last executing test programs: 8m18.84218655s ago: executing program 3 (id=296): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) 8m18.597024985s ago: executing program 3 (id=302): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x101d0) 8m18.361681489s ago: executing program 3 (id=305): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000026390000000000000000000100000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) 8m18.286540622s ago: executing program 3 (id=307): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 8m18.185927195s ago: executing program 3 (id=309): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) 8m18.096817457s ago: executing program 3 (id=311): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af83, &(0x7f0000000040)=0x1c) 8m2.943071224s ago: executing program 32 (id=311): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af83, &(0x7f0000000040)=0x1c) 4m42.769332078s ago: executing program 4 (id=3543): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000c40)={0x18, 0x2, 0x0, 0xe598}) 4m42.624119236s ago: executing program 4 (id=3546): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r2}}, 0x10) 4m42.551504223s ago: executing program 4 (id=3548): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x2, [0xc, 0x6]}, &(0x7f00000000c0)=0x8) 4m42.456406752s ago: executing program 4 (id=3550): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 4m42.44394556s ago: executing program 4 (id=3551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x296, 0x0, 0x8}]}) 4m42.011028993s ago: executing program 4 (id=3561): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) 4m41.797231859s ago: executing program 33 (id=3561): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) 4m26.138282454s ago: executing program 2 (id=3757): socket(0x18, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e) close(0x3) 4m25.992542329s ago: executing program 2 (id=3759): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup2(r1, r0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c00080001"], 0x4e) 4m25.9307029s ago: executing program 2 (id=3760): syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000067c000/0x4000)=nil, &(0x7f0000711000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000e3000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 4m25.716812047s ago: executing program 2 (id=3763): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 4m25.56389517s ago: executing program 2 (id=3765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000030000000100000008000100", @ANYRES32=r2, @ANYBLOB="4c00088048000080200004000a004e2100000002000000000000000000000000000000010000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x68}, 0x1, 0x0, 0x0, 0x4009041}, 0x0) 4m24.880872704s ago: executing program 2 (id=3771): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) close(0x3) 4m24.693337703s ago: executing program 34 (id=3771): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) close(0x3) 3m35.03571923s ago: executing program 1 (id=4357): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) lseek(r0, 0x7, 0x1) 3m34.889854453s ago: executing program 1 (id=4360): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) 3m34.557548406s ago: executing program 1 (id=4363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000001c0)=@other={0x2000000400000000, 0x0}) 3m34.252512386s ago: executing program 1 (id=4368): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0xc) 3m34.165325575s ago: executing program 1 (id=4370): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file1/../file0', [{0x20, '1\x01\x9e\x00\x00\xf6\xb2\xa1\xec\x13\vi\x06\x05cZe\x87\xf6\xbaj\x85+\xbc\xf8T\xc7a\xf0\xe3?\x01\x83\f\x0e\xac\xec8\x8e\x8b\xce\xe6\xc1\xda\xf1\xb6\xfe\xb5D\xf1\xea^\\}]s}\xe4zB|\xd9>.TF\xd3g\x90\xafa\x13\xeb\xbbN\xb7i\v\x82\x02\xfb\x95\f\xe8J\xef\xee\xaf\xea\xf3]<\xd9\xa5\x02\n\xaa\xe2\xcdZ\xda\x85\xdd*\x13\x0e&.\x1a\xaf\"\x11\x97zS\xbc\xaan~/U\xe0>\xfc\x17S\x9b\xf5\xf7\xdb\xbeH\xc2\v\xa3r\a\xdaC\xc9\xee{\xa3\xd2IL\xe4\")\xd9s9Y&UiO\xcd\xf4\xd3>\xd2\x98\x8d\x1d~\xd3}\x90\xb3i\xff\xff-\x7f\xb9Jdq(\xd8\xfe\x9cu\x12\xe9\x15y \x91\xc2\xcfN\xc0\x9c\xbb8x#\xc8L\xbcd\x00'/217}, {0x20, ' '}, {0x20, '\x1b_G\x86~)\x18\x95\x96\xb9\xff\xa4W\xf4]\xea\x88\xeb;\n:\x19\xb0\xb5Fn\xae\xbc\x047/\x1d\xe6,b%\xfd_W\x1f\xb8\x0ex\xe5\xdd0\xd2\x11\xc4\xfc\x13\xa7\x1du\xa4\xc8_7Rv\x1e\x02\xca\x1am\xe6uW\xc50\x80F$\x9cXV\xe6c\xb6\xc0\xf3\x17\x93\xe1a_'}, {0x20, '\x7f7\x8e\xad\xfe\xde\x18(\x14&\xc7\xd8Q\x95\xdb\x84\x82\xa9C|vh\xe9\xa3\x8cc\xce\xc7\x99#e\xf5\x99\xde\xe6\xbcg\xf8_[%*\x91\x85\xa4S\x02\xfb\xb9\x13r\xdao8\xec\x8e\x00\x0f\x01\xeb\xf5\xdb,\xe3A\x1a\xef\xeb\x90t\x1bG\x1c\xd9\xd4$ PGo\x10T7#\xc9\xa89f\x881G\xb2\xaa\x80ME\xe8V\x1c\x1b*\x04WOP\xff\xba\'k\x93s'}, {0x20, 'D\xd4 ,xq\x92z\x12\xf3q`\xf2\x9f\x04\xca\xdf\x1bpL\xea\xd3\x7f6t8\xc9\xb8\xdc\x1b?s\xaf\a\xf3\x97\xac\xa33\x10\xea\xac\xeb\xd3Uyog\xc6\xcc\xea\xec0\xdfh\xd7\x00\x04E7\x1f/R\xc4\xb1g\xadt\xd3\xb3\xc7J\x15\xe7\r\xee\x99\xd7+\x9a\xafi\t\x19\xc3\x10\xb2Y\xba\xc5O\xca\'\xf4/\xde\v\x04Pzi\x8c(\x84K\x1f\xf9s\xc6\x9d\x92\xca\xac\xbd\xc6\x82\xc8W\x06\xcdC\x9c\xd4=r\a\x90\x87Y\xe15\x11hW\x8d!\xbb\xeb\xfee\xe5+\xc2\x01\x85\xe5\x8b=\xf2y`\x1c\x98\xec$\xdd\xef\x06>\xedd\xa74\x87u\x14J\x96\x1b\xcce\x10\xc1\xac\xbfag/\xf9FM\xa7dN\v\xc7x\x02\x92_\xb8'}]}, 0x277) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 3m33.765191161s ago: executing program 1 (id=4376): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x100}, 0x8) 3m33.475542244s ago: executing program 35 (id=4376): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x100}, 0x8) 7.583930118s ago: executing program 7 (id=7185): gettid() timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000001180), &(0x7f00000011c0)) 7.502718297s ago: executing program 7 (id=7187): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x40, 0xc, 0x22, {0x22, 0x2a, "954d7081b359136002c12c10a71b2e6c9c4e9444a7c5d89bcf6d3a4e3b6e5097"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.412522811s ago: executing program 7 (id=7226): syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000014140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x2, 0x10, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffb, 0x1c}, [@extension_unit={0x9, 0x24, 0x8, 0x2, 0x1, 0x1, '*n'}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x4, 0x2, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x9301d0bf38c131ca, 0x1, 0x8, 0x2, {0x7, 0x25, 0x1, 0x4, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0xc0, 0x0, {0x7, 0x25, 0x1, 0x8, 0x2, 0x6}}}}}}}}]}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) 1.945637146s ago: executing program 0 (id=7254): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2000000}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}], 0x38, 0x4048800}, 0x0) 1.625459658s ago: executing program 0 (id=7259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000580)={0x3, 0x0, 0x2000000}) 1.510905731s ago: executing program 0 (id=7263): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000200)={0x1c, r1, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.425467101s ago: executing program 0 (id=7264): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1}, 0x60) 1.324616257s ago: executing program 7 (id=7267): memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x20) 1.244654565s ago: executing program 7 (id=7268): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2000000}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}], 0x38, 0x4048800}, 0x0) 1.243957879s ago: executing program 0 (id=7276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000002, 0x28011, r0, 0xf5ce9000) 997.789694ms ago: executing program 6 (id=7272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x54, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x54}}, 0x20004800) 844.764271ms ago: executing program 6 (id=7274): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x9c}}, 0x0) 784.985276ms ago: executing program 7 (id=7275): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x18, 0x2, 'rO'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 656.333758ms ago: executing program 6 (id=7277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x5) 506.468302ms ago: executing program 5 (id=7279): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, 0x0) 396.887074ms ago: executing program 5 (id=7280): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 395.700815ms ago: executing program 6 (id=7288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x7, 0x6}}) 270.509354ms ago: executing program 5 (id=7281): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0xfffc, @private}}}, 0x108) 247.386ms ago: executing program 0 (id=7282): r0 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff}) tkill(r0, 0x12) waitid(0x0, 0x0, 0x0, 0x8100000e, &(0x7f00000002c0)) 196.651245ms ago: executing program 6 (id=7283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) listen(r0, 0x181) 152.075439ms ago: executing program 5 (id=7284): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) pipe(&(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 52.474357ms ago: executing program 6 (id=7285): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 52.350436ms ago: executing program 5 (id=7286): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 0s ago: executing program 5 (id=7287): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ff09000000ffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f0000000000000081000000000000010000000000008c90d4"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) kernel console output (not intermixed with test programs): erfaces: 253, using maximum allowed: 32 [ 446.073461][ T796] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 446.101558][ T796] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 446.114192][ T796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.127612][ T796] usb 8-1: Product: syz [ 446.132655][ T796] usb 8-1: Manufacturer: syz [ 446.145888][ T796] usb 8-1: SerialNumber: syz [ 446.161796][ T796] usb 8-1: config 0 descriptor?? [ 446.172080][ T796] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 446.649416][T17098] input: syz0 as /devices/virtual/input/input39 [ 447.001880][ T796] gspca_sunplus: reg_r err -71 [ 447.010868][ T796] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 447.048604][ T796] usb 8-1: USB disconnect, device number 13 [ 448.110807][ T796] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 448.272691][ T796] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 448.280950][ T796] usb 8-1: config 0 has no interface number 0 [ 448.289406][ T796] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 448.298798][ T796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.307122][ T796] usb 8-1: Product: syz [ 448.311376][ T796] usb 8-1: Manufacturer: syz [ 448.316104][ T796] usb 8-1: SerialNumber: syz [ 448.321047][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 448.334613][ T796] usb 8-1: config 0 descriptor?? [ 448.481316][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 448.490940][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.502446][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.512370][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 448.519384][ T9] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 448.528560][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.541263][ T9] usb 7-1: config 0 descriptor?? [ 448.556983][ T796] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 448.571301][ T796] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 448.582701][ T796] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 448.590955][ T796] usb 8-1: media controller created [ 448.612369][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.761987][ T796] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 448.818866][ T796] usb 8-1: USB disconnect, device number 14 [ 449.014630][ T9] hid_parser_main: 131 callbacks suppressed [ 449.014655][ T9] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 449.028647][ T9] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 449.038154][ T9] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 449.049566][ T9] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 449.057295][ T9] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 449.065630][ T9] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 449.073525][ T9] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 449.081424][ T9] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 449.091327][ T9] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 449.098382][ T9] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 449.126276][ T9] cougar 0003:060B:500A.0036: hidraw0: USB HID v0.00 Device [HID 060b:500a] on usb-dummy_hcd.6-1/input0 [ 449.210062][ T9] usb 7-1: USB disconnect, device number 23 [ 449.674459][T17169] loop5: detected capacity change from 0 to 7 [ 449.985725][T17169] Dev loop5: unable to read RDB block 7 [ 449.995649][T17177] cgroup: fork rejected by pids controller in /syz6 [ 450.008430][T17169] loop5: unable to read partition table [ 450.019843][ C0] blk_print_req_error: 10 callbacks suppressed [ 450.019865][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 450.036333][ C0] buffer_io_error: 10 callbacks suppressed [ 450.036357][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 450.061600][T17169] loop5: partition table beyond EOD, truncated [ 450.075671][T17169] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 450.585250][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 450.740795][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 450.750171][ T9] usb 6-1: config 1 has an invalid interface number: 235 but max is 0 [ 450.763241][ T9] usb 6-1: config 1 has no interface number 0 [ 450.769572][ T9] usb 6-1: config 1 interface 235 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 450.782254][ T9] usb 6-1: config 1 interface 235 has no altsetting 0 [ 450.793715][ T9] usb 6-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=22.52 [ 450.804808][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.814187][ T9] usb 6-1: Product: syz [ 450.818668][ T9] usb 6-1: Manufacturer: syz [ 450.826513][ T9] usb 6-1: SerialNumber: syz [ 451.074527][ T9] rndis_host 6-1:1.235: invalid descriptor buffer length [ 451.097790][ T9] usb 6-1: bad CDC descriptors [ 451.107374][ T9] cdc_acm 6-1:1.235: invalid descriptor buffer length [ 451.122417][ T9] usb 6-1: USB disconnect, device number 25 [ 451.267345][ T5138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.280005][ T5138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.296719][ T5138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 451.308735][ T5138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 451.319004][ T5138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 451.955824][T17202] chnl_net:caif_netlink_parms(): no params data found [ 451.997823][T17229] Bluetooth: MGMT ver 1.23 [ 452.187220][T17240] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4987'. [ 452.198591][T17240] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4987'. [ 452.293899][T17202] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.301621][T17202] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.309143][T17202] bridge_slave_0: entered allmulticast mode [ 452.319972][T17202] bridge_slave_0: entered promiscuous mode [ 452.355928][T17202] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.367145][T17202] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.378908][T17202] bridge_slave_1: entered allmulticast mode [ 