ T5702] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=c7.3b [ 534.432976][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.468295][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 534.469860][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 534.470989][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 534.472791][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 534.533151][ T5702] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 534.533234][ T5702] command write [95] error -22 [ 534.743828][T20992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.744438][T20992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.213618][T21049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2451'. [ 535.485828][T21063] netlink: 'syz.0.2453': attribute type 4 has an invalid length. [ 535.485842][T21063] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2453'. [ 535.509058][T21061] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 536.251725][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.251789][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.289048][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.289142][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.289251][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.289338][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.289430][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.289516][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.289608][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.289693][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.289774][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.289987][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.290080][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.290166][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.290249][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.290427][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.290523][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.290610][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.290695][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.290779][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.291080][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.291169][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.291253][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.291337][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.309542][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 536.309648][T21080] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8138ae83, magic ae != 6b] [ 536.572594][ T5604] Bluetooth: hci3: command tx timeout [ 537.095319][ T44] usb 2-1: USB disconnect, device number 80 [ 537.188694][T21101] tmpfs: Bad value for 'mpol' [ 537.256679][ T6545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.275603][T21107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2458'. [ 537.295629][T21108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2460'. [ 537.360051][T21110] Flush: task=syz.0.2461[21110] dev=loop2 state=2 [ 537.373615][ T5833] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 537.401886][T21012] xfrm0 speed is unknown, defaulting to 1000 [ 537.445976][T21110] Teardown: task=syz.0.2461[21110] dev=loop2 state=2 [ 537.525685][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 537.525723][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 537.525749][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 8196, setting to 1024 [ 537.530562][ T5833] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 537.530592][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.530612][ T5833] usb 4-1: Product: syz [ 537.530626][ T5833] usb 4-1: Manufacturer: syz [ 537.530641][ T5833] usb 4-1: SerialNumber: syz [ 537.554846][ T5833] usb 4-1: config 0 descriptor?? [ 537.591406][ T5833] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 537.627080][ T5833] usb 4-1: Detected SIO [ 537.627102][ T5833] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 537.721934][ T5833] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 537.785765][ T5326] usb 4-1: USB disconnect, device number 112 [ 537.830729][ T5326] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 537.901432][ T5326] ftdi_sio 4-1:0.0: device disconnected [ 538.059108][ T6545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.467886][T21169] netlink: 'syz.3.2465': attribute type 4 has an invalid length. [ 538.467907][T21169] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2465'. [ 538.638978][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639035][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639085][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639135][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639180][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639230][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639276][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639321][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639368][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639419][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639466][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639512][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639576][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639629][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639674][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639720][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639766][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639816][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639862][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639907][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.639953][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.640003][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.640048][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.640096][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.640143][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 538.640193][T21174] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8138ae83, magic ae != 6b] [ 538.654102][ T60] Bluetooth: hci3: command tx timeout [ 538.965310][ T37] audit: type=1326 audit(1783689141.478:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=21176 comm="syz.3.2467" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff46585de59 code=0x0 [ 539.071531][ T6545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.820574][ T6545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.742725][ T5604] Bluetooth: hci3: command tx timeout [ 541.207371][T21012] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.210575][T21012] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.210749][T21012] bridge_slave_0: entered allmulticast mode [ 541.244126][T21012] bridge_slave_0: entered promiscuous mode [ 541.273229][T21012] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.273500][T21012] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.273760][T21012] bridge_slave_1: entered allmulticast mode [ 541.275717][T21012] bridge_slave_1: entered promiscuous mode [ 541.506997][ T5326] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 541.569619][T21012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.674533][ T5326] usb 2-1: Using ep0 maxpacket: 8 [ 541.679385][ T5326] usb 2-1: unable to get BOS descriptor or descriptor too short [ 541.702415][ T5326] usb 2-1: config 2 has an invalid interface number: 24 but max is 0 [ 541.707059][ T5326] usb 2-1: config 2 has no interface number 0 [ 541.707104][ T5326] usb 2-1: config 2 interface 24 has no altsetting 0 [ 541.727152][ T5326] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=c7.3b [ 541.727181][ T5326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.727199][ T5326] usb 2-1: Product: syz [ 541.727212][ T5326] usb 2-1: Manufacturer: syz [ 541.727224][ T5326] usb 2-1: SerialNumber: syz [ 541.897176][T21012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.957479][T21366] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 542.051699][ T5326] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 542.051836][ T5326] command write [95] error -22 [ 542.123638][ T5326] usb 2-1: USB disconnect, device number 81 [ 542.378891][T21012] team0: Port device team_slave_0 added [ 542.386580][T21012] team0: Port device team_slave_1 added [ 542.574780][ T5833] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 542.712688][ T5833] usb 1-1: device descriptor read/64, error -71 [ 542.713651][ T6545] bridge_slave_1: left allmulticast mode [ 542.713687][ T6545] bridge_slave_1: left promiscuous mode [ 542.713965][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.812731][ T5604] Bluetooth: hci3: command tx timeout [ 542.880554][ T6545] bridge_slave_0: left allmulticast mode [ 542.880591][ T6545] bridge_slave_0: left promiscuous mode [ 542.905905][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.984245][T21458] netlink: 'syz.3.2489': attribute type 22 has an invalid length. [ 543.003325][ T5833] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 543.091870][ T6545] dvmrp24: left allmulticast mode [ 543.137216][ T5833] usb 1-1: device descriptor read/64, error -71 [ 543.260999][ T5833] usb usb1-port1: attempt power cycle [ 543.617085][ T5833] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 543.633130][ T5833] usb 1-1: device descriptor read/8, error -71 [ 543.902674][ T5833] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 543.923268][ T5833] usb 1-1: device descriptor read/8, error -71 [ 543.983495][ T6545] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 544.037424][ T5833] usb usb1-port1: unable to enumerate USB device [ 544.384316][ T6545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.463479][ T6545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.484835][ T6545] bond0 (unregistering): Released all slaves [ 544.525354][T21012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.525366][T21012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.525381][T21012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.640040][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 544.658636][T21012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.658653][T21012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.658681][T21012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.930515][ T6545] tipc: Disabling bearer [ 545.015823][ T6545] tipc: Left network mode [ 545.048300][T21012] hsr_slave_0: entered promiscuous mode [ 545.055736][T21012] hsr_slave_1: entered promiscuous mode [ 545.057587][T21012] debugfs: 'hsr0' already exists in 'hsr' [ 545.057612][T21012] Cannot create hsr debugfs directory [ 545.211156][ T5702] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 545.405099][ T5702] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 545.405128][ T5702] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 545.405151][ T5702] usb 2-1: config 220 has no interface number 2 [ 545.405219][ T5702] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 545.405248][ T5702] usb 2-1: config 220 interface 0 has no altsetting 0 [ 545.405268][ T5702] usb 2-1: config 220 interface 76 has no altsetting 0 [ 545.405287][ T5702] usb 2-1: config 220 interface 1 has no altsetting 0 [ 545.407696][ T5702] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 545.407726][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.407748][ T5702] usb 2-1: Product: syz [ 545.407763][ T5702] usb 2-1: Manufacturer: syz [ 545.407778][ T5702] usb 2-1: SerialNumber: syz [ 545.988535][ T5702] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 545.988581][ T5702] uvcvideo 2-1:220.0: No valid video chain found. [ 545.988642][ T5702] usb 2-1: selecting invalid altsetting 0 [ 546.178653][ T5702] usb 2-1: selecting invalid altsetting 0 [ 546.178692][ T5702] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 546.223913][ T5702] usb 2-1: USB disconnect, device number 82 [ 546.660472][T21617] overlay: Unknown parameter '\/file0' [ 547.024703][ T44] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 547.162731][ T44] usb 4-1: device descriptor read/64, error -71 [ 547.387508][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 547.412716][ T44] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 