last executing test programs: 10.245692618s ago: executing program 1 (id=11514): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000084}, 0x2000400c) 9.964194348s ago: executing program 1 (id=11519): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 9.733415153s ago: executing program 1 (id=11524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20) 9.42753253s ago: executing program 1 (id=11527): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000001540)=ANY=[@ANYBLOB='noswap,mpol=interleave']) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x46140, 0x100) 9.14811176s ago: executing program 1 (id=11530): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.831401787s ago: executing program 1 (id=11535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a0001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 4.94905403s ago: executing program 3 (id=11564): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0800, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x20, 0x8, 0x7fffffffffffffff) 4.733480649s ago: executing program 3 (id=11566): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60010000", @ANYRES16=r0, @ANYBLOB="010028bd7000fbdbdf250c0000004c0105802c00028008000200da0800000800040003000000080001001d000000080002000000000008000300580f00003400028008000400f9ffffff080002000400000008000300dc0000000800040040000000080002000008000008000200080000003c000280080003000c00000008000200e303000008000300ff07000008000200faffffff080003000400000008000100060000000800020000100000080001"], 0x160}, 0x1, 0x0, 0x0, 0x28000021}, 0x24008854) 4.435710009s ago: executing program 3 (id=11568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 4.183571793s ago: executing program 3 (id=11570): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.909815992s ago: executing program 4 (id=11572): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010d90472a000000000000109022400010000000009040100020300000009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x20, 0x5, 0x4, {0x4, 0x19, "261b"}}, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x3, 0xc0, 0x6, "269783e4", "bb9a386c"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x0, 0x5, 0x47, 0x8000, 0x8}}}, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x20, 0x2}}, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000540)={0x40, 0xb, 0x2, "c80c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xf}, 0x0}) 3.366651027s ago: executing program 3 (id=11573): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@global=@item_012={0x2, 0x1, 0x2, "5cb5"}, @global=@item_4={0x3, 0x1, 0xb, "39d30a00"}, @global=@item_012={0x2, 0x1, 0x6, 'jd'}]}}, 0x0}, 0x0) 2.057269448s ago: executing program 0 (id=11581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r1, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x3c}}, 0x40800) 1.975996572s ago: executing program 4 (id=11583): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 1.757665854s ago: executing program 0 (id=11584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80010000, 0x2}, 0x50) 1.639896138s ago: executing program 2 (id=11586): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) futex(&(0x7f0000000000), 0x88, 0x0, 0x0, 0x0, 0x0) 1.578976598s ago: executing program 4 (id=11587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1b}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.462204884s ago: executing program 2 (id=11588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x28}}, 0x0) 1.337885198s ago: executing program 0 (id=11589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) 1.282059179s ago: executing program 3 (id=11590): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.23502619s ago: executing program 2 (id=11591): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r1 = dup(r0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 1.188142278s ago: executing program 4 (id=11592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.073895611s ago: executing program 0 (id=11593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) 989.801841ms ago: executing program 2 (id=11594): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002540)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040) 772.366539ms ago: executing program 0 (id=11595): r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x11fffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 715.287402ms ago: executing program 0 (id=11596): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c6863773fddd911869efc89610aab1b0d2363bdd00b77c5bdfd51207b2908fceb485a8995d912501"], 0x0, 0x0, 0x0, 0x0}, 0x0) 601.46056ms ago: executing program 2 (id=11597): rt_sigaction(0x40, &(0x7f0000000380)={&(0x7f00000001c0)="26a564dc3af240d1dc83458506c42329417d00d52e420fae7d9df30f2b693a660f3a16da06c44260f2016f", 0x2, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f00000005c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00') lseek(r0, 0x9, 0x0) 368.388856ms ago: executing program 4 (id=11598): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x80047437, &(0x7f0000000000)) 282.551162ms ago: executing program 2 (id=11599): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x2, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8000, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=11600): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb4, 0x6a, 0x2c, 0x10, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x2, 0x2, 0x2b, 0x57, 0x33, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x81, 0x2, 0x40, 0x0, 0x3d, 0x1}}]}}]}}]}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) kernel console output (not intermixed with test programs): 84 [ 920.702616][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.702639][ T5856] usb 2-1: Product: syz [ 920.702654][ T5856] usb 2-1: Manufacturer: syz [ 920.702671][ T5856] usb 2-1: SerialNumber: syz [ 920.743267][ T5856] usb 2-1: config 0 descriptor?? [ 920.746809][T27527] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 920.752090][T27527] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 920.821527][ T5856] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 921.077208][ T5856] usb 2-1: USB disconnect, device number 3 [ 921.328757][T25433] udevd[25433]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory [ 921.602031][T25190] udevd[25190]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.702053][T27595] netlink: 'syz.0.9991': attribute type 12 has an invalid length. [ 921.702146][T27595] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.9991'. [ 922.457847][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 922.650336][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 922.681796][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 922.706145][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 922.706180][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.706203][ T10] usb 2-1: Product: syz [ 922.706219][ T10] usb 2-1: Manufacturer: syz [ 922.706235][ T10] usb 2-1: SerialNumber: syz [ 922.759349][ T10] usb 2-1: config 0 descriptor?? [ 922.766865][T27640] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 922.818994][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 923.105816][ T10] usb 2-1: USB disconnect, device number 4 [ 923.492401][T25162] udevd[25162]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 924.300452][T27733] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.10013'. [ 924.852499][ T5856] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 925.023242][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 925.089844][ T5856] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 925.089878][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.089901][ T5856] usb 1-1: Product: syz [ 925.089917][ T5856] usb 1-1: Manufacturer: syz [ 925.089933][ T5856] usb 1-1: SerialNumber: syz [ 925.145207][ T5856] usb 1-1: config 0 descriptor?? [ 925.367670][T27772] smb3: Unexpected value for 'rdma' [ 925.409798][ T5856] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 925.409822][ T5856] eb aa 00 00 00 00 00 00 [ 925.409905][ T5856] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 925.633691][ T10] usb 1-1: USB disconnect, device number 31 [ 925.671739][ T38] kauditd_printk_skb: 16730 callbacks suppressed [ 925.671759][ T38] audit: type=1400 audit(2000000202.382:521313): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="/" dev="sda1" ino=2 [ 925.671811][ T38] audit: type=1400 audit(2000000202.411:521314): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="/" dev="tmpfs" ino=1 [ 925.671857][ T38] audit: type=1400 audit(2000000202.411:521315): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 925.671905][ T38] audit: type=1400 audit(2000000202.411:521316): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=5207 comm="udevd" name="queue" dev="tmpfs" ino=10856 [ 925.671951][ T38] audit: type=1400 audit(2000000202.411:521317): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5207 comm="udevd" path="/run/udev/queue" dev="tmpfs" ino=10856 [ 925.671998][ T38] audit: type=1400 audit(2000000202.411:521318): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=5207 comm="udevd" name="queue" dev="tmpfs" ino=10856 [ 925.672044][ T38] audit: type=1400 audit(2000000202.411:521319): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="/" dev="sda1" ino=2 [ 925.672090][ T38] audit: type=1400 audit(2000000202.411:521320): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="/" dev="tmpfs" ino=1 [ 925.672136][ T38] audit: type=1400 audit(2000000202.411:521321): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 925.672180][ T38] audit: type=1400 audit(2000000202.411:521322): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=5207 comm="udevd" name="queue" dev="tmpfs" ino=10856 [ 927.435376][T27837] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10053'. [ 927.738970][ T5856] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 927.940128][ T5856] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 927.940164][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.940187][ T5856] usb 3-1: Product: syz [ 927.940203][ T5856] usb 3-1: Manufacturer: syz [ 927.940221][ T5856] usb 3-1: SerialNumber: syz [ 928.002048][ T5856] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 928.139234][ T5923] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 928.902703][T27882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.292713][ T5923] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 930.292954][ T5923] ath9k_htc: Failed to initialize the device [ 931.021242][ T38] kauditd_printk_skb: 7253 callbacks suppressed [ 931.021262][ T38] audit: type=1400 audit(2000000207.424:527844): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5853 comm="syz-executor" name="2032" dev="tmpfs" ino=10210 [ 931.021551][ T38] audit: type=1400 audit(2000000207.424:527845): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5853 comm="syz-executor" name="binderfs" dev="tmpfs" ino=10214 [ 931.021813][ T38] audit: type=1400 audit(2000000207.424:527846): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5853 comm="syz-executor" name="2032" dev="tmpfs" ino=10210 [ 931.102179][ T38] audit: type=1400 audit(2000000207.424:527847): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 931.102242][ T38] audit: type=1400 audit(2000000207.424:527848): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 931.102290][ T38] audit: type=1400 audit(2000000207.424:527849): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="2032" dev="tmpfs" ino=10210 [ 931.102338][ T38] audit: type=1400 audit(2000000207.480:527850): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 931.102388][ T38] audit: type=1400 audit(2000000207.480:527851): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 931.102435][ T38] audit: type=1400 audit(2000000207.480:527852): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="2032" dev="tmpfs" ino=10210 [ 931.102484][ T38] audit: type=1400 audit(2000000207.480:527853): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5853 comm="syz-executor" path="/2032/cgroup.net" dev="tmpfs" ino=10213 [ 931.331532][T27905] openvswitch: netlink: IPv6 tunnel dst address is zero [ 932.480088][T27917] netlink: 'syz.2.10084': attribute type 3 has an invalid length. [ 932.480114][T27917] netlink: 'syz.2.10084': attribute type 1 has an invalid length. [ 932.480129][T27917] netlink: 216 bytes leftover after parsing attributes in process `syz.2.10084'. [ 932.480147][T27917] NCSI netlink: No device for ifindex 33022 [ 932.753357][ T992] usb 3-1: USB disconnect, device number 24 [ 932.786767][ T992] usb 3-1: ath9k_htc: USB layer deinitialized [ 933.265239][T27935] netlink: 'syz.0.10090': attribute type 10 has an invalid length. [ 933.265267][T27935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10090'. [ 933.265313][T27935] bond0: entered promiscuous mode [ 933.265340][T27935] bond0: entered allmulticast mode [ 933.265723][T27935] bridge0: port 1(bond0) entered blocking state [ 933.266749][T27935] bridge0: port 1(bond0) entered disabled state [ 934.271274][T27966] openvswitch: netlink: Actions may not be safe on all matching packets [ 935.176170][T28002] No source specified [ 936.336617][T28050] netlink: 'syz.3.10144': attribute type 1 has an invalid length. [ 936.336644][T28050] netlink: 15 bytes leftover after parsing attributes in process `syz.3.10144'. [ 936.340449][T28049] ubi31: attaching mtd0 [ 936.356846][T28049] ubi31: scanning is finished [ 936.356872][T28049] ubi31: empty MTD device detected [ 936.382897][ T38] kauditd_printk_skb: 7847 callbacks suppressed [ 936.382918][ T38] audit: type=1400 audit(2000000212.438:534966): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28051 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 936.382973][ T38] audit: type=1400 audit(2000000212.438:534967): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28051 comm="syz-executor" name="/" dev="proc" ino=1 [ 936.383020][ T38] audit: type=1400 audit(2000000212.438:534968): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28051 comm="syz-executor" name="/" dev="proc" ino=1 [ 936.383073][ T38] audit: type=1400 audit(2000000212.438:534969): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28051 comm="syz-executor" name="3929" dev="proc" ino=77397 [ 936.383120][ T38] audit: type=1400 audit(2000000212.438:534970): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=28051 comm="syz-executor" name="oom_score_adj" dev="proc" ino=77398 [ 936.383167][ T38] audit: type=1400 audit(2000000212.438:534971): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=28051 comm="syz-executor" path="/proc/3929/oom_score_adj" dev="proc" ino=77398 [ 936.383214][ T38] audit: type=1400 audit(2000000212.438:534972): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28051 comm="syz-executor" name="1951" dev="tmpfs" ino=9801 [ 936.383259][ T38] audit: type=1400 audit(2000000212.438:534973): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28051 comm="syz-executor" name="1951" dev="tmpfs" ino=9801 [ 936.383305][ T38] audit: type=1400 audit(2000000212.438:534974): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=28051 comm="syz-executor" name="1951" dev="tmpfs" ino=9801 [ 936.421894][ T38] audit: type=1400 