last executing test programs: 17.668084129s ago: executing program 0 (id=676): syz_create_resource$binfmt(0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000009) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000140)=0x7ff, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x86000, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='!\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x81, 0x3, 0xfffffffe, 0x717e387f, 0xc0, "1ae34e06268cb2fb00bd00", 0x6, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xd8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000002c00058008000140000086dd080001400000002c080001400000001608000140000000736afd014000008100080009"], 0x248}}, 0x0) 15.990194832s ago: executing program 0 (id=679): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, 0x0, 0x0, 0x10048095, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000688a82fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {0x0}, {&(0x7f0000001200)="d0", 0x1}], 0x3}, 0x9cdc2384056b48b8) 13.002527825s ago: executing program 0 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000a6cb325530e83286fb6e935c2f92aa1e725913485ebc500f000000000000003d37c9a1c20184a0590ae2b267a2138505bf69ee3cad6cb045aa0dd6e11e2df47ac7625436b05462ed75522b435d8b9a2c1aaef517c4cfbad0", @ANYRES16=r6, @ANYBLOB="04002bbd7000fbdbdf2501000000000000000841000000140018000000087564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 9.346061498s ago: executing program 3 (id=692): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0403"], 0xe) ioctl$VHOST_NET_SET_BACKEND(r1, 0x8008af83, &(0x7f0000000080)={0x1, r0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) flock(0xffffffffffffffff, 0x5) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) 8.576416658s ago: executing program 0 (id=695): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 7.670148931s ago: executing program 3 (id=696): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 6.811030459s ago: executing program 1 (id=698): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) 6.756201584s ago: executing program 3 (id=700): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='macvtap0\x00', 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 6.658113453s ago: executing program 1 (id=701): getpgrp(0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @dev}, {0x1, @broadcast}, 0x4a, {0x2, 0x0, @multicast1}}) 6.541853134s ago: executing program 3 (id=702): io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = syz_open_dev$dri(0x0, 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000080), 0x4) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6(0xa, 0x1, 0x0) 6.420791135s ago: executing program 0 (id=710): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x6, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.514180377s ago: executing program 2 (id=703): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa7, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x6, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xfc, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x202, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa08606, 0x1007, 0xaa, 0x81, 0x2, 0x72, 0x5, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x7d, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xa, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x0, 0x8, 0x4, 0x4, 0x2, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0xc0c0128e, &(0x7f0000000240)={0x4000000000002000, 0x2}) 5.426066176s ago: executing program 2 (id=704): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ptrace(0x11, r0) 5.407109427s ago: executing program 1 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_dev$dri(0x0, 0x4, 0x14000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020040fcefffff00005a1b541f888300000000000000670000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140)=0x10000008, 0x4) socket$unix(0x1, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40040) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@multicast1, 0x4e23, 0x0, 0x4e23, 0x1, 0xa, 0x20, 0x0, 0x3a}, {0x4, 0x80000000, 0x2, 0x4, 0x41f, 0x3, 0x3, 0x40c4}, {0x2, 0x3, 0x5}, 0x9, 0x6e6bbd, 0x3, 0x1, 0x2, 0x2}, {{@in=@multicast2, 0x4d5, 0xff}, 0x2, @in=@rand_addr=0x64010100, 0x3504, 0x0, 0xa44bb7f30d746999, 0x5, 0x5, 0x6, 0x8}}, 0xe8) 5.252807991s ago: executing program 2 (id=706): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000300)={0x0, 0x1, 0xffe7, 0x0, 0x7, 0x2080, 0x6ae0}) 5.164525879s ago: executing program 2 (id=707): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x2c}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$kcm(0x29, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58, 0x200080c0}, 0x0) r7 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$int_in(r7, 0x5421, &(0x7f0000000100)=0x6) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, 0x0) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) 3.648250258s ago: executing program 1 (id=708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 2.480874034s ago: executing program 3 (id=709): socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) read$FUSE(r5, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(r7, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)='m', 0xfffffdfc}]) syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) 2.478707364s ago: executing program 0 (id=718): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x173) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x48c040, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, 0x0) syz_fuse_handle_req(r0, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 2.478342954s ago: executing program 2 (id=711): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 2.321078919s ago: executing program 2 (id=712): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x44e201) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) pipe2(0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 2.105989978s ago: executing program 1 (id=713): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x9, 0x2012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000005c0)={0x48}) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x4, 0x2, 0x5}, 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r3, &(0x7f0000000100)=""/162, 0xa2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, 0xfffffffffffffffe}, 0x8f) pread64(r3, &(0x7f00000002c0)=""/190, 0xbe, 0x200) epoll_pwait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r5, 0x3) shutdown(r5, 0x1) ioctl$MON_IOCX_GET(r4, 0x400c9206, &(0x7f0000000140)={0x0, 0x0}) 1.184141232s ago: executing program 3 (id=714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='k:::\x00', 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x4e27, 0x8, 0x3, 0x40300000, 0xe7, 0x8, 0x8, 0xa82, 0x1001f, 0x100, 0xcf3, 0xb, 0x1db, 0x2, 0x6, 0x101, 0x10001, 0xf, 0x3, 0x0, 0x2, 0x80000001, 0xf23, 0xea, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x9, 0xfffffff8]}) 0s ago: executing program 1 (id=715): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40) kernel console output (not intermixed with test programs): devsim netdevsim2 netdevsim3: renamed from eth3 [ 79.879286][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.889322][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.905059][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.918074][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.006353][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.024693][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.045622][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.058035][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.178031][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.189016][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.209238][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.231921][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.247870][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.300278][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.348010][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.355417][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.383495][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.393355][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.400816][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.421765][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.474789][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.490468][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.522974][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.530399][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.545542][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.553656][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.581552][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.588738][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.602099][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.609259][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.720132][ T5772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.733020][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.844353][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.954797][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.000716][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.008204][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.068710][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.076103][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.160813][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.259592][ T5787] Bluetooth: hci1: command tx timeout [ 81.259643][ T5777] Bluetooth: hci2: command tx timeout [ 81.267680][ T5783] Bluetooth: hci0: command tx timeout [ 81.281277][ T5771] Bluetooth: hci3: command tx timeout [ 81.292531][ T5769] veth0_vlan: entered promiscuous mode [ 81.320735][ T5769] veth1_vlan: entered promiscuous mode [ 81.381390][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.504532][ T5769] veth0_macvtap: entered promiscuous mode [ 81.551815][ T5769] veth1_macvtap: entered promiscuous mode [ 81.572829][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.601022][ T5772] veth0_vlan: entered promiscuous mode [ 81.669657][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.684314][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.700820][ T5772] veth1_vlan: entered promiscuous mode [ 81.719192][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.729431][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.739807][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.748764][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.757676][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.811453][ T5768] veth0_vlan: entered promiscuous mode [ 81.852226][ T5768] veth1_vlan: entered promiscuous mode [ 81.863687][ T5772] veth0_macvtap: entered promiscuous mode [ 81.903202][ T5772] veth1_macvtap: entered promiscuous mode [ 81.963516][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.974746][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.988402][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.070070][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.088342][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.103473][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.143509][ T5768] veth0_macvtap: entered promiscuous mode [ 82.154810][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.167527][ T5768] veth1_macvtap: entered promiscuous mode [ 82.178189][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.198791][ T5774] veth0_vlan: entered promiscuous mode [ 82.223292][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.242304][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.252545][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.261510][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.286987][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.299900][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.310444][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.322103][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.334208][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.361975][ T5774] veth1_vlan: entered promiscuous mode [ 82.399772][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.411480][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.424802][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.436902][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.449743][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.475195][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.486449][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.522769][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.540514][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.549694][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.559516][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.633944][ T5774] veth0_macvtap: entered promiscuous mode [ 82.660485][ T5774] veth1_macvtap: entered promiscuous mode [ 82.769397][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.795016][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.851384][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.886556][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.904445][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.915210][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.925367][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.936319][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.949519][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.018343][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.022798][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.042130][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.043857][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.054569][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.076310][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.086532][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.097329][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.114331][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.133244][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.155073][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.163854][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.188141][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.335910][ T5783] Bluetooth: hci0: command tx timeout [ 83.342323][ T5771] Bluetooth: hci3: command tx timeout [ 83.342358][ T5787] Bluetooth: hci1: command tx timeout [ 83.347912][ T5783] Bluetooth: hci2: command tx timeout [ 83.363859][ T5867] fuse: Unknown parameter '0x0000000000000005' [ 83.386638][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.406056][ T5869] syz.3.4[5869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.423919][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.425786][ T5869] loop3: detected capacity change from 0 to 128 [ 83.440270][ T5869] ======================================================= [ 83.440270][ T5869] WARNING: The mand mount option has been deprecated and [ 83.440270][ T5869] and is ignored by this kernel. Remove the mand [ 83.440270][ T5869] option from the mount to silence this warning. [ 83.440270][ T5869] ======================================================= [ 83.503596][ T5869] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 83.525655][ T5869] hpfs: filesystem error: improperly stopped [ 83.534445][ T5869] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 83.544488][ T5869] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 83.555422][ T5869] hpfs: You really don't want any checks? You are crazy... [ 83.563284][ T5869] hpfs: hpfs_map_sector(): read error [ 83.571176][ T5869] hpfs: code page support is disabled [ 83.597704][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.598864][ T5869] hpfs: hpfs_map_4sectors(): unaligned read [ 83.630314][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.647522][ T5869] hpfs: hpfs_map_4sectors(): unaligned read [ 83.661406][ T5869] hpfs: filesystem error: unable to find root dir [ 83.713077][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.732774][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.846374][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.870910][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.227856][ T5874] netlink: 464 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.387025][ T5872] loop1: detected capacity change from 0 to 32768 [ 84.402617][ T5872] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (5872) [ 84.470154][ T5872] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.480832][ T5872] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 84.489935][ T5872] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 84.500009][ T5872] BTRFS info (device loop1): force zstd compression, level 3 [ 84.507621][ T5872] BTRFS info (device loop1): turning on sync discard [ 84.514353][ T5872] BTRFS info (device loop1): force clearing of disk cache [ 84.521645][ T5872] BTRFS info (device loop1): enabling disk space caching [ 84.529308][ T5872] BTRFS info (device loop1): turning off discard [ 84.536264][ T5872] BTRFS info (device loop1): disk space caching is enabled [ 84.644797][ T5872] BTRFS info (device loop1): enabling ssd optimizations [ 84.673900][ T5872] BTRFS info (device loop1): rebuilding free space tree [ 84.674152][ T5896] loop2: detected capacity change from 0 to 512 [ 84.732115][ T5872] BTRFS info (device loop1): disabling free space tree [ 84.739324][ T5872] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 84.749950][ T5872] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 84.782493][ T5896] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.817180][ T5896] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 84.900659][ T5896] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.9: Corrupt directory, running e2fsck is recommended [ 84.969767][ T5896] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 85.034056][ T5896] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.9: corrupted in-inode xattr: e_name out of bounds [ 85.080853][ T5896] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.9: couldn't read orphan inode 15 (err -117) [ 85.127637][ T5896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.259717][ T5896] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.323137][ T5896] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 85.396216][ T5896] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.9: Corrupt directory, running e2fsck is recommended [ 85.416390][ T5787] Bluetooth: hci3: command tx timeout [ 85.421932][ T5777] Bluetooth: hci2: command tx timeout [ 85.422122][ T5771] Bluetooth: hci0: command tx timeout [ 85.427665][ T5777] Bluetooth: hci1: command tx timeout [ 85.510170][ T5907] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.539584][ T5898] loop0: detected capacity change from 0 to 32768 [ 85.564224][ T5907] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 85.587238][ T5907] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.9: Corrupt directory, running e2fsck is recommended [ 85.629451][ T5909] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.684528][ T5909] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 85.719064][ T5898] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.743005][ T5909] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.9: Corrupt directory, running e2fsck is recommended [ 85.874000][ T5906] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.019124][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.173058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 86.376433][ T5923] loop3: detected capacity change from 0 to 32768 [ 86.400198][ T5768] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.404275][ T5898] XFS (loop0): Ending clean mount [ 86.445801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.468410][ T5923] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 86.493016][ T5898] XFS (loop0): Quotacheck needed: Please wait. [ 86.787834][ T5923] XFS (loop3): Ending clean mount [ 86.807512][ T5898] XFS (loop0): Quotacheck: Done. [ 86.809534][ T5923] XFS (loop3): Quotacheck needed: Please wait. [ 86.849578][ T5934] fuse: Unknown parameter 'fd0x0000000000000005' [ 86.860878][ T5923] XFS (loop3): Quotacheck: Done. [ 86.860889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 86.924817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.934157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 86.943354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.959844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.969212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.977727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.987247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.164216][ T788] cfg80211: failed to load regulatory.db [ 88.839220][ T5944] loop1: detected capacity change from 0 to 128 [ 89.045159][ T5944] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 89.070552][ T5946] netlink: 464 bytes leftover after parsing attributes in process `syz.2.16'. [ 89.098042][ T5944] hpfs: filesystem error: improperly stopped [ 89.104211][ T5944] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 89.216413][ T5774] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.273974][ T5944] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 89.318436][ T5944] hpfs: You really don't want any checks? You are crazy... [ 89.328334][ T5944] hpfs: hpfs_map_sector(): read error [ 89.333782][ T5944] hpfs: code page support is disabled [ 89.340222][ T5944] hpfs: hpfs_map_4sectors(): unaligned read [ 89.341439][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 89.350222][ T5944] hpfs: hpfs_map_4sectors(): unaligned read [ 89.397848][ T5944] hpfs: filesystem error: unable to find root dir [ 90.160400][ T5957] loop2: detected capacity change from 0 to 32768 [ 90.177833][ T5957] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.22 (5957) [ 90.326392][ T5957] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.336893][ T5957] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 90.345825][ T5957] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 90.355326][ T5957] BTRFS info (device loop2): force zstd compression, level 3 [ 90.362753][ T5957] BTRFS info (device loop2): turning on sync discard [ 90.369566][ T5957] BTRFS info (device loop2): force clearing of disk cache [ 90.376841][ T5957] BTRFS info (device loop2): enabling disk space caching [ 90.377552][ T5960] fuse: Unknown parameter 'fd0x0000000000000005' [ 90.383885][ T5957] BTRFS info (device loop2): turning off discard [ 90.383932][ T5957] BTRFS info (device loop2): disk space caching is enabled [ 90.453918][ T5957] BTRFS info (device loop2): enabling ssd optimizations [ 90.464571][ T5957] BTRFS info (device loop2): rebuilding free space tree [ 90.483867][ T5957] BTRFS info (device loop2): disabling free space tree [ 90.490999][ T5957] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.500829][ T5957] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.555859][ T5954] loop0: detected capacity change from 0 to 32768 [ 90.656416][ T5954] XFS (loop0): Mounting V5 filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb in no-recovery mode. Filesystem will be inconsistent. [ 90.725454][ T5838] XFS (loop0): Metadata CRC error detected at xfs_agi_read_verify+0x191/0x250, xfs_agi block 0x2 [ 90.779136][ T5838] XFS (loop0): Unmount and run xfs_repair [ 90.802589][ T5838] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 90.844138][ T5838] 00000000: 58 41 47 49 00 00 00 02 00 00 00 00 00 00 10 00 XAGI............ [ 90.877033][ T5838] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 90.905004][ T5838] 00000020: 00 00 11 40 ff ff ff ff ff ff ff ff ff ff ff ff ...@............ [ 90.945041][ T5838] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.974516][ T5838] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.998561][ T5838] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 91.047040][ T5985] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 91.059256][ T5838] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 91.119410][ T5838] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 91.163084][ T5954] XFS (loop0): metadata I/O error in "xfs_read_agi+0x271/0x5b0" at daddr 0x2 len 1 error 74 [ 91.198239][ T5991] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.198526][ T5954] XFS (loop0): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 91.235073][ T5954] XFS (loop0): Failed to read root inode 0x1140, error 117 [ 91.316410][ T5769] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.516866][ T5995] netlink: 464 bytes leftover after parsing attributes in process `syz.3.27'. [ 91.671561][ T5784] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop2 scanned by udevd (5784) [ 92.045351][ T6000] loop1: detected capacity change from 0 to 32768 [ 92.091873][ T6000] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 92.181092][ T6000] XFS (loop1): Ending clean mount [ 92.188965][ T6000] XFS (loop1): Quotacheck needed: Please wait. [ 92.276447][ T6000] XFS (loop1): Quotacheck: Done. [ 92.655559][ T5838] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 92.890631][ T6014] loop0: detected capacity change from 0 to 4096 [ 92.957745][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.970083][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 93.071239][ T6014] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 93.085050][ T5838] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 93.094161][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.178769][ T5838] usb 4-1: config 0 descriptor?? [ 93.244464][ T5838] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 93.269081][ T5838] dvb-usb: bulk message failed: -22 (3/0) [ 93.428614][ T6020] fuse: Unknown parameter 'fd0x0000000000000005' [ 93.644148][ T5838] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 93.760439][ T5838] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 93.778171][ T6014] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 93.834384][ T5838] usb 4-1: media controller created [ 93.841397][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.874653][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.894031][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.955486][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.014368][ T5838] dvb-usb: bulk message failed: -22 (6/0) [ 94.146466][ T5838] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 94.159216][ T5838] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 94.177020][ T5838] dvb-usb: schedule remote query interval to 150 msecs. [ 94.184044][ T5838] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 94.205015][ T5838] usb 4-1: USB disconnect, device number 2 [ 94.343671][ T5838] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 94.763220][ T6027] syz.1.33 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 96.672922][ T6029] loop0: detected capacity change from 0 to 32768 [ 98.286523][ T6029] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 98.480461][ T5784] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.595762][ T27] audit: type=1326 audit(1767400972.782:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d78f749 code=0x7ffc0000 [ 98.704751][ T6029] loop0: detected capacity change from 0 to 1024 [ 98.755332][ T6029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.782959][ T6029] overlayfs: failed to resolve './bus': -2 [ 99.087815][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.317332][ T6050] loop1: detected capacity change from 0 to 40427 [ 100.336920][ T6050] F2FS-fs (loop1): Unrecognized mount option "whint_mode=user-based" or missing value [ 101.045849][ T6063] Bluetooth: MGMT ver 1.22 [ 102.432245][ T6068] loop2: detected capacity change from 0 to 512 [ 102.494570][ T6068] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.519536][ T6068] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.585830][ T6075] netlink: 'syz.1.49': attribute type 6 has an invalid length. [ 102.620345][ T6075] netlink: 'syz.1.49': attribute type 6 has an invalid length. [ 102.631315][ T6068] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.46: bad orphan inode 131083 [ 102.644368][ T6075] Zero length message leads to an empty skb [ 102.658980][ T6068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.857022][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.917852][ T6072] loop0: detected capacity change from 0 to 4096 [ 103.028195][ T6081] loop2: detected capacity change from 0 to 64 [ 103.355458][ T6083] loop3: detected capacity change from 0 to 32768 [ 103.375758][ T6083] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 103.568648][ T5778] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.682868][ T6083] loop3: detected capacity change from 0 to 1024 [ 104.782542][ T6083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.842599][ T6083] overlayfs: failed to resolve './bus': -2 [ 104.948456][ T6101] ip6tnl1: entered promiscuous mode [ 104.953864][ T6101] ip6tnl1: entered allmulticast