547.572916][ T44] usb 4-1: device descriptor read/64, error -71 [ 547.693108][ T44] usb usb4-port1: attempt power cycle [ 548.053697][ T44] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 548.081230][ T44] usb 4-1: device descriptor read/8, error -71 [ 548.176216][ T5681] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 548.346696][ T44] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 548.346905][ T5681] usb 1-1: Using ep0 maxpacket: 16 [ 548.349624][ T5681] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 548.349649][ T5681] usb 1-1: config 0 has no interface number 0 [ 548.349693][ T5681] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 548.349717][ T5681] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 548.352081][ T5681] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 548.352109][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.352129][ T5681] usb 1-1: Product: syz [ 548.352143][ T5681] usb 1-1: Manufacturer: syz [ 548.352157][ T5681] usb 1-1: SerialNumber: syz [ 548.363614][ T44] usb 4-1: device descriptor read/8, error -71 [ 548.443150][T21716] XFS (nullb0): no-recovery mounts must be read-only. [ 548.479058][ T44] usb usb4-port1: unable to enumerate USB device [ 548.575253][ T5681] usb 1-1: config 0 descriptor?? [ 548.594694][T21671] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 548.594808][T21671] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 548.806981][T21671] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 548.807089][T21671] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 548.997862][ T6545] hsr_slave_0: left promiscuous mode [ 549.026429][ T5681] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 549.052990][ T6545] hsr_slave_1: left promiscuous mode [ 549.070537][ T6545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.070623][ T6545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.161752][ T6545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.161777][ T6545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.294922][ T6545] veth1_macvtap: left promiscuous mode [ 549.295028][ T6545] veth0_macvtap: left promiscuous mode [ 549.300359][ T6545] veth1_vlan: left promiscuous mode [ 549.300572][ T6545] veth0_vlan: left promiscuous mode [ 549.332691][ T201] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 549.492667][ T201] usb 2-1: Using ep0 maxpacket: 8 [ 549.500404][ T201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 549.510902][ T201] usb 2-1: config 2 has an invalid interface number: 24 but max is 0 [ 549.510930][ T201] usb 2-1: config 2 has no interface number 0 [ 549.510963][ T201] usb 2-1: config 2 interface 24 has no altsetting 0 [ 549.551598][ T201] usb 2-1: string descriptor 0 read error: -22 [ 549.551735][ T201] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=c7.3b [ 549.551758][ T201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.600294][ T201] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 549.600390][ T201] command write [95] error -22 [ 549.799062][ T5702] usb 2-1: USB disconnect, device number 83 [ 550.026871][T21759] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 550.218681][T21766] Flush: task=syz.3.2515[21766] dev=loop2 state=2 [ 550.302761][T21766] Teardown: task=syz.3.2515[21766] dev=loop2 state=2 [ 550.495543][T21776] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 550.495556][T21776] overlayfs: missing 'lowerdir' [ 550.685241][T21671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.687828][T21671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.689022][ T5681] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 550.689292][ T5681] asix 1-1:0.34: probe with driver asix failed with error -71 [ 550.722647][ T5702] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 550.744508][ T5681] usb 1-1: USB disconnect, device number 105 [ 550.890517][ T5702] usb 2-1: not running at top speed; connect to a high speed hub [ 550.891576][ T5702] usb 2-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 550.891606][ T5702] usb 2-1: config 1 interface 0 has no altsetting 0 [ 550.916301][ T5702] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.916333][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.916353][ T5702] usb 2-1: Product: ꗢ暆ㆨ抁ਔꦵ䷗勣匩痰흛汏廀ꑥ儀岻栖ຯ뱁࿥攡㤀瘋畵Ꭷ৛ꐒ鲻坤샲㑅䟨慎ᛎ組딶龜돟蔻Ք [ 550.916375][ T5702] usb 2-1: Manufacturer: 蠃暽結溂蚭勡壢 [ 550.916390][ T5702] usb 2-1: SerialNumber: ᜬᾃ˺ᓹ⶗恉橤䭽腆㍔㽚⢺辏ᰡקּ礏ᨲ띔ꅳŖ⾿捅鈠昰룗꛿됐Ṧ䠑흊ꞿ垣㧴毀脘俨銶㕃ꄓ껷뀆峟䵣穥⼛뎳ꅋ袊膔䦢끕㏷禠鈾况紺䌁鬣賻ꎑ矤䩑䒄댆⃿콐烪⣚☙䐥豙⧝쿽뀈슀첶쬇돡狴竌슐葮厓가촛᫡朣晽൓ [ 550.934213][ T6545] team0 (unregistering): Port device team_slave_1 removed [ 550.936112][ T5702] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 550.936136][ T5702] usb 2-1: no configuration chosen from 1 choice [ 551.024299][ T6545] team0 (unregistering): Port device team_slave_0 removed [ 551.509396][ T5255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 551.576061][T21812] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004 [ 551.694473][T21816] loop8: detected capacity change from 0 to 7 [ 551.736065][T21816] Dev loop8: unable to read RDB block 7 [ 551.736096][T21816] loop8: unable to read partition table [ 551.736235][T21816] loop8: partition table beyond EOD, truncated [ 551.736267][T21816] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 551.780097][T15291] Flush: task=udevd[15291] dev=loop8 state=2 [ 551.869441][T21821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.870022][T21821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.889453][T15291] Teardown: task=udevd[15291] dev=loop8 state=2 [ 551.897258][T21821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.905019][T21821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.918055][T21821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.925579][T21821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.929786][T21821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.930343][T21821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.939118][T21821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.947894][T21821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.104794][ T5833] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 552.329078][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.329120][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.329154][ T5833] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 552.329175][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.393605][ T5833] usb 4-1: config 0 descriptor?? [ 552.563749][ T44] usb 1-1: new low-speed USB device number 106 using dummy_hcd [ 552.610742][ T5833] cm6533_jd 0003:0D8C:0022.0030: item fetching failed at offset 2/5 [ 552.611399][ T5833] cm6533_jd 0003:0D8C:0022.0030: parse failed [ 552.611513][ T5833] cm6533_jd 0003:0D8C:0022.0030: probe with driver cm6533_jd failed with error -22 [ 552.741156][ T5833] usb 4-1: USB disconnect, device number 117 [ 552.767783][ T44] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 552.767831][ T44] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 0 [ 552.772329][ T44] usb 1-1: string descriptor 0 read error: -22 [ 552.772580][ T44] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 552.772605][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.789604][ T44] usb 1-1: low speed audio streaming not supported [ 552.790257][ T44] usb 1-1: low speed audio streaming not supported [ 553.308683][ T44] usb 1-1: USB disconnect, device number 106 [ 553.611391][ T201] usb 2-1: USB disconnect, device number 84 [ 554.024380][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 554.872737][ T201] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 555.052630][ T201] usb 2-1: Using ep0 maxpacket: 8 [ 555.054880][ T201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 555.055977][ T201] usb 2-1: config 2 has an invalid interface number: 24 but max is 0 [ 555.056003][ T201] usb 2-1: config 2 has no interface number 0 [ 555.056053][ T201] usb 2-1: config 2 interface 24 has no altsetting 0 [ 555.058485][ T201] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=c7.3b [ 555.058514][ T201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.058534][ T201] usb 2-1: Product: syz [ 555.058547][ T201] usb 2-1: Manufacturer: syz [ 555.058555][ T201] usb 2-1: SerialNumber: syz [ 555.102896][T21992] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2537'. [ 555.300891][T21972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'. [ 555.341386][ T201] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 555.341470][ T201] command write [95] error -22 [ 555.401308][ T201] usb 2-1: USB disconnect, device number 85 [ 555.475092][T22019] netlink: 'syz.3.2539': attribute type 9 has an invalid length. [ 555.475114][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 555.502414][ T5326] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 555.523351][ T5326] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 556.480241][ T6012] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.778365][T21012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 556.864679][T21012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.869577][T21012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 556.990246][T21012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.020323][T21012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 557.146940][T21012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.149384][T21012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 557.194591][T21012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 557.453802][ T5681] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 557.614147][ T5681] usb 2-1: Using ep0 maxpacket: 16 [ 557.618143][ T5681] usb 2-1: unable to get BOS descriptor or descriptor too short [ 557.622294][ T5681] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 557.622322][ T5681] usb 2-1: config 127 has no interface number 0 [ 557.622353][ T5681] usb 2-1: config 127 interface 124 has no altsetting 0 [ 557.629535][ T5681] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 557.629566][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.629586][ T5681] usb 2-1: Product: syz [ 557.629600][ T5681] usb 2-1: Manufacturer: syz [ 557.629614][ T5681] usb 2-1: SerialNumber: syz [ 558.095988][T22140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.100001][T22140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.342357][T22153] sg_write: data in/out 65503/32 bytes for SCSI command 0x0-- guessing data in; [ 558.342357][T22153] program syz.0.2551 not setting count and/or reply_len properly [ 558.379025][T22153] sg_write: data in/out 65503/32 bytes for SCSI command 0x0-- guessing data in; [ 558.379025][T22153] program syz.0.2551 not setting count and/or reply_len properly [ 558.496461][T21012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.605701][ T5681] usb 2-1: reset high-speed USB device number 86 using dummy_hcd [ 558.794014][T21012] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.900010][ T5681] usb 2-1: unable to get BOS descriptor or descriptor too short [ 558.947323][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.947566][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.058421][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.058578][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.059263][ T5681] usb 2-1: device firmware changed [ 559.209062][ T5681] usb 2-1: USB disconnect, device number 86 [ 559.740548][T22204] loop8: detected capacity change from 0 to 8 [ 559.764713][T22204] Dev loop8: unable to read RDB block 8 [ 559.764759][T22204] loop8: unable to read partition table [ 559.765086][T22204] loop8: partition table beyond EOD, truncated [ 559.765106][T22204] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 559.833846][T15290] Flush: task=udevd[15290] dev=loop8 state=2 [ 559.842615][ T5681] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 559.947656][T15290] Teardown: task=udevd[15290] dev=loop8 state=2 [ 560.036906][ T5681] usb 2-1: Using ep0 maxpacket: 32 [ 560.051363][ T5681] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.051453][ T5681] usb 2-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30 [ 560.051495][ T5681] usb 2-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 560.051533][ T5681] usb 2-1: config 1 interface 2 has no altsetting 0 [ 560.104176][ T5681] usb 