452.389943][T17202] bridge_slave_1: entered promiscuous mode [ 452.423430][T17243] tap0: tun_chr_ioctl cmd 1074025678 [ 452.430189][T17243] tap0: group set to 21 [ 452.474218][T17202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.517502][T17202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.622173][T17202] team0: Port device team_slave_0 added [ 452.644902][T17202] team0: Port device team_slave_1 added [ 452.772382][T17202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.779439][T17202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.849227][T17202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.880385][T17202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.889724][T17202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.916576][T17202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.134536][T17202] hsr_slave_0: entered promiscuous mode [ 453.165245][T17202] hsr_slave_1: entered promiscuous mode [ 453.195430][T17202] debugfs: 'hsr0' already exists in 'hsr' [ 453.209130][T17202] Cannot create hsr debugfs directory [ 453.289784][T17269] input: syz1 as /devices/virtual/input/input40 [ 453.361282][ T5826] Bluetooth: hci1: command tx timeout [ 453.394962][T17272] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5002'. [ 453.415481][T17272] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5002'. [ 453.613734][T17276] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.663458][T17276] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.670860][T17276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.058190][T17202] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.257622][T17202] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.397678][T17202] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.579734][T17202] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.018248][T17318] kvm: kvm [17317]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xfffffffffffffffd [ 455.133428][T17202] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 455.156074][T17202] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 455.197362][T17202] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 455.219073][T17202] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 455.432588][T17332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.443166][ T5826] Bluetooth: hci1: command tx timeout [ 455.649432][T17202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.775598][T17202] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.828895][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.836172][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.898565][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.905894][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.622636][T17202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.693052][T17362] netlink: 'syz.0.5039': attribute type 58 has an invalid length. [ 456.826175][T17364] program syz.5.5040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.874472][T17367] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 456.910297][T17367] overlayfs: overlapping lowerdir path [ 457.360848][ T796] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 457.392576][T17202] veth0_vlan: entered promiscuous mode [ 457.423687][T17202] veth1_vlan: entered promiscuous mode [ 457.519969][T17202] veth0_macvtap: entered promiscuous mode [ 457.527012][ T5826] Bluetooth: hci1: command tx timeout [ 457.533220][ T796] usb 8-1: Using ep0 maxpacket: 32 [ 457.549709][ T796] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 457.561738][T17202] veth1_macvtap: entered promiscuous mode [ 457.567679][ T796] usb 8-1: config 0 has no interface number 0 [ 457.581072][ T796] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 457.605358][ T796] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 457.625599][T17202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.633084][ T796] usb 8-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 457.645375][ T796] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.667223][ T796] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 457.684032][T17202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.691557][ T796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.701030][ T796] usb 8-1: Product: syz [ 457.705442][ T796] usb 8-1: Manufacturer: syz [ 457.710112][ T796] usb 8-1: SerialNumber: syz [ 457.721377][ T796] usb 8-1: config 0 descriptor?? [ 457.723620][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 457.734703][T17378] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 457.760520][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.776157][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.791875][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.801115][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.812843][ T796] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.119/input/input41 [ 457.834416][ T5173] usb 8-1: BOGUS urb xfer, pipe 1 != type 3 [ 457.979218][ T24] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 458.022230][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.055366][ T24] usb 6-1: Product: syz [ 458.066925][ T24] usb 6-1: Manufacturer: syz [ 458.088926][ T24] usb 6-1: SerialNumber: syz [ 458.108024][ T24] usb 6-1: config 0 descriptor?? [ 458.146210][ T5828] usb 8-1: USB disconnect, device number 15 [ 458.172843][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.185166][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.386328][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.408556][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.544876][ T24] usb 6-1: Firmware: major: 0, minor: 0, hardware type: HULUSB (4) [ 458.558422][ T24] usb 6-1: Firmware version (0.0) predates our first public release. [ 458.580286][ T24] usb 6-1: Please update to version 0.2 or newer [ 459.015087][ T24] usb 6-1: USB disconnect, device number 26 [ 459.469996][T17417] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5062'. [ 459.526961][T17417] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5062'. [ 459.604060][ T5826] Bluetooth: hci1: command tx timeout [ 460.520760][ T5907] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 460.541703][ T30] audit: type=1326 audit(1772501048.434:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17420 comm="syz.6.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a6b9c799 code=0x7fc00000 [ 460.723492][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 460.737046][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.781631][ T5907] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 460.817273][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.843157][ T5907] usb 6-1: config 0 descriptor?? [ 460.866770][ T5907] hub 6-1:0.0: USB hub found [ 461.066504][ T5907] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 461.286424][ T5907] usbhid 6-1:0.0: can't add hid device: -71 [ 461.308048][ T5907] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 461.361884][ T5907] usb 6-1: USB disconnect, device number 27 [ 461.697695][T17488] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5095'. [ 462.219972][ T5818] IPVS: starting estimator thread 0... [ 462.323613][T17516] IPVS: using max 26 ests per chain, 62400 per kthread [ 462.435455][T17527] netlink: 'syz.6.5115': attribute type 4 has an invalid length. [ 462.524476][T17530] loop8: detected capacity change from 0 to 7 [ 462.537271][T17530] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 462.545411][T17530] loop8: partition table partially beyond EOD, truncated [ 462.554907][T17530] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 462.572442][T17530] loop8: p2 start 956478 is beyond EOD, truncated [ 462.616387][ T5821] udevd[5821]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 463.548377][T17569] netlink: 212356 bytes leftover after parsing attributes in process `syz.5.5134'. [ 463.679628][T17571] netlink: 'syz.6.5135': attribute type 22 has an invalid length. [ 463.689353][T17571] netlink: 14380 bytes leftover after parsing attributes in process `syz.6.5135'. [ 463.723873][T17573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5136'. [ 463.761490][ T5828] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 463.931787][ T5828] usb 8-1: Using ep0 maxpacket: 32 [ 463.948352][ T5828] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 463.970113][ T5828] usb 8-1: config 0 has no interface number 0 [ 463.990726][ T5828] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 464.010801][ T5828] usb 8-1: config 0 interface 89 has no altsetting 0 [ 464.028573][ T5828] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 464.048096][ T5828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.065434][ T5828] usb 8-1: Product: syz [ 464.077522][ T5828] usb 8-1: Manufacturer: syz [ 464.093998][ T5828] usb 8-1: SerialNumber: syz [ 464.112324][ T5828] usb 8-1: config 0 descriptor?? [ 464.133642][ T5828] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 464.153394][ T5828] em28xx 8-1:0.89: Video interface 89 found: [ 464.748664][ T5828] em28xx 8-1:0.89: chip ID is em2750 [ 464.761133][ T5907] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 464.935710][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.947386][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.967656][ T5907] usb 6-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 464.981217][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.994333][ T5907] usb 6-1: config 0 descriptor?? [ 465.042675][ T796] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 465.055631][ T5828] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 465.065175][ T5828] em28xx 8-1:0.89: board has no eeprom [ 465.130856][ T5828] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 465.138205][ T5828] em28xx 8-1:0.89: analog set to bulk mode. [ 465.144743][ T7242] em28xx 8-1:0.89: Registering V4L2 extension [ 465.167292][ T5828] usb 8-1: USB disconnect, device number 16 [ 465.189017][ T5828] em28xx 8-1:0.89: Disconnecting em28xx [ 465.205094][ T796] usb 7-1: config 0 has no interfaces? [ 465.224047][ T796] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 465.242713][ T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.261232][ T796] usb 7-1: Product: syz [ 465.271134][ T796] usb 7-1: Manufacturer: syz [ 465.277503][ T796] usb 7-1: SerialNumber: syz [ 465.294976][ T796] usb 7-1: config 0 descriptor?? [ 465.311856][ T7242] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 465.319702][ T7242] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 465.338815][ T7242] em28xx 8-1:0.89: No AC97 audio processor [ 465.365795][ T7242] usb 8-1: Decoder not found [ 465.370531][ T7242] em28xx 8-1:0.89: failed to create media graph [ 465.378168][ T7242] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 465.393382][ T7242] em28xx 8-1:0.89: Registering snapshot button... [ 465.409204][ T7242] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input43 [ 465.434412][ T7242] em28xx 8-1:0.89: Remote control support is not available for this card. [ 465.443964][ T5828] em28xx 8-1:0.89: Closing input extension [ 465.455537][ T5907] thrustmaster 0003:044F:B654.0037: item fetching failed at offset 5/7 [ 465.467824][ T5828] em28xx 8-1:0.89: Deregistering snapshot button [ 465.475598][ T5907] thrustmaster 0003:044F:B654.0037: parse failed [ 465.486520][ T5907] thrustmaster 0003:044F:B654.0037: probe with driver thrustmaster failed with error -22 [ 465.546223][ T982] usb 7-1: USB disconnect, device number 24 [ 465.670176][ T29] usb 6-1: USB disconnect, device number 28 [ 465.781128][ T5828] em28xx 8-1:0.89: Freeing device [ 466.045722][ T7242] hid_parser_main: 1261 callbacks suppressed [ 466.045745][ T7242] hid-generic 0006:0004:0009.0038: unknown main item tag 0x0 [ 466.070803][ T7242] hid-generic 0006:0004:0009.0038: unknown main item tag 0x0 [ 466.090453][ T7242] hid-generic 0006:0004:0009.0038: unknown main item tag 0x0 [ 466.098957][ T7242] hid-generic 0006:0004:0009.0038: unknown main item tag 0x0 [ 466.119537][ T7242] hid-generic 0006:0004:0009.0038: unknown main item tag 0x0 [ 466.133083][ T7242] hid-generic 0006:0004:0009.0038: unknown main item tag 0x0 [ 466.142210][ T7242] hid-generic 0006:0004:0009.0038: unknown main item tag 0x0 [ 466.151119][ T7242] hid-generic 0006:0004:0009.0038: unknown main item tag 0x0 [ 466.159671][ T7242] hid-generic 0006:0004:0009.0038: unknown main item tag 0x0 [ 466.185029][ T7242] hid-generic 0006:0004:0009.0038: unknown main item tag 0x0 [ 466.219968][ T7242] hid-generic 0006:0004:0009.0038: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 466.261820][ T5828] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 466.422914][ T5828] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 466.432006][T17628] fido_id[17628]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 466.465273][ T5828] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.481959][ T5828] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.494886][ T5828] usb 8-1: config 0 interface 0 has no altsetting 0 [ 466.507109][ T5828] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.517585][ T5828] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.517643][T17632] netlink: 'syz.0.5161': attribute type 2 has an invalid length. [ 466.533883][ T5828] usb 8-1: config 0 interface 0 has no altsetting 0 [ 466.545935][ T5828] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.555665][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5161'. [ 466.584283][ T5828] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.605944][ T5828] usb 8-1: config 0 interface 0 has no altsetting 0 [ 466.624748][ T5828] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.644894][ T5828] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.664984][ T5828] usb 8-1: config 0 interface 0 has no altsetting 0 [ 466.676242][ T5828] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.687305][ T5828] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.701219][ T5828] usb 8-1: config 0 interface 0 has no altsetting 0 [ 466.714729][ T5828] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.725629][ T5828] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.737211][ T5828] usb 8-1: config 0 interface 0 has no altsetting 0 [ 466.746631][ T5828] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.758114][ T5828] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.779979][ T5828] usb 8-1: config 0 interface 0 has no altsetting 0 [ 466.800476][ T5828] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 466.821298][ T5828] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 466.840822][ T5828] usb 8-1: config 0 interface 0 has no altsetting 0 [ 466.850511][ T5828] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 466.873727][ T5828] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 466.903740][ T5828] usb 8-1: Product: syz [ 466.911799][ T5828] usb 8-1: Manufacturer: syz [ 466.921282][ T5828] usb 8-1: SerialNumber: syz [ 466.936879][ T5828] usb 8-1: config 0 descriptor?? [ 466.988337][ T5828] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 467.220815][ T982] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 467.300095][ C0] usb 8-1: yurex_control_callback - control failed: -71 [ 467.304339][ T5871] usb 8-1: USB disconnect, device number 17 [ 467.330200][ T5871] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 467.400951][ T982] usb 6-1: Using ep0 maxpacket: 8 [ 467.412913][ T982] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.432928][ T982] usb 6-1: config 0 has no interface number 0 [ 467.444829][ T982] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.460884][ T982] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 467.471345][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.485958][ T982] usb 6-1: config 0 descriptor?? [ 467.498040][ T982] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 467.729104][ T7242] usb 6-1: USB disconnect, device number 29 [ 467.987042][T17676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5181'. [ 467.998985][T17676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5181'. [ 468.937794][T17719] dvmrp1: entered allmulticast mode [ 468.946321][T17722] dvmrp1: left allmulticast mode [ 469.567610][ T58] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.680109][ T58] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.742477][T17741] netlink: 'syz.0.5211': attribute type 1 has an invalid length. [ 469.750496][T17741] netlink: 'syz.0.5211': attribute type 2 has an invalid length. [ 469.758961][T17741] netlink: 'syz.0.5211': attribute type 1 has an invalid length. [ 469.967706][T17747] input: syz0 as /devices/virtual/input/input44 [ 469.983013][ T58] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.104401][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 470.128737][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 470.143830][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 470.160163][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 470.168404][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 470.248360][ T58] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.346206][T17760] program syz.0.5220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.803419][T17777] lo: entered promiscuous mode [ 470.966413][T17777] lo: left promiscuous mode [ 470.990228][ T58] bridge_slave_1: left allmulticast mode [ 471.006153][ T58] bridge_slave_1: left promiscuous mode [ 471.029098][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.062312][ T58] bridge_slave_0: left allmulticast mode [ 471.080784][ T58] bridge_slave_0: left promiscuous mode [ 471.086860][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.659073][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.692413][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.704753][ T58] bond0 (unregistering): Released all slaves [ 471.729297][T17753] chnl_net:caif_netlink_parms(): no params data found [ 471.891154][ T982] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 471.970598][T17753] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.997418][T17753] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.006277][T17753] bridge_slave_0: entered allmulticast mode [ 472.016743][T17753] bridge_slave_0: entered promiscuous mode [ 472.042605][T17753] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.050091][T17753] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.062601][ T982] usb 6-1: Using ep0 maxpacket: 16 [ 472.063302][T17753] bridge_slave_1: entered allmulticast mode [ 472.078373][T17753] bridge_slave_1: entered promiscuous mode [ 472.085494][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.102685][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 472.113941][ T982] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 472.144195][ T982] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 472.153921][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.168244][ T982] usb 6-1: config 0 descriptor?? [ 472.209279][ T58] hsr_slave_0: left promiscuous mode [ 472.216033][ T58] hsr_slave_1: left promiscuous mode [ 472.222604][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.230122][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.238969][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.248194][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.252151][ T5138] Bluetooth: hci0: command tx timeout [ 472.272585][ T58] veth1_macvtap: left promiscuous mode [ 472.278254][ T58] veth0_macvtap: left promiscuous mode [ 472.284090][ T58] veth1_vlan: left promiscuous mode [ 472.290467][ T58] veth0_vlan: left promiscuous mode [ 472.610119][ T982] nintendo 0003:057E:2019.0039: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.5-1/input0 [ 472.660102][ T58] team0 (unregistering): Port device team_slave_1 removed [ 472.691713][ T58] team0 (unregistering): Port device team_slave_0 removed [ 472.955761][T17753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.011535][T17753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.027978][ T982] nintendo 0003:057E:2019.0039: Failed to get joycon info; ret=-71 [ 473.066998][ T982] nintendo 0003:057E:2019.0039: Failed to retrieve controller info; ret=-71 [ 473.076302][ T982] nintendo 0003:057E:2019.0039: Failed to initialize controller; ret=-71 [ 473.108700][ T982] nintendo 0003:057E:2019.0039: probe - fail = -71 [ 473.133637][ T982] nintendo 0003:057E:2019.0039: probe with driver nintendo failed with error -71 [ 473.172852][T17753] team0: Port device team_slave_0 added [ 473.174602][ T982] usb 6-1: USB disconnect, device number 30 [ 473.194647][T17753] team0: Port device team_slave_1 added [ 473.300230][T17753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.307443][T17753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.336352][T17753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.357559][T17753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.372280][T17753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.443023][T17753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.536711][T17753] hsr_slave_0: entered promiscuous mode [ 473.544821][T17753] hsr_slave_1: entered promiscuous mode [ 473.552826][T17753] debugfs: 'hsr0' already exists in 'hsr' [ 473.568879][T17753] Cannot create hsr debugfs directory [ 473.592918][ T58] IPVS: stop unused estimator thread 0... [ 473.906880][T17832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5235'. [ 474.138747][T17839] Bluetooth: MGMT ver 1.23 [ 474.322711][ T5138] Bluetooth: hci0: command tx timeout [ 474.813125][T17858] nbd1: detected capacity change from 0 to 127 [ 474.840141][ T5138] block nbd1: Receive control failed (result -32) [ 474.850204][ T5821] block nbd1: Send control failed (result -32) [ 474.875409][ T5821] block nbd1: Request send failed, requeueing [ 474.911676][ T25] block nbd1: Dead connection, failed to find a fallback [ 474.920534][ T25] block nbd1: shutting down sockets [ 474.928226][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 474.941480][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 474.965897][ T5821] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 474.987535][ T5821] Buffer I/O error on dev nbd1, logical block 1, async page read [ 474.996422][ T5821] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.028185][ T5821] Buffer I/O error on dev nbd1, logical block 2, async page read [ 475.082308][ T5821] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.092710][ T5821] Buffer I/O error on dev nbd1, logical block 3, async page read [ 475.102858][ T5821] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.113808][ T5821] Buffer I/O error on dev nbd1, logical block 0, async page read [ 475.122173][ T5821] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.170975][ T5821] Buffer I/O error on dev nbd1, logical block 1, async page read [ 475.185707][ T5821] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.209914][ T5821] Buffer I/O error on dev nbd1, logical block 2, async page read [ 475.239567][ T5821] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.285951][ T5821] Buffer I/O error on dev nbd1, logical block 3, async page read [ 475.310847][ T5821] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.364374][ T5821] Buffer I/O error on dev nbd1, logical block 0, async page read [ 475.400539][ T5821] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.450546][ T5821] Buffer I/O error on dev nbd1, logical block 1, async page read [ 475.496051][ T5821] ldm_validate_partition_table(): Disk read failed. [ 475.532784][ T5821] Dev nbd1: unable to read RDB block 0 [ 475.562811][ T5821] nbd1: unable to read partition table [ 475.596745][ T5821] ldm_validate_partition_table(): Disk read failed. [ 475.624300][ T5821] Dev nbd1: unable to read RDB block 0 [ 475.636601][ T5821] nbd1: unable to read partition table [ 475.882456][T17753] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 475.925869][T17753] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 475.966855][T17753] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 476.078861][T17753] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 476.401098][ T5826] Bluetooth: hci0: command tx timeout [ 476.420245][T17753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.456265][T17753] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.495327][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.502603][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.546165][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.553516][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.571121][T17553] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 476.741196][T17553] usb 6-1: Using ep0 maxpacket: 32 [ 476.753626][T17553] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 476.764906][T17553] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 476.776188][T17553] usb 6-1: config 0 interface 0 has no altsetting 0 [ 476.786702][T17553] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 476.815105][T17553] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.835344][T17553] usb 6-1: Product: syz [ 476.845849][T17553] usb 6-1: Manufacturer: syz [ 476.855936][T17553] usb 6-1: SerialNumber: syz [ 476.875820][T17553] usb 6-1: config 0 descriptor?? [ 477.176204][T17753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.322652][T17553] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 477.605834][T17753] veth0_vlan: entered promiscuous mode [ 477.628535][T17753] veth1_vlan: entered promiscuous mode [ 477.692138][T17753] veth0_macvtap: entered promiscuous mode [ 477.707906][T17753] veth1_macvtap: entered promiscuous mode [ 477.727699][T17553] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 477.754686][T17553] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 477.769369][T17753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.791335][T17553] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 477.803811][T17753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.829257][ T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.844818][T17553] usb 6-1: USB disconnect, device number 31 [ 477.857307][ T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.895489][ T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.927697][ T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.145061][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.162367][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.243334][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.258855][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.403379][ T5138] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 478.411576][ T5826] Bluetooth: hci3: command 0x1003 tx timeout [ 478.493063][ T5138] Bluetooth: hci0: command tx timeout [ 478.576936][T17972] tap0: tun_chr_ioctl cmd 1074025672 [ 478.611291][T17972] tap0: ignored: set checksum enabled [ 479.123964][ T30] audit: type=1326 audit(1772501067.024:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17992 comm="syz.6.5274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09a6b9c799 code=0x0 [ 480.977015][T18074] ALSA: mixer_oss: invalid OSS volume '' [ 480.996290][T18074] ALSA: mixer_oss: invalid OSS volume '' [ 481.049405][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5308'. [ 481.637026][T18101] kernel read not supported for file /file1 (pid: 18101 comm: syz.7.5320) [ 481.647725][ T30] audit: type=1800 audit(1772501069.544:65): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5320" name="file1" dev="mqueue" ino=81008 res=0 errno=0 [ 483.131029][ T5871] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 483.316526][ T5871] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 483.335511][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.351563][ T5871] usb 6-1: Product: syz [ 483.367098][ T5871] usb 6-1: Manufacturer: syz [ 483.374512][ T5871] usb 6-1: SerialNumber: syz [ 483.391265][ T5871] usb 6-1: config 0 descriptor?? [ 483.417009][ T5871] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 484.054233][ T5871] gspca_sunplus: reg_r err -71 [ 484.067305][ T5871] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 484.105461][ T5871] usb 6-1: USB disconnect, device number 32 [ 484.492520][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5370'. [ 484.883081][T18220] input: syz1 as /devices/virtual/input/input45 [ 485.315172][T18240] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5385'. [ 485.362043][T18242] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5385'. [ 485.382513][T18237] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5385'. [ 486.673583][ T30] audit: type=1326 audit(1772501074.564:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18298 comm="syz.6.5416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09a6b9c799 code=0x0 [ 486.728441][T18303] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5418'. [ 487.747810][T18343] binder: 18342:18343 ioctl c018620c 200000000140 returned -1 [ 487.769155][T18346] loop4: detected capacity change from 0 to 7 [ 487.782541][ T5821] buffer_io_error: 138 callbacks suppressed [ 487.782561][ T5821] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.797196][ T5821] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.806494][ T5821] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.816251][ T5821] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.824445][ T5821] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.854353][ T5821] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.867786][ T5821] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.875937][ T5821] ldm_validate_partition_table(): Disk read failed. [ 487.882870][ T5821] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.891490][ T5821] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.900237][ T5821] Buffer I/O error on dev loop4, logical block 0, async page read [ 487.916092][ T5821] Dev loop4: unable to read RDB block 0 [ 487.927930][ T5821] loop4: unable to read partition table [ 487.940888][ T5821] loop4: partition table beyond EOD, truncated [ 487.971157][T18346] ldm_validate_partition_table(): Disk read failed. [ 487.985634][T18346] Dev loop4: unable to read RDB block 0 [ 487.996944][T18346] loop4: unable to read partition table [ 488.017917][T18346] loop4: partition table beyond EOD, truncated [ 488.041340][T18346] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 488.080992][T17553] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 488.253965][T17553] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 488.283204][T17553] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 488.301514][T17553] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 488.322848][T17553] usb 8-1: config 220 has no interface number 2 [ 488.345331][T17553] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 488.362970][T17553] usb 8-1: config 220 interface 0 has no altsetting 0 [ 488.371568][T17553] usb 8-1: config 220 interface 76 has no altsetting 0 [ 488.392483][T17553] usb 8-1: config 220 interface 1 has no altsetting 0 [ 488.404815][T17553] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 488.422441][T17553] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.432714][T17553] usb 