last executing test programs: 1m19.014938787s ago: executing program 2 (id=10324): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 1m18.741294261s ago: executing program 2 (id=10328): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000080014"], 0x30}, 0x1, 0x0, 0x0, 0x20008010}, 0x40000) 1m18.441875092s ago: executing program 2 (id=10332): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000840)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m18.255562403s ago: executing program 2 (id=10335): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 1m18.131432466s ago: executing program 2 (id=10338): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a440170102030109026420020100680009040100de020d0000052406f90105240000000d240f0100000000000000000006241a001c0008240821e407840009058103000200ee000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000680)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m16.270906164s ago: executing program 2 (id=10352): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e20, 0x9, @empty, 0x9}}, 0x200, 0x6}, &(0x7f0000000140)=0x90) 1m15.825640435s ago: executing program 32 (id=10352): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e20, 0x9, @empty, 0x9}}, 0x200, 0x6}, &(0x7f0000000140)=0x90) 1m7.039014156s ago: executing program 0 (id=10440): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) eventfd(0xffffffff) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x1000, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000214235027c07000fddbdf250a00", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x24044044}, 0x4008000) 1m6.923772596s ago: executing program 0 (id=10441): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 1m6.1020697s ago: executing program 0 (id=10442): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000000004000004}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x7811, 0xfffffffffffffffa, 0x3fff}) 1m6.042302395s ago: executing program 0 (id=10443): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m5.805406621s ago: executing program 0 (id=10446): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x2612, 0x8, 0x0, 0xa72}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="3ca312", 0x3, 0x10, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1m4.000856168s ago: executing program 0 (id=10458): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r2, 0x2, 0x30, 0x4, 0x7}, &(0x7f00000000c0)=0x18) 1m3.489626292s ago: executing program 33 (id=10458): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r2, 0x2, 0x30, 0x4, 0x7}, &(0x7f00000000c0)=0x18) 5.137810734s ago: executing program 6 (id=10866): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 5.062766474s ago: executing program 1 (id=10867): readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @remote}, 0x38, {0x2, 0xfffe, @broadcast}, 'syz_tun\x00'}) 4.748585448s ago: executing program 6 (id=10868): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b5}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 4.477347389s ago: executing program 3 (id=10871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 4.471860946s ago: executing program 1 (id=10872): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xea, 0x30, 0x6, 0x2, 0x4, 0x5, 0x7, 0x8, 0xa, 0x4c, 0x8, 0x54, 0x3, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x8}, &(0x7f0000000180)=0x8) 4.308587175s ago: executing program 6 (id=10874): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0) 4.205870609s ago: executing program 3 (id=10876): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/35, 0x23}, 0xd9}], 0x1, 0x10022, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 4.192386103s ago: executing program 1 (id=10878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) 3.929706565s ago: executing program 1 (id=10880): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x3e2}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3.855142154s ago: executing program 3 (id=10881): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f00000001c0)=""/85, 0x55, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002800)={0x2, 0x0, {&(0x7f0000001780)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000380)=""/81, 0x51, 0x0, 0x3, 0x3}}, 0x48) 3.722620016s ago: executing program 3 (id=10882): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x20, 0x1f, 0x4, "42d73a72"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.644622178s ago: executing program 6 (id=10883): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 3.200744709s ago: executing program 1 (id=10886): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fadvise64(0xffffffffffffffff, 0x7, 0xe3b, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.680284303s ago: executing program 1 (id=10890): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, 0x0) 1.897968242s ago: executing program 6 (id=10894): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[], &(0x7f0000000100)=""/4117, 0x1a, 0x1015, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.815768929s ago: executing program 3 (id=10895): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 1.593414775s ago: executing program 4 (id=10896): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 1.584494458s ago: executing program 5 (id=10897): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '.', [], 0xa, "b524be350e7611b133a163b4ab1b0400000000000000000000000000200080ca925f71fcca768a3799bc574e8cbab6290e38d3da0ed66c23ef689b28aaa419845ae174abd9ee5c370a4b62d3ce006b3dee871ce123f03ce3766c9dae569070c09d917831c224a271b5302b90b4c8d778bb488276c5cf"}, 0x7b) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 1.423569711s ago: executing program 6 (id=10898): socket$packet(0x11, 0x3, 0x300) unshare(0x20000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x47e8c3b29599b860) unshare(0x60000600) 1.281155103s ago: executing program 5 (id=10899): r0 = syz_io_uring_setup(0x4ed, &(0x7f0000000200)={0x0, 0x22fa, 0x0, 0x3, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0xdb4, 0xd070, 0x0, 0x0, 0x0) 1.274415449s ago: executing program 4 (id=10900): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af3fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a1424"], 0x0}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) 1.029628935s ago: executing program 4 (id=10901): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 1.015192386s ago: executing program 5 (id=10902): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 766.029739ms ago: executing program 5 (id=10903): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) 677.652496ms ago: executing program 5 (id=10904): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x32b, @tick=0x14, 0xff, {}, 0x0, 0x0, 0xfb}) 386.938384ms ago: executing program 4 (id=10905): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x2, 0x7ffffcbb}]}) r1 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 250.786269ms ago: executing program 3 (id=10906): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x1d22, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x3a9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) io_uring_enter(r1, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 204.130909ms ago: executing program 4 (id=10907): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x30b}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 114.538545ms ago: executing program 5 (id=10908): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x80000001, 0xffffffff, 0x0, 0xfff7ff89, 0xa, 0x3, 0x102}, {0x1, 0x4, 0x6, 0x8, 0xcf41, 0x807, 0xffb}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x1}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf1, 0x6, 0x3}, {0x80000007, 0x2bb, 0x3, 0xd, 0x3, 0x7fd, 0x404}, {0x80000000, 0x24, 0x4, 0x6, 0x3, 0x2, 0xb}, {0x2, 0x1, 0x0, 0xfffffff7, 0xfffffffa, 0xff, 0x6}]}) 0s ago: executing program 4 (id=10909): r0 = socket(0x2, 0xa, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13b", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) kernel console output (not intermixed with test programs): , setting to 1024 [ 731.285584][ T5886] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 731.285615][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.290523][ T5886] usb 5-1: config 0 descriptor?? [ 731.292183][T25410] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 731.493122][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 731.645755][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 731.645885][ T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 731.645908][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 731.645932][ T10] usb 3-1: config 220 has no interface number 2 [ 731.646009][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 731.646037][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 731.646062][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 731.646077][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 731.649462][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 731.649498][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.649520][ T10] usb 3-1: Product: syz [ 731.649535][ T10] usb 3-1: Manufacturer: syz [ 731.649551][ T10] usb 3-1: SerialNumber: syz [ 731.803441][ T5886] hid_parser_main: 27 callbacks suppressed [ 731.803473][ T5886] uclogic 0003:5543:0064.002C: unknown main item tag 0x0 [ 731.803511][ T5886] uclogic 0003:5543:0064.002C: unknown main item tag 0x0 [ 731.803539][ T5886] uclogic 0003:5543:0064.002C: unknown main item tag 0x0 [ 731.803567][ T5886] uclogic 0003:5543:0064.002C: unknown main item tag 0x0 [ 731.803594][ T5886] uclogic 0003:5543:0064.002C: unknown main item tag 0x0 [ 731.803624][ T5886] uclogic 0003:5543:0064.002C: unknown main item tag 0x0 [ 731.803650][ T5886] uclogic 0003:5543:0064.002C: unknown main item tag 0x0 [ 731.803677][ T5886] uclogic 0003:5543:0064.002C: unknown main item tag 0x0 [ 731.803704][ T5886] uclogic 0003:5543:0064.002C: unknown main item tag 0x0 [ 731.803732][ T5886] uclogic 0003:5543:0064.002C: unknown main item tag 0x0 [ 731.804549][ T5886] uclogic 0003:5543:0064.002C: unexpected long global item [ 731.805612][ T5886] uclogic 0003:5543:0064.002C: parse failed [ 731.805734][ T5886] uclogic 0003:5543:0064.002C: probe with driver uclogic failed with error -22 [ 731.922309][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 732.018214][ T810] usb 5-1: USB disconnect, device number 58 [ 732.024166][ T10] usb 3-1: selecting invalid altsetting 0 [ 732.049300][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 732.049345][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 732.139529][ T10] usb 3-1: selecting invalid altsetting 0 [ 732.139577][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 732.183849][ T10] usb 3-1: USB disconnect, device number 56 [ 732.702901][ T5886] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 732.853006][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 732.882465][ T5886] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 732.882505][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.882528][ T5886] usb 2-1: Product: syz [ 732.882544][ T5886] usb 2-1: Manufacturer: syz [ 732.882560][ T5886] usb 2-1: SerialNumber: syz [ 732.921721][ T5886] usb 2-1: config 0 descriptor?? [ 733.145620][ T5886] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 733.375497][ T36] audit: type=1326 audit(1773150206.885:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25451 comm="syz.2.9045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 733.375645][ T36] audit: type=1326 audit(1773150206.885:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25451 comm="syz.2.9045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 733.376408][ T36] audit: type=1326 audit(1773150206.905:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25451 comm="syz.2.9045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 733.461794][ T36] audit: type=1326 audit(1773150206.905:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25451 comm="syz.2.9045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 733.461855][ T36] audit: type=1326 audit(1773150206.915:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25451 comm="syz.2.9045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 733.461893][ T36] audit: type=1326 audit(1773150206.925:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25451 comm="syz.2.9045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 733.461930][ T36] audit: type=1326 audit(1773150206.925:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25451 comm="syz.2.9045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 733.461968][ T36] audit: type=1326 audit(1773150206.925:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25451 comm="syz.2.9045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 733.806433][ T5886] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 733.836389][ T5886] usb 2-1: USB disconnect, device number 56 [ 734.214047][T25475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9058'. [ 735.569692][T25502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9069'. [ 735.569729][T25502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9069'. [ 735.569749][T25502] netlink: 39 bytes leftover after parsing attributes in process `syz.3.9069'. [ 735.824400][T25513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9073'. [ 736.095705][T25520] program syz.1.9077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 737.018890][T25549] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 737.824725][T25570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9100'. [ 737.827108][T25570] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9100'. [ 737.827148][T25570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9100'. [ 738.070981][T25579] netlink: 'syz.1.9104': attribute type 1 has an invalid length. [ 738.071010][T25579] netlink: 'syz.1.9104': attribute type 2 has an invalid length. [ 739.235886][T25612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9118'. [ 739.434744][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 739.578296][T25622] delete_channel: no stack [ 739.601353][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 739.601393][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.632553][ T10] usb 5-1: config 0 descriptor?? [ 739.649252][ T10] cp210x 5-1:0.0: cp210x converter detected [ 739.710067][ T36] audit: type=1326 audit(1773150213.235:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25623 comm="syz.1.9122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff12af9c799 code=0x0 [ 740.021183][T25635] sctp: [Deprecated]: syz.0.9125 (pid 25635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.021183][T25635] Use struct sctp_sack_info instead [ 740.068862][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 740.103917][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 740.281013][ T5886] usb 5-1: USB disconnect, device number 59 [ 740.297965][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 740.424480][ T5886] cp210x 5-1:0.0: device disconnected [ 741.029659][T25663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9139'. [ 741.029698][T25663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9139'. [ 