audit(2000000212.475:534975): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28051 comm="syz.1.10146" name="newroot" dev="tmpfs" ino=2 [ 936.967463][T28049] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 936.967491][T28049] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 936.967509][T28049] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 936.967527][T28049] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 936.967544][T28049] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 936.967563][T28049] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 936.967582][T28049] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3762672332 [ 936.967604][T28049] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 936.970648][T28064] ubi31: background thread "ubi_bgt31d" started, PID 28064 [ 937.714372][ T5991] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 937.914566][ T5991] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.914657][ T5991] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 937.914688][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.914717][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.914740][ T5991] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 937.914769][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 937.914792][ T5991] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 937.993740][ T5991] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 937.993772][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.993794][ T5991] usb 3-1: Product: syz [ 937.993810][ T5991] usb 3-1: Manufacturer: syz [ 937.993826][ T5991] usb 3-1: SerialNumber: syz [ 938.010647][ T5991] usb 3-1: config 0 descriptor?? [ 938.307436][ T5991] usb 3-1: ucan: probing device on interface #0 [ 938.307464][ T5991] usb 3-1: ucan: invalid endpoint configuration [ 938.307481][ T5991] usb 3-1: ucan: probe failed; try to update the device firmware [ 938.353972][T28102] tmpfs: Bad value for 'mpol' [ 938.396610][ T5991] usb 3-1: USB disconnect, device number 25 [ 939.081867][T28133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10177'. [ 939.081895][T28133] netlink: 200 bytes leftover after parsing attributes in process `syz.3.10177'. [ 939.498957][T28144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10183'. [ 939.766982][T28153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.223117][T28169] netlink: 260 bytes leftover after parsing attributes in process `syz.0.10193'. [ 941.316483][T28206] netlink: 'syz.1.10208': attribute type 11 has an invalid length. [ 941.733037][ T38] kauditd_printk_skb: 19264 callbacks suppressed [ 941.733059][ T38] audit: type=1400 audit(2000000217.433:548672): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=28216 comm="rm" path="/lib/libc.so.6" dev="sda1" ino=1112 [ 941.743204][ T38] audit: type=1400 audit(2000000217.442:548673): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=28216 comm="rm" path="/lib/libc.so.6" dev="sda1" ino=1112 [ 941.743262][ T38] audit: type=1400 audit(2000000217.442:548674): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28216 comm="rm" name="/" dev="sda1" ino=2 [ 941.743308][ T38] audit: type=1400 audit(2000000217.442:548675): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28216 comm="rm" name="/" dev="sda1" ino=2 [ 941.743353][ T38] audit: type=1400 audit(2000000217.442:548676): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28216 comm="rm" name="lib" dev="sda1" ino=264 [ 941.743398][ T38] audit: type=1400 audit(2000000217.442:548677): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28216 comm="rm" name="lib" dev="sda1" ino=264 [ 941.743465][ T38] audit: type=1400 audit(2000000217.442:548678): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=28216 comm="rm" name="libpam.so.0.85.1" dev="sda1" ino=1122 [ 941.743674][ T38] audit: type=1400 audit(2000000217.442:548679): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=28216 comm="rm" path="/lib/libpam.so.0.85.1" dev="sda1" ino=1122 [ 941.743722][ T38] audit: type=1400 audit(2000000217.442:548680): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=28216 comm="rm" path="/lib/libpam.so.0.85.1" dev="sda1" ino=1122 [ 941.743769][ T38] audit: type=1400 audit(2000000217.442:548681): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28216 comm="rm" name="/" dev="sda1" ino=2 [ 942.408938][T28238] block nbd2: Attempted send on invalid socket [ 942.408966][T28238] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.409223][T28238] MINIX-fs: unable to read superblock [ 943.083447][T28266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10235'. [ 943.582475][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 943.742902][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 943.749959][ T10] usb 1-1: config index 0 descriptor too short (expected 30482, got 18) [ 943.749990][ T10] usb 1-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 943.750013][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 943.753540][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 943.753570][ T10] usb 1-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 943.753596][ T10] usb 1-1: Product: syz [ 943.753614][ T10] usb 1-1: Manufacturer: syz [ 943.799334][ T10] usb 1-1: config 0 descriptor?? [ 943.832549][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 943.858533][ T10] usb 1-1: Detected FT2232C/D [ 943.867507][T28294] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10248'. [ 943.867782][T28294] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10248'. [ 943.867803][T28294] netlink: 19 bytes leftover after parsing attributes in process `syz.4.10248'. [ 944.299329][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 944.319804][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 944.334335][ T10] usb 1-1: USB disconnect, device number 32 [ 944.362964][ T5856] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 944.367007][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 944.377507][ T10] ftdi_sio 1-1:0.0: device disconnected [ 944.528310][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 944.550182][ T5856] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 944.550214][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.550236][ T5856] usb 5-1: Product: syz [ 944.550252][ T5856] usb 5-1: Manufacturer: syz [ 944.550268][ T5856] usb 5-1: SerialNumber: syz [ 944.611115][ T5856] usb 5-1: config 0 descriptor?? [ 944.615303][ T5856] hub 5-1:0.0: bad descriptor, ignoring hub [ 944.615346][ T5856] hub 5-1:0.0: probe with driver hub failed with error -5 [ 944.646819][ T5856] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input77 [ 945.229925][T26819] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 945.402884][T26819] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 945.402914][T26819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.402936][T26819] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 945.402991][T26819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.403019][T26819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.420440][T26819] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 945.420474][T26819] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 945.420496][T26819] usb 3-1: Product: syz [ 945.420512][T26819] usb 3-1: Manufacturer: syz [ 945.453766][ T992] usb 5-1: USB disconnect, device number 37 [ 945.530467][T26819] cdc_wdm 3-1:1.0: skipping garbage [ 945.530489][T26819] cdc_wdm 3-1:1.0: skipping garbage [ 945.571415][T26819] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 945.571451][T26819] cdc_wdm 3-1:1.0: Unknown control protocol [ 945.810611][T28339] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 945.817930][T26819] usb 3-1: USB disconnect, device number 26 [ 946.233946][T28391] netlink: 'syz.0.10269': attribute type 2 has an invalid length. [ 946.370898][ C1] sd 0:0:1:0: [sda] tag#2470 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 946.370979][ C1] sd 0:0:1:0: [sda] tag#2470 CDB: Read(6) 08 00 0c 6a 08 48 [ 946.497120][T28400] 9p: Unknown access argument `: -22 [ 946.626364][T28406] blktrace: Concurrent blktraces are not allowed on sg0 [ 946.822064][T28414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10279'. [ 946.822222][T28414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10279'. [ 947.088992][T28422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10284'. [ 947.109510][ T38] kauditd_printk_skb: 15462 callbacks suppressed [ 947.109531][ T38] audit: type=1400 audit(2000000222.465:561180): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 947.109611][ T38] audit: type=1400 audit(2000000222.465:561181): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 947.109659][ T38] audit: type=1400 audit(2000000222.465:561182): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz-executor" name="1982" dev="tmpfs" ino=9957 [ 947.109705][ T38] audit: type=1400 audit(2000000222.465:561183): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=28424 comm="syz-executor" opid=28424 ocomm="syz-executor" [ 947.109750][ T38] audit: type=1400 audit(2000000222.465:561184): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz-executor" name="1982" dev="tmpfs" ino=9957 [ 947.109796][ T38] audit: type=1400 audit(2000000222.465:561185): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz-executor" name="1982" dev="tmpfs" ino=9957 [ 947.109842][ T38] audit: type=1400 audit(2000000222.465:561186): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=28424 comm="syz-executor" name="1982" dev="tmpfs" ino=9957 [ 947.109888][ T38] audit: type=1400 audit(2000000222.465:561187): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz-executor" name="1982" dev="tmpfs" ino=9957 [ 947.109934][ T38] audit: type=1400 audit(2000000222.465:561188): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz-executor" name="1982" dev="tmpfs" ino=9957 [ 947.109981][ T38] audit: type=1400 audit(2000000222.465:561189): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=28424 comm="syz-executor" name="1982" dev="tmpfs" ino=9957 [ 947.124679][T28423] netlink: 'syz.3.10283': attribute type 1 has an invalid length. [ 947.124709][T28423] netlink: 228 bytes leftover after parsing attributes in process `syz.3.10283'. [ 947.397039][T28428] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.10285'. [ 947.397071][T28428] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.10285'. [ 947.506374][T28434] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 948.543713][T28478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10311'. [ 951.052904][T28552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10346'. [ 951.408342][T28558] [U] ^C [ 951.674140][T28570] netlink: 'syz.4.10354': attribute type 1 has an invalid length. [ 951.674163][T28570] netlink: 'syz.4.10354': attribute type 2 has an invalid length. [ 952.408208][T28596] netlink: 'syz.2.10366': attribute type 21 has an invalid length. [ 952.408287][T28596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10366'. [ 952.466459][ T38] kauditd_printk_skb: 9364 callbacks suppressed [ 952.466479][ T38] audit: type=1400 audit(2000000227.442:569901): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5847 comm="syz-executor" name="cgroup" dev="tmpfs" ino=10506 [ 952.466533][ T38] audit: type=1400 audit(2000000227.470:569937): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5847 comm="syz-executor" name="2092" dev="tmpfs" ino=10505 [ 952.466579][ T38] audit: type=1400 audit(2000000227.470:569938): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5847 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 952.466625][ T38] audit: type=1400 audit(2000000227.470:569939): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5847 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 952.466670][ T38] audit: type=1400 audit(2000000227.470:569940): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5847 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 952.466716][ T38] audit: type=1400 audit(2000000227.470:569941): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=5847 comm="syz-executor" name="2092" dev="tmpfs" ino=10505 [ 952.466761][ T38] audit: type=1400 audit(2000000227.470:569942): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=5847 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 952.466806][ T38] audit: type=1400 audit(2000000227.470:569943): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5847 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 952.466852][ T38] audit: type=1400 audit(2000000227.470:569944): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5847 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 952.466899][ T38] audit: type=1400 audit(2000000227.470:569945): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5847 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 953.781462][T28668] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10385'. [ 954.482663][T28690] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 956.325946][T28759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10426'. [ 956.326023][T28759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10426'. [ 956.528972][ T5991] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 956.696179][ T5991] usb 5-1: unable to get BOS descriptor or descriptor too short [ 956.700754][ T5991] usb 5-1: not running at top speed; connect to a high speed hub [ 956.720242][ T5991] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 956.720275][ T5991] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 956.720300][ T5991] usb 5-1: config 17 has no interface number 0 [ 956.720353][ T5991] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 184, setting to 64 [ 956.720382][ T5991] usb 5-1: config 17 interface 8 has no altsetting 0 [ 956.761239][ T5991] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 956.761278][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.761302][ T5991] usb 5-1: Product: syz [ 956.761320][ T5991] usb 5-1: Manufacturer: syz [ 956.761339][ T5991] usb 5-1: SerialNumber: syz [ 957.114546][ T5991] usb 5-1: selecting invalid altsetting 0 [ 957.275321][ T5991] usb 5-1: USB disconnect, device number 38 [ 957.595621][T28758] udevd[28758]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 957.780438][T28801] cgroup: No subsys list or none specified [ 957.822801][ T38] kauditd_printk_skb: 8589 callbacks suppressed [ 957.822822][ T38] audit: type=1400 audit(2000000232.484:578181): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5847 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 957.822874][ T38] audit: type=1400 audit(2000000232.484:578182): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5847 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 957.822921][ T38] audit: type=1400 audit(2000000232.484:578184): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5847 comm="syz-executor" name="2105" dev="tmpfs" ino=10570 [ 957.823002][ T38] audit: type=1400 audit(2000000232.484:578183): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1187 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.250 dest=41038 netif=eth0 [ 957.823058][ T38] audit: type=1400 audit(2000000232.493:578185): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1187 