mode [ 105.098906][ T6102] 9pnet_virtio: no channels available for device syz [ 105.099644][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.218932][ T6115] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 106.253440][ T6119] loop0: detected capacity change from 0 to 512 [ 106.288121][ T6117] loop1: detected capacity change from 0 to 128 [ 106.354572][ T6119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.392384][ T6119] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.492977][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.208756][ T6126] syz.1.65: attempt to access beyond end of device [ 107.208756][ T6126] loop1: rw=2049, sector=145, nr_sectors = 840 limit=128 [ 107.404027][ T6130] process 'syz.0.67' launched './file1' with NULL argv: empty string added [ 113.334554][ T6164] loop2: detected capacity change from 0 to 32768 [ 113.613526][ T6164] JBD2: Ignoring recovery information on journal [ 114.775495][ T6180] loop0: detected capacity change from 0 to 40427 [ 114.787828][ T6180] F2FS-fs (loop0): Unrecognized mount option "whint_mode=user-based" or missing value [ 114.840435][ T6164] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 115.272280][ T6176] loop1: detected capacity change from 0 to 32768 [ 115.401010][ T6164] syz.2.78 (6164) used greatest stack depth: 18992 bytes left [ 115.435520][ T6176] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.82 (6176) [ 116.978050][ T6176] BTRFS error (device loop1): open_ctree failed: -4 [ 117.040480][ T5769] ocfs2: Unmounting device (7,2) on (node local) [ 117.751781][ T5784] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by udevd (5784) [ 120.936571][ T6210] loop0: detected capacity change from 0 to 32768 [ 121.286258][ T6210] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.90 (6210) [ 121.443452][ T6210] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 121.453692][ T6210] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 121.462598][ T6210] BTRFS info (device loop0): using free space tree [ 121.869589][ T6210] BTRFS info (device loop0): enabling ssd optimizations [ 121.876728][ T6210] BTRFS info (device loop0): auto enabling async discard [ 124.354185][ T5774] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 124.887904][ T6246] loop1: detected capacity change from 0 to 1024 [ 126.067523][ T6251] sched: RT throttling activated [ 126.128181][ T6247] loop0: detected capacity change from 0 to 4096 [ 126.819939][ T6247] ntfs3: loop0: MFT: r=18, expect seq=1 instead of 0! [ 126.840774][ T6247] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 127.005810][ T6259] capability: warning: `syz.2.99' uses 32-bit capabilities (legacy support in use) [ 127.043189][ T6259] program syz.2.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.177657][ T6270] loop2: detected capacity change from 0 to 512 [ 128.231973][ T6270] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 128.320992][ T6270] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.100: iget: bad i_size value: 12154757448730 [ 129.948493][ T6270] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.100: couldn't read orphan inode 13 (err -117) [ 130.026150][ T6270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.152706][ T6281] usb usb8: usbfs: process 6281 (syz.0.104) did not claim interface 0 before use [ 130.319131][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.230894][ T6293] netlink: 'syz.2.105': attribute type 3 has an invalid length. [ 132.294304][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 132.734952][ T6295] netlink: 1355 bytes leftover after parsing attributes in process `syz.1.109'. [ 132.839670][ T6300] loop2: detected capacity change from 0 to 256 [ 132.919136][ T6300] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 133.269558][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.288856][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.874270][ T6300] syz.2.111: attempt to access beyond end of device [ 133.874270][ T6300] loop2: rw=524288, sector=34359738488, nr_sectors = 3 limit=256 [ 133.958796][ T6300] syz.2.111: attempt to access beyond end of device [ 133.958796][ T6300] loop2: rw=0, sector=34359738488, nr_sectors = 3 limit=256 [ 134.043465][ T27] audit: type=1800 audit(1767401008.232:3): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.111" name="file0" dev="loop2" ino=1048594 res=0 errno=0 [ 135.369439][ T6313] loop1: detected capacity change from 0 to 32768 [ 135.759613][ T6313] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 135.897483][ T6313] XFS (loop1): Ending clean mount [ 136.020253][ T5768] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 136.116995][ T6325] loop2: detected capacity change from 0 to 764 [ 136.190255][ T6327] loop0: detected capacity change from 0 to 512 [ 136.195950][ T6325] rock: directory entry would overflow storage [ 136.211378][ T6325] rock: sig=0x4654, size=5, remaining=4 [ 136.256075][ T6327] EXT4-fs (loop0): Test dummy encryption mode enabled [ 136.294124][ T6327] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 136.373324][ T6327] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 136.486225][ T6327] EXT4-fs (loop0): 1 truncate cleaned up [ 136.488294][ T6329] nvme_fabrics: missing parameter 'transport=%s' [ 136.497263][ T6327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.535044][ T6329] nvme_fabrics: missing parameter 'nqn=%s' [ 136.602523][ T6327] EXT4-fs (loop0): shut down requested (2) [ 136.730222][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.139396][ T6339] tty tty26: ldisc open failed (-12), clearing slot 25 [ 141.022766][ T6354] loop0: detected capacity change from 0 to 4096 [ 141.615299][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 141.836783][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.864988][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.899514][ T8] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 141.933230][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.970167][ T8] usb 1-1: config 0 descriptor?? [ 142.363118][ T6371] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 143.103817][ T8] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 143.122553][ T8] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 143.130831][ T8] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 143.138279][ T8] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 143.154987][ T8] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 143.164086][ T8] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving [ 143.335087][ T8] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 143.466709][ T8] usb 1-1: USB disconnect, device number 2 [ 143.513399][ T6374] loop3: detected capacity change from 0 to 32768 [ 143.748999][ T6375] fido_id[6375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 146.624226][ T6386] netlink: 88 bytes leftover after parsing attributes in process `syz.3.134'. [ 146.748632][ T6388] trusted_key: syz.2.136 sent an empty control message without MSG_MORE. [ 152.172793][ T6408] loop1: detected capacity change from 0 to 32768 [ 154.331849][ T6423] loop2: detected capacity change from 0 to 32768 [ 154.568652][ T6423] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 154.727345][ T6423] XFS (loop2): Ending clean mount [ 154.900754][ T5769] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 154.969975][ T6434] loop3: detected capacity change from 0 to 256 [ 155.121368][ T6434] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 155.535213][ T6439] vlan2: entered promiscuous mode [ 155.540418][ T6439] syz_tun: entered promiscuous mode [ 156.468356][ T6449] loop3: detected capacity change from 0 to 512 [ 156.973844][ T6449] EXT4-fs (loop3): Test dummy encryption mode enabled [ 157.011471][ T6449] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 157.048495][ T6449] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 157.107446][ T6449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.424360][ T6465] loop1: detected capacity change from 0 to 128 [ 159.436048][ T6461] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 159.459357][ T6463] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 159.868393][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.145692][ T6490] loop2: detected capacity change from 0 to 128 [ 162.879663][ T6491] loop3: detected capacity change from 0 to 131072 [ 162.920621][ T6491] F2FS-fs (loop3): invalid crc value [ 162.961495][ T6491] F2FS-fs (loop3): Found nat_bits in checkpoint [ 162.984401][ T6490] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 163.019549][ T6491] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 163.358763][ T6497] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 163.587069][ T6504] loop0: detected capacity change from 0 to 256 [ 167.302768][ T6521] loop3: detected capacity change from 0 to 32768 [ 167.583173][ T6525] loop1: detected capacity change from 0 to 32768 [ 167.689169][ T27] audit: type=1800 audit(1767401041.882:4): pid=6525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.169" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 167.991078][ T6521] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.448665][ T6521] XFS (loop3): Ending clean mount [ 168.542358][ T6521] XFS (loop3): Quotacheck needed: Please wait. [ 169.645186][ T6547] Illegal XDP return value 2091181502 on prog (id 16) dev syz_tun, expect packet loss! [ 169.842658][ T6521] XFS (loop3): Quotacheck: Done. [ 170.543465][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.157912][ T6572] netlink: 256 bytes leftover after parsing attributes in process `syz.1.186'. [ 174.208209][ T6572] unsupported nlmsg_type 40 [ 174.212982][ T6574] syz_tun: entered allmulticast mode [ 174.255714][ T6571] syz_tun: left allmulticast mode [ 174.308768][ T5839] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 175.404984][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.445224][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 175.474997][ T5839] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 175.494466][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.541788][ T5839] usb 4-1: config 0 descriptor?? [ 175.588651][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 175.612176][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.671833][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 175.711102][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.760359][ T9] usb 1-1: config 0 descriptor?? [ 176.908201][ T6588] loop2: detected capacity change from 0 to 131072 [ 176.924267][ T5771] Bluetooth: hci1: command 0x0401 tx timeout [ 176.957278][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 176.972935][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 176.979938][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 176.987117][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 176.994024][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.001026][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.008084][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.015037][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.021940][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.028909][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.035839][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.043186][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.050347][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.057382][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.064268][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.074974][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.085573][ T6588] F2FS-fs (loop2): invalid crc value [ 177.106660][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.113779][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.169183][ T6588] F2FS-fs (loop2): Found nat_bits in checkpoint [ 177.229338][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.260296][ T6588] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 177.291248][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.340378][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.405153][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.477103][ T6597] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 177.485751][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.544974][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.573270][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.598711][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.629492][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.658263][ T5839] pegasus 4-1:0.0: can't locate MII phy, using default [ 177.713726][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.754712][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.808721][ T5839] pegasus 4-1:0.0: eth1, D-Link DSB-650TX, c2:b9:0d:9a:6d:18 [ 177.816357][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.865330][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.872304][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.889810][ T5839] usb 4-1: USB disconnect, device number 3 [ 177.939454][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 177.978455][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.014766][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.043934][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.064262][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.095003][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.142544][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.191004][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.253015][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.298602][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.347709][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.354672][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.435061][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.449240][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.470202][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.494694][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.714045][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.725084][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.732329][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.774758][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.805365][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.812323][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.845021][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.851993][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.859082][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.866167][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.873175][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.882256][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.889601][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.908052][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.924944][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.932086][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.955301][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.966698][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.973904][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 