741.207239][T25668] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9141'. [ 741.292565][ T36] audit: type=1326 audit(1773150214.805:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25669 comm="syz.2.9142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x0 [ 741.713487][T25686] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9149'. [ 742.109458][T25700] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 742.109495][T25700] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 742.109509][T25700] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 742.315730][T25708] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9162'. [ 742.776940][T25732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9172'. [ 744.012910][ T5886] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 744.159344][T25776] IPv6: NLM_F_CREATE should be specified when creating new route [ 744.170974][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 744.173712][ T5886] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.173747][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 744.173784][ T5886] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 744.173808][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.220344][ T5886] usb 3-1: config 0 descriptor?? [ 744.655324][ T5886] mcp2221 0003:04D8:00DD.002D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 744.869938][T25787] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9195'. [ 744.976320][T25787] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.990290][T25787] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.162383][ T5886] usb 3-1: USB disconnect, device number 57 [ 745.695521][T25809] netlink: 'syz.4.9205': attribute type 1 has an invalid length. [ 745.834272][T25816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9208'. [ 746.052188][T25825] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9213'. [ 746.274370][T25833] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9216'. [ 746.274421][T25833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9216'. [ 746.412426][T25839] tap0: tun_chr_ioctl cmd 1074025677 [ 746.420392][T25839] tap0: linktype set to 768 [ 746.926302][T25855] syz_tun: entered allmulticast mode [ 746.930358][T25854] syz_tun: left allmulticast mode [ 747.286253][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.137652][T25922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9257'. [ 749.274455][T25925] program syz.2.9258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 749.418256][T25931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9260'. [ 750.132888][ T5902] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 750.168900][T25957] program syz.3.9274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 750.285175][ T5902] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 750.288407][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 750.288468][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 750.288497][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 750.289630][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 750.302793][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 750.302833][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 750.313490][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 750.313552][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 750.313582][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 750.347382][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 750.347446][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 750.347478][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 750.375984][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 750.376060][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 750.376091][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 750.404808][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 750.404871][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 750.404903][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 750.430132][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 750.430195][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 750.430226][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 750.465887][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 750.465975][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 750.466015][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 750.523088][ T5902] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 750.523122][ T5902] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 750.523143][ T5902] usb 5-1: Product: syz [ 750.523157][ T5902] usb 5-1: Manufacturer: syz [ 750.523171][ T5902] usb 5-1: SerialNumber: syz [ 750.529057][ T5902] usb 5-1: config 0 descriptor?? [ 750.590267][ T5902] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 750.778502][T25967] loop7: detected capacity change from 0 to 7 [ 750.854862][ T10] usb 5-1: USB disconnect, device number 60 [ 750.893529][ T10] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 751.005473][T25967] Dev loop7: unable to read RDB block 7 [ 751.005621][T25967] loop7: unable to read partition table [ 751.005979][T25967] loop7: partition table beyond EOD, truncated [ 751.006015][T25967] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 751.071997][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 751.072099][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 751.335859][T25983] program syz.0.9285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 751.474025][ T36] audit: type=1326 audit(1773150224.995:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25964 comm="syz.1.9277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7fc00000 [ 752.494783][T26010] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9297'. [ 752.498247][T26011] program syz.0.9298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 752.991326][ T36] audit: type=1326 audit(1773150226.515:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26029 comm="syz.2.9307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 753.017302][ T36] audit: type=1326 audit(1773150226.545:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26029 comm="syz.2.9307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 753.045907][ T36] audit: type=1326 audit(1773150226.565:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26029 comm="syz.2.9307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 753.045971][ T36] audit: type=1326 audit(1773150226.575:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26029 comm="syz.2.9307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 753.097665][ T36] audit: type=1326 audit(1773150226.575:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26029 comm="syz.2.9307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 753.101301][ T36] audit: type=1326 audit(1773150226.625:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26029 comm="syz.2.9307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 753.127079][ T36] audit: type=1326 audit(1773150226.625:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26029 comm="syz.2.9307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 753.127238][ T36] audit: type=1326 audit(1773150226.655:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26029 comm="syz.2.9307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12126dc799 code=0x7ffc0000 [ 753.457121][T26044] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9312'. [ 754.610980][T26070] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9324'. [ 754.620948][ T5886] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 754.653044][T26068] sctp: [Deprecated]: syz.4.9325 (pid 26068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 754.653044][T26068] Use struct sctp_sack_info instead [ 754.785288][ T5886] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 754.785328][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 754.785347][ T5886] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 754.787746][ T5886] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 754.787779][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.787794][ T5886] usb 2-1: Product: syz [ 754.787805][ T5886] usb 2-1: Manufacturer: syz [ 754.787816][ T5886] usb 2-1: SerialNumber: syz [ 754.832819][ T5886] usb 2-1: config 0 descriptor?? [ 754.856955][T26062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 754.858398][T26062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 754.885022][ T5886] usb 2-1: ucan: probing device on interface #0 [ 755.530010][ T5886] ucan 2-1:0.0 can0: registered device [ 755.530091][T26093] netlink: 'syz.0.9336': attribute type 1 has an invalid length. [ 755.691823][ T5886] ucan 2-1:0.0 can0: firmware string: unknown [ 755.752877][ T5886] usb 2-1: USB disconnect, device number 57 [ 756.138952][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 756.283198][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 756.285204][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 756.285241][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 756.287978][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 756.288012][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.288035][ T10] usb 3-1: Product: syz [ 756.288051][ T10] usb 3-1: Manufacturer: syz [ 756.288067][ T10] usb 3-1: SerialNumber: syz [ 756.305137][ T10] usb 3-1: config 0 descriptor?? [ 756.343232][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 756.343349][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 756.960919][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 757.161785][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 757.174643][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 757.174668][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 757.203530][ T10] usb 3-1: USB disconnect, device number 58 [ 757.216827][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 757.236536][ T10] em28xx 3-1:0.0: Freeing device [ 757.388336][T26140] gfs2: gfs2 mount does not exist [ 757.832701][T26148] input: syz0 as /devices/virtual/input/input43 [ 757.886959][T26151] sctp: [Deprecated]: syz.2.9361 (pid 26151) Use of int in max_burst socket option. [ 757.886959][T26151] Use struct sctp_assoc_value instead [ 758.428301][T26172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9371'. [ 758.640538][T26181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.020057][T26203] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9384'. [ 760.742891][ T5886] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 760.751651][T26265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9410'. [ 760.895390][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.895448][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 760.895475][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 760.895503][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 760.898235][ T5886] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 760.898265][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.898286][ T5886] usb 5-1: Product: syz [ 760.898300][ T5886] usb 5-1: Manufacturer: syz [ 760.898326][ T5886] usb 5-1: SerialNumber: syz [ 761.015050][ T5886] usb 5-1: config 0 descriptor?? [ 761.029686][ T5886] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 761.072086][ T5886] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 761.095819][ T5886] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 761.278328][ T5886] usb 5-1: USB disconnect, device number 61 [ 761.296597][ T5886] garmin_gps 5-1:0.0: device disconnected [ 761.961107][ T5886] hid_parser_main: 51 callbacks suppressed [ 761.961134][ T5886] hid-generic 000A:0004:0009.002E: unknown main item tag 0x0 [ 761.961168][ T5886] hid-generic 000A:0004:0009.002E: unknown main item tag 0x0 [ 761.961197][ T5886] hid-generic 000A:0004:0009.002E: unknown main item tag 0x0 [ 761.961226][ T5886] hid-generic 000A:0004:0009.002E: unknown main item tag 0x0 [ 761.961254][ T5886] hid-generic 000A:0004:0009.002E: unknown main item tag 0x0 [ 761.961282][ T5886] hid-generic 000A:0004:0009.002E: unknown main item tag 0x0 [ 761.961311][ T5886] hid-generic 000A:0004:0009.002E: unknown main item tag 0x0 [ 762.023423][ T5886] hid-generic 000A:0004:0009.002E: unknown main item tag 0x0 [ 762.023459][ T5886] hid-generic 000A:0004:0009.002E: unknown main item tag 0x0 [ 762.023488][ T5886] hid-generic 000A:0004:0009.002E: unknown main item tag 0x0 [ 762.060930][ T5886] hid-generic 000A:0004:0009.002E: hidraw0: HID v0.04 Device [syz1] on syz0 [ 762.276725][T26305] fido_id[26305]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 762.643527][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 762.679180][T26319] netlink: 'syz.1.9432': attribute type 6 has an invalid length. [ 762.813130][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 762.815593][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.815628][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.815652][ T10] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 762.815681][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 762.815716][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 762.815740][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.900863][ T10] usb 3-1: config 0 descriptor?? [ 763.207055][T26332] syz_tun: entered allmulticast mode [ 763.208504][T26329] syz_tun: left allmulticast mode [ 763.386923][ T10] hid (null): unknown global tag 0xd [ 763.548645][T15914] usb 3-1: USB disconnect, device number 59 [ 763.662052][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9445'. [ 763.666013][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 763.833112][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 763.835938][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 763.835972][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.847905][ T10] usb 2-1: config 0 descriptor?? [ 764.096039][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 764.109130][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 764.153596][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 764.153670][ T10] usb 2-1: media controller created [ 764.210942][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 764.376266][ T10] az6027: usb out operation failed. (-71) [ 764.388768][ T10] az6027: usb out operation failed. (-71) [ 764.388792][ T10] stb0899_attach: Driver disabled by Kconfig [ 764.388803][ T10] az6027: no front-end attached [ 764.388803][ T10] [ 764.391216][ T10] az6027: usb out operation failed. (-71) [ 764.391259][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 764.435539][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input44 [ 764.466856][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 764.466883][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 764.501466][ T10] usb 2-1: USB disconnect, device number 58 [ 764.798309][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 765.618480][T26413] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9474'. [ 765.618506][T26413] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 766.114708][T26428] ip6gre1: entered promiscuous mode [ 766.114738][T26428] ip6gre1: entered allmulticast mode [ 766.122539][ T1014] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 766.124864][ T1014] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 766.143605][ T810] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 766.713195][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 766.843014][T26454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9493'. [ 766.888538][T26454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9493'. [ 767.193132][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 767.249681][T26471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9499'. [ 767.675002][T26482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9506'. [ 768.132914][ T810] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 768.285634][ T810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 768.285672][ T810] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 768.285699][ T810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 768.288323][ T810] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 768.288356][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.288378][ T810] usb 5-1: Product: syz [ 768.288388][ T810] usb 5-1: Manufacturer: syz [ 768.288399][ T810] usb 5-1: SerialNumber: syz [ 768.296208][ T810] usb 5-1: config 0 descriptor?? [ 768.325977][T26498] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 768.326186][T26498] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 768.346196][ T810] usb 5-1: ucan: probing device on interface #0 [ 768.748339][ T36] audit: type=1326 audit(1773150242.275:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26524 comm="syz.3.