2-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 560.104208][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.104229][ T5681] usb 2-1: Product: syz [ 560.104243][ T5681] usb 2-1: Manufacturer: syz [ 560.104256][ T5681] usb 2-1: SerialNumber: syz [ 560.344011][ T5681] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 560.344528][ T5681] usb 2-1: unit 4 not found! [ 560.344548][ T5681] usb 2-1: unit 144 not found! [ 560.421454][ T5681] usb 2-1: USB disconnect, device number 87 [ 560.551521][T15290] udevd[15290]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.904298][T15290] Flush: task=udevd[15290] dev=loop2 state=2 [ 561.012737][T15290] Teardown: task=udevd[15290] dev=loop2 state=2 [ 561.131856][T22267] openvswitch: netlink: IP tunnel dst address not specified [ 561.328955][T21012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.483417][ T44] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 561.642593][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 561.650602][ T44] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 561.650629][ T44] usb 4-1: config 0 has no interface number 0 [ 561.694220][ T44] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 561.694251][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.694271][ T44] usb 4-1: Product: syz [ 561.694285][ T44] usb 4-1: Manufacturer: syz [ 561.694298][ T44] usb 4-1: SerialNumber: syz [ 561.727935][ T44] usb 4-1: config 0 descriptor?? [ 561.739977][ T44] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 561.998340][ T44] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 562.012308][T21012] veth0_vlan: entered promiscuous mode [ 562.068503][T22295] FAULT_INJECTION: forcing a failure. [ 562.068503][T22295] name failslab, interval 1, probability 0, space 0, times 0 [ 562.068538][T22295] CPU: 0 UID: 0 PID: 22295 Comm: syz.1.2570 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 562.068565][T22295] Tainted: [L]=SOFTLOCKUP [ 562.068570][T22295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 562.068580][T22295] Call Trace: [ 562.068588][T22295] [ 562.068597][T22295] dump_stack_lvl+0xe8/0x150 [ 562.068624][T22295] should_fail_ex+0x467/0x600 [ 562.068654][T22295] should_failslab+0xa8/0x100 [ 562.068681][T22295] __kmalloc_noprof+0xfb/0x790 [ 562.068707][T22295] ? tomoyo_realpath_from_path+0xef/0x640 [ 562.068729][T22295] ? tomoyo_realpath_from_path+0xef/0x640 [ 562.068753][T22295] tomoyo_realpath_from_path+0xef/0x640 [ 562.068785][T22295] ? tomoyo_path_number_perm+0x219/0x5f0 [ 562.068807][T22295] tomoyo_path_number_perm+0x246/0x5f0 [ 562.068829][T22295] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 562.068847][T22295] ? __lock_acquire+0x6df/0x2e40 [ 562.068871][T22295] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 562.068888][T22295] ? lockdep_hardirqs_on+0x7a/0x110 [ 562.068917][T22295] ? __fget_files+0x2a/0x420 [ 562.068933][T22295] ? __fget_files+0x2a/0x420 [ 562.068945][T22295] ? __fget_files+0x3a8/0x420 [ 562.068958][T22295] ? __fget_files+0x2a/0x420 [ 562.068975][T22295] security_file_ioctl+0xb9/0x260 [ 562.068999][T22295] __se_sys_ioctl+0x47/0x170 [ 562.069017][T22295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.069045][T22295] do_syscall_64+0x174/0x580 [ 562.069064][T22295] ? trace_irq_disable+0x3b/0x140 [ 562.069081][T22295] ? clear_bhb_loop+0x40/0x90 [ 562.069101][T22295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.069116][T22295] RIP: 0033:0x7f9b1a54de59 [ 562.069132][T22295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.069146][T22295] RSP: 002b:00007f9b187a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.069163][T22295] RAX: ffffffffffffffda RBX: 00007f9b1a7d5fa0 RCX: 00007f9b1a54de59 [ 562.069175][T22295] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 562.069184][T22295] RBP: 00007f9b187a6090 R08: 0000000000000000 R09: 0000000000000000 [ 562.069193][T22295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.069203][T22295] R13: 00007f9b1a7d6038 R14: 00007f9b1a7d5fa0 R15: 00007ffe27a9a338 [ 562.069229][T22295] [ 562.080526][T22295] ERROR: Out of memory at tomoyo_realpath_from_path. [ 562.414857][T21012] veth1_vlan: entered promiscuous mode [ 562.431245][ T44] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 562.576545][T22272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.581521][T22272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.614449][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 562.622061][ T5702] usb 4-1: USB disconnect, device number 118 [ 562.716280][ T5702] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 562.767156][ T5702] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 562.768127][ T5702] quatech2 4-1:0.51: device disconnected [ 562.841818][T21012] veth0_macvtap: entered promiscuous mode [ 562.896106][T21012] veth1_macvtap: entered promiscuous mode [ 562.940920][T21012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.976826][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.976928][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.056160][T21012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.100989][ T6028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.102371][ T6028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.110225][ T6028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.110271][ T6028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.996545][T22367] overlayfs: overlapping lowerdir path [ 565.013504][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.013526][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.119740][ T37] audit: type=1326 audit(1783689167.628:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22366 comm="syz.0.2578" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f712712de59 code=0x0 [ 565.339136][ T6546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.339156][ T6546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.433673][T22368] 9p: Bad value for 'rfdno' [ 565.585995][T22385] fuse: Unknown parameter 'f%0x0000000000000006' [ 566.245494][ T201] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 566.431629][ T201] hid-generic 0000:0000:0000.0032: hidraw1: HID v0.00 Device [syz1] on syz0 [ 566.579837][T22422] fido_id[22422]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 567.098405][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 567.172365][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 567.181032][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 567.182232][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 567.222136][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 567.826708][T22457] loop8: detected capacity change from 0 to 8 [ 567.871767][T22457] Dev loop8: unable to read RDB block 8 [ 567.871813][T22457] loop8: unable to read partition table [ 567.872023][T22457] loop8: partition table beyond EOD, truncated [ 567.907750][T22457] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 567.909394][T22456] Flush: task=syz.3.2590[22456] dev=loop8 state=2 [ 568.071687][T22456] Teardown: task=syz.3.2590[22456] dev=loop8 state=2 [ 568.119923][ T5681] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 568.132283][ T5681] hid-generic 0000:0000:0000.0033: hidraw1: HID v0.00 Device [syz1] on syz0 [ 568.316004][T22481] fido_id[22481]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 568.474916][T22430] xfrm0 speed is unknown, defaulting to 1000 [ 568.626725][T22503] fuse: Bad value for 'fd' [ 569.383031][ T60] Bluetooth: hci1: command tx timeout [ 569.598011][T22522] Flush: task=syz.1.2603[22522] dev=loop2 state=2 [ 569.673046][T22522] Teardown: task=syz.1.2603[22522] dev=loop2 state=2 [ 569.697860][T20893] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 569.845409][T20893] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 569.845444][T20893] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 569.845470][T20893] usb 4-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 569.845498][T20893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 569.845531][T20893] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 569.845554][T20893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.861699][T20893] usb 4-1: config 0 descriptor?? [ 569.879103][T22515] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 569.986138][T22539] netlink: 'syz.2.2606': attribute type 2 has an invalid length. [ 570.427307][ T6268] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.772744][T20893] acrux 0003:1A34:F705.0034: unknown main item tag 0x0 [ 570.772785][T20893] acrux 0003:1A34:F705.0034: unknown main item tag 0x0 [ 570.772813][T20893] acrux 0003:1A34:F705.0034: unknown main item tag 0x0 [ 570.772839][T20893] acrux 0003:1A34:F705.0034: unknown main item tag 0x0 [ 570.772865][T20893] acrux 0003:1A34:F705.0034: unknown main item tag 0x0 [ 570.772892][T20893] acrux 0003:1A34:F705.0034: unknown main item tag 0x0 [ 570.772919][T20893] acrux 0003:1A34:F705.0034: unknown main item tag 0x0 [ 570.772945][T20893] acrux 0003:1A34:F705.0034: unknown main item tag 0x0 [ 570.772980][T20893] acrux 0003:1A34:F705.0034: collection stack underflow [ 570.773005][T20893] acrux 0003:1A34:F705.0034: item 0 2 0 12 parsing failed [ 570.773682][T20893] acrux 0003:1A34:F705.0034: parse failed [ 570.773752][T20893] acrux 0003:1A34:F705.0034: probe with driver acrux failed with error -22 [ 571.462721][ T60] Bluetooth: hci1: command tx timeout [ 571.525027][T22579] fuse: Bad value for 'fd' [ 571.525746][ T5694] usb 4-1: USB disconnect, device number 119 [ 571.867663][ T6268] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.327734][T22620] netlink: 'syz.3.2610': attribute type 62 has an invalid length. [ 572.456528][ T6268] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.011125][ T6268] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.102691][ T5694] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 573.193232][T22430] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.193550][T22430] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.193817][T22430] bridge_slave_0: entered allmulticast mode [ 573.199078][T22430] bridge_slave_0: entered promiscuous mode [ 573.205933][T22430] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.206503][T22430] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.206761][T22430] bridge_slave_1: entered allmulticast mode [ 573.211143][T22430] bridge_slave_1: entered promiscuous mode [ 573.265161][ T5694] usb 4-1: config index 0 descriptor too short (expected 5668, got 36) [ 573.265190][ T5694] usb 4-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 573.265207][ T5694] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 573.265219][ T5694] usb 4-1: config 3 has no interface number 0 [ 573.265245][ T5694] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 573.265260][ T5694] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.323427][ T5694] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 573.323445][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.323456][ T5694] usb 4-1: Product: syz [ 573.323464][ T5694] usb 4-1: Manufacturer: syz [ 573.323492][ T5694] usb 4-1: SerialNumber: syz [ 573.361660][T22659] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 573.535945][ T60] Bluetooth: hci1: command tx timeout [ 573.791001][ T5694] usb-storage 4-1:3.20: USB Mass Storage device detected [ 573.831964][ T5694] usb-storage 4-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 573.847985][T22430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.849228][ T5694] scsi host1: usb-storage 4-1:3.20 [ 573.945102][ T5694] usb 4-1: USB disconnect, device number 120 [ 573.951534][T22430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.074454][T22743] fuse: Bad value for 'fd' [ 574.359642][T22430] team0: Port device team_slave_0 added [ 574.380168][T22430] team0: Port device team_slave_1 added [ 574.959936][T22430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.959947][T22430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.959963][T22430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.997905][T22430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.997922][T22430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.997950][T22430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.614164][ T60] Bluetooth: hci1: command tx timeout [ 