last executing test programs: 5m49.962653003s ago: executing program 2 (id=931): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x2, 0x0) 5m49.701591762s ago: executing program 2 (id=934): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5m49.378649484s ago: executing program 2 (id=939): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 5m49.076783681s ago: executing program 2 (id=942): r0 = io_uring_setup(0x167c, &(0x7f00000003c0)={0x0, 0x86f5, 0x400, 0x2, 0x131}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000000)={0x7}, 0x0) 5m48.649177618s ago: executing program 2 (id=947): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) 5m44.574492301s ago: executing program 2 (id=977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x599e, 0x8, 0x8, 0x1e, 0x72, 0x9, 0x200, 0xe899]}}]}]}]}, 0x38}}, 0x4000) 5m29.276790623s ago: executing program 32 (id=977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x599e, 0x8, 0x8, 0x1e, 0x72, 0x9, 0x200, 0xe899]}}]}]}]}, 0x38}}, 0x4000) 1m48.541784395s ago: executing program 4 (id=4330): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0x8}, &(0x7f00000000c0)=0x8) 1m48.373141975s ago: executing program 4 (id=4333): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x1}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x4, 0x3, 0x8, 0x1, 0x6, 0x6}}, {0x1e}}]}]}, 0x64}}, 0x0) 1m47.753956699s ago: executing program 1 (id=4342): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x40, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}]}]}, 0x40}}, 0x0) 1m47.349748633s ago: executing program 4 (id=4349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 1m47.320383499s ago: executing program 1 (id=4351): r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m47.101975456s ago: executing program 4 (id=4354): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) socket$netlink(0x10, 0x3, 0x0) 1m46.97813007s ago: executing program 1 (id=4357): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1m46.840659965s ago: executing program 1 (id=4359): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c0000000700019ef9"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x0, 0xb, 0x5, "76baa53e9b"}, 0x0, 0x0, 0x0, 0x0}) 1m46.812482894s ago: executing program 4 (id=4360): sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fe"], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) 1m46.433873615s ago: executing program 4 (id=4366): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='inet_sk_error_report\x00', r1}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e1f, @local}, 0x10) 1m46.427928595s ago: executing program 5 (id=4367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 1m46.071341286s ago: executing program 5 (id=4373): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r0) openat(0xffffffffffffff9c, 0x0, 0x280, 0xb8) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 1m45.720064126s ago: executing program 5 (id=4378): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, 'team_slave_1\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'veth1_to_bond\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, 'erspan0\x00'}}) 1m45.533378989s ago: executing program 5 (id=4381): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 1m45.332450758s ago: executing program 5 (id=4384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x4a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x12001, &(0x7f0000000180)={[0xe2776529]}, 0x8) 1m45.000097647s ago: executing program 5 (id=4389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48c, 0x0, 0x8f}]}) 1m41.906793333s ago: executing program 1 (id=4434): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) 1m40.969520189s ago: executing program 1 (id=4449): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0xff, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c) shutdown(r1, 0x1) 1m31.387941165s ago: executing program 33 (id=4366): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='inet_sk_error_report\x00', r1}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e1f, @local}, 0x10) 1m29.835845967s ago: executing program 34 (id=4389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48c, 0x0, 0x8f}]}) 1m25.933795186s ago: executing program 35 (id=4449): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0xff, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c) shutdown(r1, 0x1) 873.531286ms ago: executing program 0 (id=6045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x3, 0x1, 0x0, 0x2, 0x4, 0x0, 0x6, 0x0, 0x3, 0x7, 0x3b, 0x7, 0x2], 0x70000, 0x7b652}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 732.483135ms ago: executing program 0 (id=6047): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 621.952417ms ago: executing program 0 (id=6050): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x19, 0x0, "58ec87bb53679fd04400889a2da26c4414fab0919616e14e4feb4b5daa18fe922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd000000000200"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) 481.957098ms ago: executing program 3 (id=6052): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='veno', 0x4) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) 461.084459ms ago: executing program 0 (id=6053): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff412b00001b0000000000", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2040) 356.11965ms ago: executing program 3 (id=6054): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r2, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x20) 324.544247ms ago: executing program 0 (id=6055): socket$inet(0xa, 0x801, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 300.806692ms ago: executing program 3 (id=6056): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x1, &(0x7f0000000340)=""/1, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 180.564333ms ago: executing program 3 (id=6057): pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x4a7a, 0x75ea, 0x2}) r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000180)) 172.231632ms ago: executing program 0 (id=6058): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) 131.203422ms ago: executing program 3 (id=6059): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010040000000400000006000100050000000800090002"], 0x3c}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) 0s ago: executing program 3 (id=6060): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="f78d9ca38fff48f3be52163448412ba89a754e612c8972825870e3aa7bf13685327eef5545a7d4fd9494a739862e68f60c19cd99a9962b6a094e7b0c3295650c102efd765b8613d82683900182914379d8d7034391bf6eb138767379109d9267a4de3bfaff5cbde01df1e3e8bde9621e9e2f3960d9bfcb4d14be2a1e2b854d86", 0x80}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253) kernel console output (not intermixed with test programs): oints for config 0 interface 84 altsetting 105: 77, using maximum allowed: 30 [ 269.652331][ T5809] usb 2-1: config 0 interface 84 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 77 [ 269.652363][ T5809] usb 2-1: config 0 interface 84 has no altsetting 0 [ 269.652400][ T5809] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 269.652427][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.695930][ T5809] usb 2-1: config 0 descriptor?? [ 269.903576][ T5809] usb 2-1: language id specifier not provided by device, defaulting to English [ 270.108171][ T5809] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 270.146107][ T5809] usb 2-1: USB disconnect, device number 11 [ 270.431788][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 270.636567][ T9543] program syz.3.1477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.791173][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1491'. [ 272.025262][ T9584] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-tlb(5) [ 272.098897][ T9584] bond1 (unregistering): Released all slaves [ 272.343813][ T5805] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 272.501279][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 272.507334][ T5805] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 272.507365][ T5805] usb 2-1: config 0 has no interface number 0 [ 272.507417][ T5805] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 272.507445][ T5805] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 272.507475][ T5805] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.507505][ T5805] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 272.507553][ T5805] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 272.507580][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.670839][ T5805] usb 2-1: config 0 descriptor?? [ 272.815094][ T5805] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 272.860419][ T9618] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1501'. [ 273.038856][ T10] usb 2-1: USB disconnect, device number 12 [ 273.078482][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 273.328961][ T9632] program syz.5.1507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.846813][ T9683] program syz.3.1525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.969933][ T9722] program syz.1.1540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.849494][ T9837] netlink: 'syz.1.1592': attribute type 2 has an invalid length. [ 279.849519][ T9837] netlink: 'syz.1.1592': attribute type 2 has an invalid length. [ 279.849534][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 279.871086][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 280.031011][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 280.037124][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 280.037157][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 280.073756][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 280.073778][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.073793][ T31] usb 5-1: Product: syz [ 280.073804][ T31] usb 5-1: Manufacturer: syz [ 280.073814][ T31] usb 5-1: SerialNumber: syz [ 280.079911][ T31] usb 5-1: config 0 descriptor?? [ 280.129441][ T31] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 280.129468][ T31] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 280.201604][ T5809] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 280.245252][ T9847] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1595'. [ 280.420525][ T5809] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 280.420559][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.423772][ T5809] usb 1-1: Product: syz [ 280.423789][ T5809] usb 1-1: Manufacturer: syz [ 280.423814][ T5809] usb 1-1: SerialNumber: syz [ 280.517307][ T5809] usb 1-1: config 0 descriptor?? [ 280.537599][ T5809] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 015 [ 280.585450][ T9852] netlink: 'syz.1.1596': attribute type 15 has an invalid length. [ 280.733998][ T31] em28xx 5-1:0.0: chip ID is em2882/3 [ 280.818330][ T9857] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1600'. [ 280.860904][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 280.937077][ T31] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 280.937427][ T31] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 280.937439][ T31] em28xx 5-1:0.0: No AC97 audio processor [ 280.973920][ T31] usb 5-1: USB disconnect, device number 9 [ 280.999889][ T31] em28xx 5-1:0.0: Disconnecting em28xx [ 281.020174][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 281.020203][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.066777][ T9] usb 6-1: config 0 descriptor?? [ 281.110632][ T9] cp210x 6-1:0.0: cp210x converter detected [ 281.119099][ T31] em28xx 5-1:0.0: Freeing device [ 281.131095][ T5809] i2c i2c-1: failure reading functionality [ 281.146702][ T5809] i2c i2c-1: connected i2c-tiny-usb device [ 281.226877][ T5809] usb 1-1: USB disconnect, device number 15 [ 281.486763][ T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 281.508807][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 281.692513][ T9] usb 6-1: USB disconnect, device number 3 [ 281.712879][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 281.781013][ T5800] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 281.781024][ T5806] Bluetooth: hci3: command 0x1003 tx timeout [ 281.828273][ T9865] program syz.0.1603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.862104][ T9] cp210x 6-1:0.0: device disconnected [ 281.967677][ T9869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1605'. [ 281.967709][ T9869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1605'. [ 281.967729][ T9869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1605'. [ 281.970168][ T9869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1605'. [ 282.733444][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 282.892506][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.892560][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 282.899119][ T9] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 282.899155][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.899179][ T9] usb 4-1: Product: syz [ 282.899196][ T9] usb 4-1: Manufacturer: syz [ 282.899213][ T9] usb 4-1: SerialNumber: syz [ 282.962740][ T9] usb 4-1: config 0 descriptor?? [ 282.969916][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 282.991916][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 282.993530][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 282.993594][ T9] usb 4-1: media controller created [ 283.051667][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.186360][ T9] DVB: Unable to find symbol tda10046_attach() [ 283.186378][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 283.186395][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 283.692373][ T9905] program syz.1.1621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.692655][ T5941] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 283.803978][ T9] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 283.826507][ T9] usb 4-1: USB disconnect, device number 13 [ 283.858980][ T5941] usb 6-1: unable to get BOS descriptor or descriptor too short [ 283.868522][ T5941] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 283.891110][ T5941] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 283.891146][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.891171][ T5941] usb 6-1: Product: syz [ 283.891187][ T5941] usb 6-1: Manufacturer: syz [ 283.891204][ T5941] usb 6-1: SerialNumber: syz [ 284.189011][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 284.321612][ T5941] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 285.083764][ T5941] usb 6-1: device descriptor read/64, error -71 [ 285.341162][ T5941] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 285.543457][ T5941] usb 6-1: unable to get