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d5f9c799 code=0x7ffc0000 [ 768.792885][ T36] audit: type=1326 audit(1773150242.275:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26524 comm="syz.3.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d5f9c799 code=0x7ffc0000 [ 768.792951][ T36] audit: type=1326 audit(1773150242.275:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26524 comm="syz.3.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d5f9c799 code=0x7ffc0000 [ 768.794877][ T36] audit: type=1326 audit(1773150242.325:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26524 comm="syz.3.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d5f9c799 code=0x7ffc0000 [ 768.795115][ T36] audit: type=1326 audit(1773150242.325:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26524 comm="syz.3.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f95d5f9c799 code=0x7ffc0000 [ 768.900787][ T36] audit: type=1326 audit(1773150242.425:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26524 comm="syz.3.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d5f9c799 code=0x7ffc0000 [ 768.900841][ T36] audit: type=1326 audit(1773150242.425:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26524 comm="syz.3.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f95d5f9c502 code=0x7ffc0000 [ 768.900879][ T36] audit: type=1326 audit(1773150242.425:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26524 comm="syz.3.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f95d5f9c597 code=0x7ffc0000 [ 768.900917][ T36] audit: type=1326 audit(1773150242.425:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26524 comm="syz.3.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f95d5f59491 code=0x7ffc0000 [ 768.900956][ T36] audit: type=1326 audit(1773150242.425:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26524 comm="syz.3.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f95d5f9d589 code=0x7ffc0000 [ 769.045977][ T810] ucan 5-1:0.0 can0: registered device [ 769.236456][ T810] ucan 5-1:0.0 can0: firmware string: unknown [ 769.300115][ T810] usb 5-1: USB disconnect, device number 62 [ 770.035466][ T5886] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 770.097296][ T810] kernel write not supported for file /sequencer (pid: 810 comm: kworker/0:2) [ 770.194831][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 770.200402][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.200439][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.200465][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 770.200501][ T5886] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 770.200527][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.259207][ T5886] usb 3-1: config 0 descriptor?? [ 770.312896][ T810] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 770.392953][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 770.478288][ T810] usb 2-1: Using ep0 maxpacket: 32 [ 770.481721][ T810] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 770.481754][ T810] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 770.481781][ T810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 770.487629][ T810] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 770.487670][ T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.487733][ T810] usb 2-1: Product: syz [ 770.487769][ T810] usb 2-1: Manufacturer: syz [ 770.487952][ T810] usb 2-1: SerialNumber: syz [ 770.539630][ T810] usb 2-1: config 0 descriptor?? [ 770.690830][ T5886] hid_parser_main: 7 callbacks suppressed [ 770.690858][ T5886] cougar 0003:060B:500A.0030: unknown main item tag 0x0 [ 770.690921][ T5886] cougar 0003:060B:500A.0030: unknown main item tag 0x0 [ 770.690950][ T5886] cougar 0003:060B:500A.0030: unknown main item tag 0x0 [ 770.690978][ T5886] cougar 0003:060B:500A.0030: unknown main item tag 0x0 [ 770.691027][ T5886] cougar 0003:060B:500A.0030: unknown main item tag 0x0 [ 770.691055][ T5886] cougar 0003:060B:500A.0030: unknown main item tag 0x0 [ 770.691108][ T5886] cougar 0003:060B:500A.0030: unknown main item tag 0x0 [ 770.691251][ T5886] cougar 0003:060B:500A.0030: unknown main item tag 0x0 [ 770.691289][ T5886] cougar 0003:060B:500A.0030: unknown main item tag 0x0 [ 770.691317][ T5886] cougar 0003:060B:500A.0030: unknown main item tag 0x0 [ 770.781547][ T5886] cougar 0003:060B:500A.0030: unexpected long global item [ 770.801629][ T5886] cougar 0003:060B:500A.0030: parse failed [ 770.801748][ T5886] cougar 0003:060B:500A.0030: probe with driver cougar failed with error -22 [ 770.917118][ T5969] usb 3-1: USB disconnect, device number 60 [ 771.055095][ T810] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 771.460257][ T810] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 771.626932][ T810] usb 2-1: USB disconnect, device number 59 [ 772.339858][T26641] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9577'. [ 772.502901][T15914] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 772.601183][T26651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9582'. [ 772.658914][T15914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.658953][T15914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.658996][T15914] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 772.659022][T15914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.710565][T15914] usb 5-1: config 0 descriptor?? [ 773.193411][T15914] logitech-djreceiver 0003:046D:C71F.0031: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 773.364307][ T810] usb 5-1: USB disconnect, device number 63 [ 773.442530][T26665] fido_id[26665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 773.472471][T26672] ptrace attach of "./syz-executor exec"[5796] was attempted by ""[26672] [ 774.394787][ T5805] block nbd0: Receive control failed (result -32) [ 774.698254][T26715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9612'. [ 774.761940][T26720] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9614'. [ 775.392871][T15914] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 775.542816][T15914] usb 2-1: Using ep0 maxpacket: 32 [ 775.563907][T15914] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 775.563948][T15914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.563970][T15914] usb 2-1: Product: syz [ 775.563986][T15914] usb 2-1: Manufacturer: syz [ 775.564002][T15914] usb 2-1: SerialNumber: syz [ 775.572048][T15914] usb 2-1: config 0 descriptor?? [ 775.616835][T15914] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 775.784088][ T5969] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 775.932970][ T5969] usb 4-1: Using ep0 maxpacket: 16 [ 775.935552][ T5969] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 775.935590][ T5969] usb 4-1: config 0 has no interface number 0 [ 775.935638][ T5969] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.935666][ T5969] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.935707][ T5969] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 775.935731][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.947262][ T5969] usb 4-1: config 0 descriptor?? [ 776.081575][T26769] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9637'. [ 776.153073][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 776.302907][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 776.307195][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 776.307229][ T10] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 776.307700][ T10] usb 3-1: config 179 has no interface number 0 [ 776.308331][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 776.308362][ T10] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 776.308394][ T10] usb 3-1: config 179 interface 65 has no altsetting 0 [ 776.308514][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 776.308540][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.428350][T26756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.428690][T15914] gspca_ov534_9: reg_w failed -71 [ 776.452433][T26756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.542897][T26775] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 776.542933][T26775] overlayfs: missing 'lowerdir' [ 776.632273][T26764] netlink: 'syz.2.9635': attribute type 3 has an invalid length. [ 776.632300][T26764] netlink: 666 bytes leftover after parsing attributes in process `syz.2.9635'. [ 776.680775][ T5886] usb 4-1: USB disconnect, device number 42 [ 776.713794][T15914] gspca_ov534_9: Unknown sensor 0000 [ 776.713889][T15914] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 776.722299][T15914] usb 2-1: USB disconnect, device number 60 [ 777.166186][T15914] usb 3-1: USB disconnect, device number 61 [ 778.549416][T26834] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9668'. [ 779.273196][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 779.614553][T26864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9682'. [ 780.536090][T26896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9697'. [ 780.718994][T26906] input: syz1 as /devices/virtual/input/input45 [ 780.822960][ T10] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 780.990629][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 780.990663][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.012190][ T10] usb 2-1: config 0 descriptor?? [ 781.013364][ T5969] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 781.182911][ T5969] usb 5-1: Using ep0 maxpacket: 32 [ 781.185034][ T5969] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 781.185124][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.227312][ T5969] usb 5-1: config 0 descriptor?? [ 781.268858][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 781.439311][ T5969] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 781.469896][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 781.480087][ T5969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 781.483599][ T5969] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 781.483654][ T5969] usb 5-1: media controller created [ 781.510926][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 781.591333][T26923] netlink: 604 bytes leftover after parsing attributes in process `syz.3.9709'. [ 781.681173][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 781.681201][ T10] [drm] Initialized udl on minor 2 [ 781.719136][ T5969] az6027: usb out operation failed. (-71) [ 781.722135][ T5969] az6027: usb out operation failed. (-71) [ 781.722156][ T5969] stb0899_attach: Driver disabled by Kconfig [ 781.722167][ T5969] az6027: no front-end attached [ 781.722167][ T5969] [ 781.722571][ T5969] az6027: usb out operation failed. (-71) [ 781.722587][ T5969] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 781.753422][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 781.795625][ T5969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input46 [ 781.824501][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 781.846852][ T5969] dvb-usb: schedule remote query interval to 400 msecs. [ 781.846878][ T5969] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 781.862435][T26767] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 781.901887][ T10] usb 2-1: USB disconnect, device number 61 [ 781.907982][ T5969] usb 5-1: USB disconnect, device number 64 [ 782.194033][ T5969] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 782.672959][ T5969] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 782.825527][ T5969] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 782.825559][ T5969] usb 5-1: config 0 has no interface number 0 [ 782.853012][ T5969] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 782.853055][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.853077][ T5969] usb 5-1: Product: syz [ 782.853092][ T5969] usb 5-1: Manufacturer: syz [ 782.853107][ T5969] usb 5-1: SerialNumber: syz [ 782.879924][ T5969] usb 5-1: config 0 descriptor?? [ 783.111698][ T5969] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 783.124652][ T5969] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 783.124963][ T5969] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 783.124999][ T5969] usb 5-1: media controller created [ 783.165960][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 783.577399][ T5969] usb 5-1: USB disconnect, device number 65 [ 785.780813][T27035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9757'. [ 786.191837][T27053] program syz.0.9768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 786.298162][T27059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9770'. [ 787.262818][T15914] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 787.412889][T15914] usb 4-1: Using ep0 maxpacket: 32 [ 787.415344][T15914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.415380][T15914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.415405][T15914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 787.415460][T15914] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 787.415485][T15914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.421588][T15914] usb 4-1: config 0 descriptor?? [ 787.462807][ T5902] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 787.612913][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 787.615700][ T5902] usb 5-1: config 0 has no interfaces? [ 787.615793][ T5902] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 787.615820][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.654291][ T5902] usb 5-1: config 0 descriptor?? [ 787.879016][ T5902] usb 5-1: USB disconnect, device number 66 [ 