575.822050][T22430] hsr_slave_0: entered promiscuous mode [ 575.828466][T22430] hsr_slave_1: entered promiscuous mode [ 575.829997][T22430] debugfs: 'hsr0' already exists in 'hsr' [ 575.830020][T22430] Cannot create hsr debugfs directory [ 575.990404][T22858] netlink: 'syz.2.2630': attribute type 16 has an invalid length. [ 576.078299][T22860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2630'. [ 576.638138][ T6268] team0: left allmulticast mode [ 576.638159][ T6268] team_slave_0: left allmulticast mode [ 576.638184][ T6268] team_slave_1: left allmulticast mode [ 576.677934][ T6268] team0: left promiscuous mode [ 576.677955][ T6268] team_slave_0: left promiscuous mode [ 576.678168][ T6268] team_slave_1: left promiscuous mode [ 576.708497][ T6268] bridge0: port 3(team0) entered disabled state [ 576.865608][ T6268] bridge_slave_1: left allmulticast mode [ 576.865633][ T6268] bridge_slave_1: left promiscuous mode [ 576.865826][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.013524][ T6268] bridge_slave_0: left allmulticast mode [ 577.013549][ T6268] bridge_slave_0: left promiscuous mode [ 577.013721][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.743025][ T6268] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 577.943589][ T6268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.023178][ T6268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.044568][ T6268] bond0 (unregistering): Released all slaves [ 578.214859][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 578.272080][ T6268] : left promiscuous mode [ 579.175385][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 581.712708][ T6268] hsr_slave_0: left promiscuous mode [ 581.732673][ T6268] hsr_slave_1: left promiscuous mode [ 581.734688][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.734713][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.773461][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.773487][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.838571][ T6268] veth1_macvtap: left promiscuous mode [ 581.838638][ T6268] veth0_macvtap: left promiscuous mode [ 581.838753][ T6268] veth1_vlan: left allmulticast mode [ 581.838959][ T6268] veth1_vlan: left promiscuous mode [ 581.839072][ T6268] veth0_vlan: left promiscuous mode [ 582.563854][ T6268] team0 (unregistering): Port device team_slave_1 removed [ 582.603297][ T6268] team0 (unregistering): Port device team_slave_0 removed [ 582.919552][T22430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 582.956272][T22430] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 582.957156][T22430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 583.071472][T22430] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.072395][T22430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 583.148970][T22430] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.152861][T22430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 583.220848][T22430] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 583.376355][T22430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.401963][T22430] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.454741][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.454880][ T6551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.457449][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.457599][ T6551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.222247][T22430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.288798][T22430] veth0_vlan: entered promiscuous mode [ 584.307249][T22430] veth1_vlan: entered promiscuous mode [ 584.375840][T22430] veth0_macvtap: entered promiscuous mode [ 584.390706][T22430] veth1_macvtap: entered promiscuous mode [ 584.466162][T22430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.513887][T22430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.541092][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.541970][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.542009][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.542043][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.393475][ T5783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.393494][ T5783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.537555][ T5790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.537575][ T5790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.769329][ T5702] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 585.853933][ T5702] hid-generic 0000:0000:0000.0035: hidraw1: HID v0.00 Device [syz1] on syz0 [ 586.349729][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 586.406242][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 586.426386][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 586.444674][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 586.445910][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.144278][T23140] sctp: [Deprecated]: syz.2.2643 (pid 23140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.144278][T23140] Use struct sctp_sack_info instead [ 587.362437][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.364797][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.364898][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.364994][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.365082][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.365168][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.365254][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.365350][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.365435][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.365523][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.365624][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.365719][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.365806][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.367388][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.367480][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.367572][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.367657][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.367737][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.367822][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.367917][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.367997][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.368076][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.372191][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.372284][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.372335][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 587.372387][T23146] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8138ae83, magic ae != 6b] [ 587.949860][T23110] xfrm0 speed is unknown, defaulting to 1000 [ 588.265395][ T5670] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 588.381923][ T5670] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 588.574768][ T60] Bluetooth: hci2: command tx timeout [ 589.211352][ T6268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.343401][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.343508][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.343616][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.343701][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.343786][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.343870][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.343960][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.344043][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.344126][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.344210][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.344299][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.344382][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.344473][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.344556][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.347579][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.347684][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.347769][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.347853][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.347947][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.348032][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.348117][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.348201][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.348303][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.348387][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.348479][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 589.348563][T23209] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8138ae83, magic ae != 6b] [ 590.432677][ T5681] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 590.561745][T20893] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 590.657418][ T60] Bluetooth: hci2: command tx timeout [ 590.757367][T20893] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 590.757395][T20893] usb 2-1: config 0 has no interface number 0 [ 590.757437][T20893] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 590.757473][T20893] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 590.757496][T20893] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 590.757522][T20893] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 590.757544][T20893] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 590.757585][T20893] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 590.757608][T20893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.759462][ T5681] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 590.759487][ T5681] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 590.759507][ T5681] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 590.759528][ T5681] usb 1-1: config 220 has no interface number 1 [ 590.759571][ T5681] usb 1-1: config 220 interface 76 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 590.759599][ T5681] usb 1-1: config 220 interface 0 has no altsetting 0 [ 590.759618][ T5681] usb 1-1: config 220 interface 76 has no altsetting 0 [ 590.823446][ T5681] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 590.823476][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.823497][ T5681] usb 1-1: Product: syz [ 590.823512][ T5681] usb 1-1: Manufacturer: syz [ 590.823526][ T5681] usb 1-1: SerialNumber: syz [ 590.948518][T20893] usb 2-1: config 0 descriptor?? [ 590.964363][T20893] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 591.121050][ T6268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.140570][ T5681] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 591.140591][ T5681] uvcvideo 1-1:220.0: No valid video chain found. [ 591.172050][T23257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.172848][T23257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.176773][T23257] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 591.241772][ T5681] usb 1-1: USB disconnect, device number 107 [ 591.263907][T23287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.264496][T23287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.377205][ T44] usb 2-1: USB disconnect, device number 88 [ 591.385168][ T44] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 591.571673][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.571762][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.571843][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.572108][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.572190][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.572269][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.572349][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.572434][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.671989][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.672079][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.672164][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.672260][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.672342][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.734389][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.734488][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.734589][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.734674][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.734757][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.734831][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.734921][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.735017][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.735093][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.735180][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.735281][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.735371][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 