8-1: Product: syz [ 488.437047][T17553] usb 8-1: Manufacturer: syz [ 488.442087][T17553] usb 8-1: SerialNumber: syz [ 488.457879][ T5138] block nbd2: Receive control failed (result -32) [ 488.675370][T17553] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 488.702775][T17553] uvcvideo 8-1:220.0: No valid video chain found. [ 488.720843][T17553] usb 8-1: selecting invalid altsetting 0 [ 488.768849][T17553] usb 8-1: selecting invalid altsetting 0 [ 488.785492][T17553] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 488.825190][T17553] usb 8-1: USB disconnect, device number 18 [ 489.048724][T18386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5457'. [ 489.080819][ T7242] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 489.243439][ T7242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.270426][ T7242] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 489.288713][ T7242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.305853][ T7242] usb 6-1: config 0 descriptor?? [ 489.743008][ T7242] keytouch 0003:0926:3333.003A: fixing up Keytouch IEC report descriptor [ 489.773478][ T7242] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.003A/input/input47 [ 489.927898][ T7242] keytouch 0003:0926:3333.003A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 490.177200][T17962] usb 6-1: USB disconnect, device number 33 [ 490.286769][T18418] blkio.reset_stats is deprecated [ 490.652636][T18434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5481'. [ 490.766125][T18438] netlink: 'syz.7.5483': attribute type 2 has an invalid length. [ 490.777425][T18438] netlink: 'syz.7.5483': attribute type 11 has an invalid length. [ 490.785760][T18438] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5483'. [ 491.811078][ T29] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 491.861653][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5508'. [ 491.962565][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.973847][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.984104][ T29] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 491.994983][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.009507][ T29] usb 6-1: config 0 descriptor?? [ 492.420844][ T5871] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 492.431970][ T29] hid_parser_main: 7 callbacks suppressed [ 492.431992][ T29] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 492.448602][ T29] cp2112 0003:10C4:EA90.003B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 492.592954][ T5871] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 492.618436][ T5871] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 492.632983][ T29] cp2112 0003:10C4:EA90.003B: error requesting version [ 492.653025][ T5871] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 492.668909][ T29] cp2112 0003:10C4:EA90.003B: probe with driver cp2112 failed with error -71 [ 492.684507][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.702073][ T5871] usb 8-1: Product: syz [ 492.711850][ T29] usb 6-1: USB disconnect, device number 34 [ 492.717879][ T5871] usb 8-1: Manufacturer: syz [ 492.725501][ T5871] usb 8-1: SerialNumber: syz [ 492.746370][ T5871] usb 8-1: config 0 descriptor?? [ 492.754926][T18497] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 492.764467][T18497] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 492.990125][T18497] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 493.006161][T18497] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 493.425064][ T5871] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 493.625866][ T5871] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 493.649019][ T5871] usb 8-1: USB disconnect, device number 19 [ 495.416551][T18579] block nbd3: Unsupported socket: should be TCP or UNIX. [ 495.762415][T17553] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 495.853740][T18595] use of bytesused == 0 is deprecated and will be removed in the future, [ 495.863563][T18595] use the actual size instead. [ 495.930789][T17553] usb 7-1: Using ep0 maxpacket: 32 [ 495.946789][T17553] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 495.975729][T17553] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 495.999020][T17553] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 496.012802][T17553] usb 7-1: Product: syz [ 496.017288][T17553] usb 7-1: Manufacturer: syz [ 496.022720][T17553] usb 7-1: SerialNumber: syz [ 496.030477][T17553] usb 7-1: config 0 descriptor?? [ 496.037075][T18583] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 496.052565][T17553] hub 7-1:0.0: bad descriptor, ignoring hub [ 496.058835][T17553] hub 7-1:0.0: probe with driver hub failed with error -5 [ 497.399683][T18640] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 498.227603][T18676] loop7: detected capacity change from 0 to 7 [ 498.238397][ T5821] buffer_io_error: 38 callbacks suppressed [ 498.238416][ T5821] Buffer I/O error on dev loop7, logical block 0, async page read [ 498.262470][ T5821] Buffer I/O error on dev loop7, logical block 0, async page read [ 498.274994][ T5821] Buffer I/O error on dev loop7, logical block 0, async page read [ 498.326941][T18682] Invalid logical block size (6) [ 498.348412][ T5821] Buffer I/O error on dev loop7, logical block 0, async page read [ 498.359662][ T5821] Buffer I/O error on dev loop7, logical block 0, async page read [ 498.369394][ T5821] Buffer I/O error on dev loop7, logical block 0, async page read [ 498.378963][ T5821] Buffer I/O error on dev loop7, logical block 0, async page read [ 498.387854][ T5821] ldm_validate_partition_table(): Disk read failed. [ 498.395581][ T5821] Buffer I/O error on dev loop7, logical block 0, async page read [ 498.408086][ T5821] Buffer I/O error on dev loop7, logical block 0, async page read [ 498.420584][ T5821] Buffer I/O error on dev loop7, logical block 0, async page read [ 498.429464][ T5821] Dev loop7: unable to read RDB block 0 [ 498.435931][ T5821] loop7: unable to read partition table [ 498.443812][T18686] kvm: kvm [18685]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x80000000000 [ 498.454297][ T5821] loop7: partition table beyond EOD, truncated [ 498.464783][T18676] ldm_validate_partition_table(): Disk read failed. [ 498.493374][T18676] Dev loop7: unable to read RDB block 0 [ 498.499238][T18676] loop7: unable to read partition table [ 498.513175][T18676] loop7: partition table beyond EOD, truncated [ 498.521755][T18676] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 499.377166][ T5871] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 499.530755][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 499.542782][T17553] usb 7-1: USB disconnect, device number 25 [ 499.551913][ T5871] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 499.575939][ T5871] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 499.588240][ T5871] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 499.598809][ T5871] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.623416][ T5871] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 499.633097][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.853926][ T5871] usb 6-1: GET_CAPABILITIES returned 0 [ 499.859878][ T5871] usbtmc 6-1:16.0: can't read capabilities [ 499.941644][T17553] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 500.072417][ T9] usb 6-1: USB disconnect, device number 35 [ 500.093356][T17553] usb 7-1: config 150 has an invalid interface number: 204 but max is 1 [ 500.103134][T17553] usb 7-1: config 150 has no interface number 0 [ 500.109495][T17553] usb 7-1: config 150 interface 204 has no altsetting 0 [ 500.119934][T17553] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 500.131391][T17553] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.139475][T17553] usb 7-1: Product: syz [ 500.144145][T17553] usb 7-1: Manufacturer: syz [ 500.149358][T17553] usb 7-1: SerialNumber: syz [ 500.162257][ T5138] Bluetooth: hci1: command tx timeout [ 500.367481][T17553] xr_serial 7-1:150.204: xr_serial converter detected [ 500.969904][T17553] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 500.994317][T17553] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 501.019134][T18751] netlink: 26332 bytes leftover after parsing attributes in process `syz.7.5624'. [ 501.043102][T17553] usb 7-1: USB disconnect, device number 26 [ 501.057775][T17553] xr_serial 7-1:150.204: device disconnected [ 501.150067][T18753] netlink: 188 bytes leftover after parsing attributes in process `syz.7.5615'. [ 501.608213][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.616101][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.350231][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5637'. [ 502.454672][ T5138] block nbd3: Receive control failed (result -32) [ 502.644885][T18807] trusted_key: encrypted_key: keyword 'uew' not recognized [ 503.130990][ T29] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 503.281328][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 503.293134][ T29] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 503.312939][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.329435][ T29] usb 8-1: config 0 descriptor?? [ 503.339116][ T29] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 503.942038][ T29] gspca_vc032x: reg_w err -71 [ 503.951288][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.956633][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.962395][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.967767][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.974125][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.979658][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.986086][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.992268][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.997626][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.003799][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.009807][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.015575][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.021037][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.026351][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.031890][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.038189][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.043635][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.048952][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 504.054416][ T29] gspca_vc032x: Unknown sensor... [ 504.059632][ T29] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 504.070864][ T29] usb 8-1: USB disconnect, device number 20 [ 504.551308][ T29] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 504.641313][ T5826] Bluetooth: hci3: command 0x1003 tx timeout [ 504.650779][ T5138] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 504.722372][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.733005][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 504.744293][ T29] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 504.754538][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.763304][ T29] usb 6-1: Product: syz [ 504.768364][ T29] usb 6-1: Manufacturer: syz [ 504.773127][ T29] usb 6-1: SerialNumber: syz [ 504.780586][ T29] usb 6-1: config 0 descriptor?? [ 504.794994][ T29] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 504.843655][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 504.854333][ T29] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 504.865056][ T29] usb 6-1: media controller created [ 504.892425][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.019295][ T29] DVB: Unable to find symbol tda10046_attach() [ 505.025878][ T29] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 505.038462][ T29] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 505.223728][T17962] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 505.390776][T17962] usb 8-1: Using ep0 maxpacket: 32 [ 505.397878][T17962] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 505.408493][T17962] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 505.418891][T17962] usb 8-1: config 0 interface 0 has no altsetting 0 [ 505.434062][T17962] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 505.446192][T17962] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.455881][T17962] usb 8-1: Product: syz [ 505.460149][T17962] usb 8-1: Manufacturer: syz [ 505.465366][T17962] usb 8-1: SerialNumber: syz [ 505.475023][T17962] usb 8-1: config 0 descriptor?? [ 505.657804][ T29] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 505.696430][ T29] usb 6-1: USB disconnect, device number 36 [ 505.907226][T17962] gs_usb 8-1:0.0: Configuring for 159 interfaces [ 506.316680][T17962] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 506.406935][T17962] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 506.431514][T17962] usb 8-1: USB disconnect, device number 21 [ 506.878336][T18901] sp0: Synchronizing with TNC [ 507.129442][T18909] can0: slcan on pty30. [ 507.222073][T18903] can0 (unregistered): slcan off pty30. [ 507.918488][T18945] [U] [ 507.922026][T18945] [U] [ 507.924773][T18945] [U] N [ 507.927592][T18945] [U] [ 507.940194][T18945] [U] [ 507.943072][T18945] [U] [ 507.945807][T18945] [U] [ 507.948540][T18945] [U] [ 507.953819][T18945] [U] [ 507.956576][T18945] [U] [ 507.959312][T18945] [U] [ 507.962044][T18945] [U] [ 507.966030][T18945] [U] [ 507.968878][T18945] [U] [ 507.971610][T18945] [U] [ 507.974348][T18945] [U] [ 507.987101][T18945] [U] [ 507.989916][T18945] [U] [ 507.992658][T18945] [U] [ 507.995394][T18945] [U] [ 508.031283][T18945] [U] [ 508.034064][T18945] [U] [ 508.036814][T18945] [U] [ 508.039549][T18945] [U] [ 508.043517][T18945] [U] [ 508.046266][T18945] [U] [ 508.049036][T18945] [U] [ 508.051759][T18945] [U] [ 508.060402][T18945] [U] [ 508.063175][T18945] [U] [ 508.065914][T18945] [U] [ 508.068663][T18945] [U] [ 508.079483][T18945] [U] [ 508.082261][T18945] [U] [ 508.085010][T18945] [U] [ 508.087755][T18945] [U] [ 508.090502][T18945] [U] [ 508.105660][T18945] [U] [ 508.108423][T18945] [U] [ 508.111157][T18945] [U] [ 508.113942][T18945] [U] [ 508.150922][T18945] [U] [ 508.153714][T18945] [U] [ 508.156449][T18945] [U] [ 508.159175][T18945] [U] [ 508.191159][T18945] [U] [ 508.193932][T18945] [U] [ 508.196679][T18945] [U] [ 508.199416][T18945] [U] [ 508.218662][T18945] [U] [ 508.221473][T18945] [U] [ 508.224206][T18945] [U] [ 508.226939][T18945] [U] [ 508.243064][T18954] overlay: filesystem on ./file1 is read-only [ 508.250818][T18945] [U] [ 508.253577][T18945] [U] [ 508.256310][T18945] [U] [ 508.259125][T18945] [U] [ 508.285763][T18945] [U] [ 508.288543][T18945] [U] [ 508.291384][T18945] [U] [ 508.294118][T18945] [U] [ 508.299062][T18945] [U] [ 508.301821][T18945] [U] [ 508.304562][T18945] [U] [ 508.307305][T18945] [U] [ 508.312851][T18945] [U] [ 508.315615][T18945] [U] [ 508.318357][T18945] [U] [ 508.321097][T18945] [U] [ 508.328550][T18945] [U] [ 508.331310][T18945] [U] [ 508.334063][T18945] [U] [ 508.336797][T18945] [U] [ 508.355288][T18945] [U] [ 508.358233][T18945] [U] [ 508.361007][T18945] [U] [ 508.363839][T18945] [U] [ 508.369204][T18945] [U] [ 508.371975][T18945] [U] [ 508.374740][T18945] [U] [ 508.377467][T18945] [U] [ 508.381764][T18945] [U] [ 508.384518][T18945] [U] [ 508.387248][T18945] [U] [ 508.389984][T18945] [U] [ 508.393682][T18945] [U] [ 508.396433][T18945] [U] [ 508.399163][T18945] [U] [ 508.401903][T18945] [U] [ 508.411152][T18945] [U] [ 508.413927][T18945] [U] [ 508.416683][T18945] [U] [ 508.419506][T18945] [U] [ 508.451009][T18945] [U] [ 508.453797][T18945] [U] [ 508.456530][T18945] [U] [ 