last executing test programs: 4m29.529988798s ago: executing program 0 (id=2604): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb", 0x42}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f", 0x70}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162", 0xc8}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bc", 0x4e}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759b", 0x9c}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m20.338589126s ago: executing program 0 (id=2614): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) inotify_init() socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0xd) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x5) 4m19.569665997s ago: executing program 0 (id=2616): r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), 0x0) io_uring_setup(0x30aa, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r0, 0x0, &(0x7f00000001c0), 0x800) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000028c0)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 4m17.889965442s ago: executing program 0 (id=2620): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m16.14392111s ago: executing program 0 (id=2623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) chmod(&(0x7f0000000040)='.\x00', 0x35e) 4m14.389655837s ago: executing program 0 (id=2624): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) inotify_init() socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0xd) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x5) 3m56.991477617s ago: executing program 32 (id=2624): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) inotify_init() socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0xd) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x5) 12.488972502s ago: executing program 4 (id=3142): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x13) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) 11.668185664s ago: executing program 4 (id=3146): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002940)='/dev/comedi4\x00', 0x22, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10114, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000000)="1834", 0x2}], 0x1) 9.98131712s ago: executing program 4 (id=3151): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x100800, 0x0) r1 = epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003f9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x10c89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0xfff0}, {0x0, 0xffff}}}, 0x24}}, 0x20000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9, 0x4000}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 8.687337905s ago: executing program 4 (id=3154): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0xee518a3114f65437, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fallocate(r0, 0x0, 0xfea000, 0x2000402) lseek(r0, 0x1, 0x3) timer_create(0x1, 0x0, 0x0) unshare(0x2c020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 8.324302535s ago: executing program 3 (id=3156): socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_SREG={0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2806c8cd}, 0x0) 8.13842021s ago: executing program 3 (id=3157): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close_range(r0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0x4fd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) 7.868150177s ago: executing program 1 (id=3158): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r0, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r1, 0x0, r2}) 7.177271266s ago: executing program 1 (id=3159): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, 0x0) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x12) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b000000001400143954ee6272"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) 7.154149616s ago: executing program 3 (id=3160): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x41, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x5, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xd, 0x5, 0x4, 0x8, 0x4, 0x7f, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0xfffffffe, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0xf9, 0xd, 0x2bf, 0x6c9, 0x2, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x8, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x81, 0x9, 0x2, 0x5, 0x9, 0x1, 0x7, 0x10, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x5, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x17ec12b8, 0x800004, 0x5, 0x5, 0x0, 0x0, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e3, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x20000004, 0x65], [0x9, 0xffffffff, 0x3, 0xb, 0x5, 0x938, 0x2, 0x6, 0x7, 0x5, 0x2, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x4, 0x10000, 0x6, 0x7ffe, 0x80000004, 0x200a620, 0x2, 0xa, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x0, 0x3, 0x7f, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1f, 0x0, 0x4, 0xb0b2748, 0x1, 0x1, 0x400, 0xffbf2441, 0xffd]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x1fa, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0), 0x0, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x142) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x40000) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020) 5.91054035s ago: executing program 3 (id=3161): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1fe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[], 0x4d6) read(r0, &(0x7f00000000c0)=""/39, 0x27) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)) 4.835882319s ago: executing program 1 (id=3163): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close_range(r0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0x4fd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) 4.702078952s ago: executing program 4 (id=3164): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close_range(r0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 4.630610035s ago: executing program 1 (id=3166): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20280, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r5, r5) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7fff, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000002880)=@known='system.posix_acl_default\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 4.463954029s ago: executing program 2 (id=3167): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r2, 0x0, r3}) 4.326452623s ago: executing program 2 (id=3168): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close_range(r0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0x4fd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) 3.511748215s ago: executing program 1 (id=3169): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x41, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x5, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xd, 0x5, 0x4, 0x8, 0x4, 0x7f, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0xfffffffe, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0xf9, 0xd, 0x2bf, 0x6c9, 0x2, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x8, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x81, 0x9, 0x2, 0x5, 0x9, 0x1, 0x7, 0x10, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x5, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x17ec12b8, 0x800004, 0x5, 0x5, 0x0, 0x0, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e3, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x20000004, 0x65], [0x9, 0xffffffff, 0x3, 0xb, 0x5, 0x938, 0x2, 0x6, 0x7, 0x5, 0x2, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x4, 0x10000, 0x6, 0x7ffe, 0x80000004, 0x200a620, 0x2, 0xa, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x0, 0x3, 0x7f, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1f, 0x0, 0x4, 0xb0b2748, 0x1, 0x1, 0x400, 0xffbf2441, 0xffd]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x1fa, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0), 0x0, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x142) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x40000) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020) 2.090747663s ago: executing program 1 (id=3170): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.037206975s ago: executing program 2 (id=3171): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 1.951929157s ago: executing program 4 (id=3172): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0xee518a3114f65437, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fallocate(r0, 0x0, 0xfea000, 0x2000402) lseek(r0, 0x1, 0x3) timer_create(0x1, 0x0, 0x0) unshare(0x2c020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 1.84553358s ago: executing program 2 (id=3173): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x100800, 0x0) r1 = epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003f9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x10c89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0xfff0}, {0x0, 0xffff}}}, 0x24}}, 0x20000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 1.161264508s ago: executing program 3 (id=3174): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close_range(r0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0x4fd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) 488.487807ms ago: executing program 2 (id=3175): socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_SREG={0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2806c8cd}, 0x0) 383.696069ms ago: executing program 3 (id=3176): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r2, 0x0, r3}) 0s ago: executing program 2 (id=3177): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, 0x0) kernel console output (not intermixed with test programs): ecutor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394719cdd9 code=0x7ffc0000 [ 682.521109][ T28] audit: type=1326 audit(1777740544.402:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.2.1491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f394719cdd9 code=0x7ffc0000 [ 682.663854][ T28] audit: type=1326 audit(1777740544.402:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.2.1491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394719cdd9 code=0x7ffc0000 [ 682.706996][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 682.716140][T11053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1493'. [ 683.319265][ T28] audit: type=1326 audit(1777740544.402:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.2.1491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394719cdd9 code=0x7ffc0000 [ 683.389457][ T28] audit: type=1326 audit(1777740544.402:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.2.1491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f394719cdd9 code=0x7ffc0000 [ 683.570921][ T28] audit: type=1326 audit(1777740544.402:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.2.1491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f394719cdd9 code=0x7ffc0000 [ 685.646159][T11086] __nla_validate_parse: 2 callbacks suppressed [ 685.646215][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 685.661476][T11086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1501'. [ 685.673838][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 685.682924][T11086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1501'. [ 686.476463][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.560677][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 686.570009][T11092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1500'. [ 686.582897][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 686.592291][T11092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1500'. [ 686.611836][T11092] input: syz1 as /devices/virtual/input/input84 [ 687.252648][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'. [ 687.262893][T11095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1504'. [ 690.843930][T11144] __nla_validate_parse: 5 callbacks suppressed [ 690.843982][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1515'. [ 690.859557][T11144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1515'. [ 690.871820][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1515'. [ 690.880923][T11144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1515'. [ 690.902722][T11144] input: syz1 as /devices/virtual/input/input85 [ 697.146540][ T28] audit: type=1326 audit(1777740559.312:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.1.1521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 697.231025][ T28] audit: type=1326 audit(1777740559.312:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.1.1521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 697.354716][ T28] audit: type=1326 audit(1777740559.332:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.1.1521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 697.831119][ T28] audit: type=1326 audit(1777740559.332:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.1.1521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 698.156046][ T28] audit: type=1326 audit(1777740559.332:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.1.1521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 698.181639][ T28] audit: type=1326 audit(1777740559.332:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.1.1521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 698.274992][ T28] audit: type=1326 audit(1777740559.332:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.1.1521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 699.160521][ T28] audit: type=1326 audit(1777740559.342:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.1.1521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 699.301707][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'. [ 699.310835][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1527'. [ 699.323174][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'. [ 699.332435][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1527'. [ 699.489420][ T28] audit: type=1326 audit(1777740559.342:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.1.1521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 699.513694][ T28] audit: type=1326 audit(1777740559.342:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.1.1521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 700.009962][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 700.738204][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 700.763345][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.788304][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 700.817642][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 700.844972][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 700.875043][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.900370][ T27] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 700.934911][ T27] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 700.942997][ T27] usb 4-1: Manufacturer: syz [ 700.980017][ T27] usb 4-1: config 0 descriptor?? [ 701.028396][T11211] ipip0: entered promiscuous mode [ 701.037396][T11211] ipip0: entered allmulticast mode [ 701.576250][T11225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.416310][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 702.425474][T11227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1538'. [ 702.438832][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 702.447994][T11227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1538'. [ 703.151271][ T27] rc_core: IR keymap rc-hauppauge not found [ 703.158047][ T27] Registered IR keymap rc-empty [ 703.163094][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.295526][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.336480][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 705.365440][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input86 [ 705.413265][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.465100][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 705.759516][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.356162][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.456084][T11250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1546'. [ 706.503190][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.532006][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1545'. [ 706.560887][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.615033][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.677975][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.735010][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.770779][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.851040][ T27] mceusb 4-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 706.963525][ T27] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 707.095321][ T9426] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 707.174139][ T27] usb 4-1: USB disconnect, device number 7 [ 707.296661][ T9426] usb 3-1: Using ep0 maxpacket: 16 [ 707.359679][ T9426] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 707.503837][ T9426] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 707.676325][ T9426] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 707.684584][ T9426] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 707.700330][ T9426] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 707.727589][ T9426] usb 3-1: config 0 has no interface number 0 [ 707.808926][ T9426] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 707.830178][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'. [ 707.840181][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 707.852249][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'. [ 707.861317][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 708.034290][ T9426] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 708.204143][ T9426] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 708.319221][ T9426] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 708.401216][ T9426] usb 3-1: config 0 interface 125 has no altsetting 0 [ 708.550871][ T9426] usb 3-1: config 0 interface 125 has no altsetting 2 [ 708.561434][ T9426] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 708.570649][ T9426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.582490][ T9426] usb 3-1: Product: syz [ 708.600692][ T9426] usb 3-1: Manufacturer: syz [ 708.605765][ T9426] usb 3-1: SerialNumber: syz [ 708.613694][ T9426] usb 3-1: config 0 descriptor?? [ 708.623436][ T9426] usb 3-1: selecting invalid altsetting 2 [ 710.163093][T11293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.305184][T11289] [U] ‡¢ [ 710.822807][ T9426] parport0: fix this legacy no-device port driver! [ 710.841575][ T9426] usb 3-1: USB disconnect, device number 14 [ 711.340142][T11302] capability: warning: `syz.1.1560' uses 32-bit capabilities (legacy support in use) [ 713.029739][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 713.223227][T11313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1562'. [ 713.245688][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 713.254582][T11306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1562'. [ 714.175916][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 714.202894][T11325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1567'. [ 715.918542][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'. [ 715.941550][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1576'. [ 715.969075][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'. [ 715.978034][T11352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1576'. [ 718.892287][T11386] __nla_validate_parse: 1 callbacks suppressed [ 718.892299][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 718.943612][T11386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1587'. [ 718.965235][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 718.977906][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1587'. [ 720.360984][T11417] loop4: detected capacity change from 0 to 7 [ 720.503397][T11417] Dev loop4: unable to read RDB block 7 [ 720.572829][T11417] loop4: AHDI p1 p2 [ 720.589140][T11417] loop4: partition table partially beyond EOD, truncated [ 720.793774][T11417] loop4: p1 start 1835360114 is beyond EOD, truncated [ 721.011856][T11409] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 722.614318][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 722.624082][T11435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1602'. [ 722.639804][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 722.648800][T11435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1602'. [ 727.616131][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 727.625165][T11471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1615'. [ 727.641295][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 727.650314][T11471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1615'. [ 727.808008][T11481] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 727.864990][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 727.865006][ T28] audit: type=1326 audit(1777740590.022:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.2.1617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f394719cdd9 code=0x0 [ 730.750031][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'. [ 731.016366][T11511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1626'. [ 731.026357][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'. [ 731.063546][T11521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1626'. [ 735.340188][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'. [ 735.355831][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'. [ 