591.735456][T23309] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8138ae83, magic ae != 6b] [ 591.765633][ T5681] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 591.946847][ T5681] usb 3-1: Using ep0 maxpacket: 8 [ 591.948976][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 591.950020][ T5681] usb 3-1: config 2 has an invalid interface number: 24 but max is 0 [ 591.950043][ T5681] usb 3-1: config 2 has no interface number 0 [ 591.950074][ T5681] usb 3-1: config 2 interface 24 has no altsetting 0 [ 591.952114][ T5681] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=c7.3b [ 591.952140][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.952153][ T5681] usb 3-1: Product: syz [ 591.952160][ T5681] usb 3-1: Manufacturer: syz [ 591.952171][ T5681] usb 3-1: SerialNumber: syz [ 592.040464][ T6268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.053977][ T44] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 592.212784][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 592.214828][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.214871][ T44] usb 1-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 592.214886][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 592.214941][ T44] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice=20.00 [ 592.214955][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.224085][ T44] usb 1-1: config 0 descriptor?? [ 592.315114][ T44] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 592.316282][ T5681] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 592.316336][ T5681] command write [95] error -22 [ 592.358177][ T5681] usb 3-1: USB disconnect, device number 120 [ 592.732749][ T60] Bluetooth: hci2: command tx timeout [ 592.791114][ T6268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.962683][T20893] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 593.138057][T20893] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 593.138086][T20893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.146099][T20893] usb 2-1: config 0 descriptor?? [ 593.179484][T20893] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 593.214703][ T5670] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 593.237813][ T5670] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 593.338933][T23430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.339842][T23430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.359948][T23430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.370472][T23430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.597042][T23372] syzkaller1: entered promiscuous mode [ 593.597070][T23372] syzkaller1: entered allmulticast mode [ 593.614323][T23110] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.614723][T23110] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.646818][T23110] bridge_slave_0: entered allmulticast mode [ 593.650632][T23110] bridge_slave_0: entered promiscuous mode [ 593.666299][T23110] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.666652][T23110] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.666884][T23110] bridge_slave_1: entered allmulticast mode [ 593.670043][T23110] bridge_slave_1: entered promiscuous mode [ 593.897778][T23110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.920499][T23110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.178242][T20893] gspca_cpia1: usb_control_msg 03, error -71 [ 594.178622][T20893] gspca_cpia1: usb_control_msg 01, error -71 [ 594.178637][T20893] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 594.202159][T20893] usb 2-1: USB disconnect, device number 89 [ 594.648092][T23110] team0: Port device team_slave_0 added [ 594.784230][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.784327][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.784406][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.784486][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.784565][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.784649][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.784729][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.784810][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.784911][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.784995][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.785073][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.785151][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.785230][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.785321][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.785398][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.785682][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.785767][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.785852][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.785941][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.786018][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.786096][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.786182][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.786258][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.786336][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.786416][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4020ae46, magic ae != 6b] [ 594.786513][T23523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8138ae83, magic ae != 6b] [ 594.812657][ T60] Bluetooth: hci2: command tx timeout [ 594.988198][T23530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2678'. [ 595.246586][T23110] team0: Port device team_slave_1 added [ 595.348227][T23110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.348251][T23110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.348278][T23110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.369208][T23110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.369219][T23110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.369242][T23110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.377209][T20893] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 595.562670][T20893] usb 3-1: Using ep0 maxpacket: 32 [ 595.564597][T20893] usb 3-1: config 5 has an invalid interface number: 101 but max is 0 [ 595.564623][T20893] usb 3-1: config 5 has no interface number 0 [ 595.564668][T20893] usb 3-1: config 5 interface 101 has no altsetting 0 [ 595.599765][T20893] usb 3-1: New USB device found, idVendor=0bc2, idProduct=2300, bcdDevice=4a.7f [ 595.599795][T20893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.599814][T20893] usb 3-1: Product: ᠌ [ 595.599828][T20893] usb 3-1: Manufacturer: Ћ [ 595.599843][T20893] usb 3-1: SerialNumber: syz [ 595.926348][T20893] usb-storage 3-1:5.101: USB Mass Storage device detected [ 595.950887][T20893] usb-storage 3-1:5.101: Quirks match for vid 0bc2 pid 2300: 200000 [ 595.967242][T23592] loop5: detected capacity change from 0 to 7 [ 595.971380][ T6268] bridge_slave_1: left allmulticast mode [ 595.971408][ T6268] bridge_slave_1: left promiscuous mode [ 595.971631][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.011013][T20894] usb 1-1: USB disconnect, device number 108 [ 596.017101][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.017318][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 596.044164][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.044244][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 596.044444][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.044506][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 596.044654][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.044715][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 596.118254][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.118332][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 596.118531][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.118591][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 596.118749][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.118808][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 596.118852][T23592] ldm_validate_partition_table(): Disk read failed. [ 596.118959][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.119292][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 596.169968][T20893] usb 3-1: USB disconnect, device number 121 [ 596.205910][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.205985][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 596.223464][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.223534][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 596.241089][T23592] Dev loop5: unable to read RDB block 0 [ 596.321669][T23592] loop5: unable to read partition table [ 596.321872][T23592] loop5: partition table beyond EOD, truncated [ 596.321908][T23592] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 596.416812][ T6268] bridge_slave_0: left allmulticast mode [ 596.416842][ T6268] bridge_slave_0: left promiscuous mode [ 596.417195][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.442677][ T5694] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 596.595921][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 596.598452][ T5694] usb 2-1: config 2 has an invalid interface number: 51 but max is 0 [ 596.598480][ T5694] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 596.598501][ T5694] usb 2-1: config 2 has no interface number 0 [ 596.598546][ T5694] usb 2-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 596.598572][ T5694] usb 2-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 596.598595][ T5694] usb 2-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 596.598618][ T5694] usb 2-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 596.598643][ T5694] usb 2-1: config 2 interface 51 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 596.598671][ T5694] usb 2-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 596.598700][ T5694] usb 2-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 596.598722][ T5694] usb 2-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 596.598746][ T5694] usb 2-1: config 2 interface 51 altsetting 255 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 596.598773][ T5694] usb 2-1: config 2 interface 51 altsetting 255 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 596.598801][ T5694] usb 2-1: config 2 interface 51 altsetting 255 endpoint 0x84 has invalid wMaxPacketSize 0 [ 596.598823][ T5694] usb 2-1: config 2 interface 51 altsetting 255 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 596.598852][ T5694] usb 2-1: config 2 interface 51 has no altsetting 0 [ 596.601658][ T5694] usb 2-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=35.09 [ 596.601692][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.601711][ T5694] usb 2-1: Product: syz [ 596.601725][ T5694] usb 2-1: Manufacturer: syz [ 596.601740][ T5694] usb 2-1: SerialNumber: syz [ 596.631654][T23606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 596.926602][T23606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.929032][T23606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.931863][T23606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.969103][T23606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.067602][T23591] Flush: task=syz.1.2680[23591] dev=loop5 state=2 [ 597.080993][ T5694] keyspan_pda 2-1:2.51: Keyspan PDA converter detected [ 597.095642][ T5694] usb 2-1: Keyspan PDA converter now attached to ttyUSB0 [ 597.179977][ T5694] usb 2-1: USB disconnect, device number 90 [ 597.181030][T23591] Teardown: task=syz.1.2680[23591] dev=loop5 state=2 [ 597.239490][ T5694] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 597.246694][ T5694] keyspan_pda 2-1:2.51: device disconnected [ 597.715526][ T5790] smc: removing ib device syz0 [ 598.071793][ T5790] smbdirect: ib_dev[syz0] removed [ 598.182683][T23676] loop8: detected capacity change from 0 to 7 [ 598.188159][T23676] Dev loop8: unable to read RDB block 7 [ 