178.987183][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.005011][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.015531][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.029238][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.045037][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.060085][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.077628][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.098734][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.127591][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.142598][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.154823][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.169426][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.184548][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.201619][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.217245][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.232054][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.254904][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.272204][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.295233][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.314311][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.327927][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.345061][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.357723][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.372475][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.387530][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.418973][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.462519][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.491226][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 179.521815][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.525238][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.544942][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.551891][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.638410][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.669938][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.715414][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.722451][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.765282][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.795497][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.802464][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.834948][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.864134][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.899603][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.937965][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.951120][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 180.972028][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 181.109466][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 181.117796][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 181.134410][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 181.142643][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 181.150780][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 181.897473][ T5771] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 181.908879][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 181.912912][ T5771] Bluetooth: hci3: Injecting HCI hardware error event [ 181.924746][ T5783] Bluetooth: hci3: hardware error 0x00 [ 181.972286][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.081772][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.211026][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.332890][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.391663][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.455045][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.505104][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.512070][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.539831][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.579301][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.635354][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.669959][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.691545][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.712671][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 182.726374][ T6654] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 184.002068][ T6653] loop1: detected capacity change from 0 to 131072 [ 184.026274][ T6653] F2FS-fs (loop1): invalid crc value [ 184.031909][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.039355][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.046580][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.053511][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.060839][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.068191][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.075171][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.090825][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.098100][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.106431][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.113708][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.121211][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.128840][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.135839][ T6653] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.172690][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.179846][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.194418][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.214960][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.221931][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.229296][ T6653] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 184.277797][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.317594][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.324724][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.375085][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.385024][ T5783] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 184.392807][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.401792][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.409967][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.417281][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.424320][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.431684][ T9] apple 0003:05AC:0320.0002: unknown main item tag 0x0 [ 184.455716][ T9] apple 0003:05AC:0320.0002: hidraw0: USB HID v0.09 Device [HID 05ac:0320] on usb-dummy_hcd.0-1/input0 [ 184.521827][ T9] usb 1-1: USB disconnect, device number 3 [ 184.547801][ T6673] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 185.187537][ T6672] fido_id[6672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 188.689699][ T6689] ubi0: attaching mtd0 [ 188.716377][ T6689] ubi0: scanning is finished [ 188.721065][ T6689] ubi0: empty MTD device detected [ 188.847611][ T6689] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 188.856975][ T6689] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 188.864333][ T6689] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 188.869368][ T6683] warning: `syz.2.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 188.871387][ T6689] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 188.891709][ T6689] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 188.899157][ T6689] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 188.907552][ T6689] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 562865830 [ 188.918320][ T6689] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 188.947589][ T6691] ubi0: background thread "ubi_bgt0d" started, PID 6691 [ 188.955856][ T6690] ubi0: detaching mtd0 [ 189.026477][ T6690] ubi0: mtd0 is detached [ 189.625362][ T5839] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 191.274966][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 191.293173][ T5839] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 191.303378][ T5839] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.313760][ T5839] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.324616][ T5839] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.335206][ T5839] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.349672][ T5839] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.359360][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.734994][ T5771] Bluetooth: hci2: command tx timeout [ 191.749107][ T5839] usb 2-1: GET_CAPABILITIES returned 0 [ 191.755241][ T5839] usbtmc 2-1:16.0: can't read capabilities [ 191.869159][ T6701] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 191.869377][ T5773] usb 2-1: USB disconnect, device number 2 [ 192.615369][ T6724] netlink: 'syz.2.219': attribute type 4 has an invalid length. [ 192.623192][ T6724] netlink: 17 bytes leftover after parsing attributes in process `syz.2.219'. [ 194.680712][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.687243][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.331376][ T6745] ubi0: attaching mtd0 [ 196.351062][ T6745] ubi0: scanning is finished [ 196.435070][ T787] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 196.626385][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 196.656974][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.671249][ T6745] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 196.700664][ T6745] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 196.708310][ T787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 196.728773][ T6745] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 196.755457][ T787] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 196.773479][ T6745] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 196.785188][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.793531][ T787] usb 1-1: Product: syz [ 196.799046][ T787] usb 1-1: Manufacturer: syz [ 196.804350][ T787] usb 1-1: SerialNumber: syz [ 196.807704][ T6745] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 196.823567][ T787] usb 1-1: config 0 descriptor?? [ 196.832557][ T6745] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 196.865118][ T6745] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 562865830 [ 196.876894][ T6745] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 196.894502][ T6750] ubi0: background thread "ubi_bgt0d" started, PID 6750 [ 196.903825][ T6748] ubi0: detaching mtd0 [ 196.939323][ T6748] ubi0: mtd0 is detached [ 197.268769][ T787] usb 1-1: USB disconnect, device number 4 [ 201.546148][ T6780] ubi0: attaching mtd0 [ 201.553181][ T6780] ubi0: scanning is finished [ 201.858664][ T6780] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 201.905503][ T6780] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 201.912802][ T6780] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 201.954951][ T6780] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 201.962413][ T6780] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 202.014936][ T6780] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 202.041100][ T6780] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 562865830 [ 202.095516][ T6780] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 202.141769][ T6785] ubi0: background thread "ubi_bgt0d" started, PID 6785 [ 202.143345][ T6783] ubi0: detaching mtd0 [ 202.181985][ T6783] ubi0: mtd0 is detached [ 202.935126][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 202.941487][ T5085] Bluetooth: hci1: command 0x0401 tx timeout [ 202.950943][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 207.343832][ T787] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 208.222944][ T787] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 208.239581][ T787] usb 2-1: can't read configurations, error -71 [ 210.271843][ T6847] syz.2.252 (6847): /proc/6840/oom_adj is deprecated, please use /proc/6840/oom_score_adj instead. [ 210.955116][ T43] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 211.283368][ T6852] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 211.290409][ T6852] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.300153][ T6852] vhci_hcd vhci_hcd.0: Device attached [ 211.405162][ T43] usb 4-1: device descriptor read/64, error -71 [ 211.529618][ T788] vhci_hcd: vhci_device speed not set [ 211.615211][ T788] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 211.735026][ T43] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 212.081482][ T43] usb 4-1: device descriptor read/64, error -71 [ 212.212637][ T43] usb usb4-port1: attempt power cycle [ 212.873474][ T6871] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 212.928475][ T787] IPVS: starting estimator thread 0... [ 213.192206][ T6873] IPVS: using max 15 ests per chain, 36000 per kthread [ 213.463180][ T6853] vhci_hcd: connection reset by peer [ 213.523259][ T3523] vhci_hcd: stop threads [ 213.547986][ T3523] vhci_hcd: release socket [ 213.593855][ T3523] vhci_hcd: disconnect device [ 215.991615][ T6896] binder: BINDER_SET_CONTEXT_MGR already set [ 215.998534][ T6896] binder: 6888:6896 ioctl 4018620d 200000000200 returned -16 [ 216.739452][ T6898] syz.2.269 uses obsolete (PF_INET,SOCK_PACKET) [ 216.795180][ T788] vhci_hcd: vhci_device speed not set [ 218.440330][ T5838] IPVS: starting estimator thread 0... [ 218.533561][ T6912] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.555078][ T6910] IPVS: using max 17 ests per chain, 40800 per kthread [ 220.880922][ T6944] ip6erspan0: entered promiscuous mode [ 222.588873][ T6965] binder: 6959:6965 ioctl 400c620e 0 returned -14 [ 222.953277][ T9] kernel read not supported for file [timerfd] (pid: 9 comm: kworker/0:1) [ 223.415099][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 223.645410][ T6968] netlink: 64 bytes leftover after parsing attributes in process `syz.2.285'. [ 225.496176][ T6995] binder: 6989:6995 ioctl 4018620d 0 returned -22 [ 226.368713][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 