787.957539][T15914] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0033/input/input47 [ 788.025934][T15914] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0033/input/input48 [ 788.120806][T15914] kye 0003:0458:5011.0033: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 788.380382][ T10] usb 4-1: USB disconnect, device number 43 [ 788.540883][T27105] fido_id[27105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 788.624708][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 788.631124][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 788.649519][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 788.679196][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 788.690456][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 788.807515][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 788.808001][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 788.811715][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 788.838454][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 788.839545][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 788.960543][ T1014] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.740101][ T1014] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.258563][ T1014] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.348060][T27156] loop5: detected capacity change from 0 to 7 [ 790.927753][ T1014] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.953109][ T5805] Bluetooth: hci3: command tx timeout [ 791.070498][T27156] Dev loop5: unable to read RDB block 7 [ 791.070557][T27156] loop5: unable to read partition table [ 791.070817][T27156] loop5: partition table beyond EOD, truncated [ 791.070854][T27156] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 791.114393][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 791.114433][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 791.440222][T27183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9823'. [ 791.727351][T27110] chnl_net:caif_netlink_parms(): no params data found [ 792.257132][ T1014] dummy0: left allmulticast mode [ 792.327148][ T1014] bridge0: port 3(dummy0) entered disabled state [ 792.421909][ T1014] bridge_slave_1: left allmulticast mode [ 792.422483][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.517583][ T1014] bridge_slave_0: left allmulticast mode [ 792.517618][ T1014] bridge_slave_0: left promiscuous mode [ 792.519162][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.043510][ T5805] Bluetooth: hci3: command tx timeout [ 794.043930][ T1014] bond0 (unregistering): (slave 1@): Releasing backup interface [ 794.063257][ T1014] @: left promiscuous mode [ 794.103720][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.123228][ T1014] bond_slave_1: left promiscuous mode [ 794.163828][ T1014] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 794.183473][ T1014] batadv0: left promiscuous mode [ 794.200781][ T1014] bond0 (unregistering): Released all slaves [ 794.218295][ T1014] bond1 (unregistering): Released all slaves [ 794.240090][ T1014] bond2 (unregistering): Released all slaves [ 794.260657][ T1014] bond3 (unregistering): Released all slaves [ 794.517021][ T1014] : left promiscuous mode [ 794.701590][T27110] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.701808][T27110] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.702063][T27110] bridge_slave_0: entered allmulticast mode [ 794.765772][T27110] bridge_slave_0: entered promiscuous mode [ 794.790889][T27110] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.791006][T27110] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.791310][T27110] bridge_slave_1: entered allmulticast mode [ 794.816165][T27110] bridge_slave_1: entered promiscuous mode [ 794.822905][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 794.910419][T27110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.954470][T27110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.003575][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 795.005986][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 795.006015][ T10] usb 5-1: config 0 has no interface number 0 [ 795.006064][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 795.054188][T27110] team0: Port device team_slave_0 added [ 795.075113][T27110] team0: Port device team_slave_1 added [ 795.077513][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 795.077545][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.077568][ T10] usb 5-1: Product: syz [ 795.077583][ T10] usb 5-1: Manufacturer: syz [ 795.077599][ T10] usb 5-1: SerialNumber: syz [ 795.123665][ T5805] Bluetooth: hci3: command tx timeout [ 795.167168][ T10] usb 5-1: config 0 descriptor?? [ 795.516115][T27256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9850'. [ 795.516147][T27256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9850'. [ 795.683151][ T1014] IPVS: stopping master sync thread 13651 ... [ 795.839971][T27110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.839991][T27110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.840022][T27110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.842411][T27110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.842426][T27110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.842457][T27110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.057776][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 796.057814][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 796.058468][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 796.058495][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 796.058536][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 796.058556][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 796.058872][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 796.085193][ T10] usb 5-1: USB disconnect, device number 67 [ 796.652429][T15914] kernel write not supported for file /input/event2 (pid: 15914 comm: kworker/1:1) [ 796.906870][T27110] hsr_slave_0: entered promiscuous mode [ 796.908377][T27110] hsr_slave_1: entered promiscuous mode [ 796.909426][T27110] debugfs: 'hsr0' already exists in 'hsr' [ 796.909453][T27110] Cannot create hsr debugfs directory [ 797.193005][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 797.195519][ T5805] Bluetooth: hci3: command tx timeout [ 797.322330][T27304] netlink: 'syz.1.9867': attribute type 1 has an invalid length. [ 797.322403][T27304] netlink: 'syz.1.9867': attribute type 2 has an invalid length. [ 797.322419][T27304] netlink: 'syz.1.9867': attribute type 1 has an invalid length. [ 797.322435][T27304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9867'. [ 797.919071][T27320] hub 9-0:1.0: USB hub found [ 797.919696][T27320] hub 9-0:1.0: 1 port detected [ 798.662974][T15914] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 798.822882][T15914] usb 5-1: Using ep0 maxpacket: 8 [ 798.844122][T15914] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.844160][T15914] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.844186][T15914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 798.844221][T15914] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 798.844247][T15914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.901094][T15914] usb 5-1: config 0 descriptor?? [ 798.970394][ T1014] hsr_slave_0: left promiscuous mode [ 799.069394][ T1014] hsr_slave_1: left promiscuous mode [ 799.071033][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.071166][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.274385][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.503901][T15914] usbhid 5-1:0.0: can't add hid device: -71 [ 799.504053][T15914] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 799.761398][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.762779][T15914] usb 5-1: USB disconnect, device number 68 [ 800.013148][ T1014] veth1_macvtap: left promiscuous mode [ 800.013545][ T1014] veth0_macvtap: left promiscuous mode [ 800.110010][ T1014] veth1_vlan: left promiscuous mode [ 800.110825][ T1014] veth0_vlan: left promiscuous mode [ 800.154597][T27370] program syz.1.9891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 801.785937][ T1014] team0 (unregistering): Port device 5 removed [ 801.833909][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 801.981607][T27409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9907'. [ 804.239908][ T1014] IPVS: stop unused estimator thread 0... [ 805.136958][T27468] cgroup: fork rejected by pids controller in /syz4 [ 805.349132][T27110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 805.490714][T27110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 805.628149][T27110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 805.794069][T27110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 806.348512][T27787] netlink: 'syz.0.9936': attribute type 2 has an invalid length. [ 807.411983][T27110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.538344][T27110] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.569977][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.570659][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.628359][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.640812][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.550388][T27110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.626306][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 808.626329][ T36] audit: type=1326 audit(1773150283.142:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27863 comm="syz.1.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 808.626382][ T36] audit: type=1326 audit(1773150283.152:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27863 comm="syz.1.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 808.628083][ T36] audit: type=1326 audit(1773150283.152:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27863 comm="syz.1.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 808.629974][ T36] audit: type=1326 audit(1773150283.152:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27863 comm="syz.1.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 808.630605][ T36] audit: type=1326 audit(1773150283.152:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27863 comm="syz.1.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 808.630660][ T36] audit: type=1326 audit(1773150283.152:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27863 comm="syz.1.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 808.630709][ T36] audit: type=1326 audit(1773150283.152:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27863 comm="syz.1.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 808.744743][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.784359][ T36] audit: type=1326 audit(1773150283.312:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27863 comm="syz.1.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 808.784527][ T36] audit: type=1326 audit(1773150283.312:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27863 comm="syz.1.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 808.790243][ T36] audit: type=1326 audit(1773150283.312:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27863 comm="syz.1.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 808.972888][T27110] veth0_vlan: entered promiscuous mode [ 809.034858][T27110] veth1_vlan: entered promiscuous mode [ 809.118999][T27110] veth0_macvtap: entered promiscuous mode [ 809.140568][T27110] veth1_macvtap: entered promiscuous mode [ 809.276040][T27876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9965'. [ 809.345254][T27110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.377571][T27110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.467431][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.485235][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.502533][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.502793][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.164745][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.164769][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.351011][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.351035][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.536349][T27908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9975'. [ 812.217511][T27975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9999'. [ 812.398162][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 813.522923][ T5886] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 813.683776][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 813.686411][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.686471][ T5886] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.686503][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 813.686539][ T5886] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 813.686567][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.722850][ T5886] usb 2-1: config 0 descriptor?? [ 814.191729][ T5886] hid_parser_main: 190 callbacks suppressed [ 814.191758][ T5886] corsair-psu 0003:1B1C:1C09.0034: unknown main item tag 0x0 [ 814.191795][ T5886] corsair-psu 0003:1B1C:1C09.0034: unknown main item tag 0x0 [ 814.191827][ T5886] corsair-psu 0003:1B1C:1C09.0034: unknown main item tag 0x0 [ 814.191858][ T5886] corsair-psu 0003:1B1C:1C09.0034: unknown main item tag 0x0 [ 814.191889][ T5886] corsair-psu 0003:1B1C:1C09.0034: unknown main item tag 0x0 [ 814.242702][ T5886] corsair-psu 0003:1B1C:1C09.0034: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 814.302971][ T5886] corsair-psu 0003:1B1C:1C09.0034: unable to initialize device (-38) [ 814.366510][ T5886] corsair-psu 0003:1B1C:1C09.0034: probe with driver corsair-psu failed with error -38 [ 814.408547][ T5886] usb 2-1: USB disconnect, device number 62 [ 814.999795][T28048] input: syz0 as /devices/virtual/input/input49 [ 815.401635][T28059] bridge0: port 2(vlan3) entered blocking state [ 815.401890][T28059] bridge0: port 2(vlan3) entered disabled state [ 815.402131][T28059] vlan3: entered allmulticast mode [ 815.402151][T28059] bridge0: entered allmulticast mode [ 815.459261][T28059] vlan3: left allmulticast mode [ 815.459287][T28059] bridge0: left allmulticast mode [ 815.812522][T28075] team0: Device gtp0 is of different type [ 816.183342][T28090] netlink: 'syz.2.10049': attribute type 5 has an invalid length. [ 816.284550][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 816.284570][ T36] audit: type=1326 audit(1773150290.812:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28091 comm="syz.0.10051" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd2917c799 code=0x0 [ 817.223055][T28089] futex_wake_op: syz.1.10050 tries to shift op by -1; fix this program [ 817.725935][T28127] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 819.673281][ T5911] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 819.836698][ T5911] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 819.836760][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.840183][ T5911] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 819.840214][ T5911] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 819.840236][ T5911] usb 4-1: Manufacturer: syz [ 819.890406][ T5911] usb 4-1: config 0 descriptor?? [ 820.012769][ T5911] rc_core: IR keymap rc-hauppauge not found [ 820.012791][ T5911] Registered IR keymap rc-empty [ 820.014830][ T5911] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 820.018185][ T5911] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 820.183580][T28196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.184059][T28196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.264383][ T5902] usb 4-1: USB disconnect, device number 44 [ 821.018478][T28236] loop8: detected capacity change from 0 to 8 [ 821.020602][T28236] Dev loop8: unable to read RDB block 8 [ 821.020650][T28236] loop8: unable to read partition table [ 821.020872][T28236] loop8: partition table beyond EOD, truncated [ 821.020892][T28236] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 821.700002][T28261] batadv_slave_1: entered promiscuous mode [ 821.713880][T28259] batadv_slave_1: left promiscuous mode [ 821.859223][T28265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 823.081009][ T36] audit: type=1326 audit(1773150298.607:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28299 comm="syz.1.