BOS descriptor or descriptor too short [ 285.584359][ T5941] usb 6-1: device firmware changed [ 285.617973][ T5941] usb 6-1: USB disconnect, device number 4 [ 288.504651][T10017] loop4: detected capacity change from 0 to 7 [ 288.511000][T10017] Dev loop4: unable to read RDB block 7 [ 288.511053][T10017] loop4: unable to read partition table [ 288.511282][T10017] loop4: partition table beyond EOD, truncated [ 288.511302][T10017] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 288.550893][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 288.700813][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 288.703283][ T10] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 288.703311][ T10] usb 2-1: config 0 has no interface number 0 [ 288.703361][ T10] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 288.709780][ T10] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 288.709811][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.709834][ T10] usb 2-1: Product: syz [ 288.709849][ T10] usb 2-1: Manufacturer: syz [ 288.709865][ T10] usb 2-1: SerialNumber: syz [ 288.857566][ T10] usb 2-1: config 0 descriptor?? [ 289.485151][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input26 [ 289.697634][ T5809] usb 2-1: USB disconnect, device number 13 [ 290.503959][T10054] [U] ÿ [ 291.318203][T10072] batman_adv: batadv0: Adding interface: gretap1 [ 291.318224][T10072] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.318264][T10072] batman_adv: batadv0: Interface activated: gretap1 [ 291.952272][ T5952] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 292.110864][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 292.116682][ T5952] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 292.116714][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.159025][ T5952] usb 2-1: config 0 descriptor?? [ 292.232377][ T5952] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 292.572658][ T6024] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 292.680992][ T5809] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 292.736487][ T6024] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.736550][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 292.736582][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 292.736608][ T6024] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 292.738130][ T6024] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 292.738160][ T6024] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 292.738181][ T6024] usb 6-1: Manufacturer: syz [ 292.814942][ T5952] gspca_vc032x: reg_w err -71 [ 292.814983][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.814995][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815006][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815015][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815026][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815036][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815046][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815057][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815066][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815077][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815087][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815097][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815107][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815117][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815126][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815136][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815146][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815156][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 292.815165][ T5952] gspca_vc032x: Unknown sensor... [ 292.819459][ T5952] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 292.884615][ T5809] usb 5-1: Using ep0 maxpacket: 16 [ 292.909844][ T5809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.910054][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.910133][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 292.910196][ T5809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 292.910262][ T5809] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.913597][ T5809] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 292.913681][ T5809] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 292.913735][ T5809] usb 5-1: Manufacturer: syz [ 292.928694][ T5952] usb 2-1: USB disconnect, device number 14 [ 293.076706][ T6024] usb 6-1: config 0 descriptor?? [ 293.086764][ T5809] usb 5-1: config 0 descriptor?? [ 293.421005][ T6024] rc_core: IR keymap rc-hauppauge not found [ 293.421028][ T6024] Registered IR keymap rc-empty [ 293.421193][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.440810][ T5809] rc_core: IR keymap rc-hauppauge not found [ 293.440830][ T5809] Registered IR keymap rc-empty [ 293.440886][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.440970][ T5809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 293.461960][ T5809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 293.489384][ T6024] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 293.490220][ T5809] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 293.541229][ T5809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input28 [ 293.541364][ T6024] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 293.563918][ T5809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 293.585921][ T5809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 293.588345][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.601099][ T5809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 293.618367][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.621568][ T5809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 293.635804][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.642983][ T5809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 293.650940][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.662209][ T5809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 293.670961][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.682282][ T5809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 293.690889][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.701741][ T5809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 293.710962][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.721307][ T5809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 293.731110][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.749163][ T5809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 293.751226][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.770922][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.800933][ T6024] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 293.818741][ T5809] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 293.818786][ T5809] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 293.878279][ T6024] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 293.878308][ T6024] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 293.932222][ T6024] usb 6-1: USB disconnect, device number 5 [ 293.982832][ T5809] usb 5-1: USB disconnect, device number 10 [ 294.390953][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 294.540818][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 294.543142][ T31] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 294.543173][ T31] usb 4-1: config 0 has no interface number 0 [ 294.543224][ T31] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.543257][ T31] usb 4-1: config 0 interface 85 has no altsetting 0 [ 294.575963][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 294.576049][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.576114][ T31] usb 4-1: Product: syz [ 294.576156][ T31] usb 4-1: Manufacturer: syz [ 294.576198][ T31] usb 4-1: SerialNumber: syz [ 294.671583][ T31] usb 4-1: config 0 descriptor?? [ 294.755586][ T5800] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 295.341205][ T5941] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 295.489455][ T31] appletouch 4-1:0.85: Geyser mode initialized. [ 295.498516][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 295.501513][ T5941] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 295.501547][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.502908][ T31] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input29 [ 295.553010][ C1] appletouch 4-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 295.555077][ T5941] usb 6-1: config 0 descriptor?? [ 295.762426][ T31] usb 4-1: USB disconnect, device number 14 [ 295.810594][ T5941] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 295.824045][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.828859][ T5941] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 295.828917][ T5941] usb 6-1: media controller created [ 295.874642][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.963429][ T31] appletouch 4-1:0.85: input: appletouch disconnected [ 296.013584][ T5941] az6027: usb out operation failed. (-71) [ 296.014026][ T5941] az6027: usb out operation failed. (-71) [ 296.014041][ T5941] stb0899_attach: Driver disabled by Kconfig [ 296.014052][ T5941] az6027: no front-end attached [ 296.014052][ T5941] [ 296.014465][ T5941] az6027: usb out operation failed. (-71) [ 296.014480][ T5941] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 296.082842][ T5941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 296.088607][ T5941] dvb-usb: schedule remote query interval to 400 msecs. [ 296.088633][ T5941] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 296.120155][ T5941] usb 6-1: USB disconnect, device number 6 [ 296.426783][ T5941] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 296.731656][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1750'. [ 298.215154][T10214] binder: 10213:10214 ioctl c018620c 200000000000 returned -22 [ 298.425188][T10219] loop4: detected capacity change from 0 to 7 [ 298.425750][T10219] buffer_io_error: 10 callbacks suppressed [ 298.425766][T10219] Buffer I/O error on dev loop4, logical block 0, async page read [ 298.425815][T10219] Buffer I/O error on dev loop4, logical block 0, async page read [ 298.425851][T10219] Buffer I/O error on dev loop4, logical block 0, async page read [ 298.425883][T10219] Buffer I/O error on dev loop4, logical block 0, async page read [ 298.425948][T10219] Buffer I/O error on dev loop4, logical block 0, async page read [ 298.425992][T10219] Buffer I/O error on dev loop4, logical block 0, async page read [ 298.426023][T10219] Buffer I/O error on dev loop4, logical block 0, async page read [ 298.426040][T10219] ldm_validate_partition_table(): Disk read failed. [ 298.426068][T10219] Buffer I/O error on dev loop4, logical block 0, async page read [ 298.426098][T10219] Buffer I/O error on dev loop4, logical block 0, async page read [ 298.426130][T10219] Buffer I/O error on dev loop4, logical block 0, async page read [ 298.426164][T10219] Dev loop4: unable to read RDB block 0 [ 298.426232][T10219] loop4: unable to read partition table [ 298.426438][T10219] loop4: partition table beyond EOD, truncated [ 298.426459][T10219] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 299.385774][T10244] program syz.3.1775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.949668][T10277] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1790'. [ 301.691338][T10288] program syz.5.1795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.823556][T10305] program syz.1.1802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.239593][T10318] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1808'. [ 303.620173][T10332] tap0: tun_chr_ioctl cmd 1074025677 [ 303.620413][T10332] tap0: linktype set to 0 [ 304.087750][T10350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1823'. [ 304.272975][T10356] program syz.3.1827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.747747][T10366] dummy0: entered promiscuous mode [ 304.758146][T10366] macvlan0: entered promiscuous mode [ 305.030883][ T5809] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 305.058576][T10363] syz.0.1831 (10363) used greatest stack depth: 16792 bytes left [ 305.230852][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 305.233206][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.233268][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.233300][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 305.233325][ T5809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 305.233353][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.235978][ T5809] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 305.236008][ T5809] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 305.236031][ T5809] usb 2-1: Manufacturer: syz [ 305.378822][ T5809] usb 2-1: config 0 descriptor?? [ 305.381560][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 305.439339][T10383] input: syz1 as /devices/virtual/input/input31 [ 305.550894][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 305.566052][ T10] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 305.566085][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.566109][ T10] usb 1-1: Product: syz [ 305.566126][ T10] usb 1-1: Manufacturer: syz [ 305.566142][ T10] usb 1-1: SerialNumber: syz [ 305.613851][ T10] usb 1-1: config 0 descriptor?? [ 305.659241][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 305.885364][ T5809] rc_core: IR keymap rc-hauppauge not found [ 305.885387][ T5809] Registered IR keymap rc-empty [ 305.885552][ T5809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.900906][ T5809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.922439][ T5809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 305.926354][ T5809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 305.954322][ T5809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.970966][ T5809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.993017][ T5809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.011055][ T5809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.031356][ T5809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.103018][ T5809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.124781][ T5809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.143394][ T5809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.145770][T10391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1842'. [ 306.166180][ T5809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.182138][ T5809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.239523][ T5809] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 306.239552][ T5809] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 