226.410483][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 227.008473][ T7011] use of bytesused == 0 is deprecated and will be removed in the future, [ 227.017676][ T7011] use the actual size instead. [ 228.099926][ T7021] veth1_macvtap: left promiscuous mode [ 228.105768][ T7021] macsec0: entered promiscuous mode [ 228.235392][ T5838] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 228.635658][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.646968][ T5838] usb 3-1: config 0 has no interfaces? [ 228.652499][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 228.661516][ T5838] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 228.670726][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.727193][ T7024] veth1_macvtap: entered promiscuous mode [ 228.740404][ T7024] macsec0: left promiscuous mode [ 228.763269][ T5838] usb 3-1: config 0 descriptor?? [ 231.045275][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 231.795661][ T8] usb 3-1: USB disconnect, device number 2 [ 231.984954][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 232.305070][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 232.545083][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 232.566618][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.597375][ T8] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 232.619338][ T787] kernel read not supported for file /dsp (pid: 787 comm: kworker/0:2) [ 232.635716][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.688130][ T8] usb 3-1: config 0 descriptor?? [ 233.102026][ T8] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 233.196406][ T8] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 233.232495][ T8] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 233.249966][ T8] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 233.273588][ T8] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 233.445471][ T8] hid-alps 0003:044E:121E.0003: hidraw0: USB HID v0.95 Device [HID 044e:121e] on usb-dummy_hcd.2-1/input0 [ 233.571102][ T7055] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 235.558309][ T5862] usb 3-1: USB disconnect, device number 3 [ 237.016110][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.216237][ T9] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 237.376021][ T9] usb 2-1: chopping to 0 config(s) [ 237.462736][ T9] usb 2-1: can't read configurations, error -32 [ 237.987167][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 238.855121][ T9] usb 2-1: device descriptor read/64, error -32 [ 239.005181][ T9] usb usb2-port1: attempt power cycle [ 240.455266][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 240.866095][ T8] usb 4-1: device not accepting address 7, error -71 [ 241.808342][ T7095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.854117][ T7095] bond0: (slave rose0): Enslaving as an active interface with an up link [ 245.236243][ T5773] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 245.447113][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 245.544942][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 245.580306][ T5773] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 245.610234][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.638752][ T5773] usb 3-1: Product: syz [ 245.643087][ T5773] usb 3-1: Manufacturer: syz [ 245.658507][ T5773] usb 3-1: SerialNumber: syz [ 245.679521][ T5773] usb 3-1: config 0 descriptor?? [ 245.762997][ T5773] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 245.930642][ T7143] veth1_macvtap: left promiscuous mode [ 245.936639][ T7143] macsec0: entered promiscuous mode [ 246.198235][ T7145] veth1_macvtap: entered promiscuous mode [ 246.207343][ T7145] macsec0: left promiscuous mode [ 246.217453][ T5773] usb 3-1: USB disconnect, device number 4 [ 246.309244][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.311153][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 250.308345][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 251.403221][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 251.687357][ T7195] syz_tun: entered allmulticast mode [ 251.753972][ T7195] dvmrp6: entered allmulticast mode [ 251.955067][ T787] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 252.151816][ T787] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.175516][ T787] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.213894][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.255021][ T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 252.297976][ T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 252.391193][ T7207] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 252.479703][ T787] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.616984][ T787] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.742792][ T787] usb 4-1: Product: syz [ 252.832721][ T787] usb 4-1: Manufacturer: syz [ 253.081972][ T787] cdc_wdm 4-1:1.0: skipping garbage [ 253.131779][ T787] cdc_wdm 4-1:1.0: skipping garbage [ 253.153690][ T787] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 253.172730][ T787] cdc_wdm 4-1:1.0: Unknown control protocol [ 255.587328][ T5870] usb 4-1: USB disconnect, device number 9 [ 256.061563][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.072486][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.323215][ T7249] kvm: MWAIT instruction emulated as NOP! [ 259.256753][ T7250] syz.1.346: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 259.306422][ T7250] CPU: 0 PID: 7250 Comm: syz.1.346 Not tainted syzkaller #0 [ 259.313798][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.323949][ T7250] Call Trace: [ 259.327363][ T7250] [ 259.330341][ T7250] dump_stack_lvl+0x16c/0x230 [ 259.335087][ T7250] ? show_regs_print_info+0x20/0x20 [ 259.340342][ T7250] ? load_image+0x3b0/0x3b0 [ 259.344905][ T7250] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 259.351424][ T7250] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 259.357943][ T7250] warn_alloc+0x210/0x300 [ 259.362280][ T7250] ? stack_trace_save+0x9c/0xe0 [ 259.367171][ T7250] ? zone_watermark_ok_safe+0x230/0x230 [ 259.372768][ T7250] ? kasan_set_track+0x5f/0x70 [ 259.377546][ T7250] ? kasan_set_track+0x4e/0x70 [ 259.382336][ T7250] ? __kasan_kmalloc+0x8f/0xa0 [ 259.387158][ T7250] ? xsk_init_queue+0xb0/0x110 [ 259.392061][ T7250] ? xsk_setsockopt+0x43c/0x6f0 [ 259.397011][ T7250] ? do_sock_setsockopt+0x175/0x1a0 [ 259.402349][ T7250] ? __x64_sys_setsockopt+0x184/0x200 [ 259.407751][ T7250] __vmalloc_node_range+0x126/0x1320 [ 259.413088][ T7250] ? free_vm_area+0x50/0x50 [ 259.417644][ T7250] vmalloc_user+0x74/0x80 [ 259.422108][ T7250] ? xskq_create+0xbf/0x170 [ 259.426640][ T7250] xskq_create+0xbf/0x170 [ 259.430998][ T7250] xsk_init_queue+0xb0/0x110 [ 259.435955][ T7250] xsk_setsockopt+0x43c/0x6f0 [ 259.440655][ T7250] ? xsk_poll+0x670/0x670 [ 259.445008][ T7250] ? __fget_files+0x28/0x4d0 [ 259.449717][ T7250] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 259.455277][ T7250] ? security_socket_setsockopt+0x7e/0xa0 [ 259.461035][ T7250] ? xsk_poll+0x670/0x670 [ 259.465410][ T7250] do_sock_setsockopt+0x175/0x1a0 [ 259.470460][ T7250] ? __fdget+0x180/0x210 [ 259.474730][ T7250] __x64_sys_setsockopt+0x184/0x200 [ 259.480040][ T7250] do_syscall_64+0x55/0xb0 [ 259.484468][ T7250] ? clear_bhb_loop+0x40/0x90 [ 259.489164][ T7250] ? clear_bhb_loop+0x40/0x90 [ 259.493945][ T7250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.499942][ T7250] RIP: 0033:0x7fbf6d78f749 [ 259.504371][ T7250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.524452][ T7250] RSP: 002b:00007fbf6b9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 259.532994][ T7250] RAX: ffffffffffffffda RBX: 00007fbf6d9e6090 RCX: 00007fbf6d78f749 [ 259.540987][ T7250] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 259.548975][ T7250] RBP: 00007fbf6d813f91 R08: 0000000000000004 R09: 0000000000000000 [ 259.556955][ T7250] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.565020][ T7250] R13: 00007fbf6d9e6128 R14: 00007fbf6d9e6090 R15: 00007fffaa6e6578 [ 259.573018][ T7250] [ 259.863261][ T7250] Mem-Info: [ 259.966314][ T7250] active_anon:26776 inactive_anon:0 isolated_anon:0 [ 259.966314][ T7250] active_file:18063 inactive_file:39966 isolated_file:0 [ 259.966314][ T7250] unevictable:768 dirty:80 writeback:0 [ 259.966314][ T7250] slab_reclaimable:10637 slab_unreclaimable:91619 [ 259.966314][ T7250] mapped:28687 shmem:21778 pagetables:642 [ 259.966314][ T7250] sec_pagetables:3 bounce:0 [ 259.966314][ T7250] kernel_misc_reclaimable:0 [ 259.966314][ T7250] free:1322994 free_pcp:11673 free_cma:0 [ 260.195060][ T7250] Node 0 active_anon:105580kB inactive_anon:0kB active_file:72252kB inactive_file:159660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114668kB dirty:320kB writeback:0kB shmem:83936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11696kB pagetables:2616kB sec_pagetables:0kB all_unreclaimable? no [ 260.235013][ T7250] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 260.271398][ T7250] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.307832][ T7250] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 260.338901][ T7250] Node 0 DMA32 free:1386812kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:105272kB inactive_anon:0kB active_file:72252kB inactive_file:158348kB unevictable:1536kB writepending:320kB present:3129332kB managed:2589640kB mlocked:0kB bounce:0kB free_pcp:24792kB local_pcp:8508kB free_cma:0kB [ 260.371960][ T7250] lowmem_reserve[]: 0 0 1 1 1 [ 260.379474][ T7250] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 260.428608][ T7250] lowmem_reserve[]: 0 0 0 0 0 [ 260.433386][ T7250] Node 1 Normal free:3889792kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23576kB local_pcp:13244kB free_cma:0kB [ 260.566498][ T7250] lowmem_reserve[]: 0 0 0 0 0 [ 260.571256][ T7250] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 260.606929][ T7250] Node 0 DMA32: 112*4kB (UME) 542*8kB (UME) 111*16kB (UME) 297*32kB (UME) 67*64kB (UE) 11*128kB (UME) 15*256kB (UME) 14*512kB (ME) 22*1024kB (UM) 12*2048kB (M) 320*4096kB (M) = 1390592kB [ 260.677280][ T7250] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 260.717550][ T7250] Node 1 Normal: 104*4kB (UE) 58*8kB (UME) 39*16kB (UME) 47*32kB (UM) 17*64kB (UE) 5*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889792kB [ 260.811870][ T7250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.845257][ T7250] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.868365][ T7250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.320820][ T7250] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.346862][ T7250] 91949 total pagecache pages [ 262.359792][ T7250] 0 pages in swap cache [ 262.379767][ T7250] Free swap = 124984kB [ 262.386201][ T7250] Total swap = 124996kB [ 262.395755][ T7250] 2097051 pages RAM [ 262.415171][ T7250] 0 pages HighMem/MovableOnly [ 262.427350][ T7250] 416127 pages reserved [ 262.431543][ T7250] 0 pages cma reserved [ 263.945236][ T6772] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 264.265054][ T6772] usb 4-1: Using ep0 maxpacket: 8 [ 264.313536][ T7284] Bluetooth: MGMT ver 1.22 [ 265.222439][ T6772] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 265.264478][ T6772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.292009][ T6772] usb 4-1: Product: syz [ 265.308788][ T6772] usb 4-1: Manufacturer: syz [ 265.318578][ T6772] usb 4-1: SerialNumber: syz [ 265.468845][ T6772] usb 4-1: config 0 descriptor?? [ 265.490944][ T6772] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 265.618978][ T7296] syz.2.362: attempt to access beyond end of device [ 265.618978][ T7296] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 265.632372][ T7296] FAT-fs (loop5): unable to read boot sector [ 266.946144][ T6772] gspca_sonixj: reg_w1 err -71 [ 266.951160][ T6772] sonixj: probe of 4-1:0.0 failed with error -71 [ 266.997828][ T6772] usb 4-1: USB disconnect, device number 10 [ 268.499050][ T8] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 270.015007][ T6772] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 270.312069][ T6772] usb 4-1: Using ep0 maxpacket: 16 [ 270.332070][ T6772] usb 4-1: New USB device found, idVendor=b817, idProduct=e528, bcdDevice= 9.00 [ 270.354897][ T6772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.363105][ T6772] usb 4-1: Product: syz [ 270.380871][ T6772] usb 4-1: Manufacturer: syz [ 270.400214][ T6772] usb 4-1: SerialNumber: syz [ 270.452921][ T6772] usb 4-1: config 0 descriptor?? [ 270.924997][ T5773] usb 4-1: USB disconnect, device number 11 [ 275.281457][ T7364] mkiss: ax0: crc mode is auto. [ 275.931403][ T7369] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 280.293487][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 280.714995][ T5862] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 280.998559][ T5862] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.020960][ T5862] usb 2-1: config 0 has no interface number 0 [ 281.048860][ T5862] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 281.086159][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.115485][ T5862] usb 2-1: Product: syz [ 281.126122][ T5862] usb 2-1: Manufacturer: syz [ 281.130781][ T5862] usb 2-1: SerialNumber: syz [ 281.367907][ T5862] usb 2-1: config 0 descriptor?? [ 282.337021][ T5862] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 282.384881][ T5862] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 282.629833][ T5862] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 282.694985][ T5862] usb 2-1: media controller created [ 282.852401][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.128416][ T7393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.173403][ T7393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.212174][ T7414] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 284.087892][ T5862] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 284.296724][ T5862] usb 2-1: USB disconnect, device number 8 [ 289.905697][ T7463] (null): rxe_set_mtu: Set mtu to 1024 [ 290.002157][ T7463] infiniband syz2: set down [ 290.124914][ T7463] infiniband syz2: added ipvlan0 [ 290.984878][ T7463] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 290.998338][ T7463] infiniband syz2: Couldn't open port 1 [ 291.160083][ T7463] RDS/IB: syz2: added [ 291.164769][ T7463] smc: adding ib device syz2 with port count 1 [ 291.171369][ T7463] smc: ib device syz2 port 1 has pnetid [ 293.489406][ T7472] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 295.130665][ T27] audit: type=1804 