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.250 dest=41038 netif=eth0 [ 957.824264][ T38] audit: type=1400 audit(2000000232.493:578186): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1187 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.250 dest=41038 netif=eth0 [ 957.824320][ T38] audit: type=1400 audit(2000000232.493:578187): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5847 comm="syz-executor" path="/2105" dev="tmpfs" ino=10570 [ 957.824367][ T38] audit: type=1400 audit(2000000232.493:578189): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1187 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.250 dest=41038 netif=eth0 [ 957.824416][ T38] audit: type=1400 audit(2000000232.493:578188): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5847 comm="syz-executor" path="/2105" dev="tmpfs" ino=10570 [ 957.830602][ T38] audit: type=1400 audit(2000000232.493:578191): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28802 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 958.474735][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10444'. [ 958.474767][T28813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10444'. [ 958.987652][T26819] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 959.164406][T26819] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 959.164441][T26819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.164463][T26819] usb 1-1: Product: syz [ 959.164480][T26819] usb 1-1: Manufacturer: syz [ 959.164496][T26819] usb 1-1: SerialNumber: syz [ 959.225869][T26819] usb 1-1: config 0 descriptor?? [ 959.232378][T26819] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 959.666443][T26819] gspca_sunplus: reg_w_riv err -71 [ 959.666565][T26819] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 959.669858][T26819] usb 1-1: USB disconnect, device number 33 [ 960.569942][T26819] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 960.745081][T26819] usb 2-1: Using ep0 maxpacket: 16 [ 960.786084][T26819] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 960.786117][T26819] usb 2-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 960.786140][T26819] usb 2-1: Product: syz [ 960.786164][T26819] usb 2-1: SerialNumber: syz [ 960.824033][T26819] usb 2-1: config 0 descriptor?? [ 960.844444][T26819] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 960.844485][T26819] usb 2-1: No valid video chain found. [ 961.080579][T26819] usb 2-1: USB disconnect, device number 5 [ 961.548083][T28926] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2 [ 962.710305][T28961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10500'. [ 962.779395][T28963] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 962.921802][T28972] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10506'. [ 963.180820][ T38] kauditd_printk_skb: 10092 callbacks suppressed [ 963.180840][ T38] audit: type=1400 audit(2000000237.507:587260): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="/" dev="sda1" ino=2 [ 963.180889][ T38] audit: type=1400 audit(2000000237.507:587261): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="/" dev="sysfs" ino=1 [ 963.180934][ T38] audit: type=1400 audit(2000000237.507:587262): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="devices" dev="sysfs" ino=7 [ 963.180981][ T38] audit: type=1400 audit(2000000237.507:587263): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="platform" dev="sysfs" ino=36 [ 963.181027][ T38] audit: type=1400 audit(2000000237.507:587264): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="dummy_udc.4" dev="sysfs" ino=30866 [ 963.181075][ T38] audit: type=1400 audit(2000000237.507:587265): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="udc" dev="sysfs" ino=30880 [ 963.181172][ T38] audit: type=1400 audit(2000000237.507:587266): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="dummy_udc.4" dev="sysfs" ino=30881 [ 963.181219][ T38] audit: type=1400 audit(2000000237.507:587267): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5207 comm="udevd" name="uevent" dev="sysfs" ino=30882 [ 963.181265][ T38] audit: type=1400 audit(2000000237.507:587268): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5207 comm="udevd" path="/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/uevent" dev="sysfs" ino=30882 [ 963.181453][ T38] audit: type=1400 audit(2000000237.507:587269): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=28979 comm="syz.4.10508" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 963.338921][ T5991] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 963.434925][ T992] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 963.577910][ T5991] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.577943][ T5991] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 963.578037][ T5991] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 963.595327][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 963.616802][ T992] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 963.616832][ T992] usb 5-1: config 179 has no interface number 0 [ 963.616887][ T992] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 963.616917][ T992] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 963.616949][ T992] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 963.616978][ T992] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 963.617006][ T992] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 963.617041][ T992] usb 5-1: config 179 interface 65 has no altsetting 0 [ 963.617089][ T992] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 963.617115][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.681020][ T5991] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 963.681054][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.681076][ T5991] usb 3-1: Product: syz [ 963.681092][ T5991] usb 3-1: Manufacturer: syz [ 963.681107][ T5991] usb 3-1: SerialNumber: syz [ 963.767040][ T5991] usb 3-1: config 0 descriptor?? [ 963.775761][ T5991] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 963.775797][ T5991] usb 3-1: No valid video chain found. [ 963.831357][ T992] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input78 [ 964.040807][ T992] usb 5-1: USB disconnect, device number 39 [ 964.056007][ T5991] usb 3-1: USB disconnect, device number 27 [ 965.033270][T29056] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10527'. [ 965.631549][T29076] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 965.631587][T29076] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 965.631824][T29076] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 966.053310][T29093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10544'. [ 966.214535][ T5991] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 966.392094][ T5991] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 966.392128][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.392150][ T5991] usb 1-1: Product: syz [ 966.392166][ T5991] usb 1-1: Manufacturer: syz [ 966.392182][ T5991] usb 1-1: SerialNumber: syz [ 966.453568][ T5991] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 966.496305][T29112] deleting an unspecified loop device is not supported. [ 966.539106][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 966.560981][T29110] netlink: 'syz.4.10552': attribute type 4 has an invalid length. [ 966.561004][T29110] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10552'. [ 966.727829][T29110] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 967.419017][T29127] netlink: 'syz.2.10559': attribute type 9 has an invalid length. [ 967.989900][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 967.990113][ T10] ath9k_htc: Failed to initialize the device [ 968.543146][ T38] kauditd_printk_skb: 11770 callbacks suppressed [ 968.543168][ T38] audit: type=1400 audit(2000000242.511:596010): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 968.543219][ T38] audit: type=1400 audit(2000000242.511:596011): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 968.543266][ T38] audit: type=1400 audit(2000000242.511:596012): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 968.543313][ T38] audit: type=1400 audit(2000000242.511:596013): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 968.543358][ T38] audit: type=1400 audit(2000000242.511:596014): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5853 comm="syz-executor" name="2131" dev="tmpfs" ino=10706 [ 968.543405][ T38] audit: type=1400 audit(2000000242.511:596015): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5853 comm="syz-executor" path="/2131" dev="tmpfs" ino=10706 [ 968.543450][ T38] audit: type=1400 audit(2000000242.511:596016): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5853 comm="syz-executor" path="/2131" dev="tmpfs" ino=10706 [ 968.543495][ T38] audit: type=1400 audit(2000000242.511:596017): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 968.543541][ T38] audit: type=1400 audit(2000000242.511:596018): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 968.543595][ T38] audit: type=1400 audit(2000000242.511:596019): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="2131" dev="tmpfs" ino=10706 [ 969.944893][T29167] netlink: 'syz.1.10579': attribute type 5 has an invalid length. [ 969.944922][T29167] netlink: 'syz.1.10579': attribute type 7 has an invalid length. [ 970.070207][T29171] program syz.2.10580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 970.954273][T29179] bond5: entered allmulticast mode [ 970.954926][T29179] 8021q: adding VLAN 0 to HW filter on device bond5 [ 973.061586][ T5924] usb 1-1: USB disconnect, device number 34 [ 973.102131][ T5924] usb 1-1: ath9k_htc: USB layer deinitialized [ 973.644747][ T5924] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 973.808665][ T5924] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 973.808726][ T5924] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 973.808775][ T5924] usb 3-1: config 0 interface 0 altsetting 191 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 973.808804][ T5924] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 973.808833][ T5924] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x8F has invalid wMaxPacketSize 0 [ 973.808857][ T5924] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 973.808887][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 973.840974][ T5924] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 973.841013][ T5924] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 973.841039][ T5924] usb 3-1: Product: syz [ 973.841056][ T5924] usb 3-1: Manufacturer: syz [ 973.841073][ T5924] usb 3-1: SerialNumber: syz [ 973.885578][ T5924] usb 3-1: config 0 descriptor?? [ 973.891106][ T38] kauditd_printk_skb: 4473 callbacks suppressed [ 973.891128][ T38] audit: type=1400 audit(2000000247.525:600469): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=29253 comm="syz.2.10601" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 973.891815][ T38] audit: type=1400 audit(2000000247.525:600470): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=29253 comm="syz.2.10601" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 973.892182][ T38] audit: type=1400 audit(2000000247.525:600471): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=29253 comm="syz.2.10601" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 973.894312][ T38] audit: type=1400 audit(2000000247.525:600472): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="/" dev="sda1" ino=2 [ 973.894368][ T38] audit: type=1400 audit(2000000247.525:600473): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="etc" dev="sda1" ino=116 [ 973.894420][ T38] audit: type=1400 audit(2000000247.525:600474): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="udev" dev="sda1" ino=259 [ 973.894469][ T38] audit: type=1400 audit(2000000247.525:600475): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5207 comm="udevd" path="/etc/udev/rules.d" dev="sda1" ino=261 [ 973.894521][ T38] audit: type=1400 audit(2000000247.525:600476): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="/" dev="sda1" ino=2 [ 973.894569][ T38] audit: type=1400 audit(2000000247.525:600477): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="lib" dev="sda1" ino=264 [ 973.894618][ T38] audit: type=1400 audit(2000000247.525:600478): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="udev" dev="sda1" ino=1222 [ 973.966653][ T5924] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 973.977372][ T5924] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 974.194821][ T992] usb 3-1: USB disconnect, device number 28 [ 974.212602][ T992] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 974.900788][T29309] netlink: 180 bytes leftover after parsing attributes in process `syz.1.10619'. [ 975.753799][T29342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10636'. [ 977.474484][T29410] QAT: Invalid ioctl 1073935638 [ 978.219616][T29439] netlink: 'syz.0.10681': attribute type 2 has an invalid length. [ 978.506620][T29451] netlink: 'syz.0.10684': attribute type 2 has an invalid length. [ 978.520185][ T992] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 978.703713][ T992] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 978.709813][ T992] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 978.709845][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.709869][ T992] usb 5-1: Product: syz [ 978.709886][ T992] usb 5-1: Manufacturer: syz [ 978.709902][ T992] usb 5-1: SerialNumber: syz [ 978.755864][ T992] usb 5-1: config 0 descriptor?? [ 978.849242][T29460] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 978.849269][T29460] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 979.011355][ T992] usb 5-1: USB disconnect, device number 40 [ 979.156364][T29445] udevd[29445]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such device [ 979.246446][ T38] kauditd_printk_skb: 11785 callbacks suppressed [ 979.246467][ T38] audit: type=1400 audit(2000000252.520:610608): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29482 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 979.246520][ T38] audit: type=1400 audit(2000000252.520:610609): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29482 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 979.246568][ T38] audit: type=1400 audit(2000000252.520:610610): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29482 comm="syz-executor" name="2063" dev="tmpfs" ino=10362 [ 979.246616][ T38] audit: type=1400 audit(2000000252.520:610611): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=29482 comm="syz-executor" opid=29482 ocomm="syz-executor" [ 979.246663][ T38] audit: type=1400 audit(2000000252.520:610612): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29482 comm="syz-executor" name="2063" dev="tmpfs" ino=10362 [ 979.246710][ T38] audit: type=1400 audit(2000000252.520:610613): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29482 comm="syz-executor" name="2063" dev="tmpfs" ino=10362 [ 979.246763][ T38] audit: type=1400 audit(2000000252.520:610614): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=29482 comm="syz-executor" name="2063" dev="tmpfs" ino=10362 [ 979.246814][ T38] audit: type=1400 audit(2000000252.520:610615): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29482 