508.459278][T18945] [U] [ 508.484900][T18945] [U] [ 508.487682][T18945] [U] [ 508.490418][T18945] [U] [ 508.493154][T18945] [U] [ 508.532512][T18945] [U] [ 508.535284][T18945] [U] [ 508.538041][T18945] [U] [ 508.540777][T18945] [U] [ 508.559999][T18945] [U] [ 508.562780][T18945] [U] [ 508.565522][T18945] [U] [ 508.568293][T18945] [U] [ 508.572992][T18945] [U] [ 508.575755][T18945] [U] [ 508.578490][T18945] [U] [ 508.581236][T18945] [U] [ 508.585577][T18945] [U] [ 508.588414][T18945] [U] [ 508.591148][T18945] [U] [ 508.593979][T18945] [U] [ 508.597076][T18945] [U] [ 508.599831][T18945] [U] [ 508.602562][T18945] [U] [ 508.605306][T18945] [U] [ 508.617687][T18945] [U] [ 508.620476][T18945] [U] [ 508.623222][T18945] [U] [ 508.626043][T18945] [U] [ 508.659820][T18945] [U] [ 508.662605][T18945] [U] [ 508.665352][T18945] [U] [ 508.766525][T18944] [U] [ 508.970218][T18973] loop8: detected capacity change from 0 to 1 [ 508.988706][T18973] Dev loop8: unable to read RDB block 1 [ 509.004645][T18973] loop8: unable to read partition table [ 509.030724][T18973] loop8: partition table beyond EOD, truncated [ 509.050143][T18973] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 509.072855][T18975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.975730][T19007] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 510.350733][T17962] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 510.511743][T17962] usb 8-1: Using ep0 maxpacket: 32 [ 510.526046][T17962] usb 8-1: config 0 has no interfaces? [ 510.536378][T17962] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 510.546360][T17962] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.572171][T17962] usb 8-1: config 0 descriptor?? [ 510.807151][T19014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.834460][T19014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.863227][ T29] usb 8-1: USB disconnect, device number 22 [ 511.310832][T17962] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 511.470936][T17962] usb 8-1: Using ep0 maxpacket: 16 [ 511.487733][T17962] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 511.509537][T17962] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 511.536060][T17962] usb 8-1: string descriptor 0 read error: -22 [ 511.552606][T17962] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 511.573907][T17962] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.605163][T17962] usb 8-1: config 0 descriptor?? [ 511.639044][T17962] em28xx 8-1:0.0: New device @ 480 Mbps (2040:0264, interface 0, class 0) [ 511.663394][T17962] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 511.881919][T17962] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 511.891368][T17962] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 511.909068][T17962] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 511.925358][T17962] em28xx 8-1:0.0: No AC97 audio processor [ 511.952015][T17962] usb 8-1: USB disconnect, device number 23 [ 511.974199][T17962] em28xx 8-1:0.0: Disconnecting em28xx [ 512.002657][T17962] em28xx 8-1:0.0: Freeing device [ 512.027154][ T30] audit: type=1326 audit(1772501099.924:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.0.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5670d9c799 code=0x7ffc0000 [ 512.056634][ T30] audit: type=1326 audit(1772501099.924:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.0.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5670d9c799 code=0x7ffc0000 [ 512.082780][ T30] audit: type=1326 audit(1772501099.954:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.0.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5670d9c799 code=0x7ffc0000 [ 512.106819][ T30] audit: type=1326 audit(1772501099.954:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.0.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5670d9c799 code=0x7ffc0000 [ 512.136467][ T30] audit: type=1326 audit(1772501099.954:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.0.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5670d9c799 code=0x7ffc0000 [ 512.175259][ T30] audit: type=1326 audit(1772501099.954:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19079 comm="syz.0.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f5670d9c799 code=0x7ffc0000 [ 512.396046][T19090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 512.520836][ T29] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 512.680766][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 512.689584][ T29] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 512.705904][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.750282][ T29] pvrusb2: Hardware description: Terratec Grabster AV400 [ 512.763362][ T29] pvrusb2: ********** [ 512.767463][ T29] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 512.779430][ T29] pvrusb2: Important functionality might not be entirely working. [ 512.801381][ T29] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 512.819185][ T29] pvrusb2: ********** [ 512.958610][ T2344] pvrusb2: Invalid write control endpoint [ 513.104752][ T2344] pvrusb2: Invalid write control endpoint [ 513.112661][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 513.138944][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 513.167347][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 513.178237][ T2344] pvrusb2: Device being rendered inoperable [ 513.184795][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 513.192243][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 513.208844][ T2344] pvrusb2: Attached sub-driver cx25840 [ 513.218761][T17962] usb 6-1: USB disconnect, device number 37 [ 513.225896][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 513.238080][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 513.300328][T19116] netlink: 'syz.0.5785': attribute type 83 has an invalid length. [ 513.917128][T19138] Invalid ELF header len 16 [ 514.101239][T19145] kvm: kvm [19144]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xffffffffffffffff [ 515.155760][T19189] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5817'. [ 515.166111][ T30] audit: type=1326 audit(1772501103.064:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19186 comm="syz.5.5818" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cf4f9c799 code=0x0 [ 515.503257][ T30] audit: type=1326 audit(1772501103.404:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a6b9c799 code=0x7ffc0000 [ 515.536614][ T30] audit: type=1326 audit(1772501103.404:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a6b9c799 code=0x7ffc0000 [ 515.559992][ T30] audit: type=1326 audit(1772501103.434:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19199 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f09a6b9c799 code=0x7ffc0000 [ 515.844770][T19207] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5827'. [ 515.969065][T19211] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5828'. [ 516.521330][T17553] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 516.539505][T19231] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5837'. [ 516.684247][T17553] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 516.707983][T17553] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 516.731254][T17553] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 516.754850][T17553] usb 6-1: config 220 has no interface number 2 [ 516.770266][T17553] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 516.811179][T17553] usb 6-1: config 220 interface 0 has no altsetting 0 [ 516.823669][T17553] usb 6-1: config 220 interface 76 has no altsetting 0 [ 516.831483][T17553] usb 6-1: config 220 interface 1 has no altsetting 0 [ 516.842786][T17553] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 516.852665][T17553] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.862478][T17553] usb 6-1: Product: syz [ 516.866774][T17553] usb 6-1: Manufacturer: syz [ 516.873047][T17553] usb 6-1: SerialNumber: syz [ 517.127334][T17553] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 517.139237][T17553] uvcvideo 6-1:220.0: No valid video chain found. [ 517.147734][T17553] usb 6-1: selecting invalid altsetting 0 [ 517.180247][T17553] usb 6-1: selecting invalid altsetting 0 [ 517.187126][T17553] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 517.204061][T17553] usb 6-1: USB disconnect, device number 38 [ 517.478198][T19259] veth1_macvtap: left promiscuous mode [ 517.485216][T19259] macsec0: entered promiscuous mode [ 517.498572][T19259] veth1_macvtap: entered promiscuous mode [ 517.506673][T19259] macsec0: left promiscuous mode [ 517.628570][T19263] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5852'. [ 518.337811][T19288] netlink: 'syz.7.5861': attribute type 21 has an invalid length. [ 518.355457][T19288] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5861'. [ 518.395779][T19288] netlink: 'syz.7.5861': attribute type 21 has an invalid length. [ 518.417622][T19288] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5861'. [ 519.594028][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 519.789149][T19354] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.5882'. [ 520.741091][T19396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5903'. [ 521.127397][T19412] virtiofs: Unknown parameter 'always 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 18 nlmon0 : 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 20 batadv0 : 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 23 veth0 : 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 24 veth1 : 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 25 wg0 : 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 26 wg1 : 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 27 wg2 : 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 28 veth0_to_bridge: 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 29 bridge_slave_0: 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 30 veth1_to_bridge: 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 31 bridge_slave_1: 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 32 veth0_to_bond: 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 33 bond_slave_0: 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 34 veth1_to_bond: 1 V3 [ 521.127397][T19412] 010000E0 1 0:00000000 0 [ 521.127397][T19412] 35 bond_slave_1: 1 V3 [ 521.127397][T19412] 010000E0 [ 521.255393][T19414] loop8: detected capacity change from 0 to 1 [ 521.454591][T19414] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 521.485434][T19414] loop8: p1 start 540042604 is beyond EOD, truncated [ 521.559324][T19414] loop8: p2 start 1640453368 is beyond EOD, truncated [ 521.593228][T19414] loop8: p3 start 1935506780 is beyond EOD, truncated [ 521.610753][T19414] loop8: p4 start 3893138939 is beyond EOD, truncated [ 521.627944][T19414] loop8: p5 start 287485722 is beyond EOD, truncated [ 521.643414][T19414] loop8: p6 start 3376667143 is beyond EOD, truncated [ 521.660561][T19414] loop8: p7 start 2111012381 is beyond EOD, truncated [ 521.673122][T19414] loop8: p8 start 3147612238 is beyond EOD, truncated [ 521.700950][T19414] loop8: p9 start 2252824347 is beyond EOD, truncated [ 521.708872][T19414] loop8: p10 start 489633540 is beyond EOD, truncated [ 521.716422][T19414] loop8: p11 start 1985099615 is beyond EOD, truncated [ 521.733066][T19414] loop8: p12 start 2132828001 is beyond EOD, truncated [ 521.936591][T19436] input: syz0 as /devices/virtual/input/input48 [ 522.903442][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5934'. [ 523.179759][T19484] tmpfs: Cannot change global quota limit on remount [ 523.359702][T19491] netlink: 'syz.5.5946': attribute type 4 has an invalid length. [ 523.371869][T19491] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5946'. [ 523.736727][T19511] netlink: 'syz.0.5957': attribute type 83 has an invalid length. [ 523.888565][T19518] input: syz1 as /devices/virtual/input/input49 [ 523.966761][T19522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.058160][T19525] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5963'. [ 524.578634][T19546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5974'. [ 524.653528][T19550] loop8: detected capacity change from 0 to 1 [ 524.671115][ T7500] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 524.681479][ T7500] loop8: p1 start 540042604 is beyond EOD, truncated [ 524.688354][ T7500] loop8: p2 start 1640453368 is beyond EOD, truncated [ 524.695485][ T7500] loop8: p3 start 1935506780 is beyond EOD, truncated [ 524.702602][ T7500] loop8: p4 start 3893138939 is beyond EOD, truncated [ 524.709433][ T7500] loop8: p5 start 287485722 is beyond EOD, truncated [ 524.716858][ T7500] loop8: p6 start 3376667143 is beyond EOD, truncated [ 524.724702][ T7500] loop8: p7 start 2111012381 is beyond EOD, truncated [ 524.731910][ T7500] loop8: p8 start 3147612238 is beyond EOD, truncated [ 524.738776][ T7500] loop8: p9 start 2252824347 is beyond EOD, truncated [ 524.747702][ T7500] loop8: p10 start 489633540 is beyond EOD, truncated [ 524.756057][ T7500] loop8: p11 start 1985099615 is beyond EOD, truncated [ 524.763873][ T7500] loop8: p12 start 2132828001 is beyond EOD, truncated [ 524.777601][T19550] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 524.785426][T19550] loop8: p1 start 540042604 is beyond EOD, truncated [ 524.792294][T19550] loop8: p2 start 1640453368 is beyond EOD, truncated [ 524.799204][T19550] loop8: p3 start 1935506780 is beyond EOD, truncated [ 524.806565][T19550] loop8: p4 start 3893138939 is beyond EOD, truncated [ 524.813806][T19550] loop8: p5 start 287485722 is beyond EOD, truncated [ 524.821457][T19550] loop8: p6 start 3376667143 is beyond EOD, truncated [ 524.828754][T19550] loop8: p7 start 2111012381 is beyond EOD, truncated [ 524.835666][T19550] loop8: p8 start 3147612238 is beyond EOD, truncated [ 524.842784][T19550] loop8: p9 start 2252824347 is beyond EOD, truncated [ 524.849598][T19550] loop8: p10 start 489633540 is beyond EOD, truncated [ 524.857111][T19550] loop8: p11 start 1985099615 is beyond EOD, truncated [ 524.864156][T19550] loop8: p12 start 2132828001 is beyond EOD, truncated [ 524.880801][T17962] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 525.041259][T17962] usb 7-1: Using ep0 maxpacket: 8 [ 525.048472][T17962] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.058798][T17962] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 525.068679][T17962] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 525.079089][T17962] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.092573][T17962] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 525.101970][T17962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.320223][T17962] usb 7-1: GET_CAPABILITIES returned 0 [ 525.326151][T17962] usbtmc 7-1:16.0: can't read capabilities [ 525.529227][T17553] usb 7-1: USB disconnect, device number 27 [ 526.134850][T19555] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5985'. [ 526.165232][ T5138] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 526.173227][ T5826] Bluetooth: hci3: command 0x1003 tx timeout [ 526.337883][T19562] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 526.349740][T19562] syzkaller1: linktype set to 786 [ 526.438566][ T58] Bluetooth: hci3: Frame reassembly failed (-84) [ 526.535285][T19573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5986'. [ 526.923328][T19589] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5995'. [ 527.155991][T19596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.648769][T19607] input: syz1 as /devices/virtual/input/input50 [ 528.480907][ T5138] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 