306.267068][ T10] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input33 [ 306.304810][ T5809] usb 2-1: USB disconnect, device number 15 [ 306.494645][ T10] usb 1-1: USB disconnect, device number 16 [ 306.819779][T10402] program syz.5.1847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.610863][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 307.748249][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1859'. [ 307.763837][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 307.763868][ T10] usb 5-1: config 0 has no interface number 0 [ 307.763921][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.763952][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.763993][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 307.764020][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.826278][ T10] usb 5-1: config 0 descriptor?? [ 308.004415][T10430] block nbd5: shutting down sockets [ 308.350876][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 308.467221][ T10] uclogic 0003:28BD:0094.000B: pen parameters not found [ 308.467260][ T10] uclogic 0003:28BD:0094.000B: interface is invalid, ignoring [ 308.540956][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 308.561578][ T31] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 308.561644][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 308.561666][ T31] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.561692][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 308.561711][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 308.562850][ T31] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 308.562904][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 308.562938][ T31] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.562957][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 308.562976][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 308.564165][ T31] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 308.564222][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 308.564252][ T31] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.564271][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 308.564291][ T31] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 308.567900][ T31] usb 4-1: string descriptor 0 read error: -22 [ 308.568033][ T31] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 308.568052][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.775286][ T31] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 308.808706][ T31] usb 5-1: USB disconnect, device number 11 [ 308.852624][ T5952] usb 4-1: USB disconnect, device number 15 [ 310.398793][T10464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1876'. [ 310.662606][ T37] audit: type=1326 audit(1768715633.779:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10472 comm="syz.0.1879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82f14bf749 code=0x0 [ 310.670167][T10464] nbd: socks must be embedded in a SOCK_ITEM attr [ 311.569255][ T9228] udevd[9228]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 312.953666][ T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 313.010989][ T6024] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 313.113478][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 313.113518][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.113571][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 313.113598][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.119060][ T10] usb 1-1: config 0 descriptor?? [ 313.120243][T10510] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 313.208246][ T6024] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.208343][ T6024] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 313.208389][ T6024] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.208414][ T6024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.271561][T10514] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 313.315990][ T6024] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.339267][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 313.339397][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 313.368139][ T10] usb 1-1: USB disconnect, device number 17 [ 313.654656][ T5952] usb 2-1: USB disconnect, device number 16 [ 313.675574][T10535] program syz.3.1905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.685933][T10572] loop5: detected capacity change from 0 to 7 [ 314.693033][T10572] Dev loop5: unable to read RDB block 7 [ 314.693069][T10572] loop5: AHDI p1 [ 314.693099][T10572] loop5: partition table partially beyond EOD, truncated [ 314.760835][ T5931] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 314.937730][ T5931] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 314.937766][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.937790][ T5931] usb 4-1: Product: syz [ 314.937806][ T5931] usb 4-1: Manufacturer: syz [ 314.937823][ T5931] usb 4-1: SerialNumber: syz [ 314.994296][ T5931] usb 4-1: config 0 descriptor?? [ 315.310290][ T82] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 315.844124][ T5931] usb 4-1: Firmware version (0.0) predates our first public release. [ 315.844155][ T5931] usb 4-1: Please update to version 0.2 or newer [ 315.967463][ T5931] usb 4-1: USB disconnect, device number 16 [ 316.191375][T10610] IPv6: Can't replace route, no match found [ 316.191725][T10610] IPv6: Can't replace route, no match found [ 316.950506][T10634] sch_fq: defrate 0 ignored. [ 317.486787][ T5800] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 317.918767][T10671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1966'. [ 319.135098][ T37] audit: type=1326 audit(1768715642.249:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10710 comm="syz.0.1984" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82f14bf749 code=0x0 [ 320.790821][ T5941] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 320.958907][T10776] netlink: 'syz.1.2015': attribute type 10 has an invalid length. [ 320.958934][T10776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2015'. [ 320.960950][ T5941] usb 6-1: Using ep0 maxpacket: 8 [ 320.970990][ T5941] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 320.971022][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.971044][ T5941] usb 6-1: Product: syz [ 320.971061][ T5941] usb 6-1: Manufacturer: syz [ 320.971078][ T5941] usb 6-1: SerialNumber: syz [ 321.027227][ T5941] usb 6-1: config 0 descriptor?? [ 321.046909][ T5941] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 321.046973][ T5941] pctv452e: pctv452e_power_ctrl: 1 [ 321.046973][ T5941] [ 321.047017][ T5941] usb 6-1: selecting invalid altsetting 3 [ 321.047031][ T5941] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 321.047031][ T5941] [ 321.047046][ T5941] dvb-usb: bulk message failed: -22 (5/0) [ 321.115859][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.116759][ T5941] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 321.116822][ T5941] usb 6-1: media controller created [ 321.119966][ T5941] dvb-usb: bulk message failed: -22 (8/0) [ 321.119986][ T5941] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 321.120069][ T5941] dvb-usb: MAC address reading failed. [ 321.182756][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.305522][ T5941] DVB: Unable to find symbol stb0899_attach() [ 321.305538][ T5941] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 321.484545][ T5941] rc_core: IR keymap rc-tt-1500 not found [ 321.484568][ T5941] Registered IR keymap rc-empty [ 321.486450][ T5941] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 321.490004][ T5941] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input34 [ 321.533088][ T5941] dvb-usb: schedule remote query interval to 100 msecs. [ 321.533114][ T5941] pctv452e: pctv452e_power_ctrl: 0 [ 321.533114][ T5941] [ 321.533128][ T5941] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 321.578351][ T5941] usb 6-1: USB disconnect, device number 7 [ 321.811888][ T5941] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 322.154945][ T5952] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 322.300854][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 322.303321][ T5952] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 322.303348][ T5952] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 322.303368][ T5952] usb 4-1: config 0 has no interface number 0 [ 322.303413][ T5952] usb 4-1: config 0 interface 8 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 322.303443][ T5952] usb 4-1: config 0 interface 8 has no altsetting 0 [ 322.370772][ T5952] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 322.370813][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.370836][ T5952] usb 4-1: Product: syz [ 322.370852][ T5952] usb 4-1: Manufacturer: syz [ 322.370868][ T5952] usb 4-1: SerialNumber: syz [ 322.376416][ T5952] usb 4-1: config 0 descriptor?? [ 322.448041][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.449976][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.599245][T10776] team0: Port device geneve0 added [ 322.749808][ T5952] ath6kl: Failed to submit usb control message: -71 [ 322.749862][ T5952] ath6kl: unable to send the bmi data to the device: -71 [ 322.749880][ T5952] ath6kl: Unable to send get target info: -71 [ 322.797202][ T5952] ath6kl: Failed to init ath6kl core: -71 [ 322.799846][ T5952] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 322.849375][ T5952] usb 4-1: USB disconnect, device number 17 [ 323.217595][T10812] program syz.0.2027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.288562][T10814] netlink: 'syz.1.2028': attribute type 6 has an invalid length. [ 323.288586][T10814] netlink: 14577 bytes leftover after parsing attributes in process `syz.1.2028'. [ 323.384157][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2029'. [ 323.494240][T10818] bond0: entered promiscuous mode [ 323.494267][T10818] bond_slave_0: entered promiscuous mode [ 323.494627][T10818] bond_slave_1: entered promiscuous mode [ 323.525256][T10818] batadv0: entered promiscuous mode [ 323.569899][T10818] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 323.710519][T10818] bond0: left promiscuous mode [ 323.710548][T10818] bond_slave_0: left promiscuous mode [ 323.720404][T10818] bond_slave_1: left promiscuous mode [ 323.780873][T10818] batadv0: left promiscuous mode [ 324.563748][ T5800] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 325.042885][T10865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2052'. [ 325.049517][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2052'. [ 325.049547][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2052'. [ 326.102825][T10893] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2067'. [ 326.329948][T10900] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 326.856175][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2076'. [ 328.472467][ T37] audit: type=1326 audit(1768715651.589:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e21f749 code=0x7ffc0000 [ 328.533644][ T37] audit: type=1326 audit(1768715651.589:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e21f749 code=0x7ffc0000 [ 328.533704][ T37] audit: type=1326 audit(1768715651.619:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fad5e21f749 code=0x7ffc0000 [ 328.533755][ T37] audit: type=1326 audit(1768715651.649:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e21f749 code=0x7ffc0000 [ 328.533804][ T37] audit: type=1326 audit(1768715651.649:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e21f749 code=0x7ffc0000 [ 328.533857][ T37] audit: type=1326 audit(1768715651.649:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e21f749 code=0x7ffc0000 [ 328.533907][ T37] audit: type=1326 audit(1768715651.649:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e21f749 code=0x7ffc0000 [ 328.533955][ T37] audit: type=1326 audit(1768715651.649:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e21f749 code=0x7ffc0000 [ 328.534238][ T37] audit: type=1326 audit(1768715651.649:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5e21f749 code=0x7ffc0000 [ 328.535872][ T37] audit: type=1326 audit(1768715651.649:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10952 comm="syz.3.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fad5e21f749 code=0x7ffc0000 [ 328.583676][ T5800] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 328.608861][ T5800] Bluetooth: hci4: Injecting HCI hardware error event [ 328.613996][ T5806] Bluetooth: hci4: hardware error 0x00 [ 328.671409][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 328.821595][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 328.824013][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 328.828875][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 328.828907][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.828931][ T10] usb 1-1: Product: syz [ 328.828947][ T10] usb 1-1: Manufacturer: syz [ 328.828964][ T10] usb 1-1: SerialNumber: syz [ 328.885140][ T10] usb 1-1: config 0 descriptor?? [ 329.341173][ T10] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 329.743813][ T10] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 329.766720][ T5941] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 329.792650][ T10] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 329.873963][ T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 329.947908][ T10] usb 1-1: USB disconnect, device number 18 [ 329.951003][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 329.963939][ T5941] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.963976][ T5941] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.964002][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 329.964038][ T5941] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 329.964064][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.039631][ T5941] usb 5-1: config 0 descriptor?? [ 330.490083][ T5941] hid_parser_main: 440 callbacks suppressed [ 330.490113][ T5941] ntrig 0003:1B96:0004.000C: unknown main item tag 0x0 [ 330.490148][ T5941] ntrig 0003:1B96:0004.000C: unknown main item tag 0x0 [ 330.490178][ T5941] ntrig 0003:1B96:0004.000C: unknown main item tag 0x0 [ 330.490208][ T5941] ntrig 0003:1B96:0004.000C: unknown main item tag 0x0 [ 330.490237][ T5941] ntrig 0003:1B96:0004.000C: unknown main item tag 0x0 [ 330.557989][ T5941] ntrig 0003:1B96:0004.000C: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.4-1/input0 [ 330.687044][ T5941] ntrig 0003:1B96:0004.000C: Firmware version: 2.15.3.18.7 (7c24 577a) [ 330.896724][ T5931] usb 5-1: USB disconnect, device number 12 [ 331.060955][ T5806] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 333.655011][T11055] netlink: 