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 823.126902][ T36] audit: type=1326 audit(1773150298.647:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28299 comm="syz.1.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 823.126961][ T36] audit: type=1326 audit(1773150298.647:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28299 comm="syz.1.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 823.127012][ T36] audit: type=1326 audit(1773150298.657:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28299 comm="syz.1.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 823.129755][ T36] audit: type=1326 audit(1773150298.657:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28299 comm="syz.1.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 823.186603][ T36] audit: type=1326 audit(1773150298.717:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28299 comm="syz.1.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x7ffc0000 [ 823.186764][ T36] audit: type=1326 audit(1773150298.717:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28299 comm="syz.1.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff12af9c502 code=0x7ffc0000 [ 823.952092][ T36] audit: type=1326 audit(1773150299.477:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28299 comm="syz.1.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff12af9c597 code=0x7ffc0000 [ 823.952158][ T36] audit: type=1326 audit(1773150299.477:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28299 comm="syz.1.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff12af59491 code=0x7ffc0000 [ 823.952207][ T36] audit: type=1326 audit(1773150299.477:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28299 comm="syz.1.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff12af9d589 code=0x7ffc0000 [ 824.405186][T28324] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 825.282279][ T5886] IPVS: starting estimator thread 0... [ 825.362876][T28353] IPVS: using max 8 ests per chain, 19200 per kthread [ 825.692938][T26767] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 825.744088][T28368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10174'. [ 825.842767][T26767] usb 3-1: Using ep0 maxpacket: 32 [ 825.844884][T26767] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 825.844906][T26767] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 825.844947][T26767] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 825.845002][T26767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 825.845028][T26767] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 825.845056][T26767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26214, setting to 1024 [ 825.845082][T26767] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 825.845111][T26767] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 825.845144][T26767] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 825.845161][T26767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.850152][T26767] usb 3-1: config 0 descriptor?? [ 825.852027][T28357] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 826.049246][T28372] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 826.049275][T28372] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 826.049430][T28372] overlayfs: failed to get uuid (1891/file1, err=-13); falling back to uuid=null. [ 826.145546][T26767] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 826.362385][ C1] usblp0: nonzero read bulk status received: -71 [ 826.389142][ T5902] usb 3-1: USB disconnect, device number 62 [ 826.442389][ T5902] usblp0: removed [ 827.391393][ T5858] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 827.540571][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 827.551241][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10188'. [ 827.583946][ T5858] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 827.583980][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.584003][ T5858] usb 2-1: Product: syz [ 827.584019][ T5858] usb 2-1: Manufacturer: syz [ 827.584035][ T5858] usb 2-1: SerialNumber: syz [ 827.655458][ T5858] usb 2-1: config 0 descriptor?? [ 827.881210][ T5858] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 827.882566][ T5858] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 827.937951][ T5858] usb 2-1: USB disconnect, device number 63 [ 828.030539][T28426] batadv_slave_1: entered promiscuous mode [ 828.031936][T28424] batadv_slave_1: left promiscuous mode [ 828.880515][T28452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10201'. [ 828.880544][T28452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10201'. [ 828.884257][T28452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10201'. [ 828.884282][T28452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10201'. [ 829.430233][T28465] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 829.572152][T28463] bridge0: port 3(syz_tun) entered blocking state [ 829.572432][T28463] bridge0: port 3(syz_tun) entered forwarding state [ 829.649973][T28463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.652082][T28463] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.723891][T28463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 829.820049][T28480] loop8: detected capacity change from 0 to 8 [ 829.863002][T28480] Dev loop8: unable to read RDB block 8 [ 829.863054][T28480] loop8: unable to read partition table [ 829.863296][T28480] loop8: partition table beyond EOD, truncated [ 829.863325][T28480] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 830.173552][T28490] input: syz1 as /devices/virtual/input/input51 [ 831.654886][T28534] ALSA: seq fatal error: cannot create timer (-19) [ 833.673019][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 833.976712][T28592] syzkaller1: entered promiscuous mode [ 833.976741][T28592] syzkaller1: entered allmulticast mode [ 834.603285][T28601] loop2: detected capacity change from 0 to 7 [ 834.632892][T27110] Dev loop2: unable to read RDB block 7 [ 834.632940][T27110] loop2: unable to read partition table [ 834.633146][T27110] loop2: partition table beyond EOD, truncated [ 834.760423][T28601] Dev loop2: unable to read RDB block 7 [ 834.760483][T28601] loop2: unable to read partition table [ 834.760734][T28601] loop2: partition table beyond EOD, truncated [ 834.760771][T28601] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 835.218455][T28616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10266'. [ 835.218497][T28616] netlink: 'syz.2.10266': attribute type 8 has an invalid length. [ 835.218512][T28616] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10266'. [ 837.411467][T28664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10286'. [ 837.488437][T28667] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 838.425612][T28697] loop8: detected capacity change from 0 to 8 [ 838.448087][T27103] Dev loop8: unable to read RDB block 8 [ 838.448139][T27103] loop8: unable to read partition table [ 838.448413][T27103] loop8: partition table beyond EOD, truncated [ 838.489162][T28697] Dev loop8: unable to read RDB block 8 [ 838.489222][T28697] loop8: unable to read partition table [ 838.489447][T28697] loop8: partition table beyond EOD, truncated [ 838.489487][T28697] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 838.663153][T28699] input: syz1 as /devices/virtual/input/input52 [ 839.025638][T28707] 9pnet: p9_errstr2errno: server reported unknown error [ 839.686728][T28724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10310'. [ 839.999607][T28729] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 840.240944][T28734] sock: sock_timestamping_bind_phc: sock not bind to device [ 840.256801][T28734] IPv6: addrconf: prefix option has invalid lifetime [ 840.256819][T28734] IPv6: addrconf: prefix option has invalid lifetime [ 840.682573][T28744] loop8: detected capacity change from 0 to 8 [ 840.699156][T28744] Dev loop8: unable to read RDB block 8 [ 840.699204][T28744] loop8: unable to read partition table [ 840.699444][T28744] loop8: partition table beyond EOD, truncated [ 840.715994][T28744] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 840.961036][T28751] netlink: 'syz.3.10323': attribute type 6 has an invalid length. [ 841.266977][T28760] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 843.880132][T28819] 9pnet_fd: Insufficient options for proto=fd [ 844.405800][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.545731][T28831] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 844.655941][T28827] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 844.827738][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 844.842448][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 844.861168][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 844.874966][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 844.875690][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 845.379922][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.894925][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.577862][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.732873][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 846.796627][T28882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10380'. [ 846.798796][T28882] bond0: invalid ARP target 0.0.0.0 specified for addition [ 846.798823][T28882] bond0: option arp_ip_target: invalid value (0) [ 846.896242][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 846.898695][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 846.898724][ T10] usb 2-1: config 0 has no interface number 0 [ 846.898780][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 846.898810][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 846.901603][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 846.901634][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.901657][ T10] usb 2-1: Product: syz [ 846.901673][ T10] usb 2-1: Manufacturer: syz [ 846.901689][ T10] usb 2-1: SerialNumber: syz [ 846.953003][ T5805] Bluetooth: hci3: command tx timeout [ 847.005955][ T10] usb 2-1: config 0 descriptor?? [ 847.036592][T28834] chnl_net:caif_netlink_parms(): no params data found [ 847.617357][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 847.665506][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input53 [ 847.856220][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 847.898018][ T10] usb 2-1: USB disconnect, device number 64 [ 848.117800][ T10] appletouch 2-1:0.85: input: appletouch disconnected [ 848.233927][ T42] bridge_slave_1: left allmulticast mode [ 848.233960][ T42] bridge_slave_1: left promiscuous mode [ 848.234214][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.354872][ T42] bridge_slave_0: left allmulticast mode [ 848.354905][ T42] bridge_slave_0: left promiscuous mode [ 848.361200][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.032999][ T5805] Bluetooth: hci3: command tx timeout [ 849.573574][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.658117][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.681653][ T42] bond0 (unregistering): Released all slaves [ 849.734963][T28834] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.735053][T28834] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.735266][T28834] bridge_slave_0: entered allmulticast mode [ 849.737413][T28834] bridge_slave_0: entered promiscuous mode [ 849.990938][T28834] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.991102][T28834] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.991364][T28834] bridge_slave_1: entered allmulticast mode [ 850.036735][T28834] bridge_slave_1: entered promiscuous mode [ 850.641306][T28959] pim6reg: entered allmulticast mode [ 850.761756][T28834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.789834][T28959] pim6reg: left allmulticast mode [ 850.987744][T28834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.113046][ T5805] Bluetooth: hci3: command tx timeout [ 851.561372][T28834] team0: Port device team_slave_0 added [ 851.583811][T28834] team0: Port device team_slave_1 added [ 851.753037][ T42] hsr_slave_0: left promiscuous mode [ 851.773547][T28995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10425'. [ 851.809712][ T42] hsr_slave_1: left promiscuous mode [ 851.810916][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.810944][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.864850][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.864882][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.995503][ T42] veth1_macvtap: left promiscuous mode [ 851.995620][ T42] veth0_macvtap: left promiscuous mode [ 851.995880][ T42] veth1_vlan: left promiscuous mode [ 851.996061][ T42] veth0_vlan: left promiscuous mode [ 852.150881][T29002] input: syz0 as /devices/virtual/input/input54 [ 852.707641][T29020] loop8: detected capacity change from 0 to 8 [ 852.708709][T29020] Dev loop8: unable to read RDB block 8 [ 852.708755][T29020] loop8: unable to read partition table [ 852.709082][T29020] loop8: partition table beyond EOD, truncated [ 852.709103][T29020] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 853.192905][ T5805] Bluetooth: hci3: command tx timeout [ 853.365411][ T42] team0 (unregistering): Port device team_slave_1 removed [ 853.423641][ T42] team0 (unregistering): Port device team_slave_0 removed [ 853.978435][T29014] tipc: Bearer : already 2 bearers with priority 10 [ 853.978461][T29014] tipc: Bearer : trying with adjusted priority [ 853.980802][T29014] tipc: Enabled bearer , priority 9 [ 854.022992][T28834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.023024][T28834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.023056][T28834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.083818][T28834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.083838][T28834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.083869][T28834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.286622][T28834] hsr_slave_0: entered promiscuous mode [ 