736.119201][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'. [ 736.173337][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'. [ 737.464933][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 737.905140][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 737.948557][ T27] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 738.032500][ T27] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 738.117791][ T27] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 738.432759][ T27] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 738.441655][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 738.450931][ T27] usb 4-1: config 0 has no interface number 0 [ 738.457940][ T27] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 738.469362][ T27] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 738.479595][ T27] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 738.489894][ T27] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 738.503295][ T27] usb 4-1: config 0 interface 125 has no altsetting 0 [ 738.510432][ T27] usb 4-1: config 0 interface 125 has no altsetting 2 [ 738.520277][ T27] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 738.598029][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.612655][ T27] usb 4-1: Product: syz [ 738.617270][ T27] usb 4-1: Manufacturer: syz [ 738.623872][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'. [ 738.634364][ T27] usb 4-1: SerialNumber: syz [ 738.649999][T11604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1653'. [ 738.663002][ T27] usb 4-1: config 0 descriptor?? [ 738.676034][ T27] usb 4-1: selecting invalid altsetting 2 [ 738.691964][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'. [ 738.701773][T11607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1653'. [ 739.507451][ C1] usb 4-1: async_complete: urb error -71 [ 739.528119][ T27] get_1284_register: usb error -71 [ 739.640601][ T27] usb 4-1: USB disconnect, device number 8 [ 744.473745][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 744.504241][T11653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1666'. [ 744.550027][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 744.562595][T11654] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 744.733523][T11656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1666'. [ 747.510775][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.215839][T11690] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 748.235954][ T9577] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 749.255367][ T9577] usb 2-1: Using ep0 maxpacket: 32 [ 749.280959][ T9577] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 749.304895][ T9577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.314941][ T9577] usb 2-1: Product: syz [ 749.321476][ T9577] usb 2-1: Manufacturer: syz [ 749.328843][ T9577] usb 2-1: SerialNumber: syz [ 749.341029][ T9577] usb 2-1: config 0 descriptor?? [ 749.704128][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 749.744464][ T9577] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 010 [ 749.945282][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 749.979423][ T8] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 750.018324][ T8] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 750.118849][ T8] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 750.204460][ T8] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 750.222586][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 750.424865][ T8] usb 4-1: config 0 has no interface number 0 [ 750.431066][ T8] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 750.444956][ T8] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 750.462305][ T8] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 750.472981][ T8] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 750.498331][ T8] usb 4-1: config 0 interface 125 has no altsetting 0 [ 750.539491][ T8] usb 4-1: config 0 interface 125 has no altsetting 2 [ 750.557614][ T8] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 750.571717][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.580101][ T8] usb 4-1: Product: syz [ 750.584443][ T8] usb 4-1: Manufacturer: syz [ 750.589230][T11683] i2c i2c-1: failure reading status [ 750.596171][ T8] usb 4-1: SerialNumber: syz [ 750.604213][ T8] usb 4-1: config 0 descriptor?? [ 750.622417][ T8] usb 4-1: selecting invalid altsetting 2 [ 750.631427][ T9577] usb 2-1: USB disconnect, device number 10 [ 750.772797][T11711] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 750.772797][T11711] program syz.0.1684 not setting count and/or reply_len properly [ 751.915217][ T8] get_1284_register timeout [ 751.920131][ C0] usb 4-1: async_complete: urb error -104 [ 752.049101][ T5844] usb 4-1: USB disconnect, device number 9 [ 753.816016][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 754.125111][ T8] usb 1-1: device descriptor read/64, error -71 [ 754.440420][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 754.555299][ T5844] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 754.624156][ T8] usb 1-1: device descriptor read/64, error -71 [ 754.744929][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 754.754768][ T5844] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 754.763922][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.779167][ T8] usb usb1-port1: attempt power cycle [ 754.782667][ T5844] usb 4-1: Product: syz [ 754.799072][ T5844] usb 4-1: Manufacturer: syz [ 754.814133][ T5844] usb 4-1: SerialNumber: syz [ 754.821365][ T5844] usb 4-1: config 0 descriptor?? [ 754.945025][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 755.054943][ T5816] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 755.058146][ T5844] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 010 [ 755.135000][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 755.148632][ T27] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 755.161077][ T27] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 755.169944][ T27] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 755.183047][ T27] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 755.202683][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 755.212613][ T27] usb 2-1: config 0 has no interface number 0 [ 755.222719][ T27] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 755.226063][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 755.244325][ T27] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 755.254911][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 755.268928][ T27] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 755.279525][ T27] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 755.281907][ T5816] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 755.294629][ T27] usb 2-1: config 0 interface 125 has no altsetting 0 [ 755.312335][ T27] usb 2-1: config 0 interface 125 has no altsetting 2 [ 755.319917][ T8] usb 1-1: device descriptor read/8, error -71 [ 755.326682][ T27] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 755.337180][ T5816] usb 3-1: config 0 has no interface number 0 [ 755.343447][ T5816] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 755.345476][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.371820][ T5816] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 755.374979][ T27] usb 2-1: Product: syz [ 755.387006][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.395863][ T27] usb 2-1: Manufacturer: syz [ 755.400514][ T27] usb 2-1: SerialNumber: syz [ 755.402632][ T5816] usb 3-1: Product: syz [ 755.412286][ T5816] usb 3-1: Manufacturer: syz [ 755.423869][ T5816] usb 3-1: SerialNumber: syz [ 755.442342][ T27] usb 2-1: config 0 descriptor?? [ 755.447036][ T5816] usb 3-1: config 0 descriptor?? [ 755.459567][ T27] usb 2-1: selecting invalid altsetting 2 [ 755.480184][ T5816] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 755.494527][ T5816] em28xx 3-1:0.132: Video interface 132 found: [ 755.614937][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 755.656419][ T8] usb 1-1: device descriptor read/8, error -71 [ 755.801964][ T8] usb usb1-port1: unable to enumerate USB device [ 755.892750][ T5816] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 756.272478][ C1] usb 2-1: async_complete: urb error -71 [ 756.278978][ T27] get_1284_register: usb error -71 [ 756.294508][ T27] usb 2-1: USB disconnect, device number 11 [ 756.306766][ T5816] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 756.342759][ T5816] em28xx 3-1:0.132: board has no eeprom [ 756.373474][ T6079] tipc: Subscription rejected, illegal request [ 756.644894][ T5816] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 756.719278][ T5816] em28xx 3-1:0.132: analog set to bulk mode. [ 756.766791][ T8] em28xx 3-1:0.132: Registering V4L2 extension [ 757.042325][ T5816] usb 3-1: USB disconnect, device number 15 [ 757.086198][ T5816] em28xx 3-1:0.132: Disconnecting em28xx [ 757.355368][T11765] i2c i2c-1: failure writing data [ 757.420752][ T8] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 757.445153][ T8] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 757.453088][ T5844] usb 4-1: USB disconnect, device number 10 [ 757.494874][ T8] em28xx 3-1:0.132: No AC97 audio processor [ 757.566739][ T8] usb 3-1: Decoder not found [ 757.571430][ T8] em28xx 3-1:0.132: failed to create media graph [ 757.593551][ T8] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 757.646625][ T8] em28xx 3-1:0.132: Remote control support is not available for this card. [ 757.705424][ T5816] em28xx 3-1:0.132: Closing input extension [ 757.766003][ T5816] em28xx 3-1:0.132: Freeing device [ 757.985020][ T5844] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 758.165103][ T5844] usb 1-1: device descriptor read/64, error -71 [ 758.435100][ T5844] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 758.475048][ T9426] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 758.595066][ T5844] usb 1-1: device descriptor read/64, error -71 [ 758.665048][ T9426] usb 3-1: Using ep0 maxpacket: 32 [ 758.713734][ T9426] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 758.722931][ T9426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.732155][ T5844] usb usb1-port1: attempt power cycle [ 758.737837][ T9426] usb 3-1: Product: syz [ 758.742299][ T9426] usb 3-1: Manufacturer: syz [ 758.747539][ T9426] usb 3-1: SerialNumber: syz [ 758.755924][ T9426] usb 3-1: config 0 descriptor?? [ 758.981601][ T9426] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 016 [ 759.154712][ T5844] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 759.196411][ T5844] usb 1-1: device descriptor read/8, error -71 [ 759.486329][ T5844] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 759.496165][ T9426] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 759.496198][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 759.514946][T11836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1731'. [ 759.529099][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 759.538269][T11836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1731'. [ 759.562296][T11836] input: syz1 as /devices/virtual/input/input87 [ 759.664459][ T5844] usb 1-1: device descriptor read/8, error -71 [ 759.775273][ T9426] usb 4-1: Using ep0 maxpacket: 32 [ 759.800242][ T5844] usb usb1-port1: unable to enumerate USB device [ 759.812036][ T9426] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 759.906207][ T9426] usb 4-1: config 0 has no interface number 0 [ 760.003716][ T9426] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 760.114447][ T9426] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 760.189490][ T9426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.234457][ T9426] usb 4-1: Product: syz [ 760.273279][ T9426] usb 4-1: Manufacturer: syz [ 760.278760][ T9426] usb 4-1: SerialNumber: syz [ 760.302780][ T9426] usb 4-1: config 0 descriptor?? [ 760.333313][ T9426] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 760.350189][ T9426] em28xx 4-1:0.132: Video interface 132 found: [ 760.725985][ T9426] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 761.455188][T11816] i2c i2c-1: failure writing data [ 761.502862][ T5816] usb 3-1: USB disconnect, device number 16 [ 761.676879][ T9426] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 761.710779][ T9426] em28xx 4-1:0.132: board has no eeprom [ 761.801689][ T9426] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 761.828065][ T9426] em28xx 4-1:0.132: analog set to bulk mode. [ 761.834186][ T5844] em28xx 4-1:0.132: Registering V4L2 extension [ 761.888160][ T9426] usb 4-1: USB disconnect, device number 11 [ 761.916290][ T9426] em28xx 4-1:0.132: Disconnecting em28xx [ 762.151561][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'. [ 762.160782][T11868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1740'. [ 762.175014][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'. [ 762.184026][T11868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1740'. [ 762.204247][T11868] input: syz1 as /devices/virtual/input/input88 [ 762.320606][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1739'. [ 763.051536][T11867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1739'. [ 764.557758][ T5818] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 764.572375][ T5844] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 764.599676][ T5844] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 764.611695][ T5844] em28xx 4-1:0.132: No AC97 audio processor [ 764.633334][ T5844] usb 4-1: Decoder not found [ 764.655406][ T5844] em28xx 4-1:0.132: failed to create media graph [ 764.661854][ T5844] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 764.692127][ T5844] em28xx 4-1:0.132: Remote control support is not available for this card. [ 764.704630][ T9426] em28xx 4-1:0.132: Closing input extension [ 764.737593][ T9426] em28xx 4-1:0.132: Freeing device [ 764.755821][ T5818] usb 3-1: device descriptor read/64, error -71 [ 765.034913][ T5818] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 765.195092][ T5818] usb 3-1: device descriptor read/64, error -71 [ 765.317873][ T5818] usb usb3-port1: attempt power cycle [ 765.725381][ T5818] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 765.768681][T11906] __nla_validate_parse: 2 callbacks suppressed [ 765.768728][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1751'. [ 765.784223][T11906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1751'. [ 765.797710][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1751'. [ 765.807153][T11906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1751'. [ 765.832352][T11906] input: syz1 as /devices/virtual/input/input89 [ 765.868877][ T5818] usb 3-1: device descriptor read/8, error -71 [ 765.987630][ T5816] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 766.185005][ T5818] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 766.348532][ T5818] usb 3-1: device descriptor read/8, error -71 [ 766.536068][ T5818] usb usb3-port1: unable to enumerate USB device [ 766.866314][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 766.878210][ T5816] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 766.887186][ T5816] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 766.895663][ T5816] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 766.911055][ T5816] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 766.930074][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 766.939288][ T5816] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 766.949414][T11917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1752'. [ 766.958645][ T5816] usb 2-1: config 0 has no interface number 0 [ 766.965322][ T5816] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 766.976959][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 766.986030][ T5816] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 767.002813][T11917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1752'. [ 767.012232][ T5816] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 767.022695][ T5816] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 767.038962][ T5816] usb 2-1: config 0 interface 125 has no altsetting 0 [ 767.046329][ T5816] usb 2-1: config 0 interface 125 has no altsetting 2 [ 767.074303][ T5816] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 767.083746][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.092873][ T5816] usb 2-1: Product: syz [ 767.097767][ T5816] usb 2-1: Manufacturer: syz [ 767.102554][ T5816] usb 2-1: SerialNumber: syz [ 767.112138][ T5816] usb 2-1: config 0 descriptor?? [ 767.123185][ T5816] usb 2-1: selecting invalid altsetting 2 [ 768.031991][ C0] usb 2-1: async_complete: urb error -71 [ 768.354903][ T5816] get_1284_register: usb error -71 [ 768.373774][ T5816] usb 2-1: USB disconnect, device number 12 [ 771.215358][ T5844] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 771.375097][ T5844] usb 2-1: device descriptor read/64, error -71 [ 772.194988][ T5844] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 772.585059][ T5844] usb 2-1: device descriptor read/64, error -71 [ 772.794168][ T5844] usb usb2-port1: attempt power cycle [ 773.225066][ T5783] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 773.435060][ T5844] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 773.478799][ T5844] usb 2-1: device descriptor read/8, error -71 [ 773.895558][ T5844] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 774.283047][ T5844] usb 2-1: device descriptor read/8, error -71 [ 774.414482][ T5844] usb usb2-port1: unable to enumerate USB device [ 774.580978][T11989] syz_tun: entered allmulticast mode [ 774.616427][T11988] syz_tun: left allmulticast mode [ 776.040730][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 776.404927][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 776.422543][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.483056][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 776.511662][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 776.534243][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 776.566754][ T9] usb 4-1: Manufacturer: syz [ 776.579115][ T9] usb 4-1: config 0 descriptor?? [ 776.925632][ T27] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 777.002837][T12025] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 777.022566][ T28] audit: type=1326 audit(1777740639.182:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12024 comm="syz.1.1793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x0 [ 777.168767][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 777.188413][ T27] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 777.205244][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.213344][ T27] usb 3-1: Product: syz [ 777.235934][ T27] usb 3-1: Manufacturer: syz [ 777.240629][ T27] usb 3-1: SerialNumber: syz [ 777.259661][ T27] usb 3-1: config 0 descriptor?? [ 778.484439][ T27] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 021 [ 780.671029][ T9] usb 4-1: USB disconnect, device number 12 [ 780.985066][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 781.265462][T12014] i2c i2c-1: failure reading status [ 781.291497][ T9] usb 3-1: USB disconnect, device number 21 [ 781.297727][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 781.335107][ T8] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 781.343383][ T8] usb 1-1: config 0 has no interface number 0 [ 781.351318][ T8] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 782.476518][ T8] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 782.698171][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.733957][ T8] usb 1-1: Product: syz [ 782.739413][ T8] usb 1-1: Manufacturer: syz [ 782.748794][ T8] usb 1-1: SerialNumber: syz [ 782.786165][ T8] usb 1-1: config 0 descriptor?? [ 782.799006][ T8] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 782.823212][ T8] em28xx 1-1:0.132: Video interface 132 found: [ 784.413978][ T8] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 784.527843][ T8] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 784.561575][ T8] em28xx 1-1:0.132: board has no eeprom [ 784.656338][ T8] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 784.670469][ T8] em28xx 1-1:0.132: analog set to bulk mode. [ 784.689585][ T9] em28xx 1-1:0.132: Registering V4L2 extension [ 784.722679][ T8] usb 1-1: USB disconnect, device number 14 [ 784.745869][ T8] em28xx 1-1:0.132: Disconnecting em28xx [ 785.201294][ T9] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 785.218440][ T9] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 785.244935][ T9] em28xx 1-1:0.132: No AC97 audio processor [ 785.258825][ T9] usb 1-1: Decoder not found [ 785.263667][ T9] em28xx 1-1:0.132: failed to create media graph [ 785.270899][ T9] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 785.281555][ T9] em28xx 1-1:0.132: Remote control support is not available for this card. [ 785.290812][ T8] em28xx 1-1:0.132: Closing input extension [ 785.317919][ T8] em28xx 1-1:0.132: Freeing device [ 785.924908][ T5844] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 786.266132][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 786.438395][ T5844] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 786.656681][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.681585][ T5844] usb 4-1: Product: syz [ 786.705285][ T5844] usb 4-1: Manufacturer: syz [ 786.732958][ T5844] usb 4-1: SerialNumber: syz [ 786.784154][ T5844] usb 4-1: config 0 descriptor?? [ 787.074665][ T5844] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 013 [ 787.088975][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'. [ 787.107183][T12116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1819'. [ 