audit(1767401169.322:5): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.411" name="/newroot/109/bus/file0" dev="overlay" ino=608 res=1 errno=0 [ 296.995303][ T5783] Bluetooth: hci1: unexpected event 0x20 length: 255 > 7 [ 300.585670][ T5783] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 300.838872][ T5870] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 301.209037][ T5870] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 301.224927][ T5870] usb 2-1: config 0 has no interface number 0 [ 301.248868][ T5870] usb 2-1: config 0 interface 49 altsetting 0 has an invalid endpoint with address 0x29, skipping [ 301.283234][ T5870] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 301.315173][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.335593][ T5870] usb 2-1: Product: syz [ 301.339780][ T5870] usb 2-1: Manufacturer: syz [ 301.344383][ T5870] usb 2-1: SerialNumber: syz [ 301.421594][ T5870] usb 2-1: config 0 descriptor?? [ 301.546279][ T7512] pim6reg1: entered promiscuous mode [ 301.551934][ T7512] pim6reg1: entered allmulticast mode [ 302.644729][ T7517] input: syz0 as /devices/virtual/input/input8 [ 303.837231][ T5870] qmi_wwan: probe of 2-1:0.49 failed with error -22 [ 303.941199][ T5870] usb 2-1: USB disconnect, device number 9 [ 305.411304][ T7531] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 306.480676][ T7538] comedi comedi2: board detection failed [ 306.710927][ T7542] random: crng reseeded on system resumption [ 306.957440][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.424'. [ 307.192588][ T5870] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 307.405151][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 307.442949][ T5870] usb 1-1: unable to get BOS descriptor or descriptor too short [ 307.466081][ T5870] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 307.475804][ T5870] usb 1-1: can't read configurations, error -71 [ 307.505077][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 309.445158][ T5773] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 309.655112][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 309.672877][ T5773] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 309.691526][ T5773] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.706569][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.720217][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.730539][ T5773] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.744725][ T5773] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 309.756991][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.765379][ T5862] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 309.964935][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 309.985478][ T5862] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 310.013698][ T5773] usb 3-1: usb_control_msg returned -32 [ 310.015090][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.030159][ T5773] usbtmc 3-1:16.0: can't read capabilities [ 310.093065][ T5862] pvrusb2: Hardware description: Terratec Grabster AV400 [ 310.135028][ T5862] pvrusb2: ********** [ 310.142636][ T5862] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 310.153299][ T5862] pvrusb2: Important functionality might not be entirely working. [ 310.162183][ T5862] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 310.178705][ T5862] pvrusb2: ********** [ 310.315209][ T2319] pvrusb2: Invalid write control endpoint [ 311.465616][ T7559] pvrusb2: Invalid write control endpoint [ 311.477060][ T788] usb 3-1: USB disconnect, device number 6 [ 311.505197][ T2319] pvrusb2: Invalid write control endpoint [ 311.532358][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 311.547925][ T5862] usb 4-1: USB disconnect, device number 12 [ 311.564439][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 311.579548][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 311.595721][ T2319] pvrusb2: Device being rendered inoperable [ 311.613745][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 311.621798][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 311.653138][ T2319] pvrusb2: Attached sub-driver cx25840 [ 311.671410][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 311.709629][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 314.592718][ T788] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 314.795064][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 314.975438][ T788] usb 1-1: New USB device found, idVendor=b817, idProduct=e528, bcdDevice= 9.00 [ 314.984752][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.992933][ T788] usb 1-1: Product: syz [ 314.993431][ T7591] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 314.997233][ T788] usb 1-1: Manufacturer: syz [ 314.997284][ T788] usb 1-1: SerialNumber: syz [ 315.092342][ T788] usb 1-1: config 0 descriptor?? [ 315.605096][ T6772] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 315.628215][ T788] usb 1-1: can't set config #0, error -71 [ 315.670727][ T788] usb 1-1: USB disconnect, device number 7 [ 318.122756][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.129248][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.132889][ T6772] usb 3-1: Using ep0 maxpacket: 16 [ 318.376692][ T6772] usb 3-1: device descriptor read/all, error -71 [ 318.546060][ T5783] Bluetooth: hci0: unexpected event 0x09 length: 5 > 3 [ 320.108083][ T7625] veth1_macvtap: left promiscuous mode [ 320.123061][ T7625] macsec0: entered promiscuous mode [ 320.230798][ T7629] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 323.400618][ T7628] veth1_macvtap: entered promiscuous mode [ 323.415132][ T7628] macsec0: left promiscuous mode [ 324.715291][ T788] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 324.935156][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 324.956145][ T788] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 324.998572][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.484275][ T788] pvrusb2: Hardware description: Terratec Grabster AV400 [ 325.491663][ T788] pvrusb2: ********** [ 325.495806][ T788] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 325.507510][ T788] pvrusb2: Important functionality might not be entirely working. [ 325.518642][ T788] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 325.551182][ T788] pvrusb2: ********** [ 325.748275][ T2319] pvrusb2: Invalid write control endpoint [ 325.887526][ T2319] pvrusb2: Invalid write control endpoint [ 325.923492][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 326.045555][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 326.140074][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 326.245705][ T2319] pvrusb2: Device being rendered inoperable [ 326.311145][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 326.386431][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 326.500520][ T2319] pvrusb2: Attached sub-driver cx25840 [ 326.554078][ T7634] pvrusb2: Attempted to execute control transfer when device not ok [ 326.622885][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 326.749218][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 326.764665][ T5838] usb 3-1: USB disconnect, device number 9 [ 327.143207][ T7648] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 327.625025][ T6772] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 327.742551][ T7658] input: syz1 as /devices/virtual/input/input9 [ 327.824889][ T6772] usb 2-1: Using ep0 maxpacket: 16 [ 328.527531][ T6772] usb 2-1: unable to get BOS descriptor or descriptor too short [ 328.560423][ T6772] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 328.574963][ T6772] usb 2-1: can't read configurations, error -71 [ 328.884914][ T788] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 329.177963][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.205069][ T788] usb 4-1: config 0 has no interfaces? [ 329.210662][ T788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 329.273657][ T7666] netlink: 'syz.0.459': attribute type 11 has an invalid length. [ 330.062935][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.098636][ T788] usb 4-1: config 0 descriptor?? [ 331.506698][ T787] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 331.716714][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 331.766423][ T787] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 331.887205][ T787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.029732][ T787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.155474][ T787] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.235808][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.313750][ T787] usb 2-1: Product: syz [ 332.323441][ T787] usb 2-1: Manufacturer: syz [ 332.331331][ T787] usb 2-1: SerialNumber: syz [ 333.307657][ T787] usb 2-1: 0:2 : does not exist [ 333.565648][ T6772] usb 4-1: USB disconnect, device number 13 [ 334.171944][ T787] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 334.195715][ T5773] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 334.201338][ T787] usb 2-1: USB disconnect, device number 12 [ 334.232351][ T7636] udevd[7636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.384895][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 334.393523][ T5773] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 334.402814][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.410889][ T5773] usb 3-1: Product: syz [ 334.415190][ T5773] usb 3-1: Manufacturer: syz [ 334.420023][ T5773] usb 3-1: SerialNumber: syz [ 334.435668][ T5773] usb 3-1: config 0 descriptor?? [ 334.443786][ T5773] option 3-1:0.0: GSM modem (1-port) converter detected [ 334.650305][ T5838] usb 3-1: USB disconnect, device number 10 [ 334.659083][ T5838] option 3-1:0.0: device disconnected [ 334.809784][ T7699] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 334.829092][ T7699] overlayfs: failed to set xattr on upper [ 334.840503][ T7699] overlayfs: ...falling back to redirect_dir=nofollow. [ 334.852215][ T7699] overlayfs: ...falling back to index=off. [ 334.862299][ T7699] overlayfs: ...falling back to uuid=null. [ 335.044632][ T7702] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 335.905076][ T5838] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 337.105569][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 337.327465][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 337.336293][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 337.343943][ T5838] usb 4-1: can't read configurations, error -71 [ 337.945083][ T788] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 338.162095][ T788] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 338.236616][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.289464][ T788] usb 2-1: Product: syz [ 338.293745][ T788] usb 2-1: Manufacturer: syz [ 338.299729][ T788] usb 2-1: SerialNumber: syz [ 338.310537][ T788] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 338.407377][ T5870] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 338.567315][ T7735] loop6: detected capacity change from 0 to 524288000 [ 338.913234][ T788] usb 2-1: USB disconnect, device number 13 [ 339.507695][ T5870] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 339.526837][ T5870] ath9k_htc: Failed to initialize the device [ 339.546570][ T788] usb 2-1: ath9k_htc: USB layer deinitialized [ 345.065160][ T27] audit: type=1326 audit(1767401218.612:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d78f749 code=0x7ffc0000 [ 345.265226][ T27] audit: type=1326 audit(1767401218.612:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbf6d78f749 code=0x7ffc0000 [ 345.303434][ T27] audit: type=1326 audit(1767401218.622:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d78f749 code=0x7ffc0000 [ 345.326812][ T27] audit: type=1326 audit(1767401218.632:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d78f749 code=0x7ffc0000 [ 345.360300][ T27] audit: type=1326 audit(1767401219.552:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b598f749 code=0x7ffc0000 [ 345.527953][ T27] audit: type=1326 audit(1767401219.552:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47b598f749 code=0x7ffc0000 [ 345.580316][ T27] audit: type=1326 audit(1767401219.552:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b598f749 code=0x7ffc0000 [ 345.815153][ T27] audit: type=1326 audit(1767401219.552:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b598f749 code=0x7ffc0000 [ 346.066050][ T27] audit: type=1326 audit(1767401219.582:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47b598f749 code=0x7ffc0000 [ 346.505138][ T27] audit: type=1326 audit(1767401219.582:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b598f749 code=0x7ffc0000 [ 346.527405][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 350.161142][ T7804] ubi31: attaching mtd0 [ 350.191281][ T7804] ubi31: scanning is finished [ 350.654597][ T7804] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 350.677183][ T7804] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 350.684536][ T7804] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 350.699235][ T7804] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 350.747322][ T7804] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 350.777625][ T7804] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 350.806067][ T7804] ubi31: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 562865830 [ 350.866894][ T7804] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 350.989235][ T7810] ubi31: background thread "ubi_bgt31d" started, PID 7810 [ 351.284054][ T5870] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 352.518175][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 352.526111][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.554680][ T5870] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 352.584852][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.594903][ T5870] usb 4-1: Product: syz [ 352.599334][ T5870] usb 4-1: Manufacturer: syz [ 352.603974][ T5870] usb 4-1: SerialNumber: syz [ 352.611486][ T5870] usb 4-1: config 0 descriptor?? [ 352.619048][ T5870] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 352.989358][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.018640][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.079622][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 355.502415][ T5870] usb 4-1: USB disconnect, device number 16 [ 356.852283][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.508'. [ 358.144879][ T5773] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 358.826376][ T5773] usb 1-1: config 0 has no interfaces? [ 358.834214][ T5773] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 