598.188186][T23676] loop8: unable to read partition table [ 598.188320][T23676] loop8: partition table beyond EOD, truncated [ 598.188330][T23676] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 598.188951][T23675] Flush: task=syz.1.2687[23675] dev=loop8 state=2 [ 598.304172][T23675] Teardown: task=syz.1.2687[23675] dev=loop8 state=2 [ 598.821888][ T6268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.893810][ T6268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.936211][ T6268] bond0 (unregistering): Released all slaves [ 599.045047][T23110] hsr_slave_0: entered promiscuous mode [ 599.058562][T23110] hsr_slave_1: entered promiscuous mode [ 599.060750][T23110] debugfs: 'hsr0' already exists in 'hsr' [ 599.060774][T23110] Cannot create hsr debugfs directory [ 599.148078][T23627] netlink: 822 bytes leftover after parsing attributes in process `syz.2.2682'. [ 599.249519][T20893] xfrm0 speed is unknown, defaulting to 1000 [ 599.249557][T20893] syz0: Port: 1 Link DOWN [ 599.267244][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 600.271697][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2694'. [ 600.354117][ T5670] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 600.523911][ T5670] usb 2-1: Using ep0 maxpacket: 8 [ 600.525906][ T5670] usb 2-1: config 1 has an invalid interface number: 104 but max is 1 [ 600.525931][ T5670] usb 2-1: config 1 has an invalid interface number: 21 but max is 1 [ 600.525951][ T5670] usb 2-1: config 1 has no interface number 0 [ 600.525967][ T5670] usb 2-1: config 1 has no interface number 1 [ 600.526007][ T5670] usb 2-1: config 1 interface 21 has no altsetting 0 [ 600.579085][ T5670] usb 2-1: New USB device found, idVendor=045e, idProduct=028c, bcdDevice=ec.16 [ 600.579116][ T5670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.579136][ T5670] usb 2-1: Product: syz [ 600.579150][ T5670] usb 2-1: Manufacturer: syz [ 600.579164][ T5670] usb 2-1: SerialNumber: syz [ 600.721206][ T6268] tipc: Disabling bearer [ 600.721353][ T6268] tipc: Left network mode [ 600.931237][T23720] netlink: 'syz.1.2692': attribute type 9 has an invalid length. [ 600.931258][T23720] netlink: 'syz.1.2692': attribute type 2 has an invalid length. [ 601.256949][ T5670] usb 2-1: USB disconnect, device number 91 [ 602.063864][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 602.477933][T23848] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2702'. [ 602.574791][ T5670] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 602.699166][T23874] loop8: detected capacity change from 0 to 8 [ 602.702175][T23874] Dev loop8: unable to read RDB block 8 [ 602.702218][T23874] loop8: unable to read partition table [ 602.702416][T23874] loop8: partition table beyond EOD, truncated [ 602.722769][ T5670] usb 3-1: Using ep0 maxpacket: 8 [ 602.726789][ T5670] usb 3-1: unable to get BOS descriptor or descriptor too short [ 602.729783][ T5670] usb 3-1: config 2 has an invalid interface number: 24 but max is 0 [ 602.729809][ T5670] usb 3-1: config 2 has no interface number 0 [ 602.729840][ T5670] usb 3-1: config 2 interface 24 has no altsetting 0 [ 602.756565][ T5670] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=c7.3b [ 602.756599][ T5670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.756618][ T5670] usb 3-1: Product: syz [ 602.756632][ T5670] usb 3-1: Manufacturer: syz [ 602.756645][ T5670] usb 3-1: SerialNumber: syz [ 602.791376][T23874] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 602.836268][T14252] Flush: task=udevd[14252] dev=loop8 state=2 [ 602.883034][T20893] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 603.093929][T20893] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 603.093959][T20893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.093977][T20893] usb 1-1: Product: syz [ 603.093990][T20893] usb 1-1: Manufacturer: syz [ 603.094004][T20893] usb 1-1: SerialNumber: syz [ 603.164818][T14252] Teardown: task=udevd[14252] dev=loop8 state=2 [ 603.242263][T20893] usb 1-1: config 0 descriptor?? [ 603.258272][T20893] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 603.266591][ T5681] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 603.353384][T23892] netlink: 'syz.2.2700': attribute type 4 has an invalid length. [ 603.363934][ T5681] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 603.707092][T23897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.708198][T23897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.764338][T20893] gspca_stk1135: reg_w 0x2 err -110 [ 603.765472][T20893] gspca_stk1135: serial bus timeout: status=0x00 [ 603.765488][T20893] gspca_stk1135: Sensor write failed [ 603.765520][T20893] gspca_stk1135: serial bus timeout: status=0x00 [ 603.765530][T20893] gspca_stk1135: Sensor write failed [ 603.765588][T20893] gspca_stk1135: serial bus timeout: status=0x00 [ 603.765599][T20893] gspca_stk1135: Sensor read failed [ 603.765625][T20893] gspca_stk1135: serial bus timeout: status=0x00 [ 603.765635][T20893] gspca_stk1135: Sensor read failed [ 603.765644][T20893] gspca_stk1135: Detected sensor type unknown (0x0) [ 603.765675][T20893] gspca_stk1135: serial bus timeout: status=0x00 [ 603.765685][T20893] gspca_stk1135: Sensor read failed [ 603.765711][T20893] gspca_stk1135: serial bus timeout: status=0x00 [ 603.765720][T20893] gspca_stk1135: Sensor read failed [ 603.765743][T20893] gspca_stk1135: serial bus timeout: status=0x00 [ 603.765752][T20893] gspca_stk1135: Sensor write failed [ 603.765778][T20893] gspca_stk1135: serial bus timeout: status=0x00 [ 603.772005][T20893] gspca_stk1135: Sensor write failed [ 603.772097][T20893] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 604.404471][T23838] tipc: Started in network mode [ 604.404489][T23838] tipc: Node identity , cluster identity 4711 [ 604.404592][T23838] tipc: Failed to obtain node identity [ 604.404619][T23838] tipc: Enabling of bearer rejected, failed to enable media [ 604.908792][ T5670] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 604.908873][ T5670] command write [95] error -22 [ 604.954541][ T5670] usb 3-1: USB disconnect, device number 122 [ 605.266343][ T5255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 605.402635][ T6268] hsr_slave_0: left promiscuous mode [ 605.422584][ T6268] hsr_slave_1: left promiscuous mode [ 605.423656][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.423682][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.452684][ T5670] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 605.466080][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.466106][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.604707][ T6268] veth1_macvtap: left promiscuous mode [ 605.613190][ T6268] veth0_macvtap: left promiscuous mode [ 605.613515][ T6268] veth1_vlan: left promiscuous mode [ 605.613706][ T6268] veth0_vlan: left promiscuous mode [ 605.635565][ T5670] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 605.635592][ T5670] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 605.635610][ T5670] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 605.635626][ T5670] usb 2-1: config 220 has no interface number 1 [ 605.635650][ T5670] usb 2-1: config 220 interface 76 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 605.635666][ T5670] usb 2-1: config 220 interface 0 has no altsetting 0 [ 605.635676][ T5670] usb 2-1: config 220 interface 76 has no altsetting 0 [ 605.637962][ T5670] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 605.637992][ T5670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.638011][ T5670] usb 2-1: Product: syz [ 605.638021][ T5670] usb 2-1: Manufacturer: syz [ 605.638029][ T5670] usb 2-1: SerialNumber: syz [ 605.761072][ T824] usb 1-1: USB disconnect, device number 109 [ 606.043525][ T5670] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 606.043560][ T5670] uvcvideo 2-1:220.0: No valid video chain found. [ 606.066026][T23962] fuse: Bad value for 'fd' [ 606.107492][ T5670] usb 2-1: USB disconnect, device number 92 [ 606.968278][T23993] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2717'. [ 606.968325][T23993] nbd: must specify a device to reconfigure [ 607.012438][T23987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2716'. [ 607.012752][T23987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2716'. [ 607.034590][ T5670] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 607.104019][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c400000: rx timeout, send abort [ 607.194462][ T5670] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.194525][ T5670] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.196764][ T5670] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 607.196795][ T5670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.196815][ T5670] usb 3-1: Product: syz [ 607.196828][ T5670] usb 3-1: Manufacturer: syz [ 607.196843][ T5670] usb 3-1: SerialNumber: syz [ 607.215884][ T6268] team0 (unregistering): Port device team_slave_1 removed [ 607.323517][ T6268] team0 (unregistering): Port device team_slave_0 removed [ 607.441426][T24002] fuse: Bad value for 'fd' [ 607.603890][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c401c00: rx timeout, send abort [ 607.606552][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c400000: abort rx timeout. Force session deactivation [ 607.787432][T23996] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2716'. [ 608.077882][ T5670] usb 3-1: unit 5 not found! [ 608.108864][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c401c00: abort rx timeout. Force session deactivation [ 608.302232][T24019] netlink: 'syz.0.2721': attribute type 51 has an invalid length. [ 608.414145][ T5670] usb 3-1: USB disconnect, device number 123 [ 608.625140][T20893] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 608.773192][T20893] usb 2-1: Using ep0 maxpacket: 16 [ 608.775220][T20893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 608.778316][T20893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.778341][T20893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.780441][T20893] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 608.780469][T20893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.780481][T20893] usb 2-1: Product: syz [ 608.780489][T20893] usb 2-1: Manufacturer: syz [ 608.780497][T20893] usb 2-1: SerialNumber: syz [ 609.109888][T20893] usb 2-1: 0:1 : does not exist [ 609.109974][T20893] usb 2-1: unit 5 not found! [ 609.127892][T20893] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 609.127923][T20893] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 609.127941][T20893] usb 2-1: [2] FU [Headset Playback Volume] ch = 1, val = 0/1/1 [ 609.128809][T20893] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 609.233314][ T824] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 609.410486][T20893] usb 2-1: USB disconnect, device number 93 [ 609.433697][ T824] usb 3-1: Using ep0 maxpacket: 16 [ 609.448218][ T824] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 609.448245][ T824] usb 3-1: config 0 has no interface number 0 [ 609.448289][ T824] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 609.448315][ T824] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 609.448340][ T824] usb 3-1: config 0 interface 41 has no altsetting 0 [ 609.450823][ T824] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 609.450851][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.450872][ T824] usb 3-1: Product: syz [ 609.450886][ T824] usb 3-1: Manufacturer: syz [ 609.450900][ T824] usb 3-1: SerialNumber: syz [ 609.547642][ T824] usb 3-1: config 0 descriptor?? [ 609.548366][T24057] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 609.548474][T24057] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 609.552331][T15290] udevd[15290]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.737354][T24094] fuse: Bad value for 'fd' [ 609.825529][T24057] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 609.825642][T24057] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 609.851659][ T824] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 610.250131][T20893] usb 3-1: USB disconnect, device number 124 [ 611.492224][T24172] fuse: Bad value for 'fd' [ 612.070547][T24194] netlink: 'syz.1.2740': attribute type 10 has an invalid length. [ 