787.131335][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'. [ 787.140377][T12114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1819'. [ 787.152778][T12114] input: syz1 as /devices/virtual/input/input90 [ 787.159817][ T27] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 787.345002][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 787.353922][ T27] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 787.367091][ T27] usb 3-1: config 0 has no interface number 0 [ 787.373973][ T27] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 787.388912][ T27] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 787.398709][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.411212][ T27] usb 3-1: Product: syz [ 787.415924][ T27] usb 3-1: Manufacturer: syz [ 787.420722][ T27] usb 3-1: SerialNumber: syz [ 787.430559][ T27] usb 3-1: config 0 descriptor?? [ 787.446132][ T27] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 787.457275][ T27] em28xx 3-1:0.132: Video interface 132 found: [ 787.853156][ T27] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 788.271804][ T27] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 788.289674][ T27] em28xx 3-1:0.132: board has no eeprom [ 788.365000][ T27] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 788.373214][ T27] em28xx 3-1:0.132: analog set to bulk mode. [ 788.383074][ T8654] em28xx 3-1:0.132: Registering V4L2 extension [ 788.427931][ T27] usb 3-1: USB disconnect, device number 22 [ 788.458075][ T27] em28xx 3-1:0.132: Disconnecting em28xx [ 788.773203][ T8654] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 788.799242][ T8654] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 788.829301][ T8654] em28xx 3-1:0.132: No AC97 audio processor [ 788.867320][ T8654] usb 3-1: Decoder not found [ 788.872012][ T8654] em28xx 3-1:0.132: failed to create media graph [ 788.905409][ T8654] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 788.936777][ T8654] em28xx 3-1:0.132: Remote control support is not available for this card. [ 788.983348][ T27] em28xx 3-1:0.132: Closing input extension [ 789.029576][ T27] em28xx 3-1:0.132: Freeing device [ 789.585382][T12099] i2c i2c-1: failure reading status [ 789.628661][ T9] usb 4-1: USB disconnect, device number 13 [ 791.287706][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 791.415022][T12150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1829'. [ 791.629915][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 791.641102][T12146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1829'. [ 792.437026][T12146] input: syz1 as /devices/virtual/input/input91 [ 793.085101][ T27] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 793.225012][ T5844] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 793.284897][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 793.310133][ T27] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 793.319404][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.332163][ T27] usb 3-1: Product: syz [ 793.336951][ T27] usb 3-1: Manufacturer: syz [ 793.342288][ T27] usb 3-1: SerialNumber: syz [ 793.351007][ T27] usb 3-1: config 0 descriptor?? [ 793.435088][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 793.454024][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.470856][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 793.481176][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 793.503115][ T5844] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 793.523867][ T5844] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 793.539040][ T5844] usb 4-1: Manufacturer: syz [ 793.575290][ T5844] usb 4-1: config 0 descriptor?? [ 793.595547][ T27] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 023 [ 793.930077][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 793.939137][T12182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1842'. [ 793.950083][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 793.959692][T12182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1842'. [ 793.976601][T12182] input: syz1 as /devices/virtual/input/input92 [ 795.693492][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'. [ 795.703748][T12215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1851'. [ 795.715716][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'. [ 795.724686][T12215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1851'. [ 795.741391][T12215] input: syz1 as /devices/virtual/input/input93 [ 796.135296][T12171] i2c i2c-1: failure reading status [ 796.767688][ T8] usb 4-1: USB disconnect, device number 14 [ 796.805495][ T9] usb 3-1: USB disconnect, device number 23 [ 797.661874][T12235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.336726][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 799.353428][ T5844] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 799.432035][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 799.441426][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 799.454139][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 799.463407][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 799.481417][T12254] input: syz1 as /devices/virtual/input/input94 [ 799.527062][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 799.605214][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 799.656614][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.773033][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 799.795316][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 799.927912][ T9] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 799.941079][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 800.039211][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.112497][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 800.150177][ T9] usb 3-1: Product: syz [ 800.207169][ T9] usb 3-1: Manufacturer: syz [ 800.216975][ T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 800.252924][ T9] usb 3-1: SerialNumber: syz [ 800.283533][ T8] usb 4-1: Manufacturer: syz [ 800.323709][ T9] usb 3-1: config 0 descriptor?? [ 800.341793][ T8] usb 4-1: config 0 descriptor?? [ 800.385891][ T5844] usb 1-1: device descriptor read/64, error -71 [ 800.559682][ T9] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 024 [ 801.024960][ T5844] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 801.175017][ T5844] usb 1-1: device descriptor read/64, error -71 [ 801.307974][ T5844] usb usb1-port1: attempt power cycle [ 801.643234][T12271] overlayfs: overlapping lowerdir path [ 801.661037][T12273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1872'. [ 801.903209][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1873'. [ 801.912404][T12280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1873'. [ 801.926222][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1873'. [ 801.935391][T12280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1873'. [ 801.958556][T12280] input: syz1 as /devices/virtual/input/input95 [ 803.051041][T12249] i2c i2c-1: failure reading status [ 803.377724][ T5844] usb 4-1: USB disconnect, device number 15 [ 803.953251][ T27] usb 3-1: USB disconnect, device number 24 [ 806.462730][ T28] audit: type=1800 audit(1777740668.542:50): pid=12298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1881" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 806.566283][T12300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1882'. [ 806.939171][T12298] xt_hashlimit: size too large, truncated to 1048576 [ 806.946440][T12298] xt_hashlimit: invalid rate [ 810.865565][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.887564][T12312] block nbd0: shutting down sockets [ 811.302914][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 811.312602][T12324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1886'. [ 811.325369][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 811.334559][T12324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1886'. [ 811.353748][T12324] input: syz1 as /devices/virtual/input/input96 [ 811.560283][T12321] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1888'. [ 812.113635][T12321] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 814.362070][T12334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1892'. [ 814.911012][T12349] syz.0.1895: attempt to access beyond end of device [ 814.911012][T12349] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 814.924377][T12349] F2FS-fs (loop0): Unable to read 1th superblock [ 814.931560][T12349] syz.0.1895: attempt to access beyond end of device [ 814.931560][T12349] loop0: rw=0, sector=8, nr_sectors = 8 limit=0 [ 814.944478][T12349] F2FS-fs (loop0): Unable to read 2th superblock [ 815.932448][T12351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.614997][ T5844] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 816.884938][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 816.911904][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 816.942557][ T5844] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.967283][ T5844] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 816.984437][ T5844] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 817.055101][T12357] binder: 12356:12357 ioctl 4018620d 0 returned -22 [ 817.113006][ T5844] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.113054][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 817.113069][ T5844] usb 2-1: Product: syz [ 817.113079][ T5844] usb 2-1: Manufacturer: syz [ 817.113089][ T5844] usb 2-1: SerialNumber: syz [ 817.388273][ T5844] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 817.428523][ T5844] cdc_ncm 2-1:1.0: bind() failure [ 817.456972][ T5844] usb 2-1: USB disconnect, device number 17 [ 817.514642][T12364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1901'. [ 817.565117][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 817.565141][T12365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1900'. [ 817.567367][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 817.567440][T12365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1900'. [ 817.576903][T12365] input: syz1 as /devices/virtual/input/input97 [ 819.064661][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'. [ 819.073945][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1908'. [ 819.086612][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'. [ 819.095971][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1908'. [ 821.126068][T12388] binder: 12387:12388 ioctl 4018620d 0 returned -22 [ 821.172904][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1910'. [ 823.356571][T12391] comedi comedi0: Minor 2147483647 is invalid! [ 823.596664][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 823.605740][T12405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1912'. [ 823.615790][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 823.624699][T12405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1912'. [ 823.676521][T12405] input: syz1 as /devices/virtual/input/input98 [ 825.070372][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 825.079794][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1918'. [ 825.093693][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 825.103094][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1918'. [ 825.420346][T12424] binder: 12423:12424 ioctl 4018620d 0 returned -22 [ 827.272056][T12432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1921'. [ 827.519235][ T28] audit: type=1326 audit(1777740689.672:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.3.1924" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f659ab9cdd9 code=0x0 [ 830.110371][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 830.119598][T12457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1928'. [ 830.132184][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 830.141380][T12457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1928'. [ 830.160239][T12457] input: syz1 as /devices/virtual/input/input99 [ 830.534444][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1929'. [ 830.556924][T12464] binder: 12459:12464 ioctl 4018620d 0 returned -22 [ 830.699926][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'. [ 830.709179][T12467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1931'. [ 830.723286][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'. [ 830.732383][T12467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1931'. [ 832.009162][ T27] IPVS: starting estimator thread 0... [ 832.121077][T12477] IPVS: using max 17 ests per chain, 40800 per kthread [ 834.338478][T12494] binder: 12493:12494 ioctl 4018620d 0 returned -22 [ 834.410454][T12499] __nla_validate_parse: 1 callbacks suppressed [ 834.410470][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1943'. [ 834.537094][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1942'. [ 834.546317][T12503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1942'. [ 834.558844][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1942'. [ 834.567975][T12503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1942'. [ 836.401254][T12525] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1950'. [ 838.346747][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'. [ 838.355740][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1955'. [ 838.367719][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'. [ 838.376756][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1955'. [ 839.340070][T12546] netlink: 'syz.0.1957': attribute type 30 has an invalid length. [ 839.364084][T12546] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.374058][T12546] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.383005][T12546] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.391833][T12546] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.675610][T12555] __nla_validate_parse: 2 callbacks suppressed [ 839.675629][T12555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1961'. [ 840.785785][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 840.794681][T12567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1965'. [ 840.806770][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 840.816122][T12567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1965'. [ 841.037569][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'. [ 841.470458][T12584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1973'. [ 841.527096][ T9577] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 841.720603][ T9577] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.752942][ T9577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 841.801124][ T9577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.811979][ T9577] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 841.824761][ T9577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.589631][ T9577] usb 2-1: config 0 descriptor?? [ 842.855288][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 842.864328][T12599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1977'. [ 842.877877][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 843.234467][ T9577] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 843.401692][ T9577] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 843.509368][ T9577] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 843.645396][ T9577] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found [ 843.653128][ T9577] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found [ 843.721704][ T9577] usb 2-1: USB disconnect, device number 18 [ 848.509755][T12630] __nla_validate_parse: 3 callbacks suppressed [ 848.509839][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 848.525473][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1987'. [ 848.538835][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 848.548108][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1987'. [ 848.777820][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 849.064960][ T27] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 849.113605][T12645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1995'. [ 849.247247][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 849.269585][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.282107][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.293271][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 850.134305][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.166318][ T27] usb 3-1: config 0 descriptor?? [ 850.342883][ T27] hub 3-1:0.0: USB hub found [ 850.945616][ T27] hub 3-1:0.0: 1 port detected [ 851.402994][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'. [ 851.412088][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1999'. [ 851.424135][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'. [ 851.433265][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1999'. [ 851.986960][ T27] hub 3-1:0.0: activate --> -90 [ 852.231059][ T27] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 852.243890][ T5844] usb 3-1: USB disconnect, device number 25 [ 852.422737][T12668] batman_adv: batadv0: Adding interface: dummy0 [ 852.431185][T12668] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.462548][T12668] batman_adv: batadv0: Interface activated: dummy0 [ 852.496223][T12671] batadv0: mtu less than device minimum [ 852.504240][T12671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 852.517429][T12671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 852.529955][T12671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 852.542541][T12671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 852.555078][T12671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 852.567692][T12671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 852.580289][T12671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 852.592886][T12671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 852.605360][T12671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 852.707979][T12673] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 852.717258][T12673] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 853.749199][T12680] __nla_validate_parse: 1 callbacks suppressed [ 853.749218][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2005'. [ 854.433720][T12683] block nbd0: server does not support multiple connections per device. [ 854.443612][T12683] block nbd0: shutting down sockets [ 854.918390][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'. [ 856.553645][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'. [ 856.562950][T12703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2010'. [ 856.574911][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'. [ 856.583872][T12703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2010'. [ 857.388766][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 857.397862][T12709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2011'. [ 857.485231][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 857.494262][T12713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2011'. [ 857.498809][T12712] overlayfs: failed to resolve './file1/file0': -2 [ 858.344902][ T5844] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 858.725100][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 858.733743][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.745080][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.756015][ T5844] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 858.767135][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.794390][ T5844] usb 1-1: config 0 descriptor?? [ 858.892680][ T5844] hub 1-1:0.0: USB hub found [ 859.496715][ T5844] hub 1-1:0.0: 1 port detected [ 859.861332][T12746] __nla_validate_parse: 1 callbacks suppressed [ 859.861394][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2022'. [ 859.877067][T12746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2022'. [ 859.889222][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2022'. [ 859.898388][T12746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2022'. [ 860.032000][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 860.304920][ T9556] Bluetooth: hci3: command 0x0406 tx timeout [ 860.315072][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 860.358035][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.493458][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 860.570993][ T5818] hub 1-1:0.0: activate --> -90 [ 860.620076][ T9] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 860.679845][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 860.694706][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 860.715438][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 860.777541][ T9] usb 4-1: Manufacturer: syz [ 860.779907][ T27] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 860.803026][T12750] overlayfs: missing 'lowerdir' [ 860.916434][ T27] usb 1-1: USB disconnect, device number 18 [ 861.626419][ T9] usb 4-1: config 0 descriptor?? [ 861.838431][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 861.848320][T12758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2025'. [ 861.940336][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 861.949476][T12760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2025'. [ 863.215249][T12740] syz.3.2021 (12740) used greatest stack depth: 20104 bytes left [ 864.263775][ T5844] usb 4-1: USB disconnect, device number 16 [ 864.311479][T12785] overlayfs: missing 'lowerdir' [ 864.352722][T12787] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2033'. [ 864.408833][T12787] net_ratelimit: 10 callbacks suppressed [ 864.408850][T12787] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 864.698156][T12795] loop8: detected capacity change