528.482232][ T5826] Bluetooth: hci3: command 0x1003 tx timeout [ 528.578082][T17553] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 528.712981][T19646] input: syz0 as /devices/virtual/input/input51 [ 528.751178][T17553] usb 7-1: Using ep0 maxpacket: 8 [ 528.759462][T17553] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.775763][T17553] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 528.793872][T17553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.818707][T17553] usb 7-1: config 0 descriptor?? [ 528.833554][T17553] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 529.015012][T19654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6032'. [ 529.183036][T19659] netlink: 'syz.7.6024': attribute type 4 has an invalid length. [ 529.192070][T19659] netlink: 17 bytes leftover after parsing attributes in process `syz.7.6024'. [ 529.638047][T17553] gspca_vc032x: reg_w err -71 [ 529.655343][T17553] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 529.678150][T17553] usb 7-1: USB disconnect, device number 28 [ 530.531130][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 530.750904][T17553] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 530.920823][T17553] usb 7-1: Using ep0 maxpacket: 8 [ 530.936137][T17553] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 530.957081][T17553] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 530.984481][T17553] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 530.997743][T17553] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.011718][T17553] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 531.022125][T17553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.260899][T17553] usb 7-1: GET_CAPABILITIES returned 0 [ 531.277353][T17553] usbtmc 7-1:16.0: can't read capabilities [ 531.423430][T19755] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6060'. [ 531.482295][T17553] usb 7-1: USB disconnect, device number 29 [ 532.567271][T19784] overlayfs: invalid origin (0000) [ 533.110803][T17553] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 533.285650][T17553] usb 6-1: unable to get BOS descriptor or descriptor too short [ 533.301462][T17553] usb 6-1: not running at top speed; connect to a high speed hub [ 533.311631][T17553] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.325387][T17553] usb 6-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 533.337479][T17553] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.345981][T17553] usb 6-1: Product: syz [ 533.350302][T17553] usb 6-1: Manufacturer: syz [ 533.355498][T17553] usb 6-1: SerialNumber: syz [ 533.372856][T17553] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 533.571522][ T10] usb 6-1: USB disconnect, device number 39 [ 534.954993][T19875] overlayfs: invalid origin (0000) [ 535.403574][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6125'. [ 535.418140][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6125'. [ 535.505682][T19899] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.690770][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 536.776855][T19953] netlink: 160 bytes leftover after parsing attributes in process `syz.7.6150'. [ 536.864034][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 536.887042][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 536.919738][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 536.942739][ T10] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 536.963421][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.988077][ T10] usb 6-1: Product: syz [ 536.996743][ T10] usb 6-1: Manufacturer: syz [ 537.002311][ T10] usb 6-1: SerialNumber: syz [ 537.012726][ T10] usb 6-1: config 0 descriptor?? [ 537.023466][T19943] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 537.032239][T19943] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 537.043069][ T10] usb 6-1: ucan: probing device on interface #0 [ 537.215832][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6155'. [ 537.559957][T19979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6160'. [ 537.651459][ T10] ucan 6-1:0.0: probe with driver ucan failed with error -22 [ 537.855896][T17553] usb 6-1: USB disconnect, device number 40 [ 538.395262][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6165'. [ 539.072467][T20022] [U] [ 539.075226][T20022] [U] [ 539.078048][T20022] [U] N [ 539.080925][T20022] [U] [ 539.084187][T20022] [U] [ 539.086944][T20022] [U] [ 539.089684][T20022] [U] [ 539.093289][T20022] [U] [ 539.098759][T20022] [U] [ 539.101525][T20022] [U] [ 539.104309][T20022] [U] [ 539.107041][T20022] [U] [ 539.110195][T20022] [U] [ 539.112967][T20022] [U] [ 539.115719][T20022] [U] [ 539.118463][T20022] [U] [ 539.121957][T20022] [U] [ 539.124747][T20022] [U] [ 539.128010][T20022] [U] [ 539.130740][T20022] [U] [ 539.134010][T20022] [U] [ 539.136755][T20022] [U] [ 539.139489][T20022] [U] [ 539.142225][T20022] [U] [ 539.145383][T20022] [U] [ 539.148166][T20022] [U] [ 539.150957][T20022] [U] [ 539.153712][T20022] [U] [ 539.156879][T20022] [U] [ 539.159746][T20022] [U] [ 539.162603][T20022] [U] [ 539.165433][T20022] [U] [ 539.170183][T20022] [U] [ 539.173422][T20022] [U] [ 539.176473][T20022] [U] [ 539.179654][T20022] [U] [ 539.182821][T20022] [U] [ 539.187682][T20022] [U] [ 539.190752][T20022] [U] [ 539.193955][T20022] [U] [ 539.197674][T20022] [U] [ 539.206194][T20022] [U] [ 539.209061][T20022] [U] [ 539.212191][T20022] [U] [ 539.215105][T20022] [U] [ 539.219287][T20022] [U] [ 539.222195][T20022] [U] [ 539.225342][T20022] [U] [ 539.228098][T20022] [U] [ 539.233147][T20022] [U] [ 539.236431][T20022] [U] [ 539.239729][T20022] [U] [ 539.242814][T20022] [U] [ 539.246210][T20022] [U] [ 539.249185][T20022] [U] [ 539.252201][T20022] [U] [ 539.255336][T20022] [U] [ 539.259552][T20022] [U] [ 539.262502][T20022] [U] [ 539.265336][T20022] [U] [ 539.268080][T20022] [U] [ 539.272251][T20022] [U] [ 539.275043][T20022] [U] [ 539.277886][T20022] [U] [ 539.280807][T20022] [U] [ 539.284846][T20022] [U] [ 539.288036][T20022] [U] [ 539.291654][T20022] [U] [ 539.294562][T20022] [U] [ 539.299162][T20022] [U] [ 539.302102][T20022] [U] [ 539.304950][T20022] [U] [ 539.308249][T20022] [U] [ 539.317229][T20022] [U] [ 539.321055][T20022] [U] [ 539.324381][T20022] [U] [ 539.327136][T20022] [U] [ 539.330928][T20022] [U] [ 539.333864][T20022] [U] [ 539.336827][T20022] [U] [ 539.339573][T20022] [U] [ 539.343469][T20022] [U] [ 539.347149][T20022] [U] [ 539.349902][T20022] [U] [ 539.352628][T20022] [U] [ 539.356308][T20022] [U] [ 539.359066][T20022] [U] [ 539.361794][T20022] [U] [ 539.364695][T20022] [U] [ 539.370396][T20022] [U] [ 539.373369][T20022] [U] [ 539.376122][T20022] [U] [ 539.378880][T20022] [U] [ 539.390610][T20022] [U] [ 539.393482][T20022] [U] [ 539.396404][T20022] [U] [ 539.399235][T20022] [U] [ 539.404487][T20022] [U] [ 539.407209][T20022] [U] [ 539.410481][T20022] [U] [ 539.414056][T20022] [U] [ 539.418460][T20022] [U] [ 539.421992][T20022] [U] [ 539.425031][T20022] [U] [ 539.427991][T20022] [U] [ 539.431813][T20022] [U] [ 539.434774][T20022] [U] [ 539.438454][T20022] [U] [ 539.441852][T20022] [U] [ 539.449061][T20022] [U] [ 539.451923][T20022] [U] [ 539.454769][T20022] [U] [ 539.458817][T20022] [U] [ 539.463183][T20022] [U] [ 539.466139][T20022] [U] [ 539.469148][T20022] [U] [ 539.472524][T20022] [U] [ 539.476556][T20022] [U] [ 539.479508][T20022] [U] [ 539.482431][T20022] [U] [ 539.485664][T20022] [U] [ 539.489008][T20022] [U] [ 539.492295][T20022] [U] [ 539.495927][T20022] [U] [ 539.499067][T20022] [U] [ 539.508355][T20022] [U] [ 539.511315][T20022] [U] [ 539.514384][T20022] [U] [ 539.539736][T20021] [U] [ 540.750862][ T7242] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 540.801196][ T5138] block nbd4: Receive control failed (result -32) [ 540.909078][ T7242] usb 7-1: unable to get BOS descriptor or descriptor too short [ 540.942090][ T7242] usb 7-1: not running at top speed; connect to a high speed hub [ 540.983862][ T7242] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.999308][T20088] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6218'. [ 541.012736][ T7242] usb 7-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 541.022450][ T7242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.030541][ T7242] usb 7-1: Product: syz [ 541.035825][ T7242] usb 7-1: Manufacturer: syz [ 541.042027][ T7242] usb 7-1: SerialNumber: syz [ 541.066141][ T7242] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 541.279370][ T7242] usb 7-1: USB disconnect, device number 30 [ 541.910315][T20107] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6231'. [ 543.195010][ T5138] block nbd5: Receive control failed (result -32) [ 543.408993][T20142] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6239'. [ 543.989333][T20165] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6252'. [ 544.020392][T20167] : renamed from vlan0 (while UP) [ 544.024173][T20165] netlink: 120 bytes leftover after parsing attributes in process `syz.5.6252'. [ 544.040275][T20165] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6252'. [ 544.600832][ T5818] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 544.763883][ T5818] usb 6-1: unable to get BOS descriptor or descriptor too short [ 544.776321][ T5818] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 544.791639][ T5818] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 544.802176][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.810467][ T5818] usb 6-1: Product: syz [ 544.816127][ T5818] usb 6-1: Manufacturer: syz [ 544.821331][ T5818] usb 6-1: SerialNumber: syz [ 545.050793][ T5818] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 545.058415][ T5818] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 545.066876][ T5818] usb 6-1: unit 6 not found! [ 545.133548][ T5818] usb 6-1: USB disconnect, device number 41 [ 545.325820][ T7779] udevd[7779]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.498660][T20197] program syz.0.6274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 545.967604][T20220] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.6276'. [ 546.096693][ T29] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 546.264017][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.274488][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 546.284213][ T29] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 546.293914][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.302342][ T29] usb 7-1: Product: syz [ 546.306580][ T29] usb 7-1: Manufacturer: syz [ 546.314388][ T29] usb 7-1: SerialNumber: syz [ 546.326474][ T29] usb 7-1: config 0 descriptor?? [ 546.341713][ T29] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 546.358115][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 546.368897][ T29] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 546.379843][ T29] usb 7-1: media controller created [ 546.399066][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.503848][ T29] DVB: Unable to find symbol tda10046_attach() [ 546.510315][ T29] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 546.521007][ T29] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 547.153276][ T29] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 547.168355][ T29] usb 7-1: USB disconnect, device number 31 [ 547.820130][T20247] : renamed from vlan0 (while UP) [ 548.101978][T20259] virtiofs: Unknown parameter 'always 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 18 nlmon0 : 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 20 batadv0 : 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 21 vxcan0 : 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 22 vxcan1 : 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 23 veth0 : 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 24 veth1 : 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 25 wg0 : 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 26 wg1 : 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 27 wg2 : 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 28 veth0_to_bridge: 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 29 bridge_slave_0: 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 30 veth1_to_bridge: 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 31 bridge_slave_1: 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 32 veth0_to_bond: 1 V3 [ 548.101978][T20259] 010000E0 1 0:00000000 0 [ 548.101978][T20259] 33 bond_slave_0: 1 V3 [ 548.101978][T20259] 010000E0 1 0:0 [ 548.721493][T17962] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 549.050710][T17962] usb 7-1: Using ep0 maxpacket: 8 [ 549.061723][T17962] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 549.070394][T17962] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 549.086391][T17962] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 549.097339][T17962] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 549.116501][T17962] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.130507][T17962] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 549.140977][T17962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.360212][T17962] usb 7-1: GET_CAPABILITIES returned 0 [ 549.365904][T17962] usbtmc 7-1:16.0: can't read capabilities [ 549.575033][T17962] usb 7-1: USB disconnect, device number 32 [ 550.249037][T20325] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6326'. [ 550.356672][T20329] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6328'. [ 550.470709][ T7242] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 550.633192][ T7242] usb 7-1: unable to get BOS descriptor or descriptor too short [ 550.643948][ T7242] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 550.666302][ T7242] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 550.676012][ T7242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.685592][ T7242] usb 7-1: Product: syz [ 550.690009][ T7242] usb 7-1: Manufacturer: syz [ 550.695364][ T7242] usb 7-1: SerialNumber: syz [ 550.877998][T20350] netlink: 'syz.7.6346': attribute type 83 has an invalid length. [ 550.932288][ T7242] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 550.951522][ T7242] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 550.960164][ T7242] usb 7-1: unit 6 not found! [ 551.024956][ T7242] usb 7-1: USB disconnect, device number 33 [ 552.520898][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 552.670753][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 552.679688][ T10] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 552.689100][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.697319][ T7242] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 552.707515][ T10] usb 6-1: config 0 descriptor?? [ 552.730772][ T10] as10x_usb: device has been detected [ 552.737238][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 552.757638][ T10] usb 6-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)... [ 552.818169][ T10] as10x_usb: error during firmware upload part1 [ 552.826023][ T10] Registered device nBox DVB-T Dongle [ 552.860785][ T7242] usb 7-1: Using ep0 maxpacket: 16 [ 552.873846][ T7242] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 552.882668][ T7242] usb 7-1: config 0 has no interface number 0 [ 552.888887][ T7242] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.900472][ T7242] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.910557][ T7242] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 552.919916][ T7242] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.931825][ T7242] usb 7-1: config 0 descriptor?? [ 552.951903][T17553] usb 6-1: USB disconnect, device number 42 [ 