'syz.0.2135': attribute type 2 has an invalid length. [ 333.780990][ T5806] Bluetooth: hci5: command tx timeout [ 334.325474][T11070] i2c i2c-0: Invalid block write size 252 [ 334.750366][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 335.831245][T11106] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2155'. [ 336.518172][T11113] pimreg: entered allmulticast mode [ 336.529480][T11114] pimreg: left allmulticast mode [ 336.940881][ T5941] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 337.093185][ T5941] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 337.093216][ T5941] usb 2-1: config 0 has no interface number 0 [ 337.095676][ T5941] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 337.095707][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.095731][ T5941] usb 2-1: Product: syz [ 337.095747][ T5941] usb 2-1: Manufacturer: syz [ 337.095764][ T5941] usb 2-1: SerialNumber: syz [ 337.116364][ T5941] usb 2-1: config 0 descriptor?? [ 337.373824][ T5941] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 337.401856][ T5941] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 337.402289][ T5941] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 337.402346][ T5941] usb 2-1: media controller created [ 337.450424][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.579942][ T5941] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 337.746507][ T5941] usb 2-1: USB disconnect, device number 17 [ 337.970839][ T6024] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 338.130862][ T6024] usb 1-1: Using ep0 maxpacket: 32 [ 338.133060][ T6024] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 338.133088][ T6024] usb 1-1: config 0 has no interface number 0 [ 338.133138][ T6024] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.133169][ T6024] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.133212][ T6024] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 338.133238][ T6024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.165206][ T6024] usb 1-1: config 0 descriptor?? [ 338.323363][T11162] program syz.3.2179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.862195][ T6024] uclogic 0003:28BD:0094.000D: pen parameters not found [ 338.862223][ T6024] uclogic 0003:28BD:0094.000D: interface is invalid, ignoring [ 338.882158][ T6024] usb 1-1: USB disconnect, device number 19 [ 339.820407][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 339.820427][ T37] audit: type=1326 audit(1768715662.929:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9189b0f749 code=0x7ffc0000 [ 339.857447][ T37] audit: type=1326 audit(1768715662.969:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9189b0f749 code=0x7ffc0000 [ 339.860457][ T37] audit: type=1326 audit(1768715662.969:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9189b0f749 code=0x7ffc0000 [ 339.888100][ T37] audit: type=1326 audit(1768715662.999:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9189b0f749 code=0x7ffc0000 [ 339.941775][ T37] audit: type=1326 audit(1768715663.059:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9189b0f749 code=0x7ffc0000 [ 339.942284][ T37] audit: type=1326 audit(1768715663.059:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9189b0f749 code=0x7ffc0000 [ 339.951631][ T37] audit: type=1326 audit(1768715663.069:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f9189b0f749 code=0x7ffc0000 [ 340.116724][T11204] geneve2: entered promiscuous mode [ 340.149133][ T37] audit: type=1326 audit(1768715663.259:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9189b0f749 code=0x7ffc0000 [ 340.150082][ T37] audit: type=1326 audit(1768715663.259:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.5.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9189b0f749 code=0x7ffc0000 [ 340.384674][T11212] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2201'. [ 340.860826][ T5952] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 341.020147][ T5952] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.020189][ T5952] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.020233][ T5952] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.020268][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.074730][T11229] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 341.100056][ T5952] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.367023][ T5952] usb 6-1: USB disconnect, device number 8 [ 344.144504][T11307] cgroup: noprefix used incorrectly [ 344.223978][T11309] tap0: tun_chr_ioctl cmd 1074025677 [ 344.224233][T11309] tap0: linktype set to 823 [ 344.736505][T11331] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2256'. [ 345.908595][T11371] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2275'. [ 346.221007][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 346.337452][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 346.373157][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 346.373194][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.373236][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 346.373261][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.420222][ T9] usb 2-1: config 0 descriptor?? [ 346.859509][ T9] isku 0003:1E7D:319C.000E: item fetching failed at offset 5/7 [ 346.860347][ T9] isku 0003:1E7D:319C.000E: parse failed [ 346.860424][ T9] isku 0003:1E7D:319C.000E: probe with driver isku failed with error -22 [ 347.084739][ T9] usb 2-1: USB disconnect, device number 18 [ 348.832215][ T6024] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 348.985908][ T6024] usb 6-1: Using ep0 maxpacket: 8 [ 349.015912][ T6024] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 349.015949][ T6024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.015972][ T6024] usb 6-1: Product: syz [ 349.015989][ T6024] usb 6-1: Manufacturer: syz [ 349.016006][ T6024] usb 6-1: SerialNumber: syz [ 349.057877][ T6024] usb 6-1: config 0 descriptor?? [ 349.194340][T11463] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2319'. [ 349.316690][ T6024] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 349.671172][T11475] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2325'. [ 349.919005][ T6024] usb write operation failed. (-71) [ 349.940455][ T6024] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 349.955001][ T6024] dvbdev: DVB: registering new adapter (Terratec H7) [ 349.955062][ T6024] usb 6-1: media controller created [ 349.956330][ T6024] usb read operation failed. (-71) [ 349.956820][ T6024] usb write operation failed. (-71) [ 349.994545][ T6024] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 350.015043][ T6024] usb 6-1: USB disconnect, device number 9 [ 350.158809][T11494] tap0: tun_chr_ioctl cmd 1074025677 [ 350.159035][T11494] tap0: linktype set to 280 [ 350.801886][T11518] sch_tbf: burst 5874 is lower than device lo mtu (65550) ! [ 350.910933][ T5805] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 351.070812][ T5805] usb 6-1: Using ep0 maxpacket: 8 [ 351.073334][ T5805] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 66, changing to 10 [ 351.073373][ T5805] usb 6-1: config 0 interface 0 has no altsetting 0 [ 351.073411][ T5805] usb 6-1: New USB device found, idVendor=1e71, idProduct=200d, bcdDevice= 0.00 [ 351.073438][ T5805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.109929][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2348'. [ 351.120999][ T5805] usb 6-1: config 0 descriptor?? [ 351.495269][T11538] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2351'. [ 351.608076][ T5805] nzxt-smart2 0003:1E71:200D.000F: unknown main item tag 0x0 [ 351.608114][ T5805] nzxt-smart2 0003:1E71:200D.000F: unknown main item tag 0x0 [ 351.608140][ T5805] nzxt-smart2 0003:1E71:200D.000F: unknown main item tag 0x0 [ 351.608164][ T5805] nzxt-smart2 0003:1E71:200D.000F: unknown main item tag 0x0 [ 351.608189][ T5805] nzxt-smart2 0003:1E71:200D.000F: unknown main item tag 0x0 [ 351.608216][ T5805] nzxt-smart2 0003:1E71:200D.000F: unknown main item tag 0x0 [ 351.608241][ T5805] nzxt-smart2 0003:1E71:200D.000F: unknown main item tag 0x0 [ 351.608268][ T5805] nzxt-smart2 0003:1E71:200D.000F: unknown main item tag 0x0 [ 351.608293][ T5805] nzxt-smart2 0003:1E71:200D.000F: unknown main item tag 0x0 [ 351.608319][ T5805] nzxt-smart2 0003:1E71:200D.000F: unknown main item tag 0x0 [ 351.609518][ T5805] nzxt-smart2 0003:1E71:200D.000F: unexpected long global item [ 351.610303][ T5805] nzxt-smart2 0003:1E71:200D.000F: probe with driver nzxt-smart2 failed with error -22 [ 351.785796][ T5805] usb 6-1: USB disconnect, device number 10 [ 352.350904][ T5805] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 352.507048][ T5805] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 352.507090][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.507113][ T5805] usb 2-1: Product: syz [ 352.507129][ T5805] usb 2-1: Manufacturer: syz [ 352.507146][ T5805] usb 2-1: SerialNumber: syz [ 352.526777][ T5805] usb 2-1: config 0 descriptor?? [ 352.560909][ T6024] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 352.710802][ T6024] usb 1-1: Using ep0 maxpacket: 8 [ 352.713855][ T6024] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 352.713900][ T6024] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 352.713967][ T6024] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 352.714010][ T6024] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.714037][ T6024] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.714067][ T6024] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 352.714100][ T6024] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 352.714131][ T6024] usb 1-1: config 168 interface 0 has no altsetting 0 [ 352.717677][ T6024] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 352.717720][ T6024] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 352.717764][ T6024] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 352.717798][ T6024] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.717828][ T6024] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.717857][ T6024] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 352.717887][ T6024] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 352.717919][ T6024] usb 1-1: config 168 interface 0 has no altsetting 0 [ 352.808085][ T6024] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 352.808132][ T6024] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 352.808172][ T6024] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 352.808201][ T6024] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.808237][ T6024] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.808265][ T6024] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 352.808295][ T6024] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 352.808324][ T6024] usb 1-1: config 168 interface 0 has no altsetting 0 [ 352.916051][ T6024] usb 1-1: string descriptor 0 read error: -22 [ 352.917308][ T6024] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 352.917337][ T6024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.031511][ T6024] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 353.267258][ T5805] airspy 2-1:0.0: Board ID: 00 [ 353.267281][ T5805] airspy 2-1:0.0: Firmware version: [ 353.278267][ T5941] usb 1-1: USB disconnect, device number 20 [ 353.677130][ T5805] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 353.710477][ T5805] airspy 2-1:0.0: Registered as swradio24 [ 353.710501][ T5805] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 353.744470][ T5805] usb 2-1: USB disconnect, device number 19 [ 354.050841][ T5952] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 354.238947][ T5952] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 354.239014][ T5952] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.239046][ T5952] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.239095][ T5952] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 354.239127][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.340639][ T5952] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.352162][ T5952] usb 6-1: invalid MIDI out EP 0 [ 354.704598][ T8978] udevd[8978]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.850408][ T5952] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 354.866909][ T5952] usb 6-1: USB disconnect, device number 11 [ 355.273403][T11642] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input36 [ 355.390894][ T5952] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 355.545334][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 355.557658][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.557718][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.557750][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.557775][ T5952] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 355.557801][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.603493][ T5952] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 355.603561][ T5952] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 355.603633][ T5952] usb 2-1: Manufacturer: syz [ 355.666861][ T5952] usb 2-1: config 0 descriptor?? [ 356.012423][ T5800] Bluetooth: hci5: link tx timeout [ 356.012879][ T5800] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 356.021050][ T5800] Bluetooth: hci5: link tx timeout [ 356.021068][ T5800] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 356.085891][ T5952] rc_core: IR keymap rc-hauppauge not found [ 356.085913][ T5952] Registered IR keymap rc-empty [ 356.086073][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.105466][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.108515][T11636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.151890][ T5952] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 356.154362][ T5952] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input37 [ 356.156139][T11636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.231132][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.251181][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.270983][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.291000][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.310956][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.330916][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.352523][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.390254][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.408871][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.467209][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.479810][T11673] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2419'. [ 356.527405][ T9228] udevd[9228]: failed to send result of seq 15897 to main daemon: Connection refused [ 356.538668][ T5952] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 356.538727][ T5952] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 356.603148][ T5952] usb 2-1: USB disconnect, device number 20 [ 356.609766][ T8978] udevd[8978]: failed to send result of seq 15882 to main daemon: Transport endpoint is not connected [ 357.138875][T11697] input: syz1 as /devices/virtual/input/input38 [ 358.018013][T11740] program syz.4.2450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.110761][ T5800] Bluetooth: hci5: command 0x0406 tx timeout [ 358.235010][T11746] serio: Serial port ttyS3 [ 358.563321][ T5805] kernel write not supported for file /zero (pid: 5805 comm: kworker/1:3) [ 360.422023][ T5800] Bluetooth: hci5: command 0x0406 tx timeout [ 361.586125][T11917] program syz.4.2534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.739989][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2540'. [ 361.741599][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 361.890800][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 361.897013][ T31] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 361.897046][ T31] usb 2-1: config 0 has no interface number 0 [ 361.897096][ T31] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 361.900112][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 361.900144][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.900168][ T31] usb 2-1: Product: syz [ 361.900185][ T31] usb 2-1: Manufacturer: syz [ 361.900201][ T31] usb 2-1: SerialNumber: syz [ 361.968389][ T31] usb 2-1: config 0 descriptor?? [ 361.969475][T11913] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 361.991897][ T37] audit: type=1326 audit(1768715685.109:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.4.