from 0 to 7 [ 864.723396][T12795] Dev loop8: unable to read RDB block 7 [ 864.736610][T12795] loop8: unable to read partition table [ 864.751923][T12795] loop8: partition table beyond EOD, truncated [ 864.767434][T12795] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 864.936544][T12799] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 864.963887][ T28] audit: type=1326 audit(1777740727.122:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12798 comm="syz.0.2038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6906f9cdd9 code=0x0 [ 865.645018][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 865.668168][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 865.764511][T12815] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2045'. [ 865.776181][T12815] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 865.855197][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 865.866276][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.695552][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 866.721533][ T9] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 866.732293][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.755515][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 866.774840][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 866.782928][ T9] usb 3-1: Manufacturer: syz [ 866.823263][T12825] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 866.827489][ T9] usb 3-1: config 0 descriptor?? [ 866.850223][ T28] audit: type=1326 audit(1777740729.012:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.3.2048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f659ab9cdd9 code=0x0 [ 867.123651][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 867.245257][T12840] overlayfs: missing 'lowerdir' [ 868.045760][T12844] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2054'. [ 868.059573][T12844] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 868.421157][ T9] usb 3-1: USB disconnect, device number 26 [ 869.172966][T12858] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 869.235441][ T28] audit: type=1326 audit(1777740731.332:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.2.2059" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f394719cdd9 code=0x0 [ 869.504564][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'. [ 869.514659][T12868] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2064'. [ 869.528448][T12868] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 869.745125][T12875] overlayfs: missing 'workdir' [ 870.402568][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.692250][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2068'. [ 870.945225][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 871.080189][T12892] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 871.113062][ T28] audit: type=1326 audit(1777740733.272:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.1.2071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x0 [ 871.970535][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 871.978075][ T9] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 871.997314][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 872.006611][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.014648][ T9] usb 3-1: Product: syz [ 872.027012][ T9] usb 3-1: Manufacturer: syz [ 872.031765][ T9] usb 3-1: SerialNumber: syz [ 872.039471][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 872.082904][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2073'. [ 872.105839][T12900] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2074'. [ 872.125971][T12900] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 874.204956][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 874.211652][ T9] r8152-cfgselector 3-1: bad CDC descriptors [ 874.266288][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 874.286571][ T9] r8152-cfgselector 3-1: USB disconnect, device number 27 [ 877.350248][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2084'. [ 877.615515][T12942] netlink: 'syz.3.2085': attribute type 10 has an invalid length. [ 877.669312][T12942] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.715711][T12942] team0: entered promiscuous mode [ 877.721619][T12942] team_slave_0: entered promiscuous mode [ 877.732404][T12942] team_slave_1: entered promiscuous mode [ 877.755092][T12942] bond0: (slave team0): Enslaving as an active interface with an up link [ 881.148312][ T5818] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 881.212077][ T5818] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 881.465150][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 881.677330][ T9] usb 1-1: config 0 has no interfaces? [ 882.756405][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 882.765582][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 882.774068][ T9] usb 1-1: SerialNumber: syz [ 882.807336][ T28] audit: type=1800 audit(1777740744.952:56): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2094" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 882.829350][ T9] usb 1-1: config 0 descriptor?? [ 882.943137][T12968] xt_hashlimit: size too large, truncated to 1048576 [ 882.949910][T12968] xt_hashlimit: invalid rate [ 883.175513][ T5818] usb 1-1: USB disconnect, device number 19 [ 884.447881][T12980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.549487][T12982] overlayfs: missing 'workdir' [ 887.311329][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 887.320470][T13002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2100'. [ 887.333192][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 887.342302][T13002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2100'. [ 887.361956][T13002] input: syz1 as /devices/virtual/input/input102 [ 891.470681][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'. [ 891.631151][T13037] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 891.665359][ T28] audit: type=1326 audit(1777740753.812:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13036 comm="syz.3.2110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f659ab9cdd9 code=0x0 [ 892.709026][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2111'. [ 892.718387][T13042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2111'. [ 892.730873][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2111'. [ 892.739948][T13042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2111'. [ 892.764368][T13042] input: syz1 as /devices/virtual/input/input103 [ 895.156926][T13067] loop8: detected capacity change from 0 to 7 [ 895.973938][T13067] Dev loop8: unable to read RDB block 7 [ 896.117233][T13067] loop8: unable to read partition table [ 896.123271][T13067] loop8: partition table beyond EOD, truncated [ 896.197501][T13067] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 898.318101][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 898.327197][T13090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2122'. [ 898.339027][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 898.348043][T13090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2122'. [ 898.365394][T13090] input: syz1 as /devices/virtual/input/input104 [ 903.929688][T13114] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 903.957616][ T28] audit: type=1326 audit(1777740766.122:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13111 comm="syz.0.2128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6906f9cdd9 code=0x0 [ 904.187014][T13120] loop8: detected capacity change from 0 to 7 [ 904.205606][T13038] Dev loop8: unable to read RDB block 7 [ 904.211268][T13038] loop8: unable to read partition table [ 904.246644][T13038] loop8: partition table beyond EOD, truncated [ 904.267916][T13120] Dev loop8: unable to read RDB block 7 [ 904.283878][T13120] loop8: unable to read partition table [ 904.304421][T13120] loop8: partition table beyond EOD, truncated [ 904.314306][T13120] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 904.685501][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 904.694528][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2135'. [ 904.716195][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 904.725289][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2135'. [ 904.767574][T13129] input: syz1 as /devices/virtual/input/input105 [ 908.584354][T13150] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 908.624396][ T28] audit: type=1326 audit(1777740770.772:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.1.2140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x0 [ 911.332059][T13174] loop8: detected capacity change from 0 to 7 [ 911.351209][T13174] Dev loop8: unable to read RDB block 7 [ 911.364899][T13174] loop8: unable to read partition table [ 911.370865][T13174] loop8: partition table beyond EOD, truncated [ 911.410877][T13174] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 913.519140][T13186] binder: 13185:13186 ioctl 4018620d 0 returned -22 [ 913.686080][T13190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.965038][ T28] audit: type=1326 audit(1777740778.102:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.2158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394719cdd9 code=0x7ffc0000 [ 916.053362][ T28] audit: type=1326 audit(1777740778.102:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.2158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394719cdd9 code=0x7ffc0000 [ 916.095948][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 916.143741][ T28] audit: type=1326 audit(1777740778.112:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.2158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f394719cdd9 code=0x7ffc0000 [ 916.203697][ T28] audit: type=1326 audit(1777740778.122:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.2158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394719cdd9 code=0x7ffc0000 [ 916.273157][ T28] audit: type=1326 audit(1777740778.122:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.2158" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394719cdd9 code=0x7ffc0000 [ 921.345132][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 921.352936][ T9] usb 1-1: no configurations [ 921.368761][ T9] usb 1-1: can't read configurations, error -22 [ 921.534902][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 923.015011][ T9] usb 1-1: device descriptor read/64, error -32 [ 923.165226][ T9] usb usb1-port1: attempt power cycle [ 923.595286][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 923.629428][ T9] usb 1-1: device descriptor read/8, error -32 [ 923.706272][T13272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.904997][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 923.976890][ T9] usb 1-1: device descriptor read/8, error -32 [ 924.139098][ T9] usb usb1-port1: unable to enumerate USB device [ 924.642313][T13274] xt_hashlimit: size too large, truncated to 1048576 [ 924.649234][T13274] xt_hashlimit: invalid rate [ 927.315067][ T5816] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 927.515846][ T5816] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 927.534922][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.565739][ T5816] usb 2-1: config 0 descriptor?? [ 927.600547][ T5816] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 927.700243][T13303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.738454][T13303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.209200][ T5816] usb 2-1: USB disconnect, device number 19 [ 928.805777][T13309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2188'. [ 928.820782][T13309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2188'. [ 929.687772][T13314] xfrm0: entered allmulticast mode [ 929.942829][T13323] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2192'. [ 929.955412][T13323] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2192'. [ 931.903638][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.545260][ T5816] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 933.774917][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 933.817179][ T5816] usb 2-1: device descriptor read/all, error -71 [ 933.916952][T13344] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 934.876420][T13368] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 934.964985][ T5816] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 936.075360][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 936.147188][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.199340][T13371] xt_hashlimit: size too large, truncated to 1048576 [ 936.206150][T13371] xt_hashlimit: invalid rate [ 936.212947][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 936.273223][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 936.288532][ T5816] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 936.300063][ T5816] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 936.318518][ T5816] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 936.481222][ T5816] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 936.489881][ T5816] usb 2-1: Manufacturer: syz [ 936.498673][ T5816] usb 2-1: config 0 descriptor?? [ 936.636855][T13378] dlm: no local IP address has been set [ 936.643041][T13378] dlm: cannot start dlm midcomms -107 [ 937.677618][ T5816] rc_core: IR keymap rc-hauppauge not found [ 937.683592][ T5816] Registered IR keymap rc-empty [ 937.698879][ T5816] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 937.746684][ T5816] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 937.805689][ T5816] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 937.840840][ T5816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input109 [ 937.884550][ T5816] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 937.947631][ T5816] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 937.999361][ T5816] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 938.037965][ T5816] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 938.103671][ T5816] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 938.167169][ T5816] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 938.238250][ T5816] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 938.285615][ T5816] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 938.337014][ T5816] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 938.375340][ T5816] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 938.444050][ T5816] mceusb 2-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 938.485641][ T5816] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 938.523742][ T5816] usb 2-1: USB disconnect, device number 21 [ 938.709301][T13401] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 939.915164][ T28] audit: type=1800 audit(1777740801.972:65): pid=13409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2221" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 940.275522][T13405] xt_hashlimit: size too large, truncated to 1048576 [ 940.282331][T13405] xt_hashlimit: invalid rate [ 942.205102][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'. [ 942.734883][ T5816] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 942.916727][T13445] xt_hashlimit: size too large, truncated to 1048576 [ 942.923580][T13445] xt_hashlimit: invalid rate [ 942.925150][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 944.339971][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.431551][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 945.449076][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 945.458889][ T5816] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 945.468761][ T5816] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 945.530965][ T5816] usb 2-1: string descriptor 0 read error: -71 [ 945.538866][ T5816] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 945.548066][ T5816] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 945.558086][ T5816] usb 2-1: config 0 descriptor?? [ 945.564065][ T5816] usb 2-1: can't set config #0, error -71 [ 945.571799][ T5816] usb 2-1: USB disconnect, device number 22 [ 946.051348][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2239'. [ 947.564245][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'. [ 947.573462][T13476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2242'. [ 947.586243][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'. [ 947.595314][T13476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2242'. [ 950.063207][T13490] xt_hashlimit: size too large, truncated to 1048576 [ 950.070137][T13490] xt_hashlimit: invalid rate [ 950.777775][T13492] binder: 13491:13492 ioctl 4018620d 0 returned -22 [ 950.924864][ T5818] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 950.985966][T13494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 951.806227][T13496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2250'. [ 951.844975][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 951.852642][ T5818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.864083][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 952.339748][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 952.350164][ T5818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 952.360389][ T5818] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 952.383829][ T5818] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 952.393133][ T5818] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 952.401803][ T5818] usb 1-1: Manufacturer: syz [ 952.424299][ T5818] usb 1-1: config 0 descriptor?? [ 952.522219][T13498] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 952.611273][T13503] futex_wake_op: syz.3.2252 tries to shift op by 144; fix this program [ 952.814926][ T5818] rc_core: IR keymap rc-hauppauge not found [ 952.837188][ T5818] Registered IR keymap rc-empty [ 952.846321][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 952.875861][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 952.924266][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 953.005737][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input110 [ 953.207204][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.247239][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.286020][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.525144][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 953.555778][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 954.731995][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 954.833347][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 954.867116][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.752976][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.838311][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.916839][ T5818] mceusb 1-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 955.925911][ T5818] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 955.939927][ T5818] usb 1-1: USB disconnect, device number 24 [ 956.159823][T13532] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2259'. [ 957.145906][T13539] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2260'. [ 957.158085][T13539] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2260'. [ 962.235023][ T27] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 964.755317][T13578] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2271'. [ 964.903829][T13581] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2272'. [ 964.916006][T13581] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2272'. [ 969.413709][ T5844] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 970.249464][T13613] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2282'. [ 970.261386][T13613] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2282'. [ 970.414854][ T5844] usb 3-1: device not accepting address 28, error -71 [ 971.012798][T13615] netlink: 'syz.2.2284': attribute type 10 has an invalid length. [ 971.092354][T13615] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 971.126214][T13615] team0: Failed to send options change via netlink (err -105) [ 971.140463][T13615] team0: Port device netdevsim0 added [ 973.951126][T13643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2281'. [ 974.979093][T13659] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2293'. [ 974.989537][ T5818] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 975.000089][T13659] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2293'. [ 975.276854][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 975.345305][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.458214][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 975.607245][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 975.695319][ T5818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 975.743134][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 975.793782][ T5818] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 975.854852][ T5818] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 975.862947][ T5818] usb 4-1: Manufacturer: syz [ 975.897152][T13654] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 975.929706][ T5818] usb 4-1: config 0 descriptor?? [ 978.384901][ T5818] rc_core: IR keymap rc-hauppauge not found [ 978.580161][T13687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2302'. [ 979.190044][ T5818] Registered IR keymap rc-empty [ 979.195455][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 979.226305][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 979.255974][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 979.271895][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input115 [ 979.320390][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 979.365972][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 