854.288062][T28834] hsr_slave_1: entered promiscuous mode [ 854.289021][T28834] debugfs: 'hsr0' already exists in 'hsr' [ 854.289047][T28834] Cannot create hsr debugfs directory [ 854.509508][T29040] Bluetooth: MGMT ver 1.23 [ 856.309152][T28834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 856.355510][T28834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 856.389465][T28834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 856.435486][T28834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 856.878390][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 856.906333][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 856.920072][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 856.943074][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 856.943842][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 856.997393][ T5886] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 857.162887][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 857.170595][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.170631][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.170686][ T5886] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 857.170713][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.225124][ T5886] usb 4-1: config 0 descriptor?? [ 857.229612][ T5886] hub 4-1:0.0: USB hub found [ 857.472771][ T5886] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 857.691851][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.691955][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.953460][ T5886] hid-generic 0003:046D:C31C.0035: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 858.216986][ T5858] usb 4-1: USB disconnect, device number 45 [ 858.342289][T29119] fido_id[29119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 858.646571][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.646613][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.772568][T29137] Bluetooth: MGMT ver 1.23 [ 859.115406][ T60] Bluetooth: hci0: command tx timeout [ 859.156564][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.156606][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.617744][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.617786][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.713853][T28834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.932994][ T5911] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 859.940926][ T5886] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 859.968650][T28834] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.002501][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.019179][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.058145][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.058357][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.121591][ T5911] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 860.121623][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.121646][ T5911] usb 2-1: Product: syz [ 860.121662][ T5911] usb 2-1: Manufacturer: syz [ 860.121678][ T5911] usb 2-1: SerialNumber: syz [ 860.133213][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 860.184453][ T5886] usb 4-1: config 250 has an invalid interface number: 230 but max is 0 [ 860.184486][ T5886] usb 4-1: config 250 has no interface number 0 [ 860.184533][ T5886] usb 4-1: config 250 interface 230 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 860.184551][ T5886] usb 4-1: config 250 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 860.184570][ T5886] usb 4-1: config 250 interface 230 has no altsetting 0 [ 860.186964][ T5886] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 860.187002][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.187018][ T5886] usb 4-1: Product: syz [ 860.187029][ T5886] usb 4-1: Manufacturer: syz [ 860.187041][ T5886] usb 4-1: SerialNumber: syz [ 860.275843][ T5911] usb 2-1: config 0 descriptor?? [ 860.567100][ T5886] ums-usbat 4-1:250.230: USB Mass Storage device detected [ 860.685992][ T5886] ums-usbat 4-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 860.776739][ T5886] ums-usbat 4-1:250.230: probe with driver ums-usbat failed with error -5 [ 860.799041][ T5805] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 860.840031][ T5886] usb 4-1: USB disconnect, device number 46 [ 860.957763][T29102] chnl_net:caif_netlink_parms(): no params data found [ 861.193114][ T5805] Bluetooth: hci0: command 0x041b tx timeout [ 861.438131][ T5911] usb 2-1: Firmware version (0.0) predates our first public release. [ 861.438163][ T5911] usb 2-1: Please update to version 0.2 or newer [ 861.710809][ T5911] usb 2-1: USB disconnect, device number 65 [ 861.814707][ T58] bridge_slave_0: left allmulticast mode [ 861.814742][ T58] bridge_slave_0: left promiscuous mode [ 861.815004][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.313491][T29208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10495'. [ 863.273097][ T5805] Bluetooth: hci0: command 0x041b tx timeout [ 863.694426][ T58] team0: Port device bond0 removed [ 863.736919][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.814607][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.838732][ T58] bond0 (unregistering): Released all slaves [ 863.867336][ T58] bond1 (unregistering): Released all slaves [ 863.901468][ T58] bond2 (unregistering): Released all slaves [ 863.941026][ T58] bond3 (unregistering): Released all slaves [ 864.396738][T29236] can0: slcan on pty22. [ 864.473555][T29102] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.473643][T29102] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.473860][T29102] bridge_slave_0: entered allmulticast mode [ 864.475766][T29102] bridge_slave_0: entered promiscuous mode [ 864.537710][T29102] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.537927][T29102] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.538182][T29102] bridge_slave_1: entered allmulticast mode [ 864.631060][T29102] bridge_slave_1: entered promiscuous mode [ 865.153524][ T5911] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 865.175516][T29102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.230813][T29234] can0 (unregistered): slcan off pty22. [ 865.281509][T29102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.362766][ T5805] Bluetooth: hci0: command 0x041b tx timeout [ 865.571519][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 865.571540][ T36] audit: type=1326 audit(1773150341.097:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29252 comm="syz.1.10511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12af9c799 code=0x0 [ 865.739112][ T5911] usb 4-1: unable to get BOS descriptor or descriptor too short [ 865.760646][ T5911] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 865.760690][ T5911] usb 4-1: can't read configurations, error -71 [ 865.820702][T29258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.877942][T29102] team0: Port device team_slave_0 added [ 865.900114][T29102] team0: Port device team_slave_1 added [ 866.171304][T29102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.171325][T29102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.171356][T29102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.229617][T29102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.229637][T29102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.229670][T29102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.619309][T28834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.795090][T29102] hsr_slave_0: entered promiscuous mode [ 866.796667][T29102] hsr_slave_1: entered promiscuous mode [ 866.798268][T29102] debugfs: 'hsr0' already exists in 'hsr' [ 866.798297][T29102] Cannot create hsr debugfs directory [ 867.141046][T29277] loop8: detected capacity change from 0 to 8 [ 867.142309][T29277] Dev loop8: unable to read RDB block 8 [ 867.142356][T29277] loop8: unable to read partition table [ 867.142583][T29277] loop8: partition table beyond EOD, truncated [ 867.174122][T29277] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 867.348076][ T58] hsr_slave_0: left promiscuous mode [ 867.422955][ T58] hsr_slave_1: left promiscuous mode [ 867.424077][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.424113][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.433591][ T5805] Bluetooth: hci0: command 0x041b tx timeout [ 867.495927][T29281] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10523'. [ 867.523864][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.523896][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.686100][ T58] veth0_virt_wifi: left promiscuous mode [ 867.686457][ T58] vlan1: left allmulticast mode [ 867.686474][ T58] veth0_vlan: left allmulticast mode [ 867.686506][ T58] vlan1: left promiscuous mode [ 867.690776][ T58] veth0_macvtap: left promiscuous mode [ 867.691043][ T58] veth1_vlan: left promiscuous mode [ 867.691138][ T58] veth0_vlan: left promiscuous mode [ 867.832048][T29291] loop8: detected capacity change from 0 to 8 [ 867.843918][T29291] Dev loop8: unable to read RDB block 8 [ 867.843966][T29291] loop8: unable to read partition table [ 867.844185][T29291] loop8: partition table beyond EOD, truncated [ 867.844205][T29291] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 870.045698][ T58] team0 (unregistering): Port device team_slave_1 removed [ 870.165438][ T58] team0 (unregistering): Port device team_slave_0 removed [ 870.165482][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.242804][T15914] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 870.408483][T15914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 870.408537][T15914] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 870.408561][T15914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.470542][T15914] usb 2-1: config 0 descriptor?? [ 870.471461][T29332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 870.897105][T15914] magicmouse 0003:05AC:0324.0036: unknown main item tag 0x0 [ 870.897146][T15914] magicmouse 0003:05AC:0324.0036: unknown main item tag 0x0 [ 870.897175][T15914] magicmouse 0003:05AC:0324.0036: unknown main item tag 0x0 [ 870.897203][T15914] magicmouse 0003:05AC:0324.0036: unknown main item tag 0x0 [ 870.897231][T15914] magicmouse 0003:05AC:0324.0036: unknown main item tag 0x0 [ 870.897258][T15914] magicmouse 0003:05AC:0324.0036: unknown main item tag 0x0 [ 870.897285][T15914] magicmouse 0003:05AC:0324.0036: unknown main item tag 0x0 [ 870.897338][T15914] magicmouse 0003:05AC:0324.0036: unknown main item tag 0x0 [ 870.897366][T15914] magicmouse 0003:05AC:0324.0036: unknown main item tag 0x0 [ 870.897393][T15914] magicmouse 0003:05AC:0324.0036: unknown main item tag 0x0 [ 870.900635][T15914] magicmouse 0003:05AC:0324.0036: unexpected long global item [ 870.901492][T15914] magicmouse 0003:05AC:0324.0036: magicmouse hid parse failed [ 870.901608][T15914] magicmouse 0003:05AC:0324.0036: probe with driver magicmouse failed with error -22 [ 871.103455][T15914] usb 2-1: USB disconnect, device number 66 [ 871.171929][T29342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10548'. [ 872.579073][T28834] veth0_vlan: entered promiscuous mode [ 872.668424][T28834] veth1_vlan: entered promiscuous mode [ 872.992385][T29102] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 873.192765][T15914] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 873.275378][T29102] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 873.327322][T29102] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 873.359223][T15914] usb 5-1: Using ep0 maxpacket: 8 [ 873.370451][T15914] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 873.370512][T15914] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 873.370536][T15914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 873.370564][T15914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 873.370591][T15914] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.370635][T15914] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 873.370659][T15914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.458240][T29102] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 873.546512][ T58] IPVS: stop unused estimator thread 0... [ 873.642874][T15914] usb 5-1: usb_control_msg returned -32 [ 873.642925][T15914] usbtmc 5-1:16.0: can't read capabilities [ 873.756453][T28834] veth0_macvtap: entered promiscuous mode [ 873.810237][T28834] veth1_macvtap: entered promiscuous mode [ 874.056332][T29395] usbtmc 5-1:16.0: control status returned 0 [ 874.079104][T28834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.179913][T28834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.227250][ T1183] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.227938][ T1183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.261136][ T10] usb 5-1: USB disconnect, device number 69 [ 874.262354][ T1183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.273506][ T1183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.827941][T29102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.082831][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.082855][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.249878][T29102] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.304640][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.304664][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.342158][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.342323][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.376567][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.376681][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.874991][ T5902] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 876.023345][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 876.027837][ T5902] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 876.027870][ T5902] usb 4-1: config 0 has no interface number 0 [ 876.027930][ T5902] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 876.027956][ T5902] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid maxpacket 59365, setting to 1024 [ 876.027988][ T5902] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 876.028016][ T5902] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 876.028045][ T5902] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.032768][ T5858] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 876.033105][ T5902] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 876.033131][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.033152][ T5902] usb 4-1: Product: syz [ 876.033168][ T5902] usb 4-1: Manufacturer: syz [ 876.033276][ T5902] usb 4-1: SerialNumber: syz [ 876.180037][ T5902] usb 4-1: config 0 descriptor?? [ 876.181377][T29421] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 876.247212][ T5858] usb 6-1: Using ep0 maxpacket: 16 [ 876.250518][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.250539][ T5858] usb 6-1: config 0 has no interfaces? [ 876.266009][ T5858] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 876.266432][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.266490][ T5858] usb 6-1: Product: syz [ 876.266903][ T5858] usb 6-1: Manufacturer: syz [ 876.266956][ T5858] usb 6-1: SerialNumber: syz [ 876.358170][ T5858] usb 6-1: config 0 descriptor?? [ 876.532718][ T5902] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 876.761368][ T5911] usb 4-1: USB disconnect, device number 49 [ 876.983626][T29102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.251084][T29102] veth0_vlan: entered promiscuous mode [ 878.302385][T29102] veth1_vlan: entered promiscuous mode [ 878.381981][T29102] veth0_macvtap: entered promiscuous mode [ 878.434025][T29102] veth1_macvtap: entered promiscuous mode [ 878.536798][T29102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.734654][T29102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.771655][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.776498][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.779568][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.779693][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.987046][T15914] usb 6-1: USB disconnect, device number 2 [ 879.591418][ T1484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.591442][ T1484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.677822][ T1484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.677848][ T1484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.021836][T29521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10592'. [ 880.322969][T29531] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10596'. [ 881.052886][ T5858] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 881.205034][ T5858] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.205066][ T5858] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 881.206560][ T5858] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 881.206590][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 881.206613][ T5858] usb 4-1: SerialNumber: syz [ 881.497175][ T5858] usb 4-1: 0:2 : does not exist [ 881.553308][ T5911] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 881.595017][ T5858] usb 4-1: USB disconnect, device number 50 [ 881.705801][ T5911] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 881.705837][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.740640][T29580] trusted_key: syz.6.10614 sent an empty control message without MSG_MORE. [ 881.754399][ T5911] usb 5-1: config 0 descriptor?? [ 881.787391][ T5911] cp210x 5-1:0.0: cp210x converter detected [ 882.021192][T27103] udevd[27103]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.175178][ T5911] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 882.220057][ T5911] usb 5-1: cp210x converter now attached to ttyUSB0 [ 882.381070][ T31] usb 5-1: USB disconnect, device number 70 [ 882.410278][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 882.527515][ T31] cp210x 5-1:0.0: device disconnected [ 883.626483][ T5911] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 883.795153][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 883.805633][ T5911] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 883.805667][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.805689][ T5911] usb 7-1: Product: syz [ 883.805705][ T5911] usb 7-1: Manufacturer: syz [ 883.805721][ T5911] usb 7-1: SerialNumber: syz [ 883.941781][ T5911] usb 7-1: config 0 descriptor?? [ 884.203455][T27899] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 884.403247][T27899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.403364][T27899] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 884.403393][T27899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.510061][T27899] usb 6-1: config 0 descriptor?? [ 884.641104][ T5911] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 885.128930][T27899] keytouch 0003:0926:3333.0037: fixing up Keytouch IEC report descriptor [ 885.152099][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 885.163389][ T5911] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 885.163461][ T5911] usb 7-1: media controller created [ 885.205501][T27899] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0037/input/input55 [ 885.396934][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 885.602978][T29650] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 885.702926][ T5911] zl10353_read_register: readreg error (reg=127, ret==0) [ 885.702992][ T5911] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 885.703009][ T5911] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 885.825602][ T5911] usb 7-1: USB disconnect, device number 2 [ 886.124058][T27899] keytouch 0003:0926:3333.0037: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 886.158298][ T5911] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 886.163906][T27899] usb 6-1: USB disconnect, device number 3 [ 887.012817][ T5858] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 887.066641][T29681] fido_id[29681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 887.165410][ T5858] usb 2-1: not running at top speed; connect to a high speed hub [ 887.187991][ T5858] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 887.188025][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.188049][ T5858] usb 2-1: Product: syz [ 887.188066][ T5858] usb 2-1: Manufacturer: syz [ 887.188082][ T5858] usb 2-1: SerialNumber: syz [ 887.877368][ T5858] qmi_wwan 2-1:251.0: probe with driver qmi_wwan failed with error -22 [ 888.094681][T27899] usb 2-1: USB disconnect, device number 67 [ 888.851895][T29736] loop3: detected capacity change from 0 to 7 [ 888.883189][T29736] Dev loop3: unable to read RDB block 7 [ 888.883239][T29736] loop3: AHDI p3 p4 [ 888.883274][T29736] loop3: partition table partially beyond EOD, truncated [ 888.883535][T29736] loop3: p3 start 1702000233 is beyond EOD, truncated [ 888.928724][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 889.108618][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.108714][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.108741][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 889.108787][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 889.108812][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.194546][ T10] usb 4-1: config 0 descriptor?? [ 889.644706][ T10] plantronics 0003:047F:FFFF.0038: reserved main item tag 0xd [ 889.714694][ T10] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 889.900149][T29759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10675'. [ 890.149935][ T5886] usb 4-1: USB disconnect, device number 51 [ 890.260922][T29763] fido_id[29763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 890.937927][T29779] sctp: [Deprecated]: syz.6.10682 (pid 29779) Use of int in max_burst socket option deprecated. [ 890.937927][T29779] Use struct sctp_assoc_value instead [ 891.096023][ T36] audit: type=1326 audit(1773150366.617:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29784 comm="syz.5.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6a0c799 code=0x7ffc0000 [ 891.096086][ T36] audit: type=1326 audit(1773150366.617:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29784 comm="syz.5.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6a0c799 code=0x7ffc0000 [ 891.108497][ T36] audit: type=1326 audit(1773150366.627:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29784 comm="syz.5.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6a0c799 code=0x7ffc0000 [ 891.108663][ T36] audit: type=1326 audit(1773150366.637:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29784 comm="syz.5.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6a0c799 code=0x7ffc0000 [ 891.109809][ T36] audit: type=1326 audit(1773150366.637:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29784 comm="syz.5.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe7f6a0c799 code=0x7ffc0000 [ 891.134497][ T36] audit: type=1326 audit(1773150366.637:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29784 comm="syz.5.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6a0c799 code=0x7ffc0000 [ 891.134693][ T36] audit: type=1326 audit(1773150366.667:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29784 comm="syz.5.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6a0c799 code=0x7ffc0000 [ 891.154488][ T36] audit: type=1326 audit(1773150366.677:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29784 comm="syz.5.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6a0c799 code=0x7ffc0000 [ 891.160771][ T36] audit: type=1326 audit(1773150366.687:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29784 comm="syz.5.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6a0c799 code=0x7ffc0000 [ 891.160972][ T36] audit: type=1326 audit(1773150366.687:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29784 comm="syz.5.10685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fe7f6a0c799 code=0x7ffc0000 [ 892.891193][T29772] infiniband syz1: set active [ 892.891218][T29772] infiniband syz1: added veth0 [ 893.747592][T29772] RDS/IB: syz1: added [ 893.748619][T29772] smc: adding ib device syz1 with port count 1 [ 893.749242][T29772] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 894.179616][T29855] input: syz1 as /devices/virtual/input/input57 [ 895.161247][T29874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10714'. [ 895.870698][T29908] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10725'. [ 897.476051][T29942] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 899.268494][T29982] loop5: detected capacity change from 0 to 7 [ 900.067879][T20039] Dev loop5: unable to read RDB block 7 [ 900.067935][T20039] loop5: unable to read partition table [ 900.068200][T20039] loop5: partition table beyond EOD, truncated [ 900.814282][T29982] Dev loop5: unable to read RDB block 7 [ 900.814341][T29982] loop5: unable to read partition table [ 900.814580][T29982] loop5: partition table beyond EOD, truncated [ 900.814624][T29982] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 901.262094][T30033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10768'. [ 902.768740][T30077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10783'. [ 903.353796][ T5858] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 903.484644][T30090] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 903.542772][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 903.545183][ T5858] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.545220][ T5858] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.545246][ T5858] usb 4-1: config 0 interface 0 has no altsetting 0 [ 903.545284][ T5858] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 903.545321][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.642864][ T5858] usb 4-1: config 0 descriptor?? [ 903.831931][T30087] sctp: [Deprecated]: syz.6.10785 (pid 30087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.831931][T30087] Use struct sctp_sack_info instead [ 904.068173][ T5858] hid (null): unknown global tag 0xd [ 904.068222][ T5858] hid (null): unknown global tag 0xd [ 904.186462][ T5858] hid_parser_main: 307 callbacks suppressed [ 904.186490][ T5858] cougar 0003:060B:500A.0039: unknown main item tag 0x0 [ 904.186522][ T5858] cougar 0003:060B:500A.0039: unknown main item tag 0x0 [ 904.186551][ T5858] cougar 0003:060B:500A.0039: unknown main item tag 0x0 [ 904.186580][ T5858] cougar 0003:060B:500A.0039: unknown main item tag 0x0 [ 904.186607][ T5858] cougar 0003:060B:500A.0039: unknown main item tag 0x0 [ 904.186635][ T5858] cougar 0003:060B:500A.0039: unknown main item tag 0x0 [ 904.186662][ T5858] cougar 0003:060B:500A.0039: unknown main item tag 0x0 [ 904.186689][ T5858] cougar 0003:060B:500A.0039: unknown main item tag 0x0 [ 904.186717][ T5858] cougar 0003:060B:500A.0039: unknown main item tag 0x0 [ 904.186744][ T5858] cougar 0003:060B:500A.0039: unknown main item tag 0x0 [ 904.189280][ T5858] cougar 0003:060B:500A.0039: unexpected long global item [ 904.190775][ T5858] cougar 0003:060B:500A.0039: parse failed [ 904.190885][ T5858] cougar 0003:060B:500A.0039: probe with driver cougar failed with error -22 [ 904.328852][ T5858] hid-sensor-hub 0003:060B:500A.0039: unexpected long global item [ 904.329405][ T5858] hid-sensor-hub 0003:060B:500A.0039: parse failed [ 904.329480][ T5858] hid-sensor-hub 0003:060B:500A.0039: probe with driver hid-sensor-hub failed with error -22 [ 904.465765][ T5858] usb 4-1: USB disconnect, device number 52 [ 905.732305][ T5911] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 905.903213][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 905.905427][ T5911] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 905.905457][ T5911] usb 4-1: config 0 has no interface number 0 [ 905.907952][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 905.907984][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.908008][ T5911] usb 4-1: Product: syz [ 905.908024][ T5911] usb 4-1: Manufacturer: syz [ 905.908040][ T5911] usb 4-1: SerialNumber: syz [ 905.985160][ T5911] usb 4-1: config 0 descriptor?? [ 906.002899][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 906.110475][T30155] tmpfs: Unknown parameter 'nr' [ 906.113350][T30155] tmpfs: Too few inodes for current use [ 906.223741][ T5911] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 906.225277][ T5911] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 906.273314][ T5911] usb 4-1: USB disconnect, device number 53 [ 907.662884][ T5911] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 907.825241][T30202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10823'. [ 907.825272][T30202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10823'. [ 907.844772][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 907.861408][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 907.898128][ T5911] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 907.898164][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.898188][ T5911] usb 6-1: Product: syz [ 907.898204][ T5911] usb 6-1: Manufacturer: syz [ 907.898220][ T5911] usb 6-1: SerialNumber: syz [ 907.958895][ T5911] usb 6-1: config 0 descriptor?? [ 908.021558][ T5911] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 908.021607][ T5911] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 908.594177][ T5911] em28xx 6-1:0.0: chip ID is em2765 [ 909.103213][ T5911] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 909.103256][ T5911] em28xx 6-1:0.0: board has no eeprom [ 909.212775][ T5911] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 909.212808][ T5911] em28xx 6-1:0.0: dvb set to bulk mode. [ 909.214265][T27899] em28xx 6-1:0.0: Binding DVB extension [ 909.297321][ T5911] usb 6-1: USB disconnect, device number 4 [ 909.299764][ T5911] em28xx 6-1:0.0: Disconnecting em28xx [ 909.382953][ T5858] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 909.532964][ T5858] usb 5-1: Using ep0 maxpacket: 8 [ 909.536606][ T5858] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 909.547708][ T5858] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 909.547751][ T5858] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 909.547778][ T5858] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 909.547805][ T5858] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.547852][ T5858] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 