comm="syz-executor" name="2063" dev="tmpfs" ino=10362 [ 979.246863][ T38] audit: type=1400 audit(2000000252.520:610616): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29482 comm="syz-executor" name="2063" dev="tmpfs" ino=10362 [ 979.246910][ T38] audit: type=1400 audit(2000000252.520:610617): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=29482 comm="syz-executor" name="2063" dev="tmpfs" ino=10362 [ 979.973424][ T5924] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 980.134847][T29508] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10701'. [ 980.162968][ T5924] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 980.163003][ T5924] usb 1-1: config 0 has no interface number 0 [ 980.163059][ T5924] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 980.163092][ T5924] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 980.163141][ T5924] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 980.163170][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.215465][ T5924] usb 1-1: config 0 descriptor?? [ 980.271614][ T5924] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 980.480393][ T992] usb 1-1: USB disconnect, device number 35 [ 980.585893][T29525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10703'. [ 980.620686][T29527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10704'. [ 980.885905][T29531] Device name not specified. [ 980.885905][T29531] [ 981.041658][T29537] __vm_enough_memory: pid: 29537, comm: syz.1.10709, bytes: 4503599627366400 not enough memory for the allocation [ 981.718908][T29563] netlink: 'syz.3.10720': attribute type 1 has an invalid length. [ 982.066955][T29580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10726'. [ 982.066986][T29580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10726'. [ 982.067007][T29580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10726'. [ 982.320852][T29587] netlink: 800 bytes leftover after parsing attributes in process `syz.3.10728'. [ 982.320879][T29587] netlink: 1301 bytes leftover after parsing attributes in process `syz.3.10728'. [ 982.752902][ T992] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 982.913273][ T992] usb 4-1: Using ep0 maxpacket: 8 [ 982.929709][ T992] usb 4-1: config index 0 descriptor too short (expected 1821, got 853) [ 982.929740][ T992] usb 4-1: config 0 has an invalid interface number: 103 but max is 2 [ 982.929764][ T992] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.929786][ T992] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 982.929809][ T992] usb 4-1: config 0 has no interface number 1 [ 982.929879][ T992] usb 4-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 982.929910][ T992] usb 4-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 982.929953][ T992] usb 4-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 982.929979][ T992] usb 4-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 982.930003][ T992] usb 4-1: config 0 interface 103 has no altsetting 0 [ 982.941764][ T992] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 982.941796][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.941818][ T992] usb 4-1: Product: syz [ 982.941836][ T992] usb 4-1: Manufacturer: syz [ 982.941853][ T992] usb 4-1: SerialNumber: syz [ 983.066208][ T992] usb 4-1: config 0 descriptor?? [ 983.298142][ T5991] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 983.397732][ T992] videodev: could not get a free minor [ 983.397748][ T992] dsbr100 4-1:0.0: couldn't register video device [ 983.401618][ T992] dsbr100 4-1:0.0: probe with driver dsbr100 failed with error -23 [ 983.428251][ T992] usb 4-1: USB disconnect, device number 20 [ 983.467804][ T5991] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 983.467832][ T5991] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 983.467852][ T5991] usb 3-1: config 220 has no interface number 2 [ 983.467935][ T5991] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 983.467963][ T5991] usb 3-1: config 220 interface 0 has no altsetting 0 [ 983.467983][ T5991] usb 3-1: config 220 interface 76 has no altsetting 0 [ 983.468002][ T5991] usb 3-1: config 220 interface 1 has no altsetting 0 [ 983.518742][ T5991] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 983.518783][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.518807][ T5991] usb 3-1: Product: syz [ 983.518826][ T5991] usb 3-1: Manufacturer: syz [ 983.518844][ T5991] usb 3-1: SerialNumber: syz [ 983.838391][ T5991] usb 3-1: selecting invalid altsetting 0 [ 983.864234][ T5991] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 983.864269][ T5991] usb 3-1: No valid video chain found. [ 983.963511][ T5991] usb 3-1: selecting invalid altsetting 0 [ 983.963557][ T5991] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 983.966072][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.966093][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.034967][ T5991] usb 3-1: USB disconnect, device number 29 [ 984.045952][T29655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.602309][ T38] kauditd_printk_skb: 11275 callbacks suppressed [ 984.602330][ T38] audit: type=1400 audit(2000000257.534:620843): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="/" dev="sda1" ino=2 [ 984.602380][ T38] audit: type=1400 audit(2000000257.534:620844): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="/" dev="tmpfs" ino=1 [ 984.602426][ T38] audit: type=1400 audit(2000000257.534:620845): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5207 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 984.602472][ T38] audit: type=1400 audit(2000000257.534:620846): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=5207 comm="udevd" name="queue" dev="tmpfs" ino=10983 [ 984.602519][ T38] audit: type=1400 audit(2000000257.534:620847): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5207 comm="udevd" path="/run/udev/queue" dev="tmpfs" ino=10983 [ 984.602565][ T38] audit: type=1400 audit(2000000257.534:620848): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=5207 comm="udevd" name="queue" dev="tmpfs" ino=10983 [ 984.602611][ T38] audit: type=1400 audit(2000000257.534:620849): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29468 comm="udevd" name="/" dev="sda1" ino=2 [ 984.602655][ T38] audit: type=1400 audit(2000000257.534:620850): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29468 comm="udevd" name="/" dev="sysfs" ino=1 [ 984.602699][ T38] audit: type=1400 audit(2000000257.534:620851): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29468 comm="udevd" name="devices" dev="sysfs" ino=7 [ 984.602745][ T38] audit: type=1400 audit(2000000257.534:620852): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29468 comm="udevd" name="platform" dev="sysfs" ino=36 [ 985.485884][T29701] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10766'. [ 985.485914][T29701] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 986.035007][ T5991] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 986.197390][ T5991] usb 2-1: Using ep0 maxpacket: 8 [ 986.202276][ T5991] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 986.202312][ T5991] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 986.202341][ T5991] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 986.202370][ T5991] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 986.228333][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 986.275355][ T5991] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 986.275389][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.275411][ T5991] usb 2-1: Product: syz [ 986.275427][ T5991] usb 2-1: Manufacturer: syz [ 986.275444][ T5991] usb 2-1: SerialNumber: syz [ 986.340848][T29713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 986.354034][ T5991] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 986.366945][ T5991] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 986.367041][ T5991] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 986.614664][ T5991] usb 2-1: USB disconnect, device number 6 [ 987.084877][T29765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10792'. [ 987.907539][T29795] netlink: 320 bytes leftover after parsing attributes in process `syz.2.10807'. [ 988.609502][T29821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10820'. [ 989.487942][ T992] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 989.570985][T29863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10838'. [ 989.604516][T29864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10840'. [ 989.648409][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 989.667154][ T992] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 989.667217][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 989.667250][ T992] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 989.667277][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 989.667306][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 989.722771][ T992] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 989.722837][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 989.722867][ T992] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 989.722895][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 989.722924][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 989.778264][ T992] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 989.778328][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 989.778366][ T992] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 989.778393][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 989.778421][ T992] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 989.841725][ T992] usb 2-1: string descriptor 0 read error: -22 [ 989.841885][ T992] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 989.841913][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.963540][ T5207] audit_log_start: 11745 callbacks suppressed [ 989.963561][ T5207] audit: audit_backlog=66 > audit_backlog_limit=64 [ 989.963576][ T5207] audit: audit_lost=40022 audit_rate_limit=0 audit_backlog_limit=64 [ 989.963592][ T5207] audit: backlog limit exceeded [ 989.963632][ T5207] audit: audit_backlog=66 > audit_backlog_limit=64 [ 989.963646][ T5207] audit: audit_lost=40023 audit_rate_limit=0 audit_backlog_limit=64 [ 989.963662][ T5207] audit: backlog limit exceeded [ 989.963688][ T5207] audit: audit_backlog=66 > audit_backlog_limit=64 [ 989.963701][ T5207] audit: audit_lost=40024 audit_rate_limit=0 audit_backlog_limit=64 [ 989.963716][ T5207] audit: backlog limit exceeded [ 989.963744][ T5207] audit: audit_backlog=66 > audit_backlog_limit=64 [ 990.045380][ T992] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 990.140299][ T5991] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 990.257715][ T992] usb 2-1: USB disconnect, device number 7 [ 990.312458][ T5991] usb 3-1: Using ep0 maxpacket: 8 [ 990.358228][ T5991] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.358304][ T5991] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 990.358349][ T5991] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 990.416897][ T5991] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 990.416931][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.416954][ T5991] usb 3-1: Product: syz [ 990.416971][ T5991] usb 3-1: Manufacturer: syz [ 990.416988][ T5991] usb 3-1: SerialNumber: syz [ 990.520803][ T5991] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 990.520854][ T5991] cdc_ncm 3-1:1.0: bind() failure [ 990.746339][ T5991] cdc_mbim 3-1:1.1: CDC Union missing and no IAD found [ 990.746391][ T5991] cdc_mbim 3-1:1.1: bind() failure [ 990.808527][T29904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.986604][ T5991] usb 3-1: USB disconnect, device number 30 [ 991.406767][T29927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10858'. [ 991.823665][T29931] netlink: set zone limit has 4 unknown bytes [ 992.236158][T29952] netlink: 'syz.2.10868': attribute type 10 has an invalid length. [ 992.236203][T29952] $Hÿ: left promiscuous mode [ 992.269847][T29952] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 992.273312][T29952] $Hÿ: entered promiscuous mode [ 992.273510][T29952] $Hÿ: entered allmulticast mode [ 992.277245][T29952] team0: Port device $Hÿ added [ 992.563125][T29964] overlay: Unknown parameter '\8âvn&Û O½~à7*«' [ 993.432827][T26819] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 993.507078][T30000] : entered promiscuous mode [ 993.593315][T26819] usb 2-1: Using ep0 maxpacket: 32 [ 993.601012][T26819] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 993.601041][T26819] usb 2-1: config 0 has no interface number 0 [ 993.601097][T26819] usb 2-1: config 0 interface 184 has no altsetting 0 [ 993.636030][T26819] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 993.636063][T26819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.636085][T26819] usb 2-1: Product: syz [ 993.636101][T26819] usb 2-1: Manufacturer: syz [ 993.636117][T26819] usb 2-1: SerialNumber: syz [ 993.683359][T26819] usb 2-1: config 0 descriptor?? [ 993.688726][T26819] smsc75xx v1.0.0 [ 993.931216][T26819] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 993.931512][T26819] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 994.007497][T26819] usb 2-1: USB disconnect, device number 8 [ 994.085759][T29468] udevd[29468]: setting mode of /dev/bus/usb/002/008 to 020664 failed: No such file or directory [ 994.086528][T29468] udevd[29468]: setting owner of /dev/bus/usb/002/008 to uid=0, gid=0 failed: No such file or directory [ 994.151591][T30028] netlink: 'syz.2.10900': attribute type 21 has an invalid length. [ 994.151669][T30028] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10900'. [ 994.787151][T30049] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10908'. [ 995.004585][ T5991] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 995.164767][ T5991] usb 3-1: Using ep0 maxpacket: 8 [ 995.171868][ T5991] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 995.171900][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.171922][ T5991] usb 3-1: Product: syz [ 995.171938][ T5991] usb 3-1: Manufacturer: syz [ 995.171953][ T5991] usb 3-1: SerialNumber: syz [ 995.205100][ T5991] usb 3-1: config 0 descriptor?? [ 995.249504][ T5991] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 995.315537][ T38] kauditd_printk_skb: 11553 callbacks suppressed [ 995.315664][ T38] audit: type=1400 audit(2000000267.561:641317): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5849 comm="syz-executor" name="2258" dev="tmpfs" ino=11333 [ 995.315724][ T38] audit: type=1400 audit(2000000267.561:641318): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29468 comm="udevd" name="platform" dev="sysfs" ino=36 [ 995.316728][ T38] audit: type=1400 audit(2000000267.561:641320): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5852 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 995.317602][ T38] audit: type=1400 audit(2000000267.561:641319): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5842 comm="syz-executor" name="2143" dev="tmpfs" ino=10764 [ 995.317654][ T38] audit: type=1400 audit(2000000267.561:641322): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29468 comm="udevd" name="dummy_hcd.2" dev="sysfs" ino=26016 [ 995.318958][ T38] audit: type=1400 audit(2000000267.561:641321): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5847 comm="syz-executor" name="2210" dev="tmpfs" ino=11097 [ 995.319014][ T38] audit: type=1400 audit(2000000267.561:641323): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5852 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 995.320175][ T38] audit: type=1400 audit(2000000267.561:641326): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5847 comm="syz-executor" name="cgroup.net" dev="tmpfs" ino=11100 [ 995.320224][ T38] audit: type=1400 audit(2000000267.561:641327): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1187 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.250 dest=41038 netif=eth0 [ 995.321215][ T38] audit: type=1400 audit(2000000267.561:641324): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29468 comm="udevd" name="usb3" dev="sysfs" ino=26045 [ 995.635236][ T5991] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 995.673711][ T5991] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 995.702798][ T5991] usb 3-1: USB disconnect, device number 31 [ 996.341012][T26819] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 996.523655][T26819] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 996.523719][T26819] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 996.523750][T26819] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 996.523776][T26819] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 996.523823][T26819] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 996.523850][T26819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.615066][T26819] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 996.616159][T26819] usb 2-1: invalid MIDI out EP 0 [ 996.774268][T30126] trusted_key: encrypted_key: keylen parameter is missing [ 996.900968][T26819] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 996.927443][T26819] usb 2-1: USB disconnect, device number 9 [ 997.148221][T30146] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 997.148254][T30146] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 997.148266][T30146] overlayfs: missing 'lowerdir' [ 997.201541][T29470] udevd[29470]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 997.204635][T30150] netlink: 'syz.3.10939': attribute type 29 has an invalid length. [ 997.597521][T30157] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 998.333870][T30184] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10952'. [ 998.718447][T30200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10961'. [ 999.206171][T30216] netlink: 'syz.3.10969': attribute type 10 has an invalid length. [ 999.211563][T30216] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 999.430305][ T5991] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 999.547887][T26819] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 999.612014][ T5991] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 999.612049][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.612070][ T5991] usb 5-1: Product: syz [ 999.612086][ T5991] usb 5-1: Manufacturer: syz [ 999.612103][ T5991] usb 5-1: SerialNumber: syz [ 999.711033][ T5991] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 999.744090][T26819] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 999.744122][T26819] usb 2-1: config 0 has no interface number 0 [ 999.744172][T26819] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 999.744197][T26819] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 999.744227][T26819] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 999.744255][T26819] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 999.744283][T26819] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 999.744322][T26819] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 999.744369][T26819] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 999.744394][T26819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.854184][T26819] usb 2-1: config 0 descriptor?? [ 999.865282][T30223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 999.868036][T30223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 999.913985][T26819] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1000.000668][ T5991] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1000.153669][T26819] usb 2-1: USB disconnect, device number 10 [ 1000.217064][T26819] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1000.504482][T26819] usb 5-1: USB disconnect, device number 41 [ 1000.638224][T30271] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10983'. [ 1000.670506][ T38] kauditd_printk_skb: 13386 callbacks suppressed [ 1000.670527][ T38] audit: type=1400 audit(2000000272.565:652310): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1000.670579][ T38] audit: type=1400 audit(2000000272.565:652311): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1000.670626][ T38] audit: type=1400 audit(2000000272.565:652312): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1000.670670][ T38] audit: type=1400 audit(2000000272.565:652313): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1000.670716][ T38] audit: type=1400 audit(2000000272.565:652314): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5853 comm="syz-executor" name="2209" dev="tmpfs" ino=11098 [ 1000.670763][ T38] audit: type=1400 audit(2000000272.565:652315): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5853 comm="syz-executor" path="/2209" dev="tmpfs" ino=11098 [ 1000.670849][ T38] audit: type=1400 audit(2000000272.565:652316): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5853 comm="syz-executor" path="/2209" dev="tmpfs" ino=11098 [ 1000.670895][ T38] audit: type=1400 audit(2000000272.565:652317): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1000.670940][ T38] audit: type=1400 audit(2000000272.565:652318): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1000.670985][ T38] audit: type=1400 audit(2000000272.565:652319): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5853 comm="syz-executor" name="2209" dev="tmpfs" ino=11098 [ 1000.850361][T30277] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10986'. [ 1001.271418][ T5991] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1001.282414][ T5991] ath9k_htc: Failed to initialize the device [ 1001.313239][T26819] usb 5-1: ath9k_htc: USB layer deinitialized [ 1002.017876][T30321] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1003.950023][T30404] netlink: 'syz.3.11043': attribute type 9 has an invalid length. [ 1003.995181][ T5991] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1004.161150][ T5991] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 1004.170757][ T5991] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1004.170794][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.170821][ T5991] usb 1-1: Product: syz [ 1004.170839][ T5991] usb 1-1: Manufacturer: syz [ 1004.170856][ T5991] usb 1-1: SerialNumber: syz [ 1004.210323][ T5991] usb 1-1: config 0 descriptor?? [ 1004.230318][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1004.425159][ T10] usb 3-1: config 6 has an invalid interface number: 57 but max is 0 [ 1004.425190][ T10] usb 3-1: config 6 has no interface number 0 [ 1004.425299][ T10] usb 3-1: config 6 interface 57 has no altsetting 0 [ 1004.454952][ T10] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 1004.454984][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.455005][ T10] usb 3-1: Product: syz [ 1004.455020][ T10] usb 3-1: Manufacturer: syz [ 1004.455036][ T10] usb 3-1: SerialNumber: syz [ 1004.464596][ T5991] powermate: unknown product id 0240 [ 1004.564370][ T5959] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1004.648259][ T5991] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input79 [ 1004.733540][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.733728][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.733755][ T5959] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1004.733802][ T5959] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1004.733963][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.738920][ C0] powermate: config urb returned -71 [ 1004.739139][ C0] powermate: config urb returned -71 [ 1004.739349][ C0] powermate: config urb returned -71 [ 1004.739581][ C0] powermate: config urb returned -71 [ 1004.983350][ T10] usb-storage 3-1:6.57: USB Mass Storage device detected [ 1004.991467][ T5959] usb 2-1: config 0 descriptor?? [ 1005.115608][ T5991] usb 1-1: USB disconnect, device number 36 [ 1005.115706][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1005.151782][ T5959] hub 2-1:0.0: USB hub found [ 1005.294414][ T5959] hub 2-1:0.0: 14 ports detected [ 1005.295134][ T5959] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1005.302330][ T10] usb 3-1: USB disconnect, device number 32 [ 1005.499020][ T5959] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1005.499057][ T5959] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1005.579358][ T5959] usb 2-1: USB disconnect, device number 11 [ 1006.026331][ T38] kauditd_printk_skb: 12719 callbacks suppressed [ 1006.026353][ T38] audit: type=1400 audit(2000000277.570:662570): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5842 comm="syz-executor" name="2174" dev="tmpfs" ino=10919 [ 1006.026402][ T38] audit: type=1400 audit(2000000277.570:662571): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5842 comm="syz-executor" name="cgroup" dev="tmpfs" ino=10920 [ 1006.026448][ T38] audit: type=1400 audit(2000000277.570:662572): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5842 comm="syz-executor" name="2174" dev="tmpfs" ino=10919 [ 1006.026494][ T38] audit: type=1400 audit(2000000277.570:662573): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5842 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1006.026540][ T38] audit: type=1400 audit(2000000277.570:662574): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5842 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1006.026587][ T38] audit: type=1400 audit(2000000277.570:662575): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5842 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1006.026633][ T38] audit: type=1400 audit(2000000277.570:662576): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=5842 comm="syz-executor" name="2174" dev="tmpfs" ino=10919 [ 1006.026680][ T38] audit: type=1400 audit(2000000277.570:662577): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=5842 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1006.026725][ T38] audit: type=1400 audit(2000000277.570:662578): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5842 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1006.026772][ T38] audit: type=1400 audit(2000000277.570:662579): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5842 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1006.047941][ T5991] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1006.126438][T30482] netlink: 'syz.0.11060': attribute type 3 has an invalid length. [ 1006.243900][ T5991] usb 4-1: Using ep0 maxpacket: 32 [ 1006.265394][ T5991] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.265436][ T5991] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.265501][ T5991] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1006.265530][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.327194][ T5991] hub 4-1:4.0: USB hub found [ 1006.540298][ T5991] hub 4-1:4.0: 2 ports detected [ 1006.766321][ T5991] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1006.766350][ T5991] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1006.826284][ T5991] usb 4-1: USB disconnect, device number 21 [ 1007.194894][T30512] usb usb8: usbfs: process 30512 (syz.0.11069) did not claim interface 0 before use [ 1008.017159][T30576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11085'. [ 1008.017668][T30576] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 1008.497632][T30592] netlink: 'syz.0.11092': attribute type 1 has an invalid length. [ 1008.906049][T30607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1008.955757][T30617] program syz.2.11101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1008.957528][T30617] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1009.032293][T30645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11103'. [ 1009.751199][T30675] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1010.946160][T30719] kAFS: unable to lookup cell '(/c¾ûL' [ 1011.045278][T30724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11141'. [ 1011.045310][T30724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11141'. [ 1011.307580][T26819] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1011.384988][ T38] kauditd_printk_skb: 10724 callbacks suppressed [ 1011.385010][ T38] audit: type=1400 audit(2000000282.593:672140): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=30721 comm="syz.1.11142" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1011.388030][ T38] audit: type=1400 audit(2000000282.593:672141): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30736 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1011.391557][ T38] audit: type=1400 audit(2000000282.593:672142): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30736 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1011.391613][ T38] audit: type=1400 audit(2000000282.593:672143): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30736 comm="syz-executor" name="2195" dev="tmpfs" ino=11025 [ 1011.391666][ T38] audit: type=1400 audit(2000000282.593:672144): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=30736 comm="syz-executor" opid=30736 ocomm="syz-executor" [ 1011.395489][ T38] audit: type=1400 audit(2000000282.602:672145): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30736 comm="syz-executor" name="2195" dev="tmpfs" ino=11025 [ 1011.395827][ T38] audit: type=1400 audit(2000000282.602:672146): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30736 comm="syz-executor" name="2195" dev="tmpfs" ino=11025 [ 1011.397504][ T38] audit: type=1400 audit(2000000282.602:672147): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=30736 comm="syz-executor" name="2195" dev="tmpfs" ino=11025 [ 1011.399639][ T38] audit: type=1400 audit(2000000282.602:672148): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30736 comm="syz-executor" name="2195" dev="tmpfs" ino=11025 [ 1011.401194][ T38] audit: type=1400 audit(2000000282.602:672149): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1187 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.250 dest=41038 netif=eth0 [ 1011.469093][T26819] usb 2-1: Using ep0 maxpacket: 32 [ 1011.470807][T26819] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1011.476421][T26819] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1011.476454][T26819] usb 2-1: config 0 has no interface number 0 [ 1011.476516][T26819] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1011.476544][T26819] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1011.509469][T26819] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1011.509549][T26819] usb 2-1: config 0 has no interface number 0 [ 