979.404897][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 979.522462][T13702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2305'. [ 979.534521][T13702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2305'. [ 979.847080][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 980.400672][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 980.435913][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 980.515782][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 980.668861][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.327792][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.365787][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.618186][ T5818] mceusb 4-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 981.627236][ T5818] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 982.987368][ T5818] usb 4-1: USB disconnect, device number 17 [ 983.033174][T13706] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 983.345006][ T5844] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 983.545523][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 983.641096][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.789588][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 983.944677][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 984.207340][ T5844] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 984.218593][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.234942][ T5844] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 984.244186][ T5844] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 984.253626][ T5844] usb 3-1: Manufacturer: syz [ 984.263127][ T5844] usb 3-1: config 0 descriptor?? [ 984.428894][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2316'. [ 984.656195][T13743] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2317'. [ 984.668316][T13743] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2317'. [ 985.424799][ T5844] rc_core: IR keymap rc-hauppauge not found [ 985.446065][ T5844] Registered IR keymap rc-empty [ 985.462961][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 985.505977][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 985.545608][ T5844] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 985.576888][ T5844] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input117 [ 985.615377][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 985.665200][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 985.715712][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.065161][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.110156][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.225246][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.274863][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.314844][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.590807][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.625609][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 986.699085][ T5844] mceusb 3-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 986.725277][ T5844] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 987.019717][ T5844] usb 3-1: USB disconnect, device number 30 [ 987.685904][ T28] audit: type=1326 audit(1777740849.852:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 987.771033][ T28] audit: type=1326 audit(1777740849.872:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 988.067390][ T28] audit: type=1326 audit(1777740849.872:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 988.559997][ T28] audit: type=1326 audit(1777740849.902:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 988.794836][ T28] audit: type=1326 audit(1777740849.902:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 988.819187][ T28] audit: type=1326 audit(1777740849.902:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 988.844189][ T28] audit: type=1326 audit(1777740849.902:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 988.868889][ T28] audit: type=1326 audit(1777740849.902:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 988.893200][ T28] audit: type=1326 audit(1777740849.902:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 988.917446][ T28] audit: type=1326 audit(1777740849.902:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.1.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa83639cdd9 code=0x7ffc0000 [ 989.656846][ T5816] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 989.710604][T13787] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2327'. [ 989.722275][T13787] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2327'. [ 990.274954][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 990.289723][ T5816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.307663][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 990.322826][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 990.337368][ T5816] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 990.357560][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.393938][ T5816] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 990.410481][ T5816] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 990.451666][ T5816] usb 4-1: Manufacturer: syz [ 990.479774][ T5816] usb 4-1: config 0 descriptor?? [ 991.527766][ T5816] rc_core: IR keymap rc-hauppauge not found [ 991.540091][ T5816] Registered IR keymap rc-empty [ 991.549132][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.595747][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.656489][ T5816] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 991.728313][ T5816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input120 [ 991.828635][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 992.694895][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 992.725780][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 992.764928][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 992.777581][T13818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2336'. [ 992.814912][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 992.864966][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 992.932711][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 993.065609][T13826] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2339'. [ 993.086104][T13826] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2339'. [ 993.804889][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 993.815445][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.098142][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 994.436040][T13831] overlayfs: missing 'lowerdir' [ 994.451282][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 994.524085][ T5816] mceusb 4-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 994.574793][ T5816] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 994.625563][ T5816] usb 4-1: USB disconnect, device number 18 [ 994.984585][T13833] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 995.049369][T13847] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2344'. [ 998.540727][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2349'. [ 998.550225][T13866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2349'. [ 1000.678874][T12727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1000.691202][T12727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1000.700204][T12727] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1000.711738][T12727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1000.735346][T12727] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1000.745239][T12727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1000.880950][T13878] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1002.819784][T12727] Bluetooth: hci4: command tx timeout [ 1003.017302][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 1003.026531][T13910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2359'. [ 1003.038189][T13882] chnl_net:caif_netlink_parms(): no params data found [ 1004.864869][T12727] Bluetooth: hci4: command tx timeout [ 1006.092840][T13882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.124489][T13882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.139130][T13882] bridge_slave_0: entered allmulticast mode [ 1006.147184][T13882] bridge_slave_0: entered promiscuous mode [ 1006.156623][T13882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.164054][T13882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.171656][T13882] bridge_slave_1: entered allmulticast mode [ 1006.179642][T13882] bridge_slave_1: entered promiscuous mode [ 1006.234052][T13882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.251465][T13882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.292710][T13927] loop8: detected capacity change from 0 to 7 [ 1006.318680][T13927] Dev loop8: unable to read RDB block 7 [ 1006.335907][T13927] loop8: unable to read partition table [ 1006.341855][T13927] loop8: partition table beyond EOD, truncated [ 1006.363680][T13927] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1006.390224][T13882] team0: Port device team_slave_0 added [ 1006.413294][T13882] team0: Port device team_slave_1 added [ 1006.433381][T13923] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1006.490667][T13882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.510886][T13882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.564810][T13882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.603431][T13882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.624762][T13882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.681139][T13882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.946105][T12727] Bluetooth: hci4: command tx timeout [ 1007.564654][T13882] hsr_slave_0: entered promiscuous mode [ 1007.607277][T13882] hsr_slave_1: entered promiscuous mode [ 1007.624935][T13882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1007.680119][T13882] Cannot create hsr debugfs directory [ 1009.105000][T12727] Bluetooth: hci4: command tx timeout [ 1011.560330][T13882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.813005][T13882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.030726][T13882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.248048][T13882] team0: Port device netdevsim0 removed [ 1012.273920][T13882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.245864][T13882] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1013.295263][T13882] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1013.369243][T13882] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1013.411941][T13961] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1013.421031][T13882] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1013.505341][T13971] binder: 13970:13971 ioctl 4018620d 0 returned -22 [ 1014.481032][T13882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.547487][T13882] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.620440][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.627721][ T6073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.748706][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.756010][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.570693][T14001] loop8: detected capacity change from 0 to 7 [ 1021.605886][T14001] Dev loop8: unable to read RDB block 7 [ 1021.611562][T14001] loop8: unable to read partition table [ 1021.653977][T14001] loop8: partition table beyond EOD, truncated [ 1021.680597][T14001] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1021.712369][T13882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.392939][T13882] veth0_vlan: entered promiscuous mode [ 1022.419829][T13882] veth1_vlan: entered promiscuous mode [ 1022.505154][T13882] veth0_macvtap: entered promiscuous mode [ 1022.528784][T13882] veth1_macvtap: entered promiscuous mode [ 1022.589746][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.774846][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.804893][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.824773][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.868095][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.907299][T14015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1022.972768][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.983396][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.474865][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.509201][T13882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.621266][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.684818][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.705033][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.734796][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.764987][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.792544][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.815796][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.852642][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.896377][T13882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.974238][T13882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.999052][T13882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.045006][T13882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.053952][T13882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.356114][ T8729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.364016][ T8729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.057111][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.076729][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.605155][ T5844] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1030.084918][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 1030.096657][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.114799][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1030.144636][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1030.154476][ T5844] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1030.203802][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.239666][ T5844] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1030.265222][ T5844] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1030.273314][ T5844] usb 3-1: Manufacturer: syz [ 1030.306510][ T5844] usb 3-1: config 0 descriptor?? [ 1030.705999][ T5844] rc_core: IR keymap rc-hauppauge not found [ 1030.714927][ T5844] Registered IR keymap rc-empty [ 1030.719986][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1030.775118][T14047] Illegal XDP return value 4294967294 on prog (id 114) dev N/A, expect packet loss! [ 1030.794982][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1030.845970][ T5844] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1030.891009][ T5844] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input124 [ 1030.949815][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1030.995908][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1031.035078][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1031.088625][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1033.065345][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1033.125045][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1033.153427][ T9556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1033.175977][ T9556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1033.184769][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1033.197333][ T9556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1033.215252][ T9556] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1033.236466][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1033.255255][ T9556] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1033.271443][ T9556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1033.278980][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1033.345071][ T5844] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1033.394661][ T5844] mceusb 3-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 1033.428011][ T6082] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.439284][ T5844] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1033.498411][ T5844] usb 3-1: USB disconnect, device number 31 [ 1035.348553][T12727] Bluetooth: hci1: command tx timeout [ 1035.381074][ T6082] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.644241][ T6082] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.831006][ T6082] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.051192][T14077] netlink: 'syz.3.2393': attribute type 16 has an invalid length. [ 1036.073118][T14077] netlink: 'syz.3.2393': attribute type 3 has an invalid length. [ 1036.082997][T14077] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.2393'. [ 1036.247182][T14056] chnl_net:caif_netlink_parms(): no params data found [ 1037.732922][T12727] Bluetooth: hci1: command tx timeout [ 1039.893594][ T9556] Bluetooth: hci1: command tx timeout [ 1041.704824][T14099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2396'. [ 1041.764928][T14104] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2396'. [ 1041.911204][ T9556] Bluetooth: hci1: command tx timeout [ 1041.961380][T14056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.015004][T14056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.084983][T14056] bridge_slave_0: entered allmulticast mode [ 1042.092663][T14056] bridge_slave_0: entered promiscuous mode [ 1042.406418][T14056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.424208][T14056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.442335][T14056] bridge_slave_1: entered allmulticast mode [ 1042.476712][T14056] bridge_slave_1: entered promiscuous mode [ 1042.722350][T14056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.848308][T14056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.066102][T14056] team0: Port device team_slave_0 added [ 1043.144183][T14056] team0: Port device team_slave_1 added [ 1043.217797][T14056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.225892][T14056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.252552][T14056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.263680][T13059] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1043.287377][T14056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.294602][T14056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.337529][T14056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.455161][T13059] usb 4-1: Using ep0 maxpacket: 16 [ 1043.462591][T13059] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.473665][T13059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1043.486709][T13059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1043.498287][T13059] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1043.511063][T13059] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1043.561646][T13059] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1043.587596][T13059] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1043.636523][T13059] usb 4-1: Manufacturer: syz [ 1043.675362][T13059] usb 4-1: config 0 descriptor?? [ 1043.700035][T14056] hsr_slave_0: entered promiscuous mode [ 1043.803847][T14056] hsr_slave_1: entered promiscuous mode [ 1043.821559][T14056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1043.849940][T14056] Cannot create hsr debugfs directory [ 1043.994819][T13059] rc_core: IR keymap rc-hauppauge not found [ 1044.004590][T13059] Registered IR keymap rc-empty [ 1044.013449][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.059506][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.151216][T13059] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1044.169080][T13059] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input125 [ 1044.208620][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.245073][ T5844] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1044.325050][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.384927][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.424997][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.476510][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.484272][ T5844] usb 1-1: too many configurations: 51, using maximum allowed: 8 [ 1044.528004][ T6082] hsr_slave_0: left promiscuous mode [ 1044.542146][ T5844] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1044.552911][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.574812][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.574904][ T6082] hsr_slave_1: left promiscuous mode [ 1044.593550][ T5844] usb 1-1: Product: syz [ 1044.605334][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.613885][ T5844] usb 1-1: Manufacturer: syz [ 1044.624267][ T6082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.626719][ T5844] usb 1-1: SerialNumber: syz [ 1044.655073][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.675059][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.678038][ T6082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.692881][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.729688][ T6082] bridge_slave_1: left allmulticast mode [ 1044.744902][ T6082] bridge_slave_1: left promiscuous mode [ 1044.745038][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.756638][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.791286][ T6082] bridge_slave_0: left allmulticast mode [ 1044.805928][ T6082] bridge_slave_0: left promiscuous mode [ 1044.811844][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.850198][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1044.918716][T13059] mceusb 4-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 1044.929365][ T6082] veth1_macvtap: left promiscuous mode [ 1044.949787][ T6082] veth0_macvtap: left promiscuous mode [ 