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 361.992057][ T37] audit: type=1326 audit(1768715685.109:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.4.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 362.047320][ T37] audit: type=1326 audit(1768715685.159:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.4.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 362.047382][ T37] audit: type=1326 audit(1768715685.159:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.4.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 362.047430][ T37] audit: type=1326 audit(1768715685.159:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.4.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 362.047489][ T37] audit: type=1326 audit(1768715685.159:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.4.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 362.047734][ T37] audit: type=1326 audit(1768715685.159:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.4.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 362.053032][ T37] audit: type=1326 audit(1768715685.169:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.4.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 362.081954][ T37] audit: type=1326 audit(1768715685.169:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.4.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 362.214810][T11913] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 362.617024][T11952] random: crng reseeded on system resumption [ 362.826203][ T31] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 362.826481][ T31] asix 2-1:0.188: probe with driver asix failed with error -71 [ 362.865682][ T31] usb 2-1: USB disconnect, device number 21 [ 362.965369][T11960] IPVS: persistence engine module ip_vs_pe_ not found [ 363.582055][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 363.582091][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'. [ 363.582120][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2573'. [ 364.156322][ T5941] kernel write not supported for file [eventfd] (pid: 5941 comm: kworker/0:6) [ 365.119052][T12078] sg_write: process 771 (syz.1.2610) changed security contexts after opening file descriptor, this is not allowed. [ 365.287054][T12086] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 367.036754][T12160] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2653'. [ 367.208427][T12167] loop8: detected capacity change from 0 to 8 [ 367.264208][T12167] Dev loop8: unable to read RDB block 8 [ 367.264266][T12167] loop8: unable to read partition table [ 367.264490][T12167] loop8: partition table beyond EOD, truncated [ 367.264509][T12167] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 367.309211][T12151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.827528][T12151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.051256][ T5941] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 368.084343][T12151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.200878][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 368.203745][ T5941] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 368.203773][ T5941] usb 2-1: config 0 has no interface number 0 [ 368.203824][ T5941] usb 2-1: config 0 interface 184 has no altsetting 0 [ 368.207539][ T5941] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 368.207571][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.207594][ T5941] usb 2-1: Product: syz [ 368.207610][ T5941] usb 2-1: Manufacturer: syz [ 368.207627][ T5941] usb 2-1: SerialNumber: syz [ 368.227482][ T5941] usb 2-1: config 0 descriptor?? [ 368.289769][ T5941] smsc75xx v1.0.0 [ 368.349002][T12214] sctp: [Deprecated]: syz.5.2679 (pid 12214) Use of int in maxseg socket option. [ 368.349002][T12214] Use struct sctp_assoc_value instead [ 368.694935][T12151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.883442][ T5941] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 368.883475][ T5941] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 369.093530][ T5941] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 369.093568][ T5941] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 369.093591][ T5941] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 369.093882][ T5941] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 369.141840][ T5941] usb 2-1: USB disconnect, device number 22 [ 370.861473][ T37] audit: type=1326 audit(1768715693.979:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12312 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa763f749 code=0x7ffc0000 [ 370.862188][ T37] audit: type=1326 audit(1768715693.979:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12312 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfa763f749 code=0x7ffc0000 [ 370.862434][ T37] audit: type=1326 audit(1768715693.979:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12312 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa763f749 code=0x7ffc0000 [ 370.863584][ T37] audit: type=1326 audit(1768715693.979:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12312 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa763f749 code=0x7ffc0000 [ 371.526331][T12355] loop8: detected capacity change from 0 to 8 [ 371.527231][T12355] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 371.527265][T12355] loop8: partition table partially beyond EOD, truncated [ 371.527374][T12355] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 374.805721][T12504] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.821111][ T31] IPVS: starting estimator thread 0... [ 374.931098][T12510] IPVS: using max 10 ests per chain, 24000 per kthread [ 377.364958][ T5955] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 380.540878][ T37] audit: type=1326 audit(1768715703.649:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12679 comm="syz.4.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7fc00000 [ 382.011379][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2932'. [ 382.855291][T12784] sctp: [Deprecated]: syz.1.2947 (pid 12784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.855291][T12784] Use struct sctp_sack_info instead [ 383.815955][T12831] netlink: 'syz.1.2971': attribute type 1 has an invalid length. [ 383.815980][T12831] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2971'. [ 383.816013][T12831] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2971'. [ 383.816029][T12831] netlink: 'syz.1.2971': attribute type 2 has an invalid length. [ 383.867169][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.867245][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.061027][ T5952] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 385.210767][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 385.212892][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.212925][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.212949][ T5952] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 385.212994][ T5952] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 385.213020][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.218316][ T5952] usb 6-1: config 0 descriptor?? [ 385.461148][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 385.648174][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.648211][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.648253][ T31] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 385.648279][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.698584][ T31] usb 2-1: config 0 descriptor?? [ 385.711926][ T5952] input: HID 0955:7214 Haptics as /devices/virtual/input/input39 [ 385.834057][T12879] random: crng reseeded on system resumption [ 386.065300][ T5952] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 386.068280][ T5952] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 386.148628][ T5952] usb 6-1: USB disconnect, device number 12 [ 386.208499][ T5805] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 386.208639][ T5805] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 386.208718][ T5805] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 386.285421][ T5805] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 386.554954][ T31] hid-led 0003:27B8:01ED.0011: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 386.579202][ T31] hid-led 0003:27B8:01ED.0011: ThingM blink(1) initialized [ 386.786631][ T10] usb 2-1: USB disconnect, device number 23 [ 386.829773][T12943] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3021'. [ 387.434255][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3037'. [ 388.205623][T13011] netlink: 'syz.4.3056': attribute type 10 has an invalid length. [ 388.279239][T13011] team0: Port device dummy0 added [ 388.301062][T13011] netlink: 'syz.4.3056': attribute type 10 has an invalid length. [ 388.442363][T13011] team0: Port device dummy0 removed [ 388.481407][T13021] loop5: detected capacity change from 0 to 7 [ 388.496568][T13021] Dev loop5: unable to read RDB block 7 [ 388.496719][T13021] loop5: unable to read partition table [ 388.497362][T13021] loop5: partition table beyond EOD, truncated [ 388.497409][T13021] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 388.579697][T13011] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 390.261277][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 390.422960][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 390.424388][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.424417][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 390.424438][ T9] usb 2-1: SerialNumber: syz [ 391.184861][ T9] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 391.509830][ T31] usb 2-1: USB disconnect, device number 24 [ 391.523881][ T31] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 392.561624][ T31] IPVS: starting estimator thread 0... [ 392.650936][T13201] IPVS: using max 8 ests per chain, 19200 per kthread [ 393.205802][ T10] hid_parser_main: 84 callbacks suppressed [ 393.205828][ T10] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 393.279454][ T10] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.355825][T13272] netlink: 'syz.4.3182': attribute type 3 has an invalid length. [ 394.355850][T13272] netlink: 'syz.4.3182': attribute type 1 has an invalid length. [ 394.355865][T13272] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3182'. [ 394.385623][T13234] hid-generic 0000:0000:0000.0012: pid 13234 passed too short report [ 395.980816][ T6024] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 395.981019][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 396.034273][T13345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3215'. [ 396.034312][T13345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3215'. [ 396.087484][T13345] gretap0: entered promiscuous mode [ 396.121524][T13345] gretap0: left promiscuous mode [ 396.132116][ T6024] usb 6-1: Using ep0 maxpacket: 16 [ 396.132573][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 396.150829][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.150919][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.150946][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.150991][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 396.151017][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.153850][ T6024] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.153877][ T6024] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.171779][ T6024] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.171870][ T6024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.171903][ T6024] usb 6-1: Product: syz [ 396.171922][ T6024] usb 6-1: Manufacturer: syz [ 396.171974][ T6024] usb 6-1: SerialNumber: syz [ 396.187193][ T10] usb 5-1: config 0 descriptor?? [ 396.500248][ T6024] usb 6-1: 0:2 : does not exist [ 396.660994][ T6024] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 396.714805][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0013/input/input40 [ 396.732928][ T6024] usb 6-1: USB disconnect, device number 13 [ 396.811817][ T10] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 396.854410][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 396.881484][ T10] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz1] on syz0 [ 396.908340][ T5805] usb 5-1: USB disconnect, device number 13 [ 397.587409][T13393] loop8: detected capacity change from 0 to 8 [ 397.591344][T13393] Dev loop8: unable to read RDB block 8 [ 397.591394][T13393] loop8: unable to read partition table [ 397.591638][T13393] loop8: partition table beyond EOD, truncated [ 397.591660][T13393] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 398.221051][ T5805] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 398.330939][ T5952] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 398.331327][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 398.370822][ T5805] usb 6-1: Using ep0 maxpacket: 16 [ 398.374187][ T5805] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.374223][ T5805] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.374249][ T5805] usb 6-1: config 0 interface 0 has no altsetting 0 [ 398.374285][ T5805] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 398.374313][ T5805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.380264][ T5805] usb 6-1: config 0 descriptor?? [ 398.480816][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 398.481031][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 398.485317][ T31] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 398.485345][ T31] usb 2-1: config 0 has no interface number 0 [ 398.523950][ T5952] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 398.523982][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.524005][ T5952] usb 5-1: Product: syz [ 398.524123][ T5952] usb 5-1: Manufacturer: syz [ 398.524141][ T5952] usb 5-1: SerialNumber: syz [ 398.526090][ T31] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 398.526121][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.526200][ T31] usb 2-1: Product: syz [ 398.526219][ T31] usb 2-1: Manufacturer: syz [ 398.526236][ T31] usb 2-1: SerialNumber: syz [ 398.607179][ T31] usb 2-1: config 0 descriptor?? [ 398.632223][ T31] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 398.640526][ T5952] usb 5-1: config 0 descriptor?? [ 398.847728][ T31] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 398.876869][ T31] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 398.877904][ T5952] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 398.926100][ T5805] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 398.926143][ T5805] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 398.926174][ T5805] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 398.926435][ T5805] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 398.926467][ T5805] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 398.992950][ T5805] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 399.121017][ T5805] usb 6-1: USB disconnect, device number 14 [ 399.232775][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 399.237449][ T5809] usb 2-1: USB disconnect, device number 25 [ 399.267382][ T5809] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 399.294598][ T5809] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 399.295672][ T5809] quatech2 2-1:0.51: device disconnected [ 399.505697][ T5952] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 399.533701][ T5952] usb 5-1: USB disconnect, device number 14 [ 400.063048][T13485] netlink: 8752 bytes leftover after parsing attributes in process `syz.5.3285'. [ 402.650626][ T5805] kernel write not supported for file bpf-prog (pid: 5805 comm: kworker/1:3) [ 402.864848][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 402.865128][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 403.200197][ T37] audit: type=1326 audit(1768715726.309:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13635 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9222b0b829 code=0x7ffc0000 [ 403.204013][ T37] audit: type=1326 audit(1768715726.309:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13635 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 403.208446][ T37] audit: type=1326 audit(1768715726.319:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13635 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9222b0b829 code=0x7ffc0000 [ 403.281256][ T37] audit: type=1326 audit(1768715726.319:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13635 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9222b0b829 code=0x7ffc0000 [ 403.284181][ T37] audit: type=1326 audit(1768715726.399:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13635 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 403.292860][ T37] audit: type=1326 audit(1768715726.399:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13635 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 403.293069][ T37] audit: type=1326 audit(1768715726.399:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13635 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 403.293274][ T37] audit: type=1326 audit(1768715726.409:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13635 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9222b0b829 code=0x7ffc0000 [ 403.293462][ T37] audit: type=1326 audit(1768715726.409:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13635 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 403.293656][ T37] audit: type=1326 audit(1768715726.409:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13635 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9222b6f749 code=0x7ffc0000 [ 403.420926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 404.932430][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3384'. [ 405.377206][T13703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3391'. [ 405.663138][T13714] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 406.861079][T13782] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3430'. [ 407.403551][T13812] tipc: Started in network mode [ 407.403591][T13812] tipc: Node identity ac14140f, cluster identity 4711 [ 407.413136][T13812] tipc: New replicast peer: 255.255.255.255 [ 407.431865][T13812] tipc: Enabled bearer , priority 10 [ 407.728377][ T5805] kernel write not supported for file bpf-prog (pid: 5805 comm: kworker/1:3) [ 408.004383][T13847] input: syz1 as /devices/virtual/input/input41 [ 408.020981][ T5800] Bluetooth: hci5: command 0x0405 tx timeout [ 408.323514][T13862] Invalid argument reading file caps for ./file0 [ 408.539734][ T5805] tipc: Node number set to 2886997007 [ 408.596733][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 409.204071][T13913] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 409.798772][T13932] lo speed is unknown, defaulting to 1000 [ 410.406515][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 410.521911][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 410.521937][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3522'. [ 410.550771][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 410.553058][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 410.553085][ T10] usb 2-1: config 0 has no interface number 0 [ 410.556102][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 410.556134][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.556164][ T10] usb 2-1: Product: syz [ 410.556181][ T10] usb 2-1: Manufacturer: syz [ 410.556198][ T10] usb 2-1: SerialNumber: syz [ 410.620044][ T10] usb 2-1: config 0 descriptor?? [ 410.620864][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 410.677036][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 410.790964][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 410.794577][ T9] usb 6-1: config 0 interface 0 altsetting 132 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 410.794989][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 410.795029][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 410.795055][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.851477][ T9] usb 6-1: config 0 descriptor?? [ 411.373365][ T9] lg-g15 0003:046D:C227.0016: unknown main item tag 0x0 [ 411.373471][ T9] lg-g15 0003:046D:C227.0016: unknown main item tag 0x0 [ 411.373503][ T9] lg-g15 0003:046D:C227.0016: unknown main item tag 0x0 [ 411.373533][ T9] lg-g15 0003:046D:C227.0016: unknown main item tag 0x0 [ 411.373782][ T9] lg-g15 0003:046D:C227.0016: unknown main item tag 0x0 [ 411.454608][ T9] lg-g15 0003:046D:C227.0016: hidraw0: USB HID v4.0a Device [HID 046d:c227] on usb-dummy_hcd.5-1/input0 [ 411.498935][ T10] gspca_spca1528: reg_w err -71 [ 411.516188][ T10] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 411.531851][ T10] usb 2-1: USB disconnect, device number 26 [ 411.590646][ T9] usb 6-1: USB disconnect, device number 15 [ 412.234705][T14038] input: syz0 as /devices/virtual/input/input42 [ 413.583754][T14101] program syz.4.3576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.281022][ T5805] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 414.350801][ T6024] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 414.432672][ T5805] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.432725][ T5805] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.432771][ T5805] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 414.432796][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.510799][ T6024] usb 5-1: Using ep0 maxpacket: 16 [ 414.516167][ T6024] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 414.516201][ T6024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.516223][ T6024] usb 5-1: Product: syz [ 414.516239][ T6024] usb 5-1: Manufacturer: syz [ 414.516256][ T6024] usb 5-1: SerialNumber: syz [ 414.528412][ T6024] usb 5-1: config 0 descriptor?? [ 414.780858][ T5805] usb 2-1: usb_control_msg returned -32 [ 414.780919][ T5805] usbtmc 2-1:16.0: can't read capabilities [ 414.900836][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 414.925939][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 414.925968][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 414.965792][ T6024] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 414.993910][ T6024] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 414.998751][ T6024] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 414.998830][ T6024] usb 5-1: media controller created [ 415.080524][ T6024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 415.287924][ T6024] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 415.287947][ T6024] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 415.452283][ T5805] usb 5-1: USB disconnect, device number 15 [ 415.500477][ T5805] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 416.815021][T14237] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.832192][T14237] tipc: Enabled bearer , priority 10 [ 416.930838][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.102806][T14252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3631'. [ 417.200818][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.205718][ T5941] usb 2-1: USB disconnect, device number 27 [ 417.690417][T14281] input: syz1 as /devices/virtual/input/input43 [ 417.730847][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.581020][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 418.582396][ T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 418.582421][ T10] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 418.740811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.570889][ T5805] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 419.601198][T14358] binder: 14355:14358 ioctl c0306201 0 returned -14 [ 419.608023][T14358] binder: 14355:14358 ioctl 8980 0 returned -22 [ 419.750970][ T5805] usb 5-1: Using ep0 maxpacket: 32 [ 419.753691][ T5805] usb 5-1: config index 0 descriptor too short (expected 164, got 36) [ 419.753750][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.753779][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.753821][ T5805] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 419.753847][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.767808][ T5805] usb 5-1: config 0 descriptor?? [ 419.780799][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.244635][ T5805] logitech 0003:046D:C29C.0017: unknown main item tag 0x0 [ 420.244677][ T5805] logitech 0003:046D:C29C.0017: unknown main item tag 0x0 [ 420.244709][ T5805] logitech 0003:046D:C29C.0017: unknown main item tag 0x0 [ 420.244738][ T5805] logitech 0003:046D:C29C.0017: unknown main item tag 0x0 [ 420.244768][ T5805] logitech 0003:046D:C29C.0017: unknown main item tag 0x0 [ 420.306061][ T5805] logitech 0003:046D:C29C.0017: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 420.644279][ T5805] logitech 0003:046D:C29C.0017: no inputs found [ 420.672754][ T5805] usb 5-1: USB disconnect, device number 16 [ 420.820800][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.070825][ T5805] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 421.221002][ T5805] usb 6-1: Using ep0 maxpacket: 32 [ 421.226136][ T5805] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 421.226185][ T5805] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 421.226230][ T5805] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 421.226261][ T5805] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 421.226293][ T5805] usb 6-1: config 0 interface 0 has no altsetting 0 [ 421.230089][ T5805] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 421.230119][ T5805] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 421.230142][ T5805] usb 6-1: Product: syz [ 421.230158][ T5805] usb 6-1: Manufacturer: syz [ 421.230174][ T5805] usb 6-1: SerialNumber: syz [ 421.276093][ T5805] usb 6-1: config 0 descriptor?? [ 421.387048][ T5805] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 421.409669][ T5805] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 421.580418][ T5805] usb 6-1: USB disconnect, device number 16 [ 421.595202][ T5805] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 421.629208][ T10] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 421.629237][ T10] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 421.631127][ T5806] Bluetooth: hci5: command 0x0405 tx timeout [ 421.860788][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.085914][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 422.085935][ T37] audit: type=1326 audit(1768715745.199:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14445 comm="syz.1.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa763f749 code=0x7ffc0000 [ 422.086062][ T37] audit: type=1326 audit(1768715745.199:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14445 comm="syz.1.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa763f749 code=0x7ffc0000 [ 422.086984][ T37] audit: type=1326 audit(1768715745.199:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14445 comm="syz.1.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fcfa763f749 code=0x7ffc0000 [ 422.087114][ T37] audit: type=1326 audit(1768715745.199:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14445 comm="syz.1.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa763f749 code=0x7ffc0000 [ 422.087263][ T37] audit: type=1326 audit(1768715745.199:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14445 comm="syz.1.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa763f749 code=0x7ffc0000 [ 422.087754][ T37] audit: type=1326 audit(1768715745.199:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14445 comm="syz.1.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fcfa763f749 code=0x7ffc0000 [ 422.087980][ T37] audit: type=1326 audit(1768715745.199:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14445 comm="syz.1.