612.078215][T24194] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.141564][T24194] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.161078][T24194] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.161358][T24194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.161757][T24194] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.161945][T24194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.200670][T24194] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 612.288457][ T6268] IPVS: stop unused estimator thread 0... [ 612.362648][T20893] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 612.512608][T20893] usb 2-1: Using ep0 maxpacket: 32 [ 612.515058][T20893] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 612.515100][T20893] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 612.518134][T20893] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 612.518160][T20893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.518180][T20893] usb 2-1: Product: syz [ 612.518194][T20893] usb 2-1: Manufacturer: syz [ 612.518208][T20893] usb 2-1: SerialNumber: syz [ 612.530750][T24197] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 612.561454][T20893] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 612.561578][T20893] imon 2-1:155.0: unable to initialize intf0, err -19 [ 612.561596][T20893] imon:imon_probe: failed to initialize context! [ 612.561608][T20893] imon 2-1:155.0: unable to register, err -19 [ 612.867164][T24219] loop8: detected capacity change from 0 to 8 [ 612.870490][T24219] Dev loop8: unable to read RDB block 8 [ 612.870880][T24219] loop8: unable to read partition table [ 612.871074][T24219] loop8: partition table beyond EOD, truncated [ 612.898355][T24219] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 612.937507][T14252] Flush: task=udevd[14252] dev=loop8 state=2 [ 613.014904][T14252] Teardown: task=udevd[14252] dev=loop8 state=2 [ 613.559770][T23110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 613.633737][T23110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 613.643148][T23110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 613.728765][T23110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.730133][T23110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 613.775937][T23110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.776992][T23110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 613.832238][T23110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.993540][T24261] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2745'. [ 614.068227][T23110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.136208][T23110] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.174795][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.195594][ T6025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.240934][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.243928][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.062692][T20893] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 615.085942][ T5681] usb 2-1: USB disconnect, device number 94 [ 615.161948][T23110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.216226][T20893] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 615.216244][T20893] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 615.216256][T20893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 615.216283][T20893] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 615.216297][T20893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 615.216311][T20893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 615.220684][T20893] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 615.220721][T20893] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 615.220741][T20893] usb 1-1: Product: syz [ 615.220754][T20893] usb 1-1: Manufacturer: syz [ 615.306304][T24286] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 615.348067][T20893] cdc_wdm 1-1:1.0: skipping garbage [ 615.348087][T20893] cdc_wdm 1-1:1.0: skipping garbage [ 615.413906][T20893] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 615.414015][T20893] cdc_wdm 1-1:1.0: Unknown control protocol [ 615.655982][ T5670] usb 1-1: USB disconnect, device number 110 [ 615.734036][T23110] veth0_vlan: entered promiscuous mode [ 615.780237][T24286] cdc_wdm 1-1:1.0: Error submitting int urb - -2 [ 615.912119][T23110] veth1_vlan: entered promiscuous mode [ 616.024099][ T5833] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 616.065384][T23110] veth0_macvtap: entered promiscuous mode [ 616.084271][T23110] veth1_macvtap: entered promiscuous mode [ 616.144991][T23110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.170761][T23110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.192849][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 616.201114][ T5833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 616.217311][ T5833] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 616.217341][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.217353][ T5833] usb 3-1: Product: syz [ 616.217361][ T5833] usb 3-1: Manufacturer: syz [ 616.217368][ T5833] usb 3-1: SerialNumber: syz [ 616.221390][T20746] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.262531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 616.282519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 616.292520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 616.302535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 616.312519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 616.322522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 616.332517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 616.342508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 617.636194][T20746] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.637750][T20746] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.637999][T20746] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.133526][ T824] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 618.342675][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.342708][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.342788][ T824] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 618.342814][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.345927][ T5833] usb 3-1: unit 0 not found! [ 618.471547][ T824] usb 1-1: config 0 descriptor?? [ 619.088303][T24321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.213408][ T5833] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 619.298620][ T5833] usb 3-1: unit 0 not found! [ 619.406631][ T6025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.406653][ T6025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.467650][ T5833] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 619.473567][ T5604] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 619.511409][ T5604] Bluetooth: hci4: Injecting HCI hardware error event [ 619.643624][ T5833] usb 3-1: unit 0 not found! [ 619.691747][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.691764][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.862378][ T824] uclogic 0003:256C:006D.0039: v1 frame probing failed: -71 [ 619.863634][ T824] uclogic 0003:256C:006D.0039: failed probing parameters: -71 [ 619.863746][ T824] uclogic 0003:256C:006D.0039: probe with driver uclogic failed with error -71 [ 619.912579][ T824] usb 1-1: USB disconnect, device number 111 [ 620.316575][ T5833] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 620.326171][ T5833] usb 3-1: USB disconnect, device number 125 [ 620.430080][T14187] udevd[14187]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.648499][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 623.146341][ T60] Bluetooth: hci4: hardware error 0x00 [ 624.167005][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2770'. [ 624.699932][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.700034][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.385850][ T60] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 625.952630][ T824] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 626.222772][ T824] usb 1-1: Using ep0 maxpacket: 32 [ 626.229757][ T824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 626.231115][ T824] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.231140][ T824] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 626.270867][ T824] usb 1-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 626.270886][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.270897][ T824] usb 1-1: Product: syz [ 626.270905][ T824] usb 1-1: Manufacturer: syz [ 626.270913][ T824] usb 1-1: SerialNumber: syz [ 626.427656][ T824] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 626.427779][ T824] gspca_stv06xx: st6422 sensor detected [ 626.684312][ T824] STV06xx 1-1:1.0: probe with driver STV06xx failed with error -71 [ 627.152436][ T824] usb 1-1: USB disconnect, device number 112 [ 627.318182][T15290] udevd[15290]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.765875][ T5702] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 627.923983][ T5702] usb 2-1: Using ep0 maxpacket: 16 [ 627.927992][ T5702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.928041][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 627.928069][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 627.928092][ T5702] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 627.928115][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.931415][ T5702] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 627.931442][ T5702] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 627.931462][ T5702] usb 2-1: Manufacturer: syz [ 627.945109][ T5702] usb 2-1: config 0 descriptor?? [ 627.962596][T24348] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 628.132610][T24348] usb 1-1: Using ep0 maxpacket: 32 [ 628.134874][T24348] usb 1-1: config 0 has no interfaces? [ 628.140358][T24348] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 628.140388][T24348] usb 1-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 628.140409][T24348] usb 1-1: Product: syz [ 628.140424][T24348] usb 1-1: Manufacturer: syz [ 628.140438][T24348] usb 1-1: SerialNumber: syz [ 628.209574][T24348] usb 1-1: config 0 descriptor?? [ 628.332672][ T5702] rc_core: IR keymap rc-hauppauge not found [ 628.332687][ T5702] Registered IR keymap rc-empty [ 628.332941][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 628.352855][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 628.375110][ T5702] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 628.379057][ T5702] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 628.395825][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 628.460318][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 628.513364][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 628.538497][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 628.594580][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 628.657589][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 628.712820][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.006418][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.026590][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.046421][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.103103][ T5702] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 629.103129][ T5702] mceusb 2-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 629.129882][ T5702] usb 2-1: USB disconnect, device number 95 [ 630.957469][T24348] usb 1-1: USB disconnect, device number 113 [ 632.550013][T24553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.221796][T24535] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 633.222144][T24535] block device autoloading is deprecated and will be removed. [ 633.350671][T24578] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2785'. [ 633.387664][T24582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.342646][T24611] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 636.008405][ T824] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 636.255062][ T824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 636.255097][ T824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.255136][ T824] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 636.255160][ T824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.316448][ T824] usb 4-1: config 0 descriptor?? [ 636.748370][ T824] hid (null): invalid report_size 1270 [ 636.748394][ T824] hid (null): unknown global tag 0xd [ 636.749517][ T824] hid (null): unknown global tag 0xd [ 638.306728][ T824] kye 0003:0458:5016.003A: control desc unexpectedly large [ 638.359895][ T824] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.003A/input/input40 [ 638.570315][ T824] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.003A/input/input41 [ 638.697285][ T824] kye 0003:0458:5016.003A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 638.765577][ T824] usb 4-1: USB disconnect, device number 121 [ 638.850508][T24676] fido_id[24676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 639.704532][ T60] block nbd1: Receive control failed (result -107) [ 641.796960][T24685] block nbd1: shutting down sockets [ 642.111489][T24348] kernel read not supported for file /video9 (pid: 24348 comm: kworker/1:0) [ 642.339840][ T824] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 642.888790][ T824] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.888840][ T824] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 642.888863][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.265595][ T824] usb 2-1: config 0 descriptor?? [ 643.312022][ T824] pwc: Askey VC010 type 2 USB webcam detected. [ 643.683613][ T824] pwc: recv_control_msg error -32 req 02 val 2b00 [ 643.684226][ T824] pwc: recv_control_msg error -32 req 02 val 2700 [ 644.221072][ T824] pwc: recv_control_msg error -32 req 02 val 2c00 [ 644.943932][ T5694] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 645.103608][ T5694] usb 3-1: Using ep0 maxpacket: 16 [ 645.107096][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.108537][ T5694] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 645.108608][ T5694] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 645.108630][ T5694] usb 3-1: Manufacturer: syz [ 645.156124][ T5694] usb 3-1: config 0 descriptor?? [ 645.663289][ T5694] creative-sb0540 0003:041E:3100.003B: ignoring exceeding usage max [ 645.750438][ T5694] creative-sb0540 0003:041E:3100.003B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 645.898156][ T824] pwc: recv_control_msg error -71 req 04 val 1000 [ 645.898510][ T824] pwc: recv_control_msg error -71 req 04 val 1300 [ 645.898860][ T824] pwc: recv_control_msg error -71 req 04 val 1400 [ 645.899180][ T824] pwc: recv_control_msg error -71 req 02 val 2000 [ 645.900153][ T824] pwc: recv_control_msg error -71 req 02 val 2100 [ 645.900489][ T824] pwc: recv_control_msg error -71 req 04 val 1500 [ 645.945674][ T824] pwc: recv_control_msg error -71 req 02 val 2500 [ 645.949346][ T824] pwc: recv_control_msg error -71 req 02 val 2400 [ 645.949784][ T824] pwc: recv_control_msg error -71 req 02 val 2600 [ 645.957385][ T824] pwc: recv_control_msg error -71 req 02 val 2900 [ 645.976521][ T824] pwc: recv_control_msg error -71 req 02 val 2800 [ 645.977206][ T824] pwc: recv_control_msg error -71 req 04 val 1100 [ 645.977658][ T824] pwc: recv_control_msg error -71 req 04 val 1200 [ 646.174541][ T824] pwc: Registered as video103. [ 646.188952][ T824] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42 [ 646.234338][ T824] usb 2-1: USB disconnect, device number 96 [ 646.321842][ T5833] usb 3-1: USB disconnect, device number 126 [ 646.557564][T24813] fido_id[24813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 650.773859][T20893] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 650.958138][T20893] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 650.958158][T20893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.958169][T20893] usb 4-1: Product: syz [ 650.958177][T20893] usb 4-1: Manufacturer: syz [ 650.958185][T20893] usb 4-1: SerialNumber: syz [ 651.080205][ T201] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 652.540391][ T201] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 652.562390][T20893] usb 4-1: USB disconnect, device number 122 [ 652.623514][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 652.847256][ T201] ath9k_htc: Failed to initialize the device [ 652.861912][T20893] usb 4-1: ath9k_htc: USB layer deinitialized [ 653.564641][T24935] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2848'. [ 654.882740][ T201] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 654.952651][ T44] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 655.032667][ T201] usb 1-1: Using ep0 maxpacket: 32 [ 655.036290][ T201] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.036311][ T201] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 655.036323][ T201] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 655.036336][ T201] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 655.036347][ T201] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 655.036360][ T201] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 655.038793][ T201] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.038811][ T201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 655.038822][ T201] usb 1-1: SerialNumber: syz [ 655.170172][ T44] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 655.170202][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.210936][ T44] usb 2-1: config 0 descriptor?? [ 655.218069][ T201] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 655.262778][ T201] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 655.401412][ T201] usb 1-1: USB disconnect, device number 114 [ 655.697186][ T44] ath6kl: Failed to submit usb control message: -71 [ 655.697234][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 655.697248][ T44] ath6kl: Unable to send get target info: -71 [ 655.738357][ T44] ath6kl: Failed to init ath6kl core: -71 [ 655.739438][ T44] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 655.792859][ T44] usb 2-1: USB disconnect, device number 97 [ 656.788747][T25004] PKCS7: Unknown OID: [4] 0.0 [ 656.788764][T25004] PKCS7: Only support pkcs7_signedData type [ 658.048540][ T44] ------------[ cut here ]------------ [ 658.048554][ T44] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 658.048572][ T44] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#1: kworker/1:1/44 [ 658.048614][ T44] Modules linked in: [ 658.048647][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 658.048674][ T44] Tainted: [L]=SOFTLOCKUP [ 658.048681][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 658.048693][ T44] Workqueue: events drm_fb_helper_damage_work [ 658.048719][ T44] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 658.048743][ T44] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 d5 f4 ab fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 658.048760][ T44] RSP: 0018:ffffc90000b57840 EFLAGS: 00010246 [ 658.048777][ T44] RAX: 1ffff11004b4de00 RBX: 0000000000000000 RCX: 0000000000000000 [ 658.048791][ T44] RDX: ffffffff8be3b000 RSI: ffffffff8be58da0 RDI: ffffffff8fdbcd60 [ 658.048806][ T44] RBP: ffffc90000b57928 R08: 0000000000000000 R09: 0000000000000000 [ 658.048818][ T44] R10: dffffc0000000000 R11: fffffbfff1fa1160 R12: ffffffff8be58da0 [ 658.048833][ T44] R13: ffff888025a6f000 R14: ffffffff8fdbcd60 R15: ffffffff8be3b000 [ 658.048847][ T44] FS: 0000000000000000(0000) GS:ffff888125b00000(0000) knlGS:0000000000000000 [ 658.048863][ T44] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.048876][ T44] CR2: 00007febcaae56b8 CR3: 0000000061174000 CR4: 00000000003526f0 [ 658.048894][ T44] Call Trace: [ 658.048902][ T44] [ 658.048916][ T44] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 658.048939][ T44] ? rt_spin_unlock+0x157/0x200 [ 658.048967][ T44] ? __pfx_autoremove_wake_function+0x10/0x10 [ 658.048995][ T44] ? rt_spin_unlock+0x163/0x200 [ 658.049024][ T44] ? drm_vblank_get+0x147/0x280 [ 658.049048][ T44] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 658.049072][ T44] drm_fb_helper_damage_work+0x6cf/0xf00 [ 658.049106][ T44] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 658.049147][ T44] ? lock_acquire+0x115/0x350 [ 658.049176][ T44] ? rcu_is_watching+0x15/0xb0 [ 658.049207][ T44] ? process_one_work+0x7fd/0x1480 [ 658.049229][ T44] process_one_work+0xaaf/0x1480 [ 658.049272][ T44] ? __pfx_process_one_work+0x10/0x10 [ 658.049290][ T44] ? do_raw_spin_lock+0x12b/0x2f0 [ 658.049323][ T44] ? assign_work+0x3cf/0x5d0 [ 658.049348][ T44] worker_thread+0xb05/0x10d0 [ 658.049392][ T44] kthread+0x388/0x470 [ 658.049417][ T44] ? __pfx_worker_thread+0x10/0x10 [ 658.049436][ T44] ? __pfx_kthread+0x10/0x10 [ 658.049462][ T44] ret_from_fork+0x514/0xb70 [ 658.049491][ T44] ? __pfx_ret_from_fork+0x10/0x10 [ 658.049515][ T44] ? __switch_to+0xc89/0x1420 [ 658.049541][ T44] ? __pfx_kthread+0x10/0x10 [ 658.049566][ T44] ret_from_fork_asm+0x1a/0x30 [ 658.049609][ T44] [ 658.049625][ T44] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 658.049641][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 658.049666][ T44] Tainted: [L]=SOFTLOCKUP [ 658.049673][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 658.049684][ T44] Workqueue: events drm_fb_helper_damage_work [ 658.049707][ T44] Call Trace: [ 658.049714][ T44] [ 658.049722][ T44] vpanic+0x5d9/0xad0 [ 658.049746][ T44] ? __pfx_vpanic+0x10/0x10 [ 658.049766][ T44] ? __pfx__printk+0x10/0x10 [ 658.049788][ T44] ? is_bpf_text_address+0x292/0x2b0 [ 658.049809][ T44] ? is_bpf_text_address+0x26/0x2b0 [ 658.049837][ T44] panic+0xc5/0xd0 [ 658.049856][ T44] ? __pfx_panic+0x10/0x10 [ 658.049883][ T44] ? ret_from_fork_asm+0x1a/0x30 [ 658.049912][ T44] __warn+0x315/0x4c0 [ 658.049930][ T44] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 658.049956][ T44] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 658.049978][ T44] __report_bug+0x276/0x570 [ 658.050005][ T44] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 658.050034][ T44] ? __pfx___report_bug+0x10/0x10 [ 658.050065][ T44] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.050088][ T44] ? lockdep_hardirqs_on+0x7a/0x110 [ 658.050109][ T44] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.050134][ T44] report_bug_entry+0x19a/0x290 [ 658.050157][ T44] ? drm_crtc_wait_one_vblank+0x51a/0x560 [ 658.050178][ T44] ? drm_crtc_wait_one_vblank+0x51f/0x560 [ 658.050206][ T44] handle_bug+0xce/0x200 [ 658.050231][ T44] exc_invalid_op+0x1a/0x50 [ 658.050254][ T44] asm_exc_invalid_op+0x1a/0x20 [ 658.050274][ T44] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 658.050296][ T44] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 d5 f4 ab fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 658.050319][ T44] RSP: 0018:ffffc90000b57840 EFLAGS: 00010246 [ 658.050336][ T44] RAX: 1ffff11004b4de00 RBX: 0000000000000000 RCX: 0000000000000000 [ 658.050348][ T44] RDX: ffffffff8be3b000 RSI: ffffffff8be58da0 RDI: ffffffff8fdbcd60 [ 658.050362][ T44] RBP: ffffc90000b57928 R08: 0000000000000000 R09: 0000000000000000 [ 658.050375][ T44] R10: dffffc0000000000 R11: fffffbfff1fa1160 R12: ffffffff8be58da0 [ 658.050390][ T44] R13: ffff888025a6f000 R14: ffffffff8fdbcd60 R15: ffffffff8be3b000 [ 658.050426][ T44] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 658.050447][ T44] ? rt_spin_unlock+0x157/0x200 [ 658.050473][ T44] ? __pfx_autoremove_wake_function+0x10/0x10 [ 658.050500][ T44] ? rt_spin_unlock+0x163/0x200 [ 658.050529][ T44] ? drm_vblank_get+0x147/0x280 [ 658.050553][ T44] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 658.050576][ T44] drm_fb_helper_damage_work+0x6cf/0xf00 [ 658.050609][ T44] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 658.050650][ T44] ? lock_acquire+0x115/0x350 [ 658.050678][ T44] ? rcu_is_watching+0x15/0xb0 [ 658.050700][ T44] ? process_one_work+0x7fd/0x1480 [ 658.050721][ T44] process_one_work+0xaaf/0x1480 [ 658.050763][ T44] ? __pfx_process_one_work+0x10/0x10 [ 658.050782][ T44] ? do_raw_spin_lock+0x12b/0x2f0 [ 658.050812][ T44] ? assign_work+0x3cf/0x5d0 [ 658.050838][ T44] worker_thread+0xb05/0x10d0 [ 658.050882][ T44] kthread+0x388/0x470 [ 658.050906][ T44] ? __pfx_worker_thread+0x10/0x10 [ 658.050925][ T44] ? __pfx_kthread+0x10/0x10 [ 658.050951][ T44] ret_from_fork+0x514/0xb70 [ 658.050978][ T44] ? __pfx_ret_from_fork+0x10/0x10 [ 658.051003][ T44] ? __switch_to+0xc89/0x1420 [ 658.051029][ T44] ? __pfx_kthread+0x10/0x10 [ 658.051054][ T44] ret_from_fork_asm+0x1a/0x30 [ 658.051095][ T44] [ 658.051363][ T44] Kernel Offset: disabled