1044.964866][T13059] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1044.973616][ T6082] veth1_vlan: left promiscuous mode [ 1045.014946][ T6082] veth0_vlan: left promiscuous mode [ 1045.035213][T13059] usb 4-1: USB disconnect, device number 19 [ 1045.067085][ T5844] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1045.144385][ T5844] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1045.175341][ T5844] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1045.223797][ T5844] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1045.277311][ T5844] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1045.323742][ T5844] lan78xx: probe of 1-1:1.0 failed with error -71 [ 1045.366704][ T5844] usb 1-1: USB disconnect, device number 25 [ 1048.760384][T14166] binder: 14165:14166 ioctl 4018620d 0 returned -22 [ 1048.857108][T14170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1051.689994][ T6082] team0 (unregistering): Port device team_slave_1 removed [ 1051.756951][ T6082] team0 (unregistering): Port device team_slave_0 removed [ 1051.811216][ T6082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.872777][ T6082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.894890][T13059] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1052.098723][T13059] usb 4-1: Using ep0 maxpacket: 16 [ 1052.114012][T13059] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.124388][T13059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1052.142329][T13059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1052.164822][T13059] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1052.184809][T13059] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1052.208568][T13059] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1052.228661][T13059] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1052.238789][T13059] usb 4-1: Manufacturer: syz [ 1052.262113][T13059] usb 4-1: config 0 descriptor?? [ 1052.460903][ T6082] bond0 (unregistering): Released all slaves [ 1052.584840][T13059] rc_core: IR keymap rc-hauppauge not found [ 1052.590839][T13059] Registered IR keymap rc-empty [ 1052.598166][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1052.644831][T14161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2411'. [ 1052.661018][T14162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2411'. [ 1052.670528][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1052.726119][T13059] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1052.757588][T13059] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input126 [ 1052.835522][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1052.934957][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1052.975197][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.028759][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.087914][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.296848][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.331384][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.405752][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.486306][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.615352][T13059] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.802732][T13059] mceusb 4-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 1053.885972][T13059] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1053.934908][T13059] usb 4-1: USB disconnect, device number 20 [ 1054.422851][T14197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1055.036528][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.142598][ T6082] IPVS: stop unused estimator thread 0... [ 1056.627099][T14211] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2422'. [ 1056.668389][T14212] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2422'. [ 1058.375779][ T27] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1058.564831][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1058.589234][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.626930][T14056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1058.635317][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1058.662098][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1058.679288][T14056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1058.695216][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1058.709876][T14056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1058.735189][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1058.760108][ T27] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1058.801407][ T27] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1058.812598][T14056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1058.831952][ T27] usb 3-1: Manufacturer: syz [ 1058.875376][ T27] usb 3-1: config 0 descriptor?? [ 1059.150143][T14056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.276199][ T27] rc_core: IR keymap rc-hauppauge not found [ 1059.294902][T14056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.303136][ T27] Registered IR keymap rc-empty [ 1059.316508][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1059.382301][ T8729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.389623][ T8729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.397685][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1059.430775][ T8729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.438188][ T8729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.447622][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1059.469975][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input127 [ 1059.571409][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1059.750405][T14245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.661037][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1060.784875][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1060.824865][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1060.893372][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1060.940351][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1060.971047][T14247] process 'syz.0.2430' launched './file0' with NULL argv: empty string added [ 1060.992136][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1061.045848][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1061.105005][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1061.155021][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1061.275539][T14257] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2431'. [ 1061.287391][T14257] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2431'. [ 1061.312690][ T27] mceusb 3-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 1061.489548][ T27] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1061.867356][ T27] usb 3-1: USB disconnect, device number 32 [ 1062.470570][T14056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.555127][ T8654] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1062.730082][T14056] veth0_vlan: entered promiscuous mode [ 1062.745222][ T8654] usb 4-1: Using ep0 maxpacket: 16 [ 1062.783595][ T8654] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1062.820824][T14056] veth1_vlan: entered promiscuous mode [ 1062.836785][ T8654] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1062.860803][ T8654] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1062.911409][ T8654] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1062.955093][ T8654] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1062.993489][T14056] veth0_macvtap: entered promiscuous mode [ 1062.999841][ T8654] usb 4-1: config 0 has no interface number 0 [ 1063.026056][ T8654] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1063.039381][T14056] veth1_macvtap: entered promiscuous mode [ 1063.085648][ T8654] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1063.116060][ T8654] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1063.137148][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.165300][ T8654] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1063.188790][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.224998][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.245271][ T8654] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1063.252577][ T8654] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1063.279113][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.317164][ T8654] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1063.335979][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.352039][ T8654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.377214][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.398034][ T8654] usb 4-1: Product: syz [ 1063.409239][ T8654] usb 4-1: Manufacturer: syz [ 1063.421288][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.442279][ T8654] usb 4-1: SerialNumber: syz [ 1063.467255][ T8654] usb 4-1: config 0 descriptor?? [ 1063.480771][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.518700][ T8654] usb 4-1: selecting invalid altsetting 2 [ 1063.536838][T14056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.647015][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.686202][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.925186][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.984018][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.995041][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.006163][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.100538][T14292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1064.166251][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.291250][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.625201][ T8654] get_1284_register timeout [ 1064.668564][ C1] usb 4-1: async_complete: urb error -32 [ 1064.705776][T14056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.720283][ T8654] usb 4-1: USB disconnect, device number 21 [ 1064.789729][T14056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.803578][T14056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.829646][T14056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.843480][T14056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.095066][ T5818] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1065.256539][ T6073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.264453][ T6073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.305527][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 1065.360451][ T5818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.380511][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1065.402091][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1065.412905][ T5818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1065.423682][ T6057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.444455][ T6057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.568371][T14304] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2441'. [ 1065.579587][T14304] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2441'. [ 1066.256837][ T5818] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.292710][ T5818] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1066.328254][ T5818] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1066.449210][ T5818] usb 1-1: Manufacturer: syz [ 1066.498239][ T5818] usb 1-1: config 0 descriptor?? [ 1066.634875][T14313] loop8: detected capacity change from 0 to 7 [ 1066.671350][T14313] Dev loop8: unable to read RDB block 7 [ 1066.695185][T14313] loop8: unable to read partition table [ 1066.713290][T14313] loop8: partition table beyond EOD, truncated [ 1066.734858][T14313] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1067.017587][ T5818] rc_core: IR keymap rc-hauppauge not found [ 1067.023583][ T5818] Registered IR keymap rc-empty [ 1067.029708][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.070533][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.115893][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1067.139450][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input128 [ 1067.166548][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.225661][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.285042][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.315004][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.345763][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.384901][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.415323][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.471836][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.554859][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.605093][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.656883][ T5818] mceusb 1-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 1067.676152][ T5818] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1067.713819][ T5818] usb 1-1: USB disconnect, device number 26 [ 1068.444964][T14348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.318438][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'. [ 1069.327507][T14351] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2450'. [ 1069.339609][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'. [ 1069.349097][T14351] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2450'. [ 1070.512459][T14366] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1071.067591][T14375] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2456'. [ 1071.246209][T12727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1071.258633][T12727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1071.268997][T12727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1071.278832][T12727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1071.326567][T12727] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1071.385910][T12727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1071.415982][ T5818] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1071.614856][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 1071.666848][ T5818] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1071.708515][ T5818] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1071.755877][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.793717][ T5818] usb 2-1: Product: syz [ 1071.816595][ T5818] usb 2-1: Manufacturer: syz [ 1071.821290][ T5818] usb 2-1: SerialNumber: syz [ 1071.851154][ T5818] usb 2-1: config 0 descriptor?? [ 1071.877664][T14377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1071.896548][ T5818] hub 2-1:0.0: bad descriptor, ignoring hub [ 1071.902553][ T5818] hub: probe of 2-1:0.0 failed with error -5 [ 1071.933835][ T5818] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input129 [ 1072.015766][ T6070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.072615][ T6070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.125064][ T27] usb 2-1: USB disconnect, device number 24 [ 1072.131143][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1072.642839][ T6070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.678939][ T6070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.384954][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'. [ 1073.415701][T14404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2462'. [ 1073.450524][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'. [ 1073.475900][T14407] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2462'. [ 1073.505410][ T9556] Bluetooth: hci2: command tx timeout [ 1073.642828][ T6070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.653795][ T6070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.769804][T14420] binder: 14419:14420 ioctl 4018620d 0 returned -22 [ 1073.905402][T14422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.585081][ T9556] Bluetooth: hci2: command tx timeout [ 1075.770961][T14440] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2467'. [ 1075.782967][ T6070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.814404][ T6070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.151175][T14378] chnl_net:caif_netlink_parms(): no params data found [ 1077.202238][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'. [ 1077.246186][T14466] binder: 14465:14466 ioctl 4018620d 0 returned -22 [ 1077.313643][T14467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1077.457663][T14460] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2472'. [ 1077.665255][ T9556] Bluetooth: hci2: command tx timeout [ 1078.616901][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'. [ 1078.631923][T14461] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2472'. [ 1078.961675][T14378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.992709][T14378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.027216][T14378] bridge_slave_0: entered allmulticast mode [ 1079.093705][T14487] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2478'. [ 1079.114467][T14378] bridge_slave_0: entered promiscuous mode [ 1079.149150][T14485] xt_hashlimit: size too large, truncated to 1048576 [ 1079.156295][T14485] xt_hashlimit: invalid rate [ 1079.767129][T14378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.807987][ T9556] Bluetooth: hci2: command tx timeout [ 1079.890543][T14378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.027183][T14378] bridge_slave_1: entered allmulticast mode [ 1080.159098][T14378] bridge_slave_1: entered promiscuous mode [ 1080.893126][T14505] binder: 14504:14505 ioctl 4018620d 0 returned -22 [ 1081.150440][T14509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.440173][T14378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.495115][T14378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.560578][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2483'. [ 1082.595910][T14508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2483'. [ 1082.611005][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2483'. [ 1082.662762][T14519] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2486'. [ 1082.686300][T14510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2483'. [ 1082.888353][T14378] team0: Port device team_slave_0 added [ 1083.062245][T14378] team0: Port device team_slave_1 added [ 1083.254034][T14378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.270167][T14378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.297610][T14378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.331151][T14378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.384782][T14378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.497616][T14378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.128720][ T6070] IPVS: stopping backup sync thread 8722 ... [ 1084.185211][T14542] binder: 14540:14542 ioctl 4018620d 0 returned -22 [ 1084.316422][T14545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.856734][T14378] hsr_slave_0: entered promiscuous mode [ 1084.932485][T14378] hsr_slave_1: entered promiscuous mode [ 1085.036442][T14378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1085.109138][T14378] Cannot create hsr debugfs directory [ 1086.744949][ T9556] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1086.755329][ T9556] Bluetooth: hci1: Injecting HCI hardware error event [ 1086.764895][ T9556] Bluetooth: hci1: hardware error 0x00 [ 1087.040944][T14568] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2499'. [ 1087.132461][T14561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2496'. [ 1087.161267][T14561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2496'. [ 1087.181869][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2496'. [ 1087.212864][T14562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2496'. [ 1087.444445][ T6070] hsr_slave_0: left promiscuous mode [ 1087.509327][T14583] loop8: detected capacity change from 0 to 7 [ 1087.521722][T14005] Dev loop8: unable to read RDB block 7 [ 1087.532010][T14005] loop8: unable to read partition table [ 1087.539330][T14005] loop8: partition table beyond EOD, truncated [ 1087.546012][ T6070] hsr_slave_1: left promiscuous mode [ 1087.583534][ T6070] batman_adv: batadv0: Interface deactivated: dummy0 [ 1087.598679][T14583] Dev loop8: unable to read RDB block 7 [ 1087.604412][T14583] loop8: unable to read partition table [ 1087.614836][ T6070] batman_adv: batadv0: Removing interface: dummy0 [ 1087.628468][T14586] binder: 14585:14586 ioctl 4018620d 0 returned -22 [ 1087.636051][T14583] loop8: partition table beyond EOD, truncated [ 1087.651239][T14583] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1087.675939][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.683456][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.763734][T14589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1087.790919][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.923432][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.078237][ T6070] bridge_slave_1: left allmulticast mode [ 1088.152575][ T6070] bridge_slave_1: left promiscuous mode [ 1088.245677][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.494596][ T6070] bridge_slave_0: left allmulticast mode [ 1088.543917][ T6070] bridge_slave_0: left promiscuous mode [ 1088.623513][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.864850][ T9556] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1089.357801][ T6070] veth1_macvtap: left promiscuous mode [ 1089.363470][ T6070] veth0_macvtap: left promiscuous mode [ 1089.391885][ T6070] veth1_vlan: left promiscuous mode [ 1089.412209][ T6070] veth0_vlan: left promiscuous mode [ 1091.720053][T14618] tmpfs: Unknown parameter 'smackfstransmute' [ 1092.445863][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 1092.462193][T14620] loop8: detected capacity change from 0 to 7 [ 1092.470701][T14620] Dev loop8: unable to read RDB block 7 [ 1092.481872][T14620] loop8: unable