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa763f749 code=0x7ffc0000 [ 422.089278][ T37] audit: type=1326 audit(1768715745.199:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14445 comm="syz.1.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa763f749 code=0x7ffc0000 [ 422.549895][T14457] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3712'. [ 422.900784][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.943411][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 424.980804][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.030800][T14572] loop2: detected capacity change from 0 to 7 [ 425.076462][T14572] Dev loop2: unable to read RDB block 7 [ 425.076504][T14572] loop2: AHDI p1 p2 [ 425.076536][T14572] loop2: partition table partially beyond EOD, truncated [ 425.076655][T14572] loop2: p1 start 1818582900 is beyond EOD, truncated [ 426.021054][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.028299][T14650] loop8: detected capacity change from 0 to 8 [ 427.037690][T14650] Dev loop8: unable to read RDB block 8 [ 427.037739][T14650] loop8: unable to read partition table [ 427.037976][T14650] loop8: partition table beyond EOD, truncated [ 427.037996][T14650] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 427.060775][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.860923][ T5805] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 428.010775][ T5805] usb 5-1: Using ep0 maxpacket: 16 [ 428.013476][ T5805] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 428.013501][ T5805] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.013523][ T5805] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.016563][ T5805] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.016593][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.016616][ T5805] usb 5-1: Product: syz [ 428.016633][ T5805] usb 5-1: Manufacturer: syz [ 428.016649][ T5805] usb 5-1: SerialNumber: syz [ 428.100777][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.582734][ T5805] usb 5-1: 0:2 : does not exist [ 429.140767][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.253873][ T5805] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 429.373727][ T5805] usb 5-1: USB disconnect, device number 17 [ 429.518088][T14736] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3846'. [ 429.518112][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3846'. [ 429.681311][T14736] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3846'. [ 430.180810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.220853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.260790][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.026504][T14904] GUP no longer grows the stack in syz.1.3926 (14904): 200000004000-200000008000 (200000002000) [ 433.026580][T14904] CPU: 0 UID: 0 PID: 14904 Comm: syz.1.3926 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 433.026615][T14904] Tainted: [L]=SOFTLOCKUP [ 433.026624][T14904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.026647][T14904] Call Trace: [ 433.026660][T14904] [ 433.026670][T14904] dump_stack_lvl+0xe8/0x150 [ 433.026710][T14904] __get_user_pages+0x22c8/0x2830 [ 433.026782][T14904] get_user_pages_remote+0x2f1/0xac0 [ 433.026810][T14904] ? __pfx_mtree_load+0x10/0x10 [ 433.026845][T14904] ? __pfx_get_user_pages_remote+0x10/0x10 [ 433.026877][T14904] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 433.026904][T14904] ? __access_remote_vm+0x367/0x7d0 [ 433.026946][T14904] __access_remote_vm+0x211/0x7d0 [ 433.026993][T14904] ? __pfx___access_remote_vm+0x10/0x10 [ 433.027027][T14904] ? set_page_refcounted+0xa0/0x1e0 [ 433.027053][T14904] ? alloc_pages_noprof+0xe4/0x1e0 [ 433.027082][T14904] proc_pid_cmdline_read+0x433/0x810 [ 433.027115][T14904] ? __asan_memset+0x22/0x50 [ 433.027155][T14904] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 433.027193][T14904] ? rw_verify_area+0x2ac/0x4e0 [ 433.027231][T14904] vfs_readv+0x5b3/0x850 [ 433.027256][T14904] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 433.027293][T14904] ? __pfx_vfs_readv+0x10/0x10 [ 433.027332][T14904] ? __fget_files+0x2a/0x420 [ 433.027363][T14904] ? __fget_files+0x3a6/0x420 [ 433.027387][T14904] ? __fget_files+0x2a/0x420 [ 433.027423][T14904] __x64_sys_preadv+0x19a/0x2a0 [ 433.027464][T14904] ? __pfx___x64_sys_preadv+0x10/0x10 [ 433.027516][T14904] do_syscall_64+0xec/0xf80 [ 433.027542][T14904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.027565][T14904] ? trace_irq_disable+0x37/0x100 [ 433.027598][T14904] ? clear_bhb_loop+0x60/0xb0 [ 433.027628][T14904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.027652][T14904] RIP: 0033:0x7fcfa763f749 [ 433.027680][T14904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.027702][T14904] RSP: 002b:00007fcfa58a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 433.027727][T14904] RAX: ffffffffffffffda RBX: 00007fcfa7895fa0 RCX: 00007fcfa763f749 [ 433.027745][T14904] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003 [ 433.027761][T14904] RBP: 00007fcfa76c3f91 R08: 0000000000000007 R09: 0000000000000000 [ 433.027777][T14904] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 433.027791][T14904] R13: 00007fcfa7896038 R14: 00007fcfa7895fa0 R15: 00007ffde1451b38 [ 433.027830][T14904] [ 433.300777][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.340786][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.364106][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 434.510913][ T5893] kernel write not supported for file bpf-prog (pid: 5893 comm: kworker/0:4) [ 434.542804][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.542835][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.545074][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 434.545103][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 434.545124][ T31] usb 5-1: SerialNumber: syz [ 434.792146][ T31] usb 5-1: 0:2 : does not exist [ 434.832852][ T31] usb 5-1: USB disconnect, device number 18 [ 435.380790][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 435.833978][ T5913] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 435.983144][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 435.984845][ T5913] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 435.984871][ T5913] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 435.984894][ T5913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.028522][ T5913] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.028556][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.028579][ T5913] usb 5-1: Product: syz [ 436.028595][ T5913] usb 5-1: Manufacturer: syz [ 436.028612][ T5913] usb 5-1: SerialNumber: syz [ 436.420746][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.560619][ T5893] IPVS: starting estimator thread 0... [ 436.650973][T15047] IPVS: using max 7 ests per chain, 16800 per kthread [ 436.689662][ T5913] usb 5-1: 0:2 : does not exist [ 436.762827][T15054] loop8: detected capacity change from 0 to 8 [ 436.776922][T15054] Dev loop8: unable to read RDB block 8 [ 436.777063][T15054] loop8: unable to read partition table [ 436.777705][T15054] loop8: partition table beyond EOD, truncated [ 436.777756][T15054] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 436.916500][ T5952] usb 5-1: USB disconnect, device number 19 [ 437.460819][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.297465][T15138] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 438.298019][T15138] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 438.500796][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.584571][T15154] loop8: detected capacity change from 0 to 7 [ 438.633745][T15154] Dev loop8: unable to read RDB block 7 [ 438.633880][T15154] loop8: unable to read partition table [ 438.634294][T15154] loop8: partition table beyond EOD, truncated [ 438.634316][T15154] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 439.000848][ T5952] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 439.150757][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 439.156076][ T5952] usb 6-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 439.156109][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.156134][ T5952] usb 6-1: Product: syz [ 439.156151][ T5952] usb 6-1: Manufacturer: syz [ 439.156167][ T5952] usb 6-1: SerialNumber: syz [ 439.193328][ T5952] usb 6-1: config 0 descriptor?? [ 439.218843][ T5952] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 439.540810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 440.018888][T15202] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4074'. [ 440.220618][ T5952] gspca_sonixj: reg_w err -71 [ 440.220989][ T5952] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 440.226624][ T5952] usb 6-1: USB disconnect, device number 17 [ 440.580771][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 440.611496][T15235] batadv_slave_1: entered promiscuous mode [ 440.612806][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4087'. [ 440.612962][T15235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.971295][T15235] batadv_slave_1 (unregistering): left promiscuous mode [ 440.971420][T15235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.620791][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.291521][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4128'. [ 442.592463][T15333] loop9: detected capacity change from 0 to 7 [ 442.601163][T15333] Dev loop9: unable to read RDB block 7 [ 442.601293][T15333] loop9: unable to read partition table [ 442.611571][T15333] loop9: partition table beyond EOD, truncated [ 442.611659][T15333] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 442.660788][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.944359][T15350] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4142'. [ 443.700762][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.740885][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.312296][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.312379][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.421277][T15481] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4207'. [ 445.781903][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.832544][T15501] pim6reg1: entered promiscuous mode [ 445.832574][T15501] pim6reg1: entered allmulticast mode [ 446.820792][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 447.050811][ T31] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 447.218957][ T31] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 447.218992][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.257267][ T31] usb 6-1: config 0 descriptor?? [ 447.279334][ T31] gspca_main: spca508-2.14.0 probing 8086:0110 [ 447.488562][ T31] gspca_spca508: reg_read err -32 [ 447.490901][ T31] gspca_spca508: reg_read err -32 [ 447.503410][ T31] gspca_spca508: reg_read err -32 [ 447.705056][ T31] gspca_spca508: reg_read err -71 [ 447.705469][ T31] gspca_spca508: reg write: error -71 [ 447.705562][ T31] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 447.720281][T15567] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 447.757611][ T31] usb 6-1: USB disconnect, device number 18 [ 447.860811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.699209][T15627] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 448.904549][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 449.530867][ T5952] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 449.682316][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 449.697717][ T5952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 449.700144][ T5952] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 449.700174][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.700197][ T5952] usb 5-1: Product: syz [ 449.700212][ T5952] usb 5-1: Manufacturer: syz [ 449.700228][ T5952] usb 5-1: SerialNumber: syz [ 449.745532][ T5952] usb 5-1: config 0 descriptor?? [ 449.940767][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.178952][ T5952] gs_usb 5-1:0.0: Configuring for 85 interfaces [ 450.250900][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 450.376736][T15695] Invalid argument reading file caps for ./file0 [ 450.406348][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 450.406377][ T10] usb 2-1: config 0 has no interface number 0 [ 450.420523][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 450.423789][ T10] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 450.423862][ T10] usb 2-1: Product: syz [ 450.423886][ T10] usb 2-1: Manufacturer: syz [ 450.423902][ T10] usb 2-1: SerialNumber: syz [ 450.457723][ T10] usb 2-1: config 0 descriptor?? [ 450.702498][ T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 450.720528][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 450.723226][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 450.723300][ T10] usb 2-1: media controller created [ 450.784149][ T5952] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 450.784924][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 450.909265][ T10] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 450.968441][ T5952] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 450.980757][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.997715][ T5952] usb 5-1: USB disconnect, device number 20 [ 451.090850][ T10] usb 2-1: USB disconnect, device number 28 [ 451.910511][ T154] tipc: Subscription rejected, illegal request [ 451.988423][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4333'. [ 452.020841][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 453.060776][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 453.346657][T15797] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 453.700914][ T5952] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 453.850788][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 453.852811][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.852844][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.852887][ T5952] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 453.852913][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.906773][ T5952] usb 2-1: config 0 descriptor?? [ 453.924190][ T5952] hub 2-1:0.0: USB hub found [ 454.100807][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.128283][ T5952] hub 2-1:0.0: 1 port detected [ 455.140784][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.180869][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 457.220753][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 458.260795][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 459.300764][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 460.340778][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 