909.547879][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.623780][T27899] em28xx 6-1:0.0: Registering input extension [ 909.630260][ T5911] em28xx 6-1:0.0: Closing input extension [ 909.930970][ T5858] usb 5-1: usb_control_msg returned -32 [ 909.931021][ T5858] usbtmc 5-1:16.0: can't read capabilities [ 909.976581][T30240] overlayfs: workdir and upperdir must reside under the same mount [ 910.127196][ T5911] em28xx 6-1:0.0: Freeing device [ 910.537476][T30259] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10838'. [ 910.663217][ T5911] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 910.822914][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 910.826579][ T5911] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 910.826615][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.838288][ T5911] usb 6-1: config 0 descriptor?? [ 910.882851][ T5858] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 911.041223][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 911.055987][ T5858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 911.060055][ T5858] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 911.060087][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 911.060110][ T5858] usb 4-1: Product: syz [ 911.060126][ T5858] usb 4-1: Manufacturer: syz [ 911.060143][ T5858] usb 4-1: SerialNumber: syz [ 911.134184][ T5858] usb 4-1: config 0 descriptor?? [ 911.135220][T30263] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 911.138652][ T5858] hub 4-1:0.0: bad descriptor, ignoring hub [ 911.138685][ T5858] hub 4-1:0.0: probe with driver hub failed with error -5 [ 911.275927][T30269] loop8: detected capacity change from 0 to 8 [ 911.332784][ T5911] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 911.348681][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 911.364799][ T5911] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 911.364860][ T5911] usb 6-1: media controller created [ 911.388221][T30269] Dev loop8: unable to read RDB block 8 [ 911.388267][T30269] loop8: unable to read partition table [ 911.388482][T30269] loop8: partition table beyond EOD, truncated [ 911.388502][T30269] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 911.446220][T30263] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 911.485424][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 911.585863][ T31] usb 4-1: USB disconnect, device number 54 [ 911.965840][ T5911] DVB: Unable to find symbol dib7000p_attach() [ 911.965859][ T5911] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 912.052782][ T31] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 912.166864][ T5911] rc_core: IR keymap rc-dib0700-rc5 not found [ 912.166889][ T5911] Registered IR keymap rc-empty [ 912.167285][ T5911] dvb-usb: could not initialize remote control. [ 912.167297][ T5911] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 912.203111][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 912.205635][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 912.206499][T26767] usb 5-1: USB disconnect, device number 71 [ 912.209896][ T31] usb 4-1: string descriptor 0 read error: -22 [ 912.210042][ T31] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 912.210068][ T31] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 912.276369][ T5911] usb 6-1: USB disconnect, device number 5 [ 912.447158][ T31] usb 4-1: config 0 descriptor?? [ 912.448606][T30263] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 912.467551][ T31] hub 4-1:0.0: bad descriptor, ignoring hub [ 912.467597][ T31] hub 4-1:0.0: probe with driver hub failed with error -5 [ 912.795169][ T31] usb 4-1: USB disconnect, device number 55 [ 912.976829][ T5911] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 913.132775][T26767] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 913.309140][T26767] usb 5-1: Using ep0 maxpacket: 32 [ 913.318439][T26767] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 913.344831][T26767] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 913.344867][T26767] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 913.344899][T26767] usb 5-1: Product: syz [ 913.344915][T26767] usb 5-1: Manufacturer: syz [ 913.344931][T26767] usb 5-1: SerialNumber: syz [ 913.392524][T26767] usb 5-1: config 0 descriptor?? [ 913.427618][T30307] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 913.463380][T26767] hub 5-1:0.0: bad descriptor, ignoring hub [ 913.463423][T26767] hub 5-1:0.0: probe with driver hub failed with error -5 [ 913.803748][T30320] netlink: 'syz.3.10853': attribute type 16 has an invalid length. [ 913.803774][T30320] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.10853'. [ 913.819019][ T10] usb 5-1: USB disconnect, device number 72 [ 914.262813][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 914.373995][T30344] netlink: 'syz.5.10861': attribute type 5 has an invalid length. [ 914.417096][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 914.419524][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 914.426674][ T10] usb 5-1: string descriptor 0 read error: -22 [ 914.426830][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 914.426856][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 914.427010][T30349] netlink: 'syz.5.10861': attribute type 5 has an invalid length. [ 914.483385][ T10] usb 5-1: config 0 descriptor?? [ 914.484423][T30307] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 914.489752][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 914.489803][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 914.831694][T30355] input: syz0 as /devices/virtual/input/input61 [ 914.865178][ T10] usb 5-1: USB disconnect, device number 73 [ 916.637720][ T5886] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 916.734479][ T5858] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 916.838401][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 916.861924][ T5886] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 916.861959][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.861982][ T5886] usb 4-1: Product: syz [ 916.861998][ T5886] usb 4-1: Manufacturer: syz [ 916.862014][ T5886] usb 4-1: SerialNumber: syz [ 916.913674][ T5858] usb 7-1: Using ep0 maxpacket: 32 [ 916.927033][ T5858] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 916.927140][ T5858] usb 7-1: config 0 has no interface number 0 [ 916.979049][ T5858] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 916.979085][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.979109][ T5858] usb 7-1: Product: syz [ 916.979125][ T5858] usb 7-1: Manufacturer: syz [ 916.979141][ T5858] usb 7-1: SerialNumber: syz [ 917.035382][ T5886] r8152-cfgselector 4-1: Unknown version 0x0000 [ 917.035420][ T5886] r8152-cfgselector 4-1: config 0 descriptor?? [ 917.084662][ T5858] usb 7-1: config 0 descriptor?? [ 917.342440][ T5858] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 917.345209][ T5858] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 917.432972][ T5858] usb 7-1: USB disconnect, device number 3 [ 917.484856][T29507] r8152-cfgselector 4-1: USB disconnect, device number 56 [ 917.513212][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 917.535907][ T31] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 917.535935][ T31] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 917.689164][T30418] loop9: detected capacity change from 0 to 7 [ 917.702734][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 917.722442][T30418] Dev loop9: unable to read RDB block 7 [ 917.722478][T30418] loop9: AHDI p2 p3 [ 917.722512][T30418] loop9: partition table partially beyond EOD, truncated [ 917.729002][T30418] loop9: p2 start 1702059890 is beyond EOD, truncated [ 917.863190][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 917.865051][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 917.865088][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 917.865116][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 917.865142][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 917.865197][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 917.865222][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.138573][ T10] usb 2-1: usb_control_msg returned -32 [ 918.138626][ T10] usbtmc 2-1:16.0: can't read capabilities [ 918.593419][T30435] loop8: detected capacity change from 0 to 8 [ 918.612956][T30435] Dev loop8: unable to read RDB block 8 [ 918.613006][T30435] loop8: unable to read partition table [ 918.613232][T30435] loop8: partition table beyond EOD, truncated [ 918.613254][T30435] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 918.880500][T30440] netlink: 'syz.4.10900': attribute type 25 has an invalid length. [ 918.880523][T30440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10900'. [ 919.066993][T30445] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10902'. [ 919.083695][T30445] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.084093][T30445] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.072941][ T31] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 920.072969][ T31] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 920.073055][ C0] ------------[ cut here ]------------ [ 920.073064][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 920.073206][ C0] WARNING: kernel/workqueue.c:2271 at __queue_work+0xd16/0xff0, CPU#0: ktimers/0/16 [ 920.073254][ C0] Modules linked in: [ 920.073285][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 920.073310][ C0] Tainted: [L]=SOFTLOCKUP [ 920.073318][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 920.073336][ C0] RIP: 0010:__queue_work+0xd40/0xff0 [ 920.073378][ C0] Code: 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a0 2f 9d 00 48 8b 33 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 920.073398][ C0] RSP: 0018:ffffc900001579a0 EFLAGS: 00010082 [ 920.073417][ C0] RAX: 1ffff1100c370953 RBX: ffff888061b84a98 RCX: ffff88801ca98000 [ 920.073431][ C0] RDX: ffff88802af45968 RSI: ffffffff8a139e10 RDI: ffffffff8f6cfa90 [ 920.073445][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 920.073456][ C0] R10: dffffc0000000000 R11: ffffffff818d46a0 R12: 0000000000000100 [ 920.073469][ C0] R13: dffffc0000000000 R14: ffffffff8f6cfa90 R15: ffff88802af45968 [ 920.073483][ C0] FS: 0000000000000000(0000) GS:ffff88812633f000(0000) knlGS:0000000000000000 [ 920.073498][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 920.073510][ C0] CR2: 00007fd939b956b8 CR3: 00000000348ac000 CR4: 00000000003526f0 [ 920.073528][ C0] Call Trace: [ 920.073541][ C0] [ 920.073563][ C0] call_timer_fn+0x192/0x640 [ 920.073585][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 920.073611][ C0] ? call_timer_fn+0xd4/0x640 [ 920.073629][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 920.073656][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 920.073693][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 920.073722][ C0] __run_timer_base+0x764/0x9f0 [ 920.073789][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 920.073831][ C0] run_timer_softirq+0xb7/0x170 [ 920.073861][ C0] handle_softirqs+0x1de/0x6f0 [ 920.073897][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 920.073926][ C0] run_ktimerd+0x69/0x100 [ 920.073954][ C0] smpboot_thread_fn+0x541/0xa50 [ 920.073983][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 920.074018][ C0] kthread+0x388/0x470 [ 920.074039][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 920.074065][ C0] ? __pfx_kthread+0x10/0x10 [ 920.074086][ C0] ret_from_fork+0x51e/0xb90 [ 920.074126][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 920.074150][ C0] ? __switch_to+0xc7d/0x1450 [ 920.074198][ C0] ? __pfx_kthread+0x10/0x10 [ 920.074218][ C0] ret_from_fork_asm+0x1a/0x30 [ 920.074268][ C0] [ 920.074283][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 920.074301][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 920.074326][ C0] Tainted: [L]=SOFTLOCKUP [ 920.074333][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 920.074344][ C0] Call Trace: [ 920.074359][ C0] [ 920.074367][ C0] vpanic+0x56c/0xa60 [ 920.074402][ C0] ? __pfx__printk+0x10/0x10 [ 920.074424][ C0] ? __pfx_vpanic+0x10/0x10 [ 920.074449][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 920.074492][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 920.074525][ C0] panic+0xc5/0xd0 [ 920.074552][ C0] ? __pfx_panic+0x10/0x10 [ 920.074588][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 920.074611][ C0] __warn+0x315/0x4f0 [ 920.074638][ C0] ? __queue_work+0xd16/0xff0 [ 920.074668][ C0] ? __queue_work+0xd16/0xff0 [ 920.074696][ C0] __report_bug+0x29a/0x540 [ 920.074817][ C0] ? __queue_work+0xd16/0xff0 [ 920.074845][ C0] ? __pfx___report_bug+0x10/0x10 [ 920.074870][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 920.074902][ C0] ? look_up_lock_class+0x57/0x110 [ 920.074980][ C0] ? register_lock_class+0x31/0x2e0 [ 920.075017][ C0] report_bug_entry+0x19a/0x290 [ 920.075044][ C0] ? __queue_work+0xd40/0xff0 [ 920.075069][ C0] ? __queue_work+0xd45/0xff0 [ 920.075094][ C0] handle_bug+0xce/0x200 [ 920.075124][ C0] exc_invalid_op+0x1a/0x50 [ 920.075152][ C0] asm_exc_invalid_op+0x1a/0x20 [ 920.075188][ C0] RIP: 0010:__queue_work+0xd40/0xff0 [ 920.075216][ C0] Code: 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a0 2f 9d 00 48 8b 33 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 920.075233][ C0] RSP: 0018:ffffc900001579a0 EFLAGS: 00010082 [ 920.075249][ C0] RAX: 1ffff1100c370953 RBX: ffff888061b84a98 RCX: ffff88801ca98000 [ 920.075264][ C0] RDX: ffff88802af45968 RSI: ffffffff8a139e10 RDI: ffffffff8f6cfa90 [ 920.075279][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 920.075290][ C0] R10: dffffc0000000000 R11: ffffffff818d46a0 R12: 0000000000000100 [ 920.075303][ C0] R13: dffffc0000000000 R14: ffffffff8f6cfa90 R15: ffff88802af45968 [ 920.075322][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 920.075360][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 920.075402][ C0] call_timer_fn+0x192/0x640 [ 920.075421][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 920.075447][ C0] ? call_timer_fn+0xd4/0x640 [ 920.075465][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 920.075491][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 920.075517][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 920.075547][ C0] __run_timer_base+0x764/0x9f0 [ 920.075587][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 920.075629][ C0] run_timer_softirq+0xb7/0x170 [ 920.075657][ C0] handle_softirqs+0x1de/0x6f0 [ 920.075691][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 920.075718][ C0] run_ktimerd+0x69/0x100 [ 920.075747][ C0] smpboot_thread_fn+0x541/0xa50 [ 920.075776][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 920.075811][ C0] kthread+0x388/0x470 [ 920.075831][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 920.075859][ C0] ? __pfx_kthread+0x10/0x10 [ 920.075879][ C0] ret_from_fork+0x51e/0xb90 [ 920.075908][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 920.075932][ C0] ? __switch_to+0xc7d/0x1450 [ 920.075959][ C0] ? __pfx_kthread+0x10/0x10 [ 920.075979][ C0] ret_from_fork_asm+0x1a/0x30 [ 920.076012][ C0] [ 920.077688][ C0] Kernel Offset: disabled