to read partition table [ 1092.489397][T14620] loop8: partition table beyond EOD, truncated [ 1092.498657][T14620] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1092.612002][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 1092.644131][T14622] binder: 14621:14622 ioctl 4018620d 0 returned -22 [ 1092.805849][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.229741][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.556759][T14625] binder: 14624:14625 ioctl 4018620d 0 returned -22 [ 1093.643620][T14626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.232958][ T6070] bond0 (unregistering): Released all slaves [ 1096.667538][T14610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'. [ 1096.682962][T14610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2509'. [ 1097.679387][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'. [ 1097.794500][T14611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2509'. [ 1098.422910][T14656] bond0: entered promiscuous mode [ 1098.428180][T14656] bond_slave_0: entered promiscuous mode [ 1098.434064][T14656] bond_slave_1: entered promiscuous mode [ 1098.442518][T14656] batadv0: entered promiscuous mode [ 1099.284977][T14656] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1099.292599][T14656] Cannot create hsr debugfs directory [ 1099.298567][T14656] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1099.384929][T14655] binder: 14654:14655 ioctl 4018620d 0 returned -22 [ 1099.547597][T14657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.853612][T14686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2527'. [ 1102.885265][T14686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2527'. [ 1102.904775][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2527'. [ 1102.929920][T14687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2527'. [ 1103.130995][T14703] binder: 14701:14703 ioctl 4018620d 0 returned -22 [ 1103.284948][T14709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.329859][T14378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1103.361240][T14378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1103.393958][T14378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1103.429356][T14378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1104.150378][T14378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.227437][T14378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.257548][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.264852][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.532043][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.539697][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.084511][T14727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.919592][T14753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 1107.929263][T14753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2541'. [ 1108.004307][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 1108.013977][T14755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2541'. [ 1108.699723][T14378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.768898][T14767] binder: 14765:14767 ioctl 4018620d 0 returned -22 [ 1109.841429][T14769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.064282][T14378] veth0_vlan: entered promiscuous mode [ 1110.276537][T14378] veth1_vlan: entered promiscuous mode [ 1111.159415][T14378] veth0_macvtap: entered promiscuous mode [ 1111.181888][T14378] veth1_macvtap: entered promiscuous mode [ 1111.261818][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.284843][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.324790][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.351016][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.376061][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.582582][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.664049][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.725078][T14794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1114.034763][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.061782][T14378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.098175][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.122486][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.173451][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.186640][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.197303][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.208441][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.218862][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.230165][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.339576][T14378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.464103][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2552'. [ 1114.474142][T14807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2552'. [ 1114.499774][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2552'. [ 1114.508946][T14808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2552'. [ 1114.567458][T14378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.639050][T14378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.769537][T14378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.915991][T14378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.150363][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.781267][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.818036][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.744322][ T8729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.785374][ T8729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.008958][T14846] loop8: detected capacity change from 0 to 7 [ 1119.053698][T14843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.078297][T14846] Dev loop8: unable to read RDB block 7 [ 1119.113093][T14846] loop8: unable to read partition table [ 1119.132466][T14846] loop8: partition table beyond EOD, truncated [ 1119.158696][T14846] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1120.899069][T14870] input: syz1 as /devices/virtual/input/input130 [ 1123.346983][T12727] Bluetooth: hci4: command 0x0406 tx timeout [ 1124.628079][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2571'. [ 1124.637528][T14902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2571'. [ 1124.837633][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2571'. [ 1124.846942][T14905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2571'. [ 1124.946057][T14906] input: syz1 as /devices/virtual/input/input131 [ 1125.989012][T14917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.846072][T14923] binder: 14922:14923 ioctl 4018620d 0 returned -22 [ 1126.939658][T14923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1129.021484][T14935] input: syz1 as /devices/virtual/input/input132 [ 1131.485535][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1131.485582][ T28] audit: type=1326 audit(1777740993.572:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.0.2583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f929ff9cdd9 code=0x0 [ 1131.731330][T14958] binder: 14957:14958 ioctl 4018620d 0 returned -22 [ 1131.756938][T14958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1131.969158][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2586'. [ 1131.979510][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2586'. [ 1131.992468][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2586'. [ 1132.001902][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2586'. [ 1132.024302][T14963] input: syz1 as /devices/virtual/input/input133 [ 1137.090336][T14986] input: syz1 as /devices/virtual/input/input134 [ 1139.243910][T15000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2595'. [ 1139.256786][T15000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2595'. [ 1143.837257][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 1143.846526][T15027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2599'. [ 1143.859259][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 1143.868258][T15027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2599'. [ 1143.887502][T15027] input: syz1 as /devices/virtual/input/input135 [ 1145.631748][T15033] input: syz1 as /devices/virtual/input/input136 [ 1153.853855][T15073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2616'. [ 1153.865783][T15073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2616'. [ 1153.883164][T15073] input: syz1 as /devices/virtual/input/input137 [ 1159.017413][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 1159.027119][T15094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2613'. [ 1159.039172][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 1159.048282][T15094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2613'. [ 1159.066786][T15094] input: syz1 as /devices/virtual/input/input138 [ 1164.868810][T15112] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2628'. [ 1164.882726][T15112] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2628'. [ 1164.901001][T15112] input: syz1 as /devices/virtual/input/input139 [ 1169.154833][ T8654] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1169.234105][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'. [ 1169.358994][ T8654] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 1169.386735][ T8654] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.440139][ T8654] usb 3-1: config 8 has no interface number 0 [ 1169.465583][ T8654] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1169.479292][ T8654] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1169.492565][ T8654] usb 3-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1169.635201][ T8654] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1169.644531][ T8654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.770773][ T8654] usb 3-1: NFC: intf ffff88801dfcd000 id ffffffff8da45bc0 [ 1173.704360][ T28] audit: type=1107 audit(1777741032.502:85): pid=15118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1173.730429][T15137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2634'. [ 1173.743468][T15137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2634'. [ 1173.769576][T15137] input: syz1 as /devices/virtual/input/input140 [ 1174.044731][ T27] usb 3-1: USB disconnect, device number 33 [ 1176.693264][T15149] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2638'. [ 1176.705120][T15149] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2638'. [ 1176.730627][T15149] input: syz1 as /devices/virtual/input/input141 [ 1177.590434][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.441980][T15161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1179.487106][T15161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1179.533256][T15161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1179.615982][T15161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1179.770371][T15161] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1179.794893][T15161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1180.294911][ T6081] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.518305][ T6081] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.906342][T15173] input: syz1 as /devices/virtual/input/input142 [ 1181.405074][ T6081] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.536105][T15171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2644'. [ 1181.559273][T15172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2644'. [ 1181.680577][ T6081] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.933713][T15181] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2646'. [ 1181.946461][T15181] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2646'. [ 1181.965793][T15181] input: syz1 as /devices/virtual/input/input143 [ 1182.102262][T15161] Bluetooth: hci0: command tx timeout [ 1183.963981][T15158] chnl_net:caif_netlink_parms(): no params data found [ 1184.241070][T15161] Bluetooth: hci0: command tx timeout [ 1185.210565][ T5844] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1185.478980][ T5844] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1185.487416][ T5844] usb 3-1: config 0 has no interface number 0 [ 1185.493579][ T5844] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1185.505033][ T5844] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1185.538895][ T5844] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1185.554816][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1185.563207][T15158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.587387][ T5844] usb 3-1: Manufacturer: syz [ 1185.592094][ T5844] usb 3-1: SerialNumber: syz [ 1185.625056][T15158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.630198][ T5844] usb 3-1: config 0 descriptor?? [ 1185.635680][T15158] bridge_slave_0: entered allmulticast mode [ 1185.650050][T15158] bridge_slave_0: entered promiscuous mode [ 1185.873906][ T5844] usbtouchscreen 3-1:0.214: Failed to read FW rev: -32 [ 1185.891937][ T5844] usbtouchscreen: probe of 3-1:0.214 failed with error -32 [ 1185.934908][ T5844] usb 3-1: USB disconnect, device number 34 [ 1186.025354][T15158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.032601][T15158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.067809][T15158] bridge_slave_1: entered allmulticast mode [ 1186.093049][T15158] bridge_slave_1: entered promiscuous mode [ 1186.214361][T15158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.274374][T15158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.306502][T15161] Bluetooth: hci0: command tx timeout [ 1186.842250][T15226] input: syz1 as /devices/virtual/input/input145 [ 1188.384793][T15161] Bluetooth: hci0: command tx timeout [ 1188.864978][T15158] team0: Port device team_slave_0 added [ 1188.918748][T15158] team0: Port device team_slave_1 added [ 1188.968973][T15223] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2653'. [ 1189.009421][T15225] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2653'. [ 1190.905531][T15244] input: syz1 as /devices/virtual/input/input146 [ 1191.407296][T15239] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2655'. [ 1191.444104][T15158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.465029][T15158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.499964][T15158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.522617][T15158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.531293][T15158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.575882][T15158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.612541][T15243] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2655'. [ 1193.031885][T15158] hsr_slave_0: entered promiscuous mode [ 1193.073207][T15158] hsr_slave_1: entered promiscuous mode [ 1193.957729][T15276] input: syz1 as /devices/virtual/input/input147 [ 1194.866456][ T6081] hsr_slave_0: left promiscuous mode [ 1194.891002][ T6081] hsr_slave_1: left promiscuous mode [ 1194.905725][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.932877][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.965746][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.987168][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.013002][ T6081] bridge_slave_1: left allmulticast mode [ 1195.018911][ T6081] bridge_slave_1: left promiscuous mode [ 1195.029193][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.080552][ T6081] bridge_slave_0: left allmulticast mode [ 1195.095024][ T6081] bridge_slave_0: left promiscuous mode [ 1195.100908][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.252982][ T6081] veth1_macvtap: left promiscuous mode [ 1195.300558][ T6081] veth0_macvtap: left promiscuous mode [ 1195.369975][ T6081] veth1_vlan: left promiscuous mode [ 1195.443630][ T6081] veth0_vlan: left promiscuous mode [ 1195.506672][T15294] input: syz1 as /devices/virtual/input/input148 [ 1197.420083][ T6081] team0 (unregistering): Port device team_slave_1 removed [ 1197.478813][ T6081] team0 (unregistering): Port device team_slave_0 removed [ 1197.515386][ T27] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1197.546870][ T6081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.610359][ T6081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.729423][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.745217][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1197.758713][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1197.772047][ T27] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1197.789707][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.800637][ T27] usb 4-1: config 0 descriptor?? [ 1198.068059][ T27] usb 4-1: USB disconnect, device number 22 [ 1198.204009][ T6081] bond0 (unregistering): Released all slaves [ 1198.330768][T15291] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2665'. [ 1198.349048][T15292] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2665'. [ 1199.980146][T15317] binder: Bad value for 'stats' [ 1200.235249][T15158] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1200.486526][T15158] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1200.785047][T15158] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1200.919057][T15158] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1201.091717][T15329] input: syz1 as /devices/virtual/input/input149 [ 1202.663520][T15158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.722447][T15158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.798745][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.806027][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.849843][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.857111][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.135609][T15347] input: syz1 as /devices/virtual/input/input150 [ 1203.230012][T15345] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2675'. [ 1203.438788][T15346] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2675'. [ 1205.001238][T15158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1206.796734][T15389] input: syz1 as /devices/virtual/input/input151 [ 1209.274090][T15403] input: syz1 as /devices/virtual/input/input152 [ 1209.282324][T15399] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2685'. [ 1209.293100][T15402] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2685'. [ 1209.746079][T15158] veth0_vlan: entered promiscuous mode [ 1209.803127][T15158] veth1_vlan: entered promiscuous mode [ 1211.497658][T15158] veth0_macvtap: entered promiscuous mode [ 1211.658352][T15158] veth1_macvtap: entered promiscuous mode [ 1211.989168][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.024830][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.058581][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.085095][T15417] Bluetooth: MGMT ver 1.22 [ 1212.096115][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.111629][T15417] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1212.129167][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.173996][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.194797][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.226871][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.294920][T15158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1212.368515][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.424326][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.447634][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.460896][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.489603][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.534694][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.554885][T15158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.614857][T15158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.686510][T15158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.704560][T15158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.714915][T15158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.725581][T15158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.734363][T15158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.958742][ T8729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.990812][ T8729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.126289][ T6059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.134222][ T6059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.782482][T15456] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2694'. [ 1214.795622][T15456] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2694'. [ 1214.815989][T15456] input: syz1 as /devices/virtual/input/input153 [ 1223.205672][T15528] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1223.753195][T15550] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2714'. [ 1223.765254][T15550] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2714'. [ 1223.782725][T15550] input: syz1 as /devices/virtual/input/input154 [ 1227.152849][T15583] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1227.187222][T15586] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.2724'. [ 1227.505274][T15600] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2726'. [ 1227.517779][T15600] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2726'. [ 1227.536365][T15600] input: syz1 as /devices/virtual/input/input155 [ 1230.456709][T15641] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2735'. [ 1230.469925][T15641] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2735'. [ 1230.790391][T15637] Bluetooth: hci0: unsupported parameter 255 [ 1230.912046][T15637] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1231.393992][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2738'. [ 1231.403585][T15650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2738'. [ 