461.380784][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 462.420774][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 463.460756][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 464.500879][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 465.540799][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.580787][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 467.620792][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 468.660784][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 469.700764][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 470.476133][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.497528][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.499114][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.518872][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.546593][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.602263][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.602769][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.603235][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.604572][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.605474][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.740789][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 470.881917][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 470.886948][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 470.915555][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 470.936628][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 470.937549][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 471.013893][T16275] lo speed is unknown, defaulting to 1000 [ 471.130831][T16282] lo speed is unknown, defaulting to 1000 [ 471.693028][T16275] chnl_net:caif_netlink_parms(): no params data found [ 471.780753][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 472.661575][ T5800] Bluetooth: hci3: command tx timeout [ 472.820921][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 472.980950][ T5800] Bluetooth: hci6: command tx timeout [ 473.860832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.742337][ T5800] Bluetooth: hci3: command tx timeout [ 474.900272][ T5806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 474.903870][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.931555][ T5806] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 474.933611][ T5806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 474.935806][ T5806] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 474.939984][ T5806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 475.061189][ T5806] Bluetooth: hci6: command tx timeout [ 475.940796][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.830351][ T5806] Bluetooth: hci3: command tx timeout [ 476.980800][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 477.060995][ T5806] Bluetooth: hci7: command tx timeout [ 477.140868][ T5806] Bluetooth: hci6: command tx timeout [ 478.020848][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 478.900865][ T5806] Bluetooth: hci3: command tx timeout [ 479.060812][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 479.140909][ T5806] Bluetooth: hci7: command tx timeout [ 479.221202][ T5800] Bluetooth: hci6: command tx timeout [ 480.100791][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 481.142206][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 481.220762][ T5806] Bluetooth: hci7: command tx timeout [ 482.180816][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 483.220807][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 483.307456][ T5806] Bluetooth: hci7: command tx timeout [ 484.260837][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 485.300821][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 486.340808][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 487.380844][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 488.420803][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 489.460884][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 490.500834][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 491.540833][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 492.580821][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 493.620783][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 494.660795][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 495.700813][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 496.740823][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 497.780860][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 498.820820][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 499.860832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 500.900803][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 501.940794][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 502.980775][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 504.020821][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 505.060810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 506.100823][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 506.748974][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.749051][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.140775][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 508.180811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 509.220787][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 510.260784][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 511.300828][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 512.340812][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 513.381626][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 514.420910][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 515.460809][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.500826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 517.540773][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 518.580811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 519.620792][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 520.660780][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 521.700797][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 522.741745][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 523.780832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 524.820788][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 525.863649][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 526.900732][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 527.940751][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 528.980789][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 530.020827][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 530.433425][ T5800] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 530.438994][ T5800] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 530.477356][ T5800] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 530.502586][ T5800] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 530.503563][ T5800] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 530.999278][ T5806] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 531.029191][ T5806] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 531.049345][ T5806] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 531.063369][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 531.066186][ T5806] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 531.067723][ T5806] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 532.100716][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 532.580826][ T5800] Bluetooth: hci8: command tx timeout [ 533.140766][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 533.148296][ T5800] Bluetooth: hci9: command tx timeout [ 534.180728][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 534.670734][ T5800] Bluetooth: hci8: command tx timeout [ 534.902946][ T5806] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 534.929009][ T5806] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 534.938311][ T5806] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 534.939701][ T5806] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 534.940582][ T5806] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 535.220757][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 535.238031][ T5806] Bluetooth: hci9: command tx timeout [ 536.260764][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 536.740729][ T5806] Bluetooth: hci8: command tx timeout [ 537.060957][ T5806] Bluetooth: hci10: command tx timeout [ 537.300764][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 537.304957][ T5806] Bluetooth: hci9: command tx timeout [ 538.340729][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 538.820810][ T5806] Bluetooth: hci8: command tx timeout [ 539.150762][ T5806] Bluetooth: hci10: command tx timeout [ 539.380744][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 539.380857][ T5806] Bluetooth: hci9: command tx timeout [ 540.420748][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 541.220710][ T5806] Bluetooth: hci10: command tx timeout [ 541.460727][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 542.500771][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 543.300741][ T5806] Bluetooth: hci10: command tx timeout [ 543.540733][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 544.580791][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 545.620742][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 546.661376][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 547.700826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 548.740743][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 549.780737][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 550.820783][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 551.860740][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 552.900738][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 553.940765][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 554.980747][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 556.020843][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 557.060745][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 558.100791][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 559.140726][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 559.300612][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 559.300632][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29 [ 559.300662][ C1] rcu: (detected by 1, t=10502 jiffies, g=53477, q=150647 ncpus=2) [ 559.300687][ C1] task:ktimers/1 state:R running task stack:19424 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 559.300751][ C1] Call Trace: [ 559.300760][ C1] [ 559.300770][ C1] sched_show_task+0x49d/0x630 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 559.300802][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 559.300820][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 559.300859][ C1] ? wq_watchdog_touch+0xf9/0x160 [ 559.300886][ C1] print_other_cpu_stall+0xf78/0x1340 [ 559.300935][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 559.300964][ C1] ? perf_event_task_tick+0x12a/0x390 [ 559.301005][ C1] rcu_sched_clock_irq+0x9a9/0x1140 [ 559.301037][ C1] update_process_times+0x235/0x2d0 [ 559.301065][ C1] tick_nohz_handler+0x3e9/0x710 [ 559.301095][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 559.301123][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 559.301145][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 559.301169][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 559.301191][ C1] __hrtimer_run_queues+0x4f6/0xd00 [ 559.301224][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 559.301240][ C1] ? read_tsc+0x9/0x20 [ 559.301263][ C1] hrtimer_interrupt+0x45d/0xa90 [ 559.301303][ C1] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 559.301328][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 559.301347][ C1] [ 559.301352][ C1] [ 559.301360][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 559.301379][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 559.301399][ C1] Code: f7 e8 7d 96 c7 f6 f7 c3 00 02 00 00 74 05 e8 e0 d4 f1 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 24 c0 ba f6 65 8b 05 fd ab dd 06 85 c0 74 18 5b 41 5e c3 cc cc [ 559.301415][ C1] RSP: 0018:ffffc90000a3faa8 EFLAGS: 00000206 [ 559.301429][ C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000001 [ 559.301441][ C1] RDX: 0000000000000002 RSI: ffffffff8ce0d61e RDI: 0000000000000001 [ 559.301453][ C1] RBP: ffffc90000a3fc10 R08: ffffffff8edb3f77 R09: 1ffffffff1db67ee [ 559.301466][ C1] R10: dffffc0000000000 R11: fffffbfff1db67ef R12: ffff8880b8928940 [ 559.301478][ C1] R13: dffffc0000000000 R14: ffff8880b8928580 R15: ffffffff88ec6120 [ 559.301492][ C1] ? __pfx_advance_sched+0x10/0x10 [ 559.301533][ C1] __hrtimer_run_queues+0x42f/0xd00 [ 559.301566][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 559.301582][ C1] ? read_tsc+0x9/0x20 [ 559.301604][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 559.301627][ C1] handle_softirqs+0x1df/0x650 [ 559.301654][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 559.301676][ C1] run_ktimerd+0x69/0x100 [ 559.301698][ C1] smpboot_thread_fn+0x542/0xa60 [ 559.301721][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 559.301750][ C1] kthread+0x711/0x8a0 [ 559.301779][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 559.301801][ C1] ? __pfx_kthread+0x10/0x10 [ 559.301823][ C1] ? rt_spin_unlock+0x150/0x200 [ 559.301852][ C1] ? rt_spin_unlock+0x161/0x200 [ 559.301876][ C1] ? __pfx_kthread+0x10/0x10 [ 559.301901][ C1] ret_from_fork+0x510/0xa50 [ 559.301922][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 559.301940][ C1] ? __switch_to+0xc9e/0x1480 [ 559.301969][ C1] ? __pfx_kthread+0x10/0x10 [ 559.301995][ C1] ret_from_fork_asm+0x1a/0x30 [ 559.302040][ C1] [ 560.180754][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 561.220727][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 562.260721][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 563.300741][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 564.340843][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 565.380787][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 566.420715][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 567.460762][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 568.187715][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.187790][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.500717][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 569.540722][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available