358.892250][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 359.036352][ T5773] usb 1-1: Product: syz [ 359.069903][ T7891] netlink: 'syz.3.511': attribute type 4 has an invalid length. [ 359.094724][ T5773] usb 1-1: Manufacturer: syz [ 359.165077][ T5773] usb 1-1: SerialNumber: syz [ 359.298940][ T5773] usb 1-1: config 0 descriptor?? [ 359.556575][ T7892] netlink: 'syz.3.511': attribute type 6 has an invalid length. [ 359.621386][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 361.424462][ T5870] usb 1-1: USB disconnect, device number 8 [ 365.404410][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 366.101926][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 366.665822][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 373.469228][ T7996] ptrace attach of "./syz-executor exec"[7998] was attempted by "./syz-executor exec"[7996] [ 375.243321][ T7948] syz.0.528 (7948): drop_caches: 2 [ 375.568400][ T8000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.538'. [ 377.442130][ T8015] fuse: Bad value for 'rootmode' [ 378.349396][ T8019] kvm: pic: non byte write [ 378.364689][ T8019] kvm: pic: non byte write [ 378.375060][ T8019] kvm: pic: single mode not supported [ 378.375254][ T8019] kvm: pic: level sensitive irq not supported [ 378.381529][ T8019] kvm: pic: non byte write [ 378.408378][ T8019] kvm: pic: non byte write [ 378.424553][ T8019] kvm: pic: level sensitive irq not supported [ 378.425082][ T8019] kvm: pic: non byte write [ 378.449129][ T8019] kvm: pic: non byte write [ 378.485074][ T5773] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 378.684954][ T5773] usb 2-1: Using ep0 maxpacket: 32 [ 378.706507][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.748989][ T5773] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 378.783933][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.817939][ T5773] usb 2-1: config 0 descriptor?? [ 378.942335][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.954954][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.255600][ T5773] lg-g15 0003:046D:C225.0004: item fetching failed at offset 0/2 [ 379.263892][ T5773] lg-g15: probe of 0003:046D:C225.0004 failed with error -22 [ 379.325109][ T5862] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 379.457514][ T5773] usb 2-1: USB disconnect, device number 14 [ 379.673131][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 379.896971][ T5862] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 380.029857][ T5862] usb 1-1: config 0 has no interface number 0 [ 380.054855][ T5862] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 380.675054][ T5862] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 380.711808][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.830786][ T5862] usb 1-1: Product: syz [ 380.875080][ T5862] usb 1-1: Manufacturer: syz [ 380.887518][ T5862] usb 1-1: SerialNumber: syz [ 380.916110][ T5862] usb 1-1: config 0 descriptor?? [ 382.831580][ T5862] usbtouchscreen 1-1:0.214: Failed to read FW rev: 0 [ 382.907523][ T5862] usbtouchscreen: probe of 1-1:0.214 failed with error -5 [ 382.951050][ T5862] usb 1-1: USB disconnect, device number 9 [ 383.475981][ T8063] siw: device registration error -23 [ 383.839892][ T8069] netlink: 'syz.0.558': attribute type 21 has an invalid length. [ 383.847903][ T8069] netlink: 128 bytes leftover after parsing attributes in process `syz.0.558'. [ 383.857264][ T8069] netlink: 3 bytes leftover after parsing attributes in process `syz.0.558'. [ 383.867516][ T8069] netlink: 'syz.0.558': attribute type 21 has an invalid length. [ 383.875375][ T8069] netlink: 128 bytes leftover after parsing attributes in process `syz.0.558'. [ 383.885386][ T8069] netlink: 3 bytes leftover after parsing attributes in process `syz.0.558'. [ 386.705275][ T5862] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 386.917026][ T5862] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 386.987743][ T5862] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 387.080122][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 387.253365][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.105159][ T8074] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 388.171641][ T5862] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 389.103949][ T5870] usb 1-1: USB disconnect, device number 10 [ 390.142564][ T8087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.084972][ T5870] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 391.285346][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 391.296765][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 391.328658][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.390027][ T5870] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 391.445017][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.636620][ T5870] usb 1-1: config 0 descriptor?? [ 392.016751][ T8093] futex_wake_op: syz.0.565 tries to shift op by -1; fix this program [ 392.112363][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 392.212527][ T8100] team1: entered promiscuous mode [ 392.218455][ T8100] team1: entered allmulticast mode [ 392.823960][ T5870] usbhid 1-1:0.0: can't add hid device: -71 [ 392.843738][ T5870] usbhid: probe of 1-1:0.0 failed with error -71 [ 392.868558][ T5870] usb 1-1: USB disconnect, device number 11 [ 392.905731][ T8104] 9pnet_fd: Insufficient options for proto=fd [ 395.828456][ T5870] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 396.035133][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 396.056691][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.110235][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.165150][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.199983][ T5870] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 396.231776][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.286504][ T5870] usb 4-1: config 0 descriptor?? [ 396.308644][ T5870] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 396.398402][ T5125] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 396.524046][ T8117] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 396.596836][ T5125] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 396.649863][ T8] usb 4-1: USB disconnect, device number 17 [ 399.245106][ T5838] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 399.467439][ T5838] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 399.495926][ T5838] usb 3-1: config 0 has no interface number 0 [ 399.650973][ T5838] usb 3-1: config 0 interface 237 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 400.504544][ T5838] usb 3-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=9f.6b [ 400.519048][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.527895][ T5838] usb 3-1: Product: syz [ 400.532248][ T5838] usb 3-1: Manufacturer: syz [ 400.537547][ T5838] usb 3-1: SerialNumber: syz [ 400.617593][ T5838] usb 3-1: config 0 descriptor?? [ 400.859771][ T5838] rndis_wlan 3-1:0.237: skipping garbage [ 400.878349][ T5838] usb 3-1: bad CDC descriptors [ 400.899624][ T5838] rndis_host 3-1:0.237: skipping garbage [ 400.915083][ T5838] usb 3-1: bad CDC descriptors [ 400.927643][ T5838] cdc_acm 3-1:0.237: skipping garbage [ 401.023482][ T5838] usb 3-1: USB disconnect, device number 11 [ 401.151837][ T8154] syzkaller0: entered promiscuous mode [ 401.187659][ T8154] syzkaller0: entered allmulticast mode [ 402.098005][ T8161] syz2: rxe_newlink: already configured on ipvlan0 [ 404.387948][ T8174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.591'. [ 408.795210][ T8174] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.591'. [ 410.721285][ T8189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.918404][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 410.928812][ T8200] netlink: set zone limit has 8 unknown bytes [ 410.957204][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 411.365367][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 411.392408][ T8] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 411.460705][ T8] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 411.481059][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 411.524831][ T8] usb 2-1: config 1 has no interface number 0 [ 411.531429][ T8] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.561285][ T8] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 411.605339][ T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 411.614456][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.672972][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 411.947674][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 411.962108][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 412.598264][ T5870] usb 2-1: USB disconnect, device number 15 [ 412.641659][ T5870] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 413.184414][ T8212] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 414.124844][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 414.141301][ T9] usb 4-1: config 1 has an invalid interface number: 69 but max is 0 [ 414.155152][ T9] usb 4-1: config 1 has no interface number 0 [ 414.180237][ T9] usb 4-1: config 1 interface 69 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 414.676497][ T9] usb 4-1: config 1 interface 69 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 414.688838][ T9] usb 4-1: config 1 interface 69 has no altsetting 0 [ 414.744242][ T8215] veth1_macvtap: left promiscuous mode [ 414.750353][ T8215] macsec0: entered promiscuous mode [ 414.837741][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 415.420099][ T9] usb 4-1: string descriptor 0 read error: -71 [ 415.428942][ T9] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a7e, bcdDevice=60.c4 [ 415.458708][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.517441][ T9] usb 4-1: can't set config #1, error -71 [ 415.620368][ T9] usb 4-1: USB disconnect, device number 18 [ 416.799443][ T8238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.611'. [ 417.811328][ T8250] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 418.613047][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 419.208999][ T8273] netlink: 'syz.2.618': attribute type 27 has an invalid length. [ 420.223582][ T3448] wlan1: Trigger new scan to find an IBSS to join [ 421.941357][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.949120][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.597559][ T8273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.519357][ T8273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.531274][ T8273] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.540561][ T8273] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.549510][ T8273] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.558398][ T8273] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.912168][ T8273] ip6erspan0: left promiscuous mode [ 424.952995][ T8274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.960580][ T8274] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.983948][ T8274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.407162][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 425.407178][ T27] audit: type=1326 audit(1767401299.600:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.3.627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f663258f749 code=0x0 [ 425.436788][ T8304] syzkaller1: entered promiscuous mode [ 425.442363][ T8304] syzkaller1: entered allmulticast mode [ 425.971622][ T8310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.630'. [ 426.235368][ T160] wlan1: Trigger new scan to find an IBSS to join [ 426.302279][ T8308] netlink: 32 bytes leftover after parsing attributes in process `syz.0.630'. [ 426.965012][ T788] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 427.195103][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 427.205676][ T787] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 427.291676][ T788] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 427.300955][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.364799][ T788] usb 1-1: Product: syz [ 427.369047][ T788] usb 1-1: Manufacturer: syz [ 427.384229][ T788] usb 1-1: SerialNumber: syz [ 427.415989][ T788] usb 1-1: config 0 descriptor?? [ 427.450716][ T788] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 427.525199][ T8324] program syz.2.635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.580747][ T787] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 427.621998][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.650964][ T3448] wlan1: Creating new IBSS network, BSSID a6:c0:86:9a:04:ca [ 427.670497][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.726067][ T787] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 427.797742][ T787] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 427.826755][ T787] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 427.864848][ T787] usb 4-1: Manufacturer: syz [ 427.886229][ T787] usb 4-1: config 0 descriptor?? [ 429.713433][ T788] gspca_stk1135: reg_w 0x3 err -110 [ 429.724852][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 429.731347][ T788] gspca_stk1135: Sensor write failed [ 429.920543][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 429.947633][ T787] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 429.950717][ T788] gspca_stk1135: Sensor write failed [ 429.962780][ T787] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 429.981679][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 429.995133][ T788] gspca_stk1135: Sensor read failed [ 430.005655][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 430.013246][ T787] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 430.021063][ T788] gspca_stk1135: Sensor read failed [ 430.032335][ T788] gspca_stk1135: Detected sensor type unknown (0x0) [ 430.039338][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 430.046408][ T788] gspca_stk1135: Sensor read failed [ 430.051843][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 430.059666][ T788] gspca_stk1135: Sensor read failed [ 430.065491][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 430.073528][ T788] gspca_stk1135: Sensor write failed [ 430.079639][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 430.114881][ T788] gspca_stk1135: Sensor write failed [ 430.137197][ T788] stk1135: probe of 1-1:0.0 failed with error -110 [ 430.157383][ T788] usb 1-1: USB disconnect, device number 12 [ 430.285432][ T787] usb 4-1: USB disconnect, device number 19 [ 430.414705][ T8345] fido_id[8345]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 431.264026][ T8361] comedi comedi0: pcl730: I/O port