1231.423529][T15650] input: syz1 as /devices/virtual/input/input156 [ 1233.855042][ T5844] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1234.136103][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1234.150552][ T5844] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1234.170233][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.202448][ T5844] usb 3-1: config 0 descriptor?? [ 1234.743979][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1234.778477][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1234.804871][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1234.842746][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1234.883321][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1234.942861][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1234.953839][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1234.968151][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1234.975811][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1235.553002][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1235.560389][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1235.588145][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1235.625887][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1235.684346][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1235.734927][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1235.779538][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1235.826577][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1235.884945][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.103263][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.132688][T15692] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2747'. [ 1236.144644][T15692] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2747'. [ 1236.712689][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.720346][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.727908][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.737291][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.744525][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.752285][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.759853][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.767406][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.774985][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.782228][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.790051][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.798133][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.805715][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.814821][ T5844] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 1236.842211][T15694] Bluetooth: hci0: unsupported parameter 255 [ 1236.848916][ T5844] logitech 0003:046D:C29C.0004: hidraw0: USB HID vff.fd Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 1236.860507][T15694] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1236.879324][ T5844] logitech 0003:046D:C29C.0004: no inputs found [ 1236.963627][ T5844] usb 3-1: USB disconnect, device number 35 [ 1237.190050][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'. [ 1237.199266][T15705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2749'. [ 1237.218823][T15705] input: syz1 as /devices/virtual/input/input157 [ 1238.093650][T15698] fido_id[15698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1239.174794][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.650857][T15787] Bluetooth: hci0: unsupported parameter 255 [ 1241.677254][T15787] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1242.544120][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'. [ 1242.553306][T15798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2761'. [ 1242.580059][T15794] input: syz1 as /devices/virtual/input/input158 [ 1246.881604][ T28] audit: type=1326 audit(1777741109.042:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.2.2767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47a859cdd9 code=0x0 [ 1249.123623][T15842] binder: Bad value for 'stats' [ 1249.986150][T15847] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1250.238999][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 1250.248191][T15858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2773'. [ 1250.260867][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 1250.269914][T15858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2773'. [ 1251.279993][ T28] audit: type=1326 audit(1777741113.442:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15868 comm="syz.2.2778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47a859cdd9 code=0x0 [ 1251.382498][T15873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2779'. [ 1251.965345][T15887] binder: Bad value for 'stats' [ 1252.974160][T15897] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1253.873414][T15916] binder: Bad value for 'stats' [ 1255.071504][ T28] audit: type=1326 audit(1777741117.232:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15921 comm="syz.1.2794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1dbf9cdd9 code=0x0 [ 1257.772158][T15957] binder: Bad value for 'stats' [ 1259.732175][ T28] audit: type=1326 audit(1777741121.892:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.1.2807" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1dbf9cdd9 code=0x0 [ 1260.082862][T15985] overlayfs: failed to resolve './file1/file0': -2 [ 1261.760836][T16004] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1261.978161][T16011] binder: Bad value for 'stats' [ 1265.825501][ T28] audit: type=1326 audit(1777741127.982:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16031 comm="syz.4.2820" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fa139cdd9 code=0x0 [ 1266.328289][T16045] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1268.584865][ T28] audit: type=1326 audit(1777741130.742:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16066 comm="syz.2.2832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47a859cdd9 code=0x0 [ 1269.082805][T16086] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1271.184909][ T28] audit: type=1800 audit(1777741133.292:92): pid=16116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2841" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1271.285514][T16116] xt_hashlimit: size too large, truncated to 1048576 [ 1271.292368][T16116] xt_hashlimit: invalid rate [ 1271.499691][ T27] IPVS: starting estimator thread 0... [ 1271.577024][T16122] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1271.600211][ T28] audit: type=1326 audit(1777741133.762:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16124 comm="syz.1.2845" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1dbf9cdd9 code=0x0 [ 1271.655101][T16125] IPVS: using max 19 ests per chain, 45600 per kthread [ 1272.837837][ T5844] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1273.094815][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 1273.196424][ T5844] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1273.297943][ T5844] usb 4-1: config 0 has no interface number 0 [ 1273.475182][ T5844] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1273.495905][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.504003][ T5844] usb 4-1: Product: syz [ 1273.522345][ T5844] usb 4-1: Manufacturer: syz [ 1273.558031][ T5844] usb 4-1: SerialNumber: syz [ 1273.587424][ T5844] usb 4-1: config 0 descriptor?? [ 1273.606844][ T5844] hub 4-1:0.132: bad descriptor, ignoring hub [ 1273.633403][ T5844] hub: probe of 4-1:0.132 failed with error -5 [ 1273.662507][ T5844] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input159 [ 1275.025477][T16175] xt_hashlimit: size too large, truncated to 1048576 [ 1275.032578][T16175] xt_hashlimit: invalid rate [ 1275.367177][T16185] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1277.665964][ T8] usb 4-1: USB disconnect, device number 23 [ 1280.333647][T16228] xt_hashlimit: size too large, truncated to 1048576 [ 1280.340660][T16228] xt_hashlimit: invalid rate [ 1280.712131][T16230] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1282.130883][T16244] 9pnet_fd: Insufficient options for proto=fd [ 1282.146965][T16241] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2869'. [ 1282.196595][T16251] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2869'. [ 1282.464443][T16247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1285.614843][T16281] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1285.972719][T16286] xt_hashlimit: size too large, truncated to 1048576 [ 1285.979650][T16286] xt_hashlimit: invalid rate [ 1286.365630][T16289] 9pnet_fd: Insufficient options for proto=fd [ 1289.879852][T16321] 9pnet_fd: Insufficient options for proto=fd [ 1291.428498][T16326] xt_hashlimit: size too large, truncated to 1048576 [ 1291.435406][T16326] xt_hashlimit: invalid rate [ 1291.655138][ T28] audit: type=1326 audit(1777741153.652:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1dbf9cdd9 code=0x7ffc0000 [ 1291.920828][ T8] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1292.538557][ T28] audit: type=1326 audit(1777741153.652:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1dbf9cdd9 code=0x7ffc0000 [ 1293.393147][ T8] usb 3-1: not running at top speed; connect to a high speed hub [ 1293.544472][ T8] usb 3-1: config 2 has an invalid interface number: 242 but max is 0 [ 1293.647628][ T8] usb 3-1: config 2 has no interface number 0 [ 1293.667270][ T28] audit: type=1326 audit(1777741153.652:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1dbf5d60e code=0x7ffc0000 [ 1293.745309][ T8] usb 3-1: config 2 interface 242 has no altsetting 0 [ 1293.875243][ T8] usb 3-1: New USB device found, idVendor=0830, idProduct=0050, bcdDevice=4b.0f [ 1293.996452][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.075735][ T28] audit: type=1326 audit(1777741153.652:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1dbf9cdd9 code=0x7ffc0000 [ 1294.181541][ T28] audit: type=1326 audit(1777741153.652:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1dbf9cdd9 code=0x7ffc0000 [ 1294.206043][ T28] audit: type=1326 audit(1777741153.652:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1dbf9cdd9 code=0x7ffc0000 [ 1294.230310][ T28] audit: type=1326 audit(1777741153.652:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1dbf9cdd9 code=0x7ffc0000 [ 1294.236041][ T8] usb 3-1: Product: syz [ 1294.256844][ T28] audit: type=1326 audit(1777741153.652:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1dbf9cdd9 code=0x7ffc0000 [ 1294.283463][ T28] audit: type=1326 audit(1777741153.652:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1dbf9cdd9 code=0x7ffc0000 [ 1294.308081][ T28] audit: type=1326 audit(1777741153.652:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.1.2879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1dbf9cdd9 code=0x7ffc0000 [ 1294.371500][ T8] usb 3-1: Manufacturer: syz [ 1294.384954][ T8] usb 3-1: SerialNumber: syz [ 1294.439500][ T8] usb 3-1: can't set config #2, error -71 [ 1294.485112][ T8] usb 3-1: USB disconnect, device number 36 [ 1295.544863][T16353] binder: 16350:16353 ioctl 541b 0 returned -22 [ 1297.466071][T16366] 9pnet_fd: Insufficient options for proto=fd [ 1297.773238][T16376] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2903'. [ 1297.784831][T16376] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2903'. [ 1297.804046][T16376] input: syz1 as /devices/virtual/input/input160 [ 1300.886823][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.945350][ T9556] Bluetooth: hci0: command 0x0406 tx timeout [ 1302.965979][T16397] overlayfs: failed to resolve './file1/file0': -2 [ 1305.362728][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2914'. [ 1305.371946][T16422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2914'. [ 1305.390930][T16422] input: syz1 as /devices/virtual/input/input161 [ 1310.208924][T16451] xt_hashlimit: size too large, truncated to 1048576 [ 1310.215863][T16451] xt_hashlimit: invalid rate [ 1312.018606][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 1312.027836][T16463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2926'. [ 1312.072834][T16463] input: syz1 as /devices/virtual/input/input162 [ 1316.193508][T16486] loop8: detected capacity change from 0 to 7 [ 1316.202811][T16486] Dev loop8: unable to read RDB block 7 [ 1316.209125][T16486] loop8: unable to read partition table [ 1316.217155][T16486] loop8: partition table beyond EOD, truncated [ 1316.223802][T16486] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1316.670228][T16499] xt_hashlimit: size too large, truncated to 1048576 [ 1316.677210][T16499] xt_hashlimit: invalid rate [ 1318.892514][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2938'. [ 1318.901713][T16511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2938'. [ 1318.920635][T16511] input: syz1 as /devices/virtual/input/input163 [ 1319.525114][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'. [ 1319.534173][T16516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2940'. [ 1319.546588][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'. [ 1319.556055][T16516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2940'. [ 1321.483532][T16531] loop8: detected capacity change from 0 to 7 [ 1321.536153][T16531] Dev loop8: unable to read RDB block 7 [ 1321.594785][T16531] loop8: unable to read partition table [ 1321.600906][T16531] loop8: partition table beyond EOD, truncated [ 1321.624625][T16531] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1322.036079][T16539] xt_hashlimit: size too large, truncated to 1048576 [ 1322.042951][T16539] xt_hashlimit: invalid rate [ 1328.014772][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1328.354249][T16599] xt_hashlimit: size too large, truncated to 1048576 [ 1328.361221][T16599] xt_hashlimit: invalid rate [ 1328.915943][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1328.969877][ T8] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 1328.999605][ T8] usb 3-1: config 0 has no interface number 0 [ 1329.030119][ T8] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1329.053676][ T8] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1329.084173][ T8] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 1329.109911][ T8] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1329.152717][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1329.162157][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.170716][ T8] usb 3-1: Product: syz [ 1329.183069][ T8] usb 3-1: Manufacturer: syz [ 1329.200123][ T8] usb 3-1: SerialNumber: syz [ 1329.219534][ T8] usb 3-1: config 0 descriptor?? [ 1329.279252][ T8] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 1330.524394][T16612] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1331.979391][ T789] usb 3-1: USB disconnect, device number 37 [ 1333.643996][T16638] xt_hashlimit: size too large, truncated to 1048576 [ 1333.650898][T16638] xt_hashlimit: invalid rate [ 1335.152477][T16651] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1340.444879][ T8654] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1340.655282][ T8654] usb 2-1: Using ep0 maxpacket: 16 [ 1340.683623][ T8654] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1340.698991][ T8654] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1340.709329][ T8654] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1340.771417][ T8654] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1340.785270][ T8654] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1340.848680][ T8654] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1340.858044][ T8654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.900872][ T8654] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1343.199342][ T9577] usb 2-1: USB disconnect, device number 25 [ 1344.056283][T16705] xt_hashlimit: size too large, truncated to 1048576 [ 1344.063195][T16705] xt_hashlimit: invalid rate [ 1344.622441][T16710] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1346.901063][ T9556] Bluetooth: hci0: command 0x0406 tx timeout [ 1347.298789][T16739] xt_hashlimit: size too large, truncated to 1048576 [ 1347.305769][T16739] xt_hashlimit: invalid rate [ 1347.764684][ T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1347.855376][T16750] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1348.001236][ T8] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1348.031927][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.041092][ T8] usb 3-1: Product: syz [ 1348.054822][ T8] usb 3-1: Manufacturer: syz [ 1348.059505][ T8] usb 3-1: SerialNumber: syz [ 1349.546890][ T8] rtl8150 3-1:1.0: couldn't reset the device [ 1349.707891][ T8] rtl8150: probe of 3-1:1.0 failed with error -5 [ 1349.779564][ T8] usb 3-1: USB disconnect, device number 38 [ 1349.847444][T16766] netlink: 'syz.3.3008': attribute type 1 has an invalid length. [ 1351.647086][T16775] xt_hashlimit: size too large, truncated to 1048576 [ 1351.653949][T16775] xt_hashlimit: invalid rate [ 1361.259344][T16861] xt_hashlimit: size too large, truncated to 1048576 [ 1361.266225][T16861] xt_hashlimit: invalid rate [ 1361.910686][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.556027][T16905] xt_hashlimit: size too large, truncated to 1048576 [ 1366.562890][T16905] xt_hashlimit: invalid rate [ 1370.514301][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'. [ 1370.523411][T16939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3063'. [ 1370.536447][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'. [ 1370.545796][T16939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3063'. [ 1370.572385][T16939] input: syz1 as /devices/virtual/input/input165 [ 1371.722760][T16950] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1374.294153][T16972] netlink: 'syz.4.3073': attribute type 1 has an invalid length. [ 1375.044347][T16980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3075'. [ 1375.053608][T16980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3075'. [ 1375.066055][T16980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3075'. [ 1375.075107][T16980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3075'. [ 1375.093147][T16980] input: syz1 as /devices/virtual/input/input166 [ 1378.758507][T17002] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1379.074852][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3085'. [ 1379.083934][T17011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3085'. [ 1379.097570][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3085'. [ 1379.106788][T17011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3085'. [ 1379.125341][T17011] input: syz1 as /devices/virtual/input/input167 [ 1381.189349][ T8] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1381.407715][T17014] netlink: 'syz.3.3086': attribute type 1 has an invalid length. [ 1381.540387][ T8] usb 2-1: config 0 has no interfaces? [ 1381.546441][ T8] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1381.557320][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.570804][ T8] usb 2-1: config 0 descriptor?? [ 1381.784918][ T5816] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1381.851832][ T8] usb 2-1: USB disconnect, device number 26 [ 1382.454885][ T5816] usb 5-1: Using ep0 maxpacket: 32 [ 1382.476498][ T5816] usb 5-1: config 0 interface 0 altsetting 193 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.497302][ T5816] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1382.510604][ T5816] usb 5-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 1382.530111][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.546508][ T5816] usb 5-1: config 0 descriptor?? [ 1386.936427][ T9426] libceph: connect (1)[c::]:6789 error -101 [ 1386.948744][ T9426] libceph: mon0 (1)[c::]:6789 connect error [ 1387.015073][ T9426] libceph: connect (1)[c::]:6789 error -101 [ 1387.021298][ T9426] libceph: mon0 (1)[c::]:6789 connect error [ 1387.057918][T17016] ceph: No mds server is up or the cluster is laggy [ 1387.345509][ T9426] libceph: connect (1)[c::]:6789 error -101 [ 1387.354180][ T9426] libceph: mon0 (1)[c::]:6789 connect error [ 1387.764232][ T5816] usbhid 5-1:0.0: can't add hid device: -32 [ 1387.770384][ T5816] usbhid: probe of 5-1:0.0 failed with error -32 [ 1391.035971][ T9426] usb 5-1: USB disconnect, device number 2 [ 1392.354698][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1392.547902][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.576060][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1392.591813][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1392.601539][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.610089][ T8] usb 4-1: Product: syz [ 1392.614474][ T8] usb 4-1: Manufacturer: syz [ 1392.621097][ T8] usb 4-1: SerialNumber: syz [ 1392.669226][ T8] cdc_mbim 4-1:1.0: skipping garbage [ 1392.882525][T17084] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1393.293652][T17098] netlink: 'syz.2.3111': attribute type 1 has an invalid length. [ 1393.903693][T17084] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1394.205673][ T8] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1394.723355][ T8] wwan wwan0: port wwan0mbim0 attached [ 1394.966741][ T8] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 92:ec:78:bd:94:1d [ 1395.055132][ T8] usb 4-1: USB disconnect, device number 24 [ 1395.082552][ T8] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1395.277424][ T8] wwan wwan0: port wwan0mbim0 disconnected [ 1395.302426][T17127] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1395.362938][T17126] 9pnet_fd: Insufficient options for proto=fd [ 1396.654457][T17148] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.