1011.509645][T26819] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1011.509671][T26819] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1011.531260][T26819] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1011.531297][T26819] usb 2-1: config 0 has no interface number 0 [ 1011.531356][T26819] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1011.531384][T26819] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1011.561519][T26819] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1011.561554][T26819] usb 2-1: config 0 has no interface number 0 [ 1011.561614][T26819] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1011.561652][T26819] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1011.575410][T26819] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1011.575445][T26819] usb 2-1: config 0 has no interface number 0 [ 1011.575504][T26819] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1011.575529][T26819] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1011.605760][T26819] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1011.605794][T26819] usb 2-1: config 0 has no interface number 0 [ 1011.605882][T26819] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1011.605911][T26819] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1011.619077][T26819] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1011.619112][T26819] usb 2-1: config 0 has no interface number 0 [ 1011.619176][T26819] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1011.619204][T26819] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1011.641858][T26819] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1011.641903][T26819] usb 2-1: config 0 has no interface number 0 [ 1011.641962][T26819] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1011.641991][T26819] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1011.681374][T26819] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1011.681412][T26819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.681439][T26819] usb 2-1: Product: syz [ 1011.681457][T26819] usb 2-1: Manufacturer: syz [ 1011.681475][T26819] usb 2-1: SerialNumber: syz [ 1011.737878][T26819] usb 2-1: config 0 descriptor?? [ 1011.773690][T26819] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 1012.131083][T26819] etas_es58x 2-1:0.2: could not parse product info: '424242424242' [ 1012.366473][ T5959] usb 2-1: USB disconnect, device number 12 [ 1012.370483][ T5959] etas_es58x 2-1:0.2: Disconnecting syz syz [ 1012.590505][ T5991] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1012.761654][ T5991] usb 4-1: Using ep0 maxpacket: 16 [ 1012.768921][ T5991] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 1012.768952][ T5991] usb 4-1: config 0 has no interface number 0 [ 1012.768989][ T5991] usb 4-1: config 0 interface 237 has no altsetting 0 [ 1012.838551][ T5991] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1012.838586][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.838609][ T5991] usb 4-1: Product: syz [ 1012.838625][ T5991] usb 4-1: Manufacturer: syz [ 1012.838642][ T5991] usb 4-1: SerialNumber: syz [ 1012.882519][ T5991] usb 4-1: config 0 descriptor?? [ 1012.909637][ T5991] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 found [ 1013.159980][ T5991] snd_usb_podhd 4-1:0.237: cannot get proper max packet size [ 1013.163884][ T5991] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 now disconnected [ 1013.210770][ T5991] snd_usb_podhd 4-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 1013.383390][ T5991] usb 4-1: USB disconnect, device number 22 [ 1016.738461][ T38] kauditd_printk_skb: 11808 callbacks suppressed [ 1016.738482][ T38] audit: type=1400 audit(2000000287.597:682263): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5847 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1016.738892][ T38] audit: type=1400 audit(2000000287.607:682264): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5847 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1016.739150][ T38] audit: type=1400 audit(2000000287.607:682265): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30965 comm="syz-executor" name="2211" dev="tmpfs" ino=11106 [ 1016.739601][ T38] audit: type=1400 audit(2000000287.607:682266): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=30965 comm="syz-executor" name="2211" dev="tmpfs" ino=11106 [ 1016.739855][ T38] audit: type=1400 audit(2000000287.607:682267): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5847 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1016.740105][ T38] audit: type=1400 audit(2000000287.607:682268): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5847 comm="syz-executor" name="2274" dev="tmpfs" ino=11419 [ 1016.740689][ T38] audit: type=1400 audit(2000000287.607:682269): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30965 comm="syz-executor" name="2211" dev="tmpfs" ino=11106 [ 1016.741093][ T38] audit: type=1400 audit(2000000287.607:682270): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5847 comm="syz-executor" path="/2274" dev="tmpfs" ino=11419 [ 1016.741479][ T38] audit: type=1400 audit(2000000287.607:682271): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5847 comm="syz-executor" path="/2274" dev="tmpfs" ino=11419 [ 1016.741736][ T38] audit: type=1400 audit(2000000287.607:682272): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30965 comm="syz-executor" name="2211" dev="tmpfs" ino=11106 [ 1016.989596][T30971] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11217'. [ 1017.529488][ T5991] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1017.673963][T31002] overlayfs: missing 'lowerdir' [ 1017.689893][ T5991] usb 5-1: Using ep0 maxpacket: 32 [ 1017.693704][ T5991] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1017.693749][ T5991] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 1017.693809][ T5991] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 1017.693847][ T5991] usb 5-1: config 0 interface 0 has no altsetting 1 [ 1017.695923][ T5991] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1017.695954][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1017.695978][ T5991] usb 5-1: SerialNumber: syz [ 1017.761215][ T5991] usb 5-1: config 0 descriptor?? [ 1017.789387][ T5991] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1017.850383][ T5991] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1018.024105][ T5991] usb 5-1: USB disconnect, device number 42 [ 1018.049574][T31018] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11234'. [ 1018.258705][T31027] cgroup: release_agent respecified [ 1019.393454][T31071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11257'. [ 1019.585679][T31080] netlink: 200 bytes leftover after parsing attributes in process `syz.3.11262'. [ 1020.146513][T31096] netlink: 'syz.3.11269': attribute type 1 has an invalid length. [ 1020.146539][T31096] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11269'. [ 1020.646684][T31114] : renamed from hsr_slave_0 (while UP) [ 1021.488328][T31147] netlink: 276 bytes leftover after parsing attributes in process `syz.1.11290'. [ 1022.106030][ T38] kauditd_printk_skb: 9888 callbacks suppressed [ 1022.106052][ T38] audit: type=1400 audit(2000000292.611:691066): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1187 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.250 dest=41038 netif=eth0 [ 1022.130536][ T38] audit: type=1400 audit(2000000292.648:691067): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31158 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1022.130836][ T38] audit: type=1400 audit(2000000292.648:691068): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31158 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1022.131125][ T38] audit: type=1400 audit(2000000292.648:691069): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31158 comm="syz-executor" name="2176" dev="tmpfs" ino=10928 [ 1022.131513][ T38] audit: type=1400 audit(2000000292.648:691070): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=31158 comm="syz-executor" opid=31158 ocomm="syz-executor" [ 1022.132564][ T38] audit: type=1400 audit(2000000292.648:691071): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31158 comm="syz-executor" name="2176" dev="tmpfs" ino=10928 [ 1022.132823][ T38] audit: type=1400 audit(2000000292.648:691072): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31158 comm="syz-executor" name="2176" dev="tmpfs" ino=10928 [ 1022.133288][ T38] audit: type=1400 audit(2000000292.648:691073): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=31158 comm="syz-executor" name="2176" dev="tmpfs" ino=10928 [ 1022.133957][ T38] audit: type=1400 audit(2000000292.648:691074): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31158 comm="syz-executor" name="2176" dev="tmpfs" ino=10928 [ 1022.141312][ T38] audit: type=1400 audit(2000000292.658:691075): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31158 comm="syz-executor" name="2176" dev="tmpfs" ino=10928 [ 1024.884804][T31237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11333'. [ 1025.062017][T31244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11335'. [ 1025.062053][T31244] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1025.640946][T31266] overlayfs: conflicting options: userxattr,metacopy=on [ 1026.752302][T31298] ISOFS: Unable to identify CD-ROM format. [ 1026.955940][T31308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11367'. [ 1026.955969][T31308] netlink: 31 bytes leftover after parsing attributes in process `syz.1.11367'. [ 1026.955987][T31308] netlink: 'syz.1.11367': attribute type 3 has an invalid length. [ 1026.956002][T31308] netlink: 'syz.1.11367': attribute type 2 has an invalid length. [ 1026.956016][T31308] netlink: 31 bytes leftover after parsing attributes in process `syz.1.11367'. [ 1027.030469][T31307] netlink: 196 bytes leftover after parsing attributes in process `syz.2.11366'. [ 1027.462643][ T38] kauditd_printk_skb: 8569 callbacks suppressed [ 1027.462663][ T38] audit: type=1400 audit(2000000297.634:699087): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31324 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1027.462715][ T38] audit: type=1400 audit(2000000297.634:699088): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31324 comm="syz-executor" name="2300" dev="tmpfs" ino=11549 [ 1027.462767][ T38] audit: type=1400 audit(2000000297.634:699089): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=31324 comm="syz-executor" opid=31324 ocomm="syz-executor" [ 1027.462813][ T38] audit: type=1400 audit(2000000297.634:699090): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31324 comm="syz-executor" name="2300" dev="tmpfs" ino=11549 [ 1027.462862][ T38] audit: type=1400 audit(2000000297.634:699091): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31324 comm="syz-executor" name="2300" dev="tmpfs" ino=11549 [ 1027.471739][ T38] audit: type=1400 audit(2000000297.634:699092): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=31324 comm="syz-executor" name="2300" dev="tmpfs" ino=11549 [ 1027.471793][ T38] audit: type=1400 audit(2000000297.634:699093): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31324 comm="syz-executor" name="2300" dev="tmpfs" ino=11549 [ 1027.471839][ T38] audit: type=1400 audit(2000000297.634:699094): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31324 comm="syz-executor" name="2300" dev="tmpfs" ino=11549 [ 1027.471896][ T38] audit: type=1400 audit(2000000297.634:699095): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=31324 comm="syz-executor" name="2300" dev="tmpfs" ino=11549 [ 1027.476377][ T38] audit: type=1400 audit(2000000297.644:699097): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31322 comm="syz.0.11375" name="newroot" dev="tmpfs" ino=2 [ 1027.739061][ T5991] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1027.901190][ T5991] usb 1-1: Using ep0 maxpacket: 8 [ 1027.902557][ T5991] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 1027.993073][ T5991] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1027.993114][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1027.993136][ T5991] usb 1-1: Product: syz [ 1027.993153][ T5991] usb 1-1: Manufacturer: syz [ 1028.022521][ T5991] usb 1-1: config 0 descriptor?? [ 1028.065655][ T5991] gspca_main: 2770:9120 too many config [ 1028.066728][T31344] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 1028.249749][ T5991] usb 1-1: USB disconnect, device number 37 [ 1028.776071][ T5991] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1028.964447][ T5991] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1028.964480][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.964502][ T5991] usb 4-1: Product: syz [ 1028.964519][ T5991] usb 4-1: Manufacturer: syz [ 1028.964534][ T5991] usb 4-1: SerialNumber: syz [ 1029.067452][ T5991] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1029.182311][ T5959] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1029.545781][ T992] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1029.721130][ T992] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1029.721169][ T992] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1029.721214][ T992] usb 1-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 1029.721241][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.743037][T26819] usb 4-1: USB disconnect, device number 23 [ 1029.810488][T31390] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1029.833983][ T992] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1030.019884][T31412] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1030.116004][ T5991] usb 1-1: USB disconnect, device number 38 [ 1030.471970][T31445] udevd[31445]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1030.626290][ T5959] usb 4-1: Service connection timeout for: 256 [ 1030.626316][ T5959] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1030.627492][ T5959] ath9k_htc: Failed to initialize the device [ 1030.627939][T26819] usb 4-1: ath9k_htc: USB layer deinitialized [ 1031.117458][ T992] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1031.278637][ T992] usb 3-1: Using ep0 maxpacket: 32 [ 1031.284577][ T992] usb 3-1: config 64 has an invalid interface number: 241 but max is 1 [ 1031.284606][ T992] usb 3-1: config 64 has an invalid interface number: 186 but max is 1 [ 1031.284628][ T992] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.284649][ T992] usb 3-1: config 64 has no interface number 0 [ 1031.284667][ T992] usb 3-1: config 64 has no interface number 1 [ 1031.284730][ T992] usb 3-1: config 64 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1031.284760][ T992] usb 3-1: config 64 interface 241 has no altsetting 0 [ 1031.296117][T31489] netlink: 'syz.3.11419': attribute type 21 has an invalid length. [ 1031.296210][T31489] netlink: 'syz.3.11419': attribute type 6 has an invalid length. [ 1031.296229][T31489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11419'. [ 1031.342041][T26819] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1031.397030][ T992] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 1031.397126][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.397149][ T992] usb 3-1: Product: syz [ 1031.397165][ T992] usb 3-1: Manufacturer: syz [ 1031.397181][ T992] usb 3-1: SerialNumber: syz [ 1031.405970][ T5856] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1031.480072][ T992] go7007 3-1:64.241: probe with driver go7007 failed with error -12 [ 1031.529135][ T992] go7007 3-1:64.186: probe with driver go7007 failed with error -12 [ 1031.562082][T26819] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1031.562118][T26819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1031.562146][T26819] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1031.562173][T26819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1031.562201][T26819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1031.567069][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 1031.622575][ T5856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1031.631723][ T5856] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 1031.631752][ T5856] usb 2-1: config 7 has no interface number 0 [ 1031.631808][ T5856] usb 2-1: config 7 interface 187 has no altsetting 0 [ 1031.660639][T26819] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1031.660681][T26819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.660904][ T5856] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1031.660930][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.660953][ T5856] usb 2-1: Product: syz [ 1031.660968][ T5856] usb 2-1: Manufacturer: syz [ 1031.660984][ T5856] usb 2-1: SerialNumber: syz [ 1031.711023][T26819] usb 1-1: Product: syz [ 1031.711044][T26819] usb 1-1: Manufacturer: syz [ 1031.711060][T26819] usb 1-1: SerialNumber: syz [ 1031.749579][ T5959] usb 3-1: USB disconnect, device number 33 [ 1031.770175][T26819] usb 1-1: config 0 descriptor?? [ 1031.789450][T26819] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 1032.006768][ T5856] usb 2-1: Limiting number of CPorts to U8_MAX [ 1032.034084][ T5856] usb 2-1: Unknown endpoint type found, address 0x07 [ 1032.034111][ T5856] usb 2-1: Not enough endpoints found in device, aborting! [ 1032.113771][ T5959] usb 1-1: USB disconnect, device number 39 [ 1032.189206][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.242168][ T5856] usb 2-1: USB disconnect, device number 13 [ 1032.816941][ T38] kauditd_printk_skb: 14500 callbacks suppressed [ 1032.816962][ T38] audit: type=1400 audit(2000000302.629:711371): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31545 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1032.817013][ T38] audit: type=1400 audit(2000000302.629:711372): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31545 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1032.817057][ T38] audit: type=1400 audit(2000000302.629:711373): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31545 comm="syz-executor" name="2250" dev="tmpfs" ino=11302 [ 1032.817104][ T38] audit: type=1400 audit(2000000302.629:711374): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=31545 comm="syz-executor" opid=31545 ocomm="syz-executor" [ 1032.817540][ T38] audit: type=1400 audit(2000000302.648:711375): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31545 comm="syz-executor" name="2250" dev="tmpfs" ino=11302 [ 1032.817799][ T38] audit: type=1400 audit(2000000302.648:711376): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31545 comm="syz-executor" name="2250" dev="tmpfs" ino=11302 [ 1032.818948][ T38] audit: type=1400 audit(2000000302.648:711377): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=31545 comm="syz-executor" name="2250" dev="tmpfs" ino=11302 [ 1032.819530][ T38] audit: type=1400 audit(2000000302.648:711378): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31545 comm="syz-executor" name="2250" dev="tmpfs" ino=11302 [ 1032.830396][ T38] audit: type=1400 audit(2000000302.648:711379): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31545 comm="syz-executor" name="2250" dev="tmpfs" ino=11302 [ 1032.830458][ T38] audit: type=1400 audit(2000000302.648:711380): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5849 comm="syz-executor" name="cgroup.cpu" dev="tmpfs" ino=11864 [ 1033.088547][T31553] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.11434'. [ 1033.282419][T31561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11435'. [ 1033.340922][ T5959] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1033.513777][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 1033.518374][ T5959] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 1033.518406][ T5959] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.518427][ T5959] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1033.518450][ T5959] usb 4-1: config 0 has no interface number 1 [ 1033.518516][ T5959] usb 4-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1033.518545][ T5959] usb 4-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1033.539136][ T5959] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 1033.539174][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.539200][ T5959] usb 4-1: Product: syz [ 1033.539219][ T5959] usb 4-1: Manufacturer: syz [ 1033.539237][ T5959] usb 4-1: SerialNumber: syz [ 1033.625349][ T5959] usb 4-1: config 0 descriptor?? [ 1033.939205][ T5959] kaweth 4-1:0.235: Firmware present in device. [ 1034.125536][ T5959] kaweth 4-1:0.235: Error reading configuration (-71), no net device created [ 1034.125850][ T5959] kaweth 4-1:0.235: probe with driver kaweth failed with error -5 [ 1034.231848][ T5959] kaweth 4-1:0.0: Firmware present in device. [ 1034.247367][ T5959] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 1034.247662][ T5959] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 1034.319415][ T5959] usb 4-1: USB disconnect, device number 24 [ 1034.399290][ T5856] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1034.563235][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 1034.595540][ T5856] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1034.595575][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.595598][ T5856] usb 1-1: Product: syz [ 1034.595614][ T5856] usb 1-1: Manufacturer: syz [ 1034.595630][ T5856] usb 1-1: SerialNumber: syz [ 1034.640316][ T5856] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1034.640344][ T5856] r8152-cfgselector 1-1: config 0 descriptor?? [ 1035.160751][ T5856] r8152-cfgselector 1-1: USB disconnect, device number 40 [ 1035.539931][T31634] netlink: 'syz.1.11461': attribute type 4 has an invalid length. [ 1036.164149][T31655] mac80211_hwsim hwsim10 €: renamed from wlan0 [ 1037.269418][T31700] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1037.715755][T31713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11493'. [ 1038.184276][ T38] kauditd_printk_skb: 10750 callbacks suppressed [ 1038.184298][ T38] audit: type=1400 audit(2000000307.643:720466): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5842 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1038.184351][ T38] audit: type=1400 audit(2000000307.652:720467): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31727 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1038.184399][ T38] audit: type=1400 audit(2000000307.652:720468): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5842 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1038.184446][ T38] audit: type=1400 audit(2000000307.652:720469): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5842 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 1038.184491][ T38] audit: type=1400 audit(2000000307.652:720470): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1187 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.250 dest=41038 netif=eth0 [ 1038.184541][ T38] audit: type=1400 audit(2000000307.652:720471): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31727 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1038.184587][ T38] audit: type=1400 audit(2000000307.652:720472): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1187 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.250 dest=41038 netif=eth0 [ 1038.184635][ T38] audit: type=1400 audit(2000000307.652:720473): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31727 comm="syz-executor" name="2313" dev="tmpfs" ino=11622 [ 1038.184680][ T38] audit: type=1400 audit(2000000307.662:720474): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1187 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.250 dest=41038 netif=eth0 [ 1038.184729][ T38] audit: type=1400 audit(2000000307.662:720475): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=31727 comm="syz-executor" opid=31727 ocomm="syz-executor" [ 1038.896028][T31738] ALSA: seq fatal error: cannot create timer (-19) [ 1040.407500][ T5959] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1040.591729][ T5959] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1040.591766][ T5959] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1040.591804][ T5959] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1040.591832][ T5959] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1040.591871][ T5959] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1040.591896][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.670836][ T5959] usb 4-1: config 0 descriptor?? [ 1040.672070][T31789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1040.813645][ T5856] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1041.007281][ T5856] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1041.007318][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.007340][ T5856] usb 3-1: Product: syz [ 1041.007357][ T5856] usb 3-1: Manufacturer: syz [ 1041.007373][ T5856] usb 3-1: SerialNumber: syz [ 1041.033029][ T5856] usb 3-1: config 0 descriptor?? [ 1041.079851][ T5856] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1041.187476][ T5959] hid-u2fzero 0003:10C4:8ACF.0002: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 1041.211978][ T5959] hid-u2fzero 0003:10C4:8ACF.0002: U2F Zero LED initialised [ 1041.212186][ T5959] hid-u2fzero 0003:10C4:8ACF.0002: U2F Zero RNG initialised [ 1041.369116][ T5856] usb 4-1: USB disconnect, device number 25 [ 1041.570462][T30426] usb 3-1: USB disconnect, device number 34 [ 1041.594167][ T5959] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1041.768693][ T5959] usb 5-1: config 0 has an invalid interface number: 159 but max is 0 [ 1041.768725][ T5959] usb 5-1: config 0 has no interface number 0 [ 1041.797547][ T5959] usb 5-1: New USB device found, idVendor=10b8, idProduct=1e14, bcdDevice=db.f2 [ 1041.797582][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.797604][ T5959] usb 5-1: Product: syz [ 1041.797628][ T5959] usb 5-1: Manufacturer: syz [ 1041.797644][ T5959] usb 5-1: SerialNumber: syz [ 1041.817595][T31835] fido_id[31835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1041.863700][ T5959] usb 5-1: config 0 descriptor?? [ 1042.139426][ T5959] dvb-usb: found a 'DiBcom STK7700P reference design' in warm state. [ 1042.191900][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1042.214416][ T5959] dvbdev: DVB: registering new adapter (DiBcom STK7700P reference design) [ 1042.214484][ T5959] usb 5-1: media controller created [ 1042.296476][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1042.514215][ T5959] DVB: Unable to find symbol dib7000p_attach() [ 1042.514257][ T5959] dvb-usb: no frontend was attached by 'DiBcom STK7700P reference design' [ 1042.675165][ T5959] rc_core: IR keymap rc-dib0700-rc5 not found [ 1042.675190][ T5959] Registered IR keymap rc-empty [ 1042.675530][ T5959] dvb-usb: could not initialize remote control. [ 1042.675541][ T5959] dvb-usb: DiBcom STK7700P reference design successfully initialized and connected. [ 1042.683027][ T5959] usb 5-1: USB disconnect, device number 43 [ 1042.796145][ T5959] dvb-usb: DiBcom STK7700P reference design successfully deinitialized and disconnected. [ 1043.079722][T31889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1043.539691][ T38] kauditd_printk_skb: 19312 callbacks suppressed [ 1043.539711][ T38] audit: type=1400 audit(2000000312.666:733214): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5849 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1043.539759][ T38] audit: type=1400 audit(2000000312.666:733222): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5849 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1043.539804][ T38] audit: type=1400 audit(2000000312.666:733223): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5849 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1043.539848][ T38] audit: type=1400 audit(2000000312.666:733224): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5849 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1043.539894][ T38] audit: type=1400 audit(2000000312.666:733225): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5849 comm="syz-executor" name="2384" dev="tmpfs" ino=11968 [ 1043.540254][ T38] audit: type=1400 audit(2000000312.675:733226): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5849 comm="syz-executor" path="/2384" dev="tmpfs" ino=11968 [ 1043.540646][ T38] audit: type=1400 audit(2000000312.675:733227): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5849 comm="syz-executor" path="/2384" dev="tmpfs" ino=11968 [ 1043.541182][ T38] audit: type=1400 audit(2000000312.675:733228): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5849 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1043.541232][ T38] audit: type=1400 audit(2000000312.675:733229): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5852 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1043.542101][ T38] audit: type=1400 audit(2000000312.675:733230): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=31901 comm="syz-executor" name="2325" dev="tmpfs" ino=11682 [ 1044.149083][ T5959] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1044.314070][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.314108][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.314151][ T5959] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1044.314177][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.367413][ T5959] usb 3-1: config 0 descriptor?? [ 1044.653207][T31930] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11566'. [ 1044.917417][ T5959] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x2 [ 1045.024244][ T5959] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1045.109608][ T5959] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 1045.109671][ T5959] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 1045.185841][ T5959] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 1045.218510][ T5959] usb 3-1: USB disconnect, device number 35 [ 1045.377915][T31954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11571'. [ 1045.476562][T31954] veth0_macvtap: left promiscuous mode [ 1045.591576][T31953] fido_id[31953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1045.689205][ T5856] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1045.863783][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 1045.868949][ T5856] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1045.868977][ T5856] usb 5-1: config 0 has no interface number 0 [ 1045.869025][ T5856] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.869054][ T5856] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.869077][ T5856] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1045.869121][ T5856] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1045.869146][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.890541][ T5856] usb 5-1: config 0 descriptor?? [ 1046.362727][ T5959] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1046.372399][ T5856] holtek_mouse 0003:04D9:A072.0004: item fetching failed at offset 3/4 [ 1046.374292][ T5856] holtek_mouse 0003:04D9:A072.0004: hid parse failed: -22 [ 1046.374394][ T5856] holtek_mouse 0003:04D9:A072.0004: probe with driver holtek_mouse failed with error -22 [ 1046.537831][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.537882][ T5959] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1046.537908][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.573340][ T5959] usb 4-1: config 0 descriptor?? [ 1046.598289][T30426] usb 5-1: USB disconnect, device number 44 [ 1047.057547][ T5959] hid (null): global environment stack underflow [ 1047.094150][ T5959] itetech 0003:258A:6A88.0005: global environment stack underflow [ 1047.094177][ T5959] itetech 0003:258A:6A88.0005: item 0 4 1 11 parsing failed [ 1047.095115][ T5959] itetech 0003:258A:6A88.0005: probe with driver itetech failed with error -22 [ 1047.312851][ T5959] usb 4-1: USB disconnect, device number 26 [ 1048.329311][ T5856] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1048.494581][ T5856] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 1048.494612][ T5856] usb 4-1: config 0 has no interface number 0 [ 1048.494670][ T5856] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1048.494761][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.504883][ T5856] usb 4-1: config 0 descriptor?? [ 1048.534812][ T5856] cp210x 4-1:0.32: cp210x converter detected [ 1048.874427][ T5959] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1048.897105][ T38] kauditd_printk_skb: 21132 callbacks suppressed [ 1048.897125][ T38] audit: type=1400 audit(2000000317.652:748206): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5852 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 [ 1048.897281][ T38] audit: type=1400 audit(2000000317.680:748226): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=5852 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 [ 1048.897331][ T38] audit: type=1400 audit(2000000317.680:748227): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5852 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1048.897376][ T38] audit: type=1400 audit(2000000317.680:748228): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5852 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1048.897423][ T38] audit: type=1400 audit(2000000317.680:748229): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5852 comm="syz-executor" name="2225" dev="tmpfs" ino=11175 [ 1048.897631][ T38] audit: type=1400 audit(2000000317.680:748230): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5852 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1048.906142][ T38] audit: type=1400 audit(2000000317.680:748231): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1187 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.250 dest=41038 netif=eth0 [ 1048.906645][ T38] audit: type=1400 audit(2000000317.698:748232): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5852 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1048.906697][ T38] audit: type=1400 audit(2000000317.698:748233): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5852 comm="syz-executor" name="2225" dev="tmpfs" ino=11175 [ 1048.906817][ T38] audit: type=1400 audit(2000000317.698:748234): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5852 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1048.961187][ T5856] cp210x 4-1:0.32: failed to get vendor val 0x000e size 3: -71 [ 1049.044134][ T5856] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1049.054174][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1049.054213][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1049.054243][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1049.054288][ T5959] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1049.054313][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.084967][ T5856] usb 4-1: USB disconnect, device number 27 [ 1049.136002][ T5856] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1049.136962][ T5856] cp210x 4-1:0.32: device disconnected [ 1049.154587][ T5959] usb 1-1: config 0 descriptor?? [ 1049.155811][T32048] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1049.441734][ C0] ================================================================== [ 1049.441762][ C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x695/0xa70 [ 1049.441814][ C0] Write of size 8 at addr ffff888061ff3ab0 by task ktimers/0/16 [ 1049.441835][ C0] [ 1049.441850][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1049.441881][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1049.441897][ C0] Call Trace: [ 1049.441906][ C0] [ 1049.441917][ C0] dump_stack_lvl+0x189/0x250 [ 1049.441954][ C0] ? __kasan_check_byte+0x12/0x40 [ 1049.441989][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1049.442024][ C0] ? lock_release+0x4b/0x3e0 [ 1049.442061][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 1049.442084][ C0] print_report+0xca/0x240 [ 1049.442115][ C0] ? __xfrm_state_delete+0x695/0xa70 [ 1049.442150][ C0] kasan_report+0x118/0x150 [ 1049.442183][ C0] ? __xfrm_state_delete+0x695/0xa70 [ 1049.442223][ C0] __xfrm_state_delete+0x695/0xa70 [ 1049.442264][ C0] xfrm_timer_handler+0x18f/0xa00 [ 1049.442305][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 1049.442339][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1049.442377][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1049.442413][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1049.442450][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1049.442492][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 1049.442526][ C0] __hrtimer_run_queues+0x54f/0xd40 [ 1049.442573][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1049.442608][ C0] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 1049.442644][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 1049.442669][ C0] handle_softirqs+0x22f/0x710 [ 1049.442713][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1049.442749][ C0] run_ktimerd+0xcf/0x190 [ 1049.442789][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1049.442820][ C0] ? schedule+0x91/0x360 [ 1049.442866][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1049.442896][ C0] smpboot_thread_fn+0x53f/0xa60 [ 1049.442926][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1049.442961][ C0] kthread+0x70e/0x8a0 [ 1049.442997][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1049.443025][ C0] ? __pfx_kthread+0x10/0x10 [ 1049.443067][ C0] ? __pfx_kthread+0x10/0x10 [ 1049.443101][ C0] ret_from_fork+0x436/0x7d0 [ 1049.443130][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1049.443161][ C0] ? __switch_to_asm+0x39/0x70 [ 1049.443183][ C0] ? __switch_to_asm+0x33/0x70 [ 1049.443203][ C0] ? __pfx_kthread+0x10/0x10 [ 1049.443237][ C0] ret_from_fork_asm+0x1a/0x30 [ 1049.443268][ C0] [ 1049.443277][ C0] [ 1049.443283][ C0] Allocated by task 30049: [ 1049.443294][ C0] kasan_save_track+0x3e/0x80 [ 1049.443320][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1049.443346][ C0] kmem_cache_alloc_noprof+0x143/0x310 [ 1049.443375][ C0] xfrm_state_alloc+0x24/0x2f0 [ 1049.443402][ C0] __find_acq_core+0x8a7/0x1c00 [ 1049.443419][ C0] xfrm_find_acq+0x8f/0xd0 [ 1049.443439][ C0] xfrm_alloc_userspi+0x6b3/0xc90 [ 1049.443465][ C0] xfrm_user_rcv_msg+0x7a3/0xab0 [ 1049.443488][ C0] netlink_rcv_skb+0x205/0x470 [ 1049.443516][ C0] xfrm_netlink_rcv+0x79/0x90 [ 1049.443539][ C0] netlink_unicast+0x843/0xa10 [ 1049.443562][ C0] netlink_sendmsg+0x805/0xb30 [ 1049.443593][ C0] __sock_sendmsg+0x21c/0x270 [ 1049.443616][ C0] ____sys_sendmsg+0x508/0x820 [ 1049.443635][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 1049.443653][ C0] __x64_sys_sendmsg+0x1a1/0x260 [ 1049.443672][ C0] do_syscall_64+0xfa/0x3b0 [ 1049.443691][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.443713][ C0] [ 1049.443719][ C0] Freed by task 992: [ 1049.443730][ C0] kasan_save_track+0x3e/0x80 [ 1049.443754][ C0] kasan_save_free_info+0x46/0x50 [ 1049.443783][ C0] __kasan_slab_free+0x5b/0x80 [ 1049.443810][ C0] kmem_cache_free+0x195/0x510 [ 1049.443839][ C0] xfrm_state_gc_task+0x54e/0x6d0 [ 1049.443866][ C0] process_scheduled_works+0xade/0x17b0 [ 1049.443893][ C0] worker_thread+0x8a0/0xda0 [ 1049.443920][ C0] kthread+0x70e/0x8a0 [ 1049.443950][ C0] ret_from_fork+0x436/0x7d0 [ 1049.443975][ C0] ret_from_fork_asm+0x1a/0x30 [ 1049.443996][ C0] [ 1049.444002][ C0] The buggy address belongs to the object at ffff888061ff3a80 [ 1049.444002][ C0] which belongs to the cache xfrm_state of size 992 [ 1049.444021][ C0] The buggy address is located 48 bytes inside of [ 1049.444021][ C0] freed 992-byte region [ffff888061ff3a80, ffff888061ff3e60) [ 1049.444044][ C0] [ 1049.444050][ C0] The buggy address belongs to the physical page: [ 1049.444063][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888061ff1f80 pfn:0x61ff0 [ 1049.444094][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1049.444113][ C0] flags: 0x80000000000040(head|node=0|zone=1) [ 1049.444132][ C0] page_type: f5(slab) [ 1049.444153][ C0] raw: 0080000000000040 ffff8881432e2000 dead000000000122 0000000000000000 [ 1049.444173][ C0] raw: ffff888061ff1f80 00000000800e0009 00000000f5000000 0000000000000000 [ 1049.444192][ C0] head: 0080000000000040 ffff8881432e2000 dead000000000122 0000000000000000 [ 1049.444213][ C0] head: ffff888061ff1f80 00000000800e0009 00000000f5000000 0000000000000000 [ 1049.444233][ C0] head: 0080000000000002 ffffea000187fc01 00000000ffffffff 00000000ffffffff [ 1049.444252][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 1049.444265][ C0] page dumped because: kasan: bad access detected [ 1049.444281][ C0] page_owner tracks the page as allocated [ 1049.444290][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12425, tgid 12422 (syz.1.3105), ts 440243654030, free_ts 440114174044 [ 1049.444328][ C0] post_alloc_hook+0x240/0x2a0 [ 1049.444359][ C0] get_page_from_freelist+0x2119/0x21b0 [ 1049.444379][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 1049.444400][ C0] alloc_pages_mpol+0xd1/0x380 [ 1049.444430][ C0] allocate_slab+0x8a/0x370 [ 1049.444450][ C0] ___slab_alloc+0x8d1/0xdc0 [ 1049.444468][ C0] kmem_cache_alloc_noprof+0xe6/0x310 [ 1049.444495][ C0] xfrm_state_alloc+0x24/0x2f0 [ 1049.444526][ C0] xfrm_add_sa+0x17d1/0x4070 [ 1049.444549][ C0] xfrm_user_rcv_msg+0x7a3/0xab0 [ 1049.444573][ C0] netlink_rcv_skb+0x205/0x470 [ 1049.444601][ C0] xfrm_netlink_rcv+0x79/0x90 [ 1049.444625][ C0] netlink_unicast+0x843/0xa10 [ 1049.444646][ C0] netlink_sendmsg+0x805/0xb30 [ 1049.444675][ C0] __sock_sendmsg+0x21c/0x270 [ 1049.444700][ C0] ____sys_sendmsg+0x508/0x820 [ 1049.444719][ C0] page last free pid 12420 tgid 12420 stack trace: [ 1049.444732][ C0] __free_frozen_pages+0xb59/0xce0 [ 1049.444764][ C0] __slab_free+0x2db/0x390 [ 1049.444794][ C0] qlist_free_all+0x97/0x140 [ 1049.444817][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1049.444842][ C0] __kasan_slab_alloc+0x22/0x80 [ 1049.444869][ C0] __kmalloc_cache_noprof+0x143/0x320 [ 1049.444899][ C0] proc_self_get_link+0xe6/0x180 [ 1049.444920][ C0] pick_link+0x633/0xe80 [ 1049.444951][ C0] step_into+0xcee/0xfc0 [ 1049.444981][ C0] link_path_walk+0x77b/0xea0 [ 1049.445013][ C0] path_openat+0x298/0x3840 [ 1049.445036][ C0] do_filp_open+0x1fa/0x410 [ 1049.445059][ C0] do_sys_openat2+0x121/0x1c0 [ 1049.445079][ C0] __x64_sys_openat+0x138/0x170 [ 1049.445099][ C0] do_syscall_64+0xfa/0x3b0 [ 1049.445119][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.445141][ C0] [ 1049.445147][ C0] Memory state around the buggy address: [ 1049.445161][ C0] ffff888061ff3980: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1049.445177][ C0] ffff888061ff3a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1049.445194][ C0] >ffff888061ff3a80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1049.445207][ C0] ^ [ 1049.445220][ C0] ffff888061ff3b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1049.445237][ C0] ffff888061ff3b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1049.445249][ C0] ================================================================== [ 1049.445275][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1049.445293][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1049.445322][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1049.445338][ C0] Call Trace: [ 1049.445348][ C0] [ 1049.445359][ C0] dump_stack_lvl+0x99/0x250 [ 1049.445395][ C0] ? __asan_memcpy+0x40/0x70 [ 1049.445421][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1049.445455][ C0] ? __pfx__printk+0x10/0x10 [ 1049.445488][ C0] vpanic+0x281/0x750 [ 1049.445522][ C0] ? __pfx_print_hex_dump+0x10/0x10 [ 1049.445560][ C0] ? __pfx_vpanic+0x10/0x10 [ 1049.445603][ C0] panic+0xb9/0xc0 [ 1049.445637][ C0] ? __pfx_panic+0x10/0x10 [ 1049.445669][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1049.445708][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1049.445749][ C0] ? __xfrm_state_delete+0x695/0xa70 [ 1049.445791][ C0] check_panic_on_warn+0x89/0xb0 [ 1049.445816][ C0] ? __xfrm_state_delete+0x695/0xa70 [ 1049.445850][ C0] end_report+0x78/0x160 [ 1049.445881][ C0] kasan_report+0x129/0x150 [ 1049.445913][ C0] ? __xfrm_state_delete+0x695/0xa70 [ 1049.445953][ C0] __xfrm_state_delete+0x695/0xa70 [ 1049.445993][ C0] xfrm_timer_handler+0x18f/0xa00 [ 1049.446035][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 1049.446069][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1049.446106][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1049.446143][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1049.446180][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1049.446224][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 1049.446257][ C0] __hrtimer_run_queues+0x54f/0xd40 [ 1049.446305][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1049.446341][ C0] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 1049.446377][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 1049.446403][ C0] handle_softirqs+0x22f/0x710 [ 1049.446439][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1049.446475][ C0] run_ktimerd+0xcf/0x190 [ 1049.446508][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1049.446540][ C0] ? schedule+0x91/0x360 [ 1049.446577][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1049.446605][ C0] smpboot_thread_fn+0x53f/0xa60 [ 1049.446635][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1049.446667][ C0] kthread+0x70e/0x8a0 [ 1049.446705][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1049.446735][ C0] ? __pfx_kthread+0x10/0x10 [ 1049.446779][ C0] ? __pfx_kthread+0x10/0x10 [ 1049.446816][ C0] ret_from_fork+0x436/0x7d0 [ 1049.446848][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1049.446883][ C0] ? __switch_to_asm+0x39/0x70 [ 1049.446906][ C0] ? __switch_to_asm+0x33/0x70 [ 1049.446927][ C0] ? __pfx_kthread+0x10/0x10 [ 1049.446964][ C0] ret_from_fork_asm+0x1a/0x30 [ 1049.446996][ C0] [ 1049.447315][ C0] Kernel Offset: disabled