conflict (0x3,4) [ 433.194975][ T788] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 433.374878][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 433.392736][ T788] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 433.411582][ T788] usb 1-1: config 0 has no interface number 0 [ 433.444935][ T788] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 433.487224][ T788] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 433.525005][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.563916][ T788] usb 1-1: Product: syz [ 433.574110][ T788] usb 1-1: Manufacturer: syz [ 433.604706][ T788] usb 1-1: SerialNumber: syz [ 433.625533][ T788] usb 1-1: config 0 descriptor?? [ 433.663243][ T788] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 433.704806][ T788] em28xx 1-1:0.132: Video interface 132 found: [ 433.949329][ T8383] veth0_to_team: entered promiscuous mode [ 435.043552][ T788] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 436.440657][ T788] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 436.664890][ T788] em28xx 1-1:0.132: board has no eeprom [ 436.794854][ T788] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 437.001080][ T788] em28xx 1-1:0.132: analog set to bulk mode. [ 437.034057][ T5870] em28xx 1-1:0.132: Registering V4L2 extension [ 437.137616][ T8413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.658'. [ 437.885130][ T788] usb 1-1: USB disconnect, device number 13 [ 437.926666][ T788] em28xx 1-1:0.132: Disconnecting em28xx [ 438.704855][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 438.748255][ T5870] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 438.844837][ T5870] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 438.864988][ T5870] em28xx 1-1:0.132: No AC97 audio processor [ 438.932173][ T5870] usb 1-1: Decoder not found [ 438.944265][ T5870] em28xx 1-1:0.132: failed to create media graph [ 438.954881][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 438.968483][ T5870] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 438.997335][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 439.004545][ T5870] em28xx 1-1:0.132: Remote control support is not available for this card. [ 439.014579][ T788] em28xx 1-1:0.132: Closing input extension [ 439.026922][ T8] usb 2-1: config 0 has an invalid interface number: 165 but max is 0 [ 439.054825][ T8] usb 2-1: config 0 has no interface number 0 [ 439.067543][ T8] usb 2-1: config 0 interface 165 has no altsetting 0 [ 439.089864][ T8] usb 2-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=ba.a6 [ 439.102312][ T788] em28xx 1-1:0.132: Freeing device [ 439.115163][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.135627][ T8] usb 2-1: Product: syz [ 439.155017][ T8] usb 2-1: Manufacturer: syz [ 439.215239][ T8] usb 2-1: SerialNumber: syz [ 439.445115][ T8] usb 2-1: config 0 descriptor?? [ 439.495098][ T788] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 439.708860][ T788] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 439.716991][ T788] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 439.728295][ T788] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 439.742785][ T788] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 439.764941][ T788] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 439.791434][ T788] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 439.831256][ T8] ums-datafab 2-1:0.165: USB Mass Storage device detected [ 439.856080][ T788] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 439.875278][ T788] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 439.887653][ T788] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 439.892806][ T8] ums-sddr55 2-1:0.165: USB Mass Storage device detected [ 439.903439][ T788] usb 1-1: string descriptor 0 read error: -22 [ 439.912617][ T788] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 439.927185][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.962179][ T788] adutux 1-1:168.0: interrupt endpoints not found [ 440.005460][ T8] usb 2-1: USB disconnect, device number 16 [ 440.189917][ T8422] futex_wake_op: syz.0.660 tries to shift op by -1; fix this program [ 440.517849][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.537420][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.184173][ T788] usb 1-1: USB disconnect, device number 14 [ 442.865035][ T5838] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 442.879905][ T5870] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 443.082498][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 443.087853][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 443.098508][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 443.127998][ T5870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 443.148380][ T5838] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 443.176497][ T5870] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32 [ 443.195179][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.203239][ T5838] usb 4-1: Product: syz [ 443.211599][ T5870] usb 3-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.231097][ T5838] usb 4-1: Manufacturer: syz [ 443.268758][ T5838] usb 4-1: SerialNumber: syz [ 443.296221][ T5870] usb 3-1: config 1 interface 0 has no altsetting 0 [ 443.362617][ T5870] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 443.387372][ T5838] usb 4-1: config 0 descriptor?? [ 443.457009][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.471187][ T5838] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 443.516623][ T5870] usb 3-1: Product: syz [ 443.526729][ T5838] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 443.550164][ T5870] usb 3-1: Manufacturer: syz [ 443.620999][ T5870] usb 3-1: SerialNumber: syz [ 443.808301][ T8448] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 444.103153][ T5870] usb 3-1: USB disconnect, device number 12 [ 444.204167][ T5838] em28xx 4-1:0.0: chip ID is em2765 [ 445.795789][ T5838] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 445.843732][ T5838] em28xx 4-1:0.0: board has no eeprom [ 446.184967][ T5838] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 446.230580][ T5838] em28xx 4-1:0.0: dvb set to bulk mode. [ 446.272501][ T788] em28xx 4-1:0.0: Binding DVB extension [ 446.331899][ T5838] usb 4-1: USB disconnect, device number 20 [ 446.350869][ T5838] em28xx 4-1:0.0: Disconnecting em28xx [ 446.450929][ T8478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.676'. [ 446.953813][ T788] em28xx 4-1:0.0: Registering input extension [ 447.636930][ T5838] em28xx 4-1:0.0: Closing input extension [ 449.086771][ T5838] em28xx 4-1:0.0: Freeing device [ 451.045235][ T5838] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 451.364955][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 451.419716][ T5838] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 451.429226][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.437779][ T5838] usb 4-1: Product: syz [ 451.442349][ T5838] usb 4-1: Manufacturer: syz [ 451.468851][ T5838] usb 4-1: SerialNumber: syz [ 451.489639][ T5838] usb 4-1: config 0 descriptor?? [ 451.508887][ T5838] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 451.708127][ T8495] netlink: 360 bytes leftover after parsing attributes in process `syz.3.680'. [ 452.178988][ T5838] radio-usb-si4713: probe of 4-1:0.0 failed with error -71 [ 452.199266][ T5838] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 452.237186][ T5838] usb 4-1: USB disconnect, device number 21 [ 452.607232][ T8509] dlm: Unknown command passed to DLM device : 33 [ 452.607232][ T8509] [ 454.023368][ T8520] syz_tun: entered allmulticast mode [ 458.069731][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 458.358163][ T27] audit: type=1326 audit(1767401332.550:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7378f749 code=0x7ffc0000 [ 458.404846][ T27] audit: type=1326 audit(1767401332.550:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7378f749 code=0x7ffc0000 [ 458.435569][ T5839] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 458.445891][ T27] audit: type=1326 audit(1767401332.550:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f0a7378f749 code=0x7ffc0000 [ 458.468148][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.524863][ T27] audit: type=1326 audit(1767401332.550:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7378f749 code=0x7ffc0000 [ 458.544888][ T5838] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 458.579928][ T27] audit: type=1326 audit(1767401332.550:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7378f749 code=0x7ffc0000 [ 458.602664][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.672794][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.689819][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 458.723793][ T5839] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 458.755574][ T5838] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 458.763271][ T5838] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 458.801751][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.801863][ T5838] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 458.853533][ T5839] usb 1-1: config 0 descriptor?? [ 458.876434][ T5838] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 458.894587][ T5838] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 458.924252][ T5838] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 458.966101][ T5838] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 458.973636][ T5838] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 459.010739][ T5838] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 459.105621][ T5838] usb 4-1: string descriptor 0 read error: -22 [ 459.112117][ T5838] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 459.137003][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.211426][ T5838] adutux 4-1:168.0: interrupt endpoints not found [ 459.334177][ T5839] kovaplus 0003:1E7D:2D50.0006: item fetching failed at offset 2/5 [ 459.342840][ T5839] kovaplus 0003:1E7D:2D50.0006: parse failed [ 459.772356][ T5839] kovaplus: probe of 0003:1E7D:2D50.0006 failed with error -22 [ 459.928032][ T5839] usb 1-1: USB disconnect, device number 15 [ 460.049947][ T8566] futex_wake_op: syz.3.702 tries to shift op by -1; fix this program [ 460.655569][ T5838] usb 4-1: USB disconnect, device number 22 [ 461.276972][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.711'. [ 461.287884][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.711'. [ 462.005250][ T5838] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 462.556033][ T5838] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 462.680007][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.851620][ T5838] usb 1-1: config 0 descriptor?? [ 463.062504][ T5838] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 463.645854][ T5838] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 463.741959][ T8607] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 463.753941][ T8607] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 463.762579][ T8607] CPU: 0 PID: 8607 Comm: syz.3.714 Not tainted syzkaller #0 [ 463.770037][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.780231][ T8607] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 463.785835][ T8607] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 463.805484][ T8607] RSP: 0018:ffffc90004327a80 EFLAGS: 00010206 [ 463.811684][ T8607] RAX: 0000000000000005 RBX: ffff88801abcdc00 RCX: 0000000000080000 [ 463.819767][ T8607] RDX: ffffc9000f3f2000 RSI: 00000000000007c8 RDI: 00000000000007c9 [ 463.827760][ T8607] RBP: 0000000000000001 R08: ffff88814c16b92f R09: 1ffff1102982d725 [ 463.835767][ T8607] R10: dffffc0000000000 R11: ffffed102982d726 R12: 0000000000000028 [ 463.843851][ T8607] R13: dffffc0000000000 R14: ffff88814c16b800 R15: dffffc0000000000 [ 463.851934][ T8607] FS: 00007f66334a06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 463.860892][ T8607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.867514][ T8607] CR2: 00007f663349ff98 CR3: 0000000078d8e000 CR4: 00000000003506f0 [ 463.875630][ T8607] Call Trace: [ 463.879063][ T8607] [ 463.882116][ T8607] pcl818_detach+0x66/0xd0 [ 463.886572][ T8607] comedi_device_detach_locked+0x172/0x710 [ 463.892409][ T8607] comedi_unlocked_ioctl+0xccc/0xfe0 [ 463.897741][ T8607] ? comedi_poll+0x8c0/0x8c0 [ 463.902401][ T8607] ? __fget_files+0x28/0x4d0 [ 463.907279][ T8607] ? bpf_lsm_file_ioctl+0x9/0x10 [ 463.912272][ T8607] ? security_file_ioctl+0x80/0xa0 [ 463.917501][ T8607] ? comedi_poll+0x8c0/0x8c0 [ 463.922220][ T8607] __se_sys_ioctl+0xfd/0x170 [ 463.926850][ T8607] do_syscall_64+0x55/0xb0 [ 463.931292][ T8607] ? clear_bhb_loop+0x40/0x90 [ 463.936084][ T8607] ? clear_bhb_loop+0x40/0x90 [ 463.940803][ T8607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.946761][ T8607] RIP: 0033:0x7f663258f749 [ 463.951646][ T8607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.971815][ T8607] RSP: 002b:00007f66334a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.980345][ T8607] RAX: ffffffffffffffda RBX: 00007f66327e6180 RCX: 00007f663258f749 [ 463.988346][ T8607] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006 [ 463.996336][ T8607] RBP: 00007f6632613f91 R08: 0000000000000000 R09: 0000000000000000 [ 464.004330][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.012322][ T8607] R13: 00007f66327e6218 R14: 00007f66327e6180 R15: 00007ffdf51e5a88 [ 464.020352][ T8607] [ 464.023389][ T8607] Modules linked in: [ 464.029067][ T8607] ---[ end trace 0000000000000000 ]--- [ 464.034660][ T8607] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 464.040417][ T8607] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 464.060650][ T8607] RSP: 0018:ffffc90004327a80 EFLAGS: 00010206 [ 464.067547][ T8607] RAX: 0000000000000005 RBX: ffff88801abcdc00 RCX: 0000000000080000 [ 464.075953][ T8607] RDX: ffffc9000f3f2000 RSI: 00000000000007c8 RDI: 00000000000007c9 [ 464.084093][ T8607] RBP: 0000000000000001 R08: ffff88814c16b92f R09: 1ffff1102982d725 [ 464.092410][ T8607] R10: dffffc0000000000 R11: ffffed102982d726 R12: 0000000000000028 [ 464.100562][ T8607] R13: dffffc0000000000 R14: ffff88814c16b800 R15: dffffc0000000000 [ 464.108751][ T8607] FS: 00007f66334a06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 464.118019][ T8607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.138275][ T8607] CR2: 00007f663349ff98 CR3: 0000000078d8e000 CR4: 00000000003506f0 [ 464.146530][ T8607] Kernel panic - not syncing: Fatal exception [ 464.153005][ T8607] Kernel Offset: disabled [ 464.157333][ T8607] Rebooting in 86400 seconds..