552.996206][T17553] Unregistered device nBox DVB-T Dongle [ 552.998147][T17553] as10x_usb: device has been disconnected [ 553.550225][ T7242] uclogic 0003:28BD:0071.003C: pen parameters not found [ 553.562617][ T7242] uclogic 0003:28BD:0071.003C: interface is invalid, ignoring [ 553.756164][T17553] usb 7-1: USB disconnect, device number 34 [ 554.081077][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 554.250898][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 554.262358][ T9] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 554.275129][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 554.284000][ T9] usb 6-1: Product: syz [ 554.288441][ T9] usb 6-1: Manufacturer: syz [ 554.295358][ T9] usb 6-1: SerialNumber: syz [ 554.306481][ T9] usb 6-1: config 0 descriptor?? [ 554.320467][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 554.564870][T20441] Attempt to restore checkpoint with obsolete wellknown handles [ 554.602799][ T9] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 554.631766][ T9] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 554.657328][ T9] usb 6-1: USB disconnect, device number 43 [ 555.030019][T20457] netlink: 'syz.7.6388': attribute type 11 has an invalid length. [ 555.815947][T20476] kvm: kvm [20475]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x4000006e) = 0x8004 [ 556.580957][T17553] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 556.738948][T20496] netlink: 'syz.5.6406': attribute type 11 has an invalid length. [ 556.771127][T17553] usb 7-1: Using ep0 maxpacket: 8 [ 556.786806][T17553] usb 7-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.812580][T17553] usb 7-1: config 0 interface 0 has no altsetting 0 [ 556.830766][T17553] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 556.850974][T17553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.935339][T17553] usb 7-1: config 0 descriptor?? [ 557.396174][T17553] smartjoyplus 0003:6666:8804.003D: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.6-1/input0 [ 557.425156][T17553] smartjoyplus 0003:6666:8804.003D: no output reports found [ 557.598780][T17553] usb 7-1: USB disconnect, device number 35 [ 558.228851][T20520] macvlan1: entered promiscuous mode [ 558.237061][T20520] macvlan1: entered allmulticast mode [ 558.244717][T20520] veth1_vlan: entered allmulticast mode [ 558.402430][T17553] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 558.580741][T17553] usb 7-1: Using ep0 maxpacket: 16 [ 558.588345][T17553] usb 7-1: config index 0 descriptor too short (expected 67, got 36) [ 558.597132][T17553] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.609750][T17553] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.620386][T17553] usb 7-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 558.629841][T17553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.641145][T17553] usb 7-1: config 0 descriptor?? [ 558.830763][ T5818] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 558.990830][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 559.001984][ T5818] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 559.011513][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.019660][ T5818] usb 6-1: Product: syz [ 559.024276][ T5818] usb 6-1: Manufacturer: syz [ 559.029309][ T5818] usb 6-1: SerialNumber: syz [ 559.037004][ T5818] usb 6-1: config 0 descriptor?? [ 559.049043][ T5818] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 559.062009][T17553] apple 0003:05AC:0247.003E: unknown main item tag 0x0 [ 559.069041][T17553] apple 0003:05AC:0247.003E: unknown main item tag 0x0 [ 559.077107][T17553] apple 0003:05AC:0247.003E: unknown main item tag 0x0 [ 559.084422][T17553] apple 0003:05AC:0247.003E: unknown main item tag 0x0 [ 559.092646][T17553] apple 0003:05AC:0247.003E: unknown main item tag 0x0 [ 559.099642][T17553] apple 0003:05AC:0247.003E: unknown main item tag 0x0 [ 559.107234][T17553] apple 0003:05AC:0247.003E: unknown main item tag 0x0 [ 559.116202][T17553] apple 0003:05AC:0247.003E: unknown main item tag 0x0 [ 559.124870][T17553] apple 0003:05AC:0247.003E: unknown main item tag 0x0 [ 559.132784][T17553] apple 0003:05AC:0247.003E: unknown main item tag 0x0 [ 559.144103][T17553] apple 0003:05AC:0247.003E: hidraw0: USB HID v0.00 Device [HID 05ac:0247] on usb-dummy_hcd.6-1/input0 [ 559.274324][ T9] usb 7-1: USB disconnect, device number 36 [ 559.855841][ T5818] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 559.878727][ T5818] usb 6-1: USB disconnect, device number 44 [ 559.893317][ T5821] udevd[5821]: setting mode of /dev/bus/usb/006/044 to 020664 failed: No such file or directory [ 559.907426][ T5821] udevd[5821]: setting owner of /dev/bus/usb/006/044 to uid=0, gid=0 failed: No such file or directory [ 560.170970][ T29] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 560.330777][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 560.337595][ T29] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 560.345977][ T29] usb 7-1: config 0 has no interface number 0 [ 560.355005][ T29] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 560.365013][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.373678][ T29] usb 7-1: Product: syz [ 560.377914][ T29] usb 7-1: Manufacturer: syz [ 560.382684][ T29] usb 7-1: SerialNumber: syz [ 560.390556][ T29] usb 7-1: config 0 descriptor?? [ 560.602039][ T29] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 560.614543][ T29] uvcvideo 7-1:0.31: Entity type for entity Output 32774 was not initialized! [ 560.631856][ T29] usb 7-1: USB disconnect, device number 37 [ 560.892746][T20544] macvlan1: entered promiscuous mode [ 560.909866][T20544] macvlan1: entered allmulticast mode [ 560.916478][T20544] veth1_vlan: entered allmulticast mode [ 561.160966][T20555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.026078][T20619] program syz.6.6462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.047877][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.054994][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.362841][ T7242] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 563.546080][ T7242] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 563.555596][ T7242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.566969][ T7242] usb 7-1: Product: syz [ 563.571357][ T7242] usb 7-1: Manufacturer: syz [ 563.576092][ T7242] usb 7-1: SerialNumber: syz [ 563.583272][T20638] program syz.0.6472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.587884][ T7242] usb 7-1: config 0 descriptor?? [ 564.009243][ T7242] usb 7-1: Firmware: major: 0, minor: 49, hardware type: RZUSB (3) [ 564.211476][ T7242] usb 7-1: failed to fetch extended address, random address set [ 564.343719][ T7242] usb 7-1: USB disconnect, device number 38 [ 564.531821][T20667] sctp: [Deprecated]: syz.0.6486 (pid 20667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.531821][T20667] Use struct sctp_sack_info instead [ 564.608550][T20668] kvm: kvm [20665]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0x7 [ 564.934122][T20685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6494'. [ 565.048016][T20689] sctp: [Deprecated]: syz.5.6496 (pid 20689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.048016][T20689] Use struct sctp_sack_info instead [ 565.762087][T20725] program syz.6.6514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.268034][T20750] program syz.7.6525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.696976][ T24] Process accounting resumed [ 566.800492][T20779] C: renamed from team_slave_0 (while UP) [ 566.843251][T20779] netlink: 'syz.7.6538': attribute type 1 has an invalid length. [ 566.859743][T20779] netlink: 116 bytes leftover after parsing attributes in process `syz.7.6538'. [ 567.348596][T20812] kvm: kvm [20811]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0x7 [ 567.839517][T20837] netlink: 'syz.5.6564': attribute type 10 has an invalid length. [ 567.847808][T20837] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6564'. [ 567.863712][T20837] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 568.163867][T20851] program syz.5.6569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.348637][ T29] Process accounting resumed [ 568.900501][T20889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6589'. [ 569.945562][T20906] program syz.5.6597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 570.696995][T20944] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.6615'. [ 570.999124][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6620'. [ 571.185514][T20970] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6626'. [ 572.128412][T21020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6649'. [ 572.307857][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6661'. [ 572.818171][T21055] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6666'. [ 573.828623][T21112] netlink: 'syz.0.6693': attribute type 83 has an invalid length. [ 573.979462][T21119] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6696'. [ 574.626509][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 574.637943][T21147] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 574.646863][ T146] Bluetooth: hci3: Frame reassembly failed (-84) [ 574.696952][T21151] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6712'. [ 575.970843][ T5818] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 576.120737][ T5818] usb 6-1: Using ep0 maxpacket: 32 [ 576.132332][ T5818] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 576.141575][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.149735][ T5818] usb 6-1: Product: syz [ 576.151054][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 576.154692][ T5818] usb 6-1: Manufacturer: syz [ 576.167136][ T5818] usb 6-1: SerialNumber: syz [ 576.174814][ T5818] usb 6-1: config 0 descriptor?? [ 576.186956][ T5818] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 576.195110][ T5818] dvb-usb: bulk message failed: -22 (4/0) [ 576.201076][ T5818] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 576.211732][ T5818] dvb-usb: bulk message failed: -22 (5/0) [ 576.219166][ T5818] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 576.233939][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 576.245429][ T5818] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 576.253857][ T5818] usb 6-1: media controller created [ 576.268539][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 576.291076][ T5818] usb 6-1: selecting invalid altsetting 3 [ 576.296868][ T5818] ttusb2: set interface to alts=3 failed [ 576.321139][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 576.329170][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.342015][ T5818] DVB: Unable to find symbol tda10086_attach() [ 576.342455][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.348755][ T5818] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 576.367598][ T10] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 576.368357][ T5818] dvb-usb: bulk message failed: -22 (4/0) [ 576.384408][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.396675][ T10] usb 7-1: config 0 descriptor?? [ 576.407112][ T5818] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 576.422834][ T5818] dvb-usb: bulk message failed: -22 (5/0) [ 576.428660][ T5818] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 576.441460][ T5818] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 576.458181][ T5818] usb 6-1: USB disconnect, device number 45 [ 576.532732][ T5818] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 576.651280][ T5138] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 576.651912][T19642] Bluetooth: hci3: command 0x1003 tx timeout [ 577.023860][ T10] usb 7-1: string descriptor 0 read error: -71 [ 577.055690][ T10] usb 7-1: Max retries (5) exceeded reading string descriptor 200 [ 577.065140][ T10] letsketch 0003:6161:4D15.003F: probe with driver letsketch failed with error -32 [ 577.090708][ T10] usb 7-1: USB disconnect, device number 39 [ 577.918060][T21245] netlink: 'syz.5.6759': attribute type 12 has an invalid length. [ 577.926974][T21245] netlink: 120 bytes leftover after parsing attributes in process `syz.5.6759'. [ 579.860954][T17553] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 580.022545][T17553] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 580.032321][T17553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.043630][T17553] usb 6-1: config 0 descriptor?? [ 580.051971][T17553] cp210x 6-1:0.0: cp210x converter detected [ 580.378935][T21336] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 580.387127][ T146] Bluetooth: hci3: Frame reassembly failed (-84) [ 580.465069][T17553] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 580.479238][T17553] usb 6-1: cp210x converter now attached to ttyUSB0 [ 580.677707][ T7242] usb 6-1: USB disconnect, device number 46 [ 580.693796][ T7242] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 580.715406][ T7242] cp210x 6-1:0.0: device disconnected [ 581.586589][T21355] input: syz0 as /devices/virtual/input/input52 [ 582.100822][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 582.250808][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 582.258284][ T9] usb 7-1: config 1 has an invalid interface number: 89 but max is 0 [ 582.266681][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.277395][ T9] usb 7-1: config 1 has no interface number 0 [ 582.283817][ T9] usb 7-1: config 1 interface 89 has no altsetting 0 [ 582.293386][ T9] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0800, bcdDevice=50.bb [ 582.302757][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.311709][ T9] usb 7-1: Product: syz [ 582.315900][ T9] usb 7-1: Manufacturer: syz [ 582.320509][ T9] usb 7-1: SerialNumber: syz [ 582.400834][ T5138] Bluetooth: hci3: command 0x1003 tx timeout [ 582.402036][T19642] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 582.553972][ T9] qmi_wwan 7-1:1.89: bogus CDC Union: master=0, slave=1 [ 582.567379][ T9] qmi_wwan 7-1:1.89: probe with driver qmi_wwan failed with error -22 [ 582.584465][ T9] usb 7-1: USB disconnect, device number 40 [ 584.034748][T21437] IPVS: persistence engine module ip_vs_pe_ not found [ 585.010831][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 585.086530][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6872'. [ 585.098201][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6872'. [ 585.107368][T21494] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6872'. [ 585.116475][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6872'. [ 585.129455][T21494] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6872'. [ 585.170731][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 585.179805][ T9] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 585.189862][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.198778][ T9] usb 7-1: Product: syz [ 585.204423][ T9] usb 7-1: Manufacturer: syz [ 585.209233][ T9] usb 7-1: SerialNumber: syz [ 585.218808][ T9] usb 7-1: config 0 descriptor?? [ 585.236142][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 585.245956][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 585.253514][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 585.264624][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 585.270428][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 585.287179][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 585.297924][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 585.307430][ T9] usb 7-1: media controller created [ 585.326653][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 585.347725][ T9] usb 7-1: selecting invalid altsetting 3 [ 585.353741][ T9] ttusb2: set interface to alts=3 failed [ 585.393319][ T9] DVB: Unable to find symbol tda10086_attach() [ 585.399580][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 585.409046][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 585.418256][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 585.429137][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 585.435658][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 585.446802][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 585.505691][ T9] usb 7-1: USB disconnect, device number 41 [ 585.549889][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 586.082874][ T5818] IPVS: starting estimator thread 0... [ 586.090551][T21512] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 586.180836][T21513] IPVS: using max 28 ests per chain, 67200 per kthread [ 586.907323][T21558] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 586.924568][T21557] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 586.956306][T21556] : renamed from vlan0 (while UP) [ 586.994051][ T29] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 587.020343][ T29] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 587.053715][ T29] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 587.069804][ T29] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 587.078446][ T29] rtc rtc0: __rtc_set_alarm: err=-22 [ 587.102736][ T5818] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 587.279186][T21572] vxcan0: tx address claim with dlc 0 [ 587.294875][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 587.303955][ T5818] usb 6-1: config 0 has no interfaces? [ 587.310455][ T5818] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 587.330808][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.345282][ T5818] usb 6-1: config 0 descriptor?? [ 587.603242][ T24] usb 6-1: USB disconnect, device number 47 [ 588.457272][T21621] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 588.493632][T21620] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 588.556846][T21623] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6932'. [ 588.597800][T21623] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6932'. [ 588.779759][T21635] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6937'. [ 588.904271][T21641] netlink: 'syz.7.6941': attribute type 6 has an invalid length. [ 588.919252][T21641] netlink: 'syz.7.6941': attribute type 6 has an invalid length. [ 588.992445][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 589.020374][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 589.058238][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 589.082160][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 589.100291][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 589.483409][T21669] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 589.502129][T21669] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 589.517558][T21669] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 589.527861][T21669] overlayfs: conflicting lowerdir path [ 590.223660][T21703] netlink: 'syz.5.6970': attribute type 2 has an invalid length. [ 590.232324][T21703] netlink: 'syz.5.6970': attribute type 4 has an invalid length. [ 590.618829][T21720] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6976'. [ 590.698020][T21722] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6977'. [ 590.710054][T21722] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6977'. [ 590.783181][T21726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6987'. [ 590.826366][T21728] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6979'. [ 590.952261][T21734] netlink: 'syz.5.6981': attribute type 6 has an invalid length. [ 590.982160][T21734] netlink: 'syz.5.6981': attribute type 6 has an invalid length. [ 591.173481][T21743] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 591.717250][T21769] netlink: 'syz.6.7001': attribute type 2 has an invalid length. [ 591.732835][T21769] netlink: 'syz.6.7001': attribute type 4 has an invalid length. [ 592.595936][T21793] netlink: 1 bytes leftover after parsing attributes in process `syz.7.7011'. [ 594.693257][T21858] netlink: 120 bytes leftover after parsing attributes in process `syz.7.7044'. [ 596.460897][T21916] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.7072'. [ 596.471335][T21914] block nbd6: server does not support multiple connections per device. [ 596.482685][T21914] block nbd6: shutting down sockets [ 596.603549][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 596.770981][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 596.776633][T21926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7076'. [ 596.789451][T21926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7076'. [ 596.800264][T21926] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7076'. [ 596.812503][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.824929][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.840645][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 596.852395][ T9] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 596.866478][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.900338][ T9] usb 6-1: config 0 descriptor?? [ 597.330945][ T9] hid_parser_main: 129 callbacks suppressed [ 597.330972][ T9] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 597.344499][ T9] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 597.351571][ T9] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 597.358644][ T9] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 597.367326][ T9] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 597.374718][ T9] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 597.381841][ T9] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 597.389035][ T9] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 597.410402][ T9] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 597.417974][ T9] cougar 0003:060B:500A.0040: unknown main item tag 0x0 [ 597.444331][ T9] cougar 0003:060B:500A.0040: unexpected long global item [ 597.459343][ T9] cougar 0003:060B:500A.0040: parse failed [ 597.476424][ T9] cougar 0003:060B:500A.0040: probe with driver cougar failed with error -22 [ 597.534185][ T9] usb 6-1: USB disconnect, device number 48 [ 597.791587][T21943] block nbd6: server does not support multiple connections per device. [ 597.804295][T21943] block nbd6: shutting down sockets [ 597.902546][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 597.902566][ T30] audit: type=1326 audit(1772501453.800:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21931 comm="syz.7.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94e59c799 code=0x7fc00000 [ 598.191891][T21951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 598.200412][T21951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 598.209151][T21951] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 598.237610][T21951] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 600.081522][T19642] Bluetooth: hci2: command 0x0406 tx timeout [ 600.240868][T19642] Bluetooth: hci1: command 0x0c1a tx timeout [ 600.590954][T22040] kvm: kvm [22039]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x8001 [ 600.898261][T22054] tipc: Started in network mode [ 600.918485][T22054] tipc: Node identity ac14140f, cluster identity 4711 [ 600.953174][T22054] tipc: New replicast peer: 255.255.255.255 [ 600.985682][T22054] tipc: Enabled bearer , priority 10 [ 601.003153][T22061] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7139'. [ 601.116478][T22064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.103942][ T7242] tipc: Node number set to 2886997007 [ 602.320869][T19642] Bluetooth: hci1: command 0x0c1a tx timeout [ 602.344295][T22117] tipc: Started in network mode [ 602.359533][T22117] tipc: Node identity ac14140f, cluster identity 4711 [ 602.375960][T22117] tipc: New replicast peer: 255.255.255.255 [ 602.383788][T22117] tipc: Enabled bearer , priority 10 [ 602.418855][T22119] kvm: kvm [22118]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x8001 [ 602.430874][ T7242] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 602.573809][T22125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.591267][ T7242] usb 6-1: Using ep0 maxpacket: 32 [ 602.603509][ T7242] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 602.621422][ T7242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.647020][ T7242] usb 6-1: Product: syz [ 602.653654][ T7242] usb 6-1: Manufacturer: syz [ 602.658457][ T7242] usb 6-1: SerialNumber: syz [ 602.679745][ T7242] usb 6-1: config 0 descriptor?? [ 603.309316][ T7242] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 603.319663][ T7242] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 603.326759][ T7242] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 603.411342][ T7242] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 603.500745][ T24] tipc: Node number set to 2886997007 [ 603.512728][ T7242] usb 6-1: USB disconnect, device number 49 [ 604.401249][T19642] Bluetooth: hci1: command 0x0c1a tx timeout [ 605.502920][T22207] input: syz1 as /devices/virtual/input/input53 [ 605.660432][T22210] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.7212'. [ 606.019316][T22216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7215'. [ 606.071724][T22220] veth1_virt_wifi: entered allmulticast mode [ 606.087044][T22220] veth1_virt_wifi: left allmulticast mode [ 607.490751][ T7242] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 607.642067][ T7242] usb 7-1: Using ep0 maxpacket: 8 [ 607.656239][ T7242] usb 7-1: unable to get BOS descriptor or descriptor too short [ 607.667125][ T7242] usb 7-1: config 1 interface 0 has no altsetting 0 [ 607.680294][ T7242] usb 7-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.40 [ 607.690943][ T7242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.699017][ T7242] usb 7-1: Product: syz [ 607.704548][ T7242] usb 7-1: Manufacturer: syz [ 607.710161][ T7242] usb 7-1: SerialNumber: syz [ 608.541310][ T7242] usbhid 7-1:1.0: can't add hid device: -71 [ 608.547624][ T7242] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 608.560158][ T7242] usb 7-1: USB disconnect, device number 42 [ 609.209161][T22267] kvm: kvm [22266]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 609.257068][T22269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.376373][T22271] netlink: 'syz.6.7243': attribute type 19 has an invalid length. [ 609.397307][T22271] netlink: 180 bytes leftover after parsing attributes in process `syz.6.7243'. [ 609.615510][T22283] binder: 22281:22283 ioctl c018620c 200000000580 returned -22 [ 610.116849][T22304] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7258'. [ 610.232101][T22308] binder: 22306:22308 ioctl c018620c 200000000580 returned -22 [ 610.973089][T22337] kvm: kvm [22336]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 611.223497][T22346] netlink: 212356 bytes leftover after parsing attributes in process `syz.5.7278'. [ 611.785029][T22357] ------------[ cut here ]------------ [ 611.791591][T22357] !valid_signal(sig) [ 611.791617][T22357] WARNING: kernel/signal.c:2174 at do_notify_parent+0xc7e/0xd70, CPU#1: syz.0.7282/22357 [ 611.805402][T22357] Modules linked in: [ 611.810109][T22357] CPU: 1 UID: 0 PID: 22357 Comm: syz.0.7282 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.821166][T22357] Tainted: [L]=SOFTLOCKUP [ 611.825540][T22357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 611.835639][T22357] RIP: 0010:do_notify_parent+0xc7e/0xd70 [ 611.841312][T22357] Code: c6 05 2c 05 93 0e 01 48 c7 c7 c0 46 cb 8b be a3 08 00 00 48 c7 c2 40 48 cb 8b e8 6d 53 17 00 e9 c6 fa ff ff e8 a3 00 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 92 00 3b 00 90 0f 0b 90 e9 75 [ 611.860940][T22357] RSP: 0018:ffffc9000532fc40 EFLAGS: 00010093 [ 611.867041][T22357] RAX: ffffffff818aed2d RBX: dffffc0000000000 RCX: ffff888020359e80 [ 611.875035][T22357] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 611.883115][T22357] RBP: ffffc9000532fd90 R08: 0000000000000003 R09: 0000000000000004 [ 611.891115][T22357] R10: dffffc0000000000 R11: fffff52000a65fa4 R12: ffff888037545e50 [ 611.899287][T22357] R13: ffff888020359e80 R14: 0000000000000080 R15: 1ffff92000a65f90 [ 611.907276][T22357] FS: 0000000000000000(0000) GS:ffff8881250f7000(0000) knlGS:0000000000000000 [ 611.916223][T22357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.922829][T22357] CR2: 00007f09a6b85900 CR3: 0000000062c88000 CR4: 00000000003526f0 [ 611.930842][T22357] Call Trace: [ 611.934200][T22357] [ 611.937168][T22357] ? do_raw_spin_lock+0x12b/0x2f0 [ 611.942308][T22357] ? __pfx_do_notify_parent+0x10/0x10 [ 611.947852][T22357] ? do_raw_write_lock+0x11d/0x260 [ 611.953000][T22357] ? __pfx_do_raw_write_lock+0x10/0x10 [ 611.958490][T22357] ? kill_orphaned_pgrp+0x170/0x610 [ 611.963710][T22357] do_exit+0x15b3/0x2580 [ 611.967980][T22357] ? __pfx_do_exit+0x10/0x10 [ 611.972595][T22357] ? rcu_is_watching+0x15/0xb0 [ 611.977497][T22357] __x64_sys_exit+0x40/0x40 [ 611.982017][T22357] x64_sys_call+0x2231/0x2240 [ 611.986721][T22357] do_syscall_64+0x14d/0xf80 [ 611.991335][T22357] ? trace_irq_disable+0x3b/0x150 [ 611.996386][T22357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.002570][T22357] ? clear_bhb_loop+0x40/0x90 [ 612.007449][T22357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.013360][T22357] RIP: 0033:0x7f5670d9c799 [ 612.018004][T22357] Code: Unable to access opcode bytes at 0x7f5670d9c76f. [ 612.025055][T22357] RSP: 002b:00007f5671cd2fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 612.033501][T22357] RAX: ffffffffffffffda RBX: 00007f5671015fa0 RCX: 00007f5670d9c799 [ 612.041693][T22357] RDX: 00007f5671cd39c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 612.050064][T22357] RBP: 00007f5670e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 612.058064][T22357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.066058][T22357] R13: 00007f5671016038 R14: 00007f5671015fa0 R15: 00007ffec612a888 [ 612.074074][T22357] [ 612.077145][T22357] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 612.084931][T22357] CPU: 1 UID: 0 PID: 22357 Comm: syz.0.7282 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.096080][T22357] Tainted: [L]=SOFTLOCKUP [ 612.100516][T22357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.110598][T22357] Call Trace: [ 612.113904][T22357] [ 612.116869][T22357] vpanic+0x56c/0xa60 [ 612.120907][T22357] ? __pfx__printk+0x10/0x10 [ 612.125541][T22357] ? __pfx_vpanic+0x10/0x10 [ 612.130070][T22357] ? is_bpf_text_address+0x292/0x2b0 [ 612.135374][T22357] ? is_bpf_text_address+0x26/0x2b0 [ 612.140613][T22357] panic+0xc5/0xd0 [ 612.144390][T22357] ? __pfx_panic+0x10/0x10 [ 612.148846][T22357] __warn+0x315/0x4f0 [ 612.152853][T22357] ? do_notify_parent+0xc7e/0xd70 [ 612.157933][T22357] ? do_notify_parent+0xc7e/0xd70 [ 612.163081][T22357] __report_bug+0x29a/0x540 [ 612.167613][T22357] ? do_notify_parent+0xc7e/0xd70 [ 612.172868][T22357] ? __pfx___report_bug+0x10/0x10 [ 612.178126][T22357] ? stack_depot_save_flags+0x33/0x810 [ 612.184105][T22357] ? __lock_acquire+0x5f0/0x2cf0 [ 612.189161][T22357] ? kasan_save_track+0x4f/0x80 [ 612.194151][T22357] ? kasan_save_track+0x3e/0x80 [ 612.199062][T22357] ? kasan_save_free_info+0x46/0x50 [ 612.204383][T22357] ? __kasan_slab_free+0x5c/0x80 [ 612.209440][T22357] ? kmem_cache_free+0x187/0x630 [ 612.214416][T22357] ? do_notify_parent+0xc7e/0xd70 [ 612.219499][T22357] report_bug+0x16a/0x220 [ 612.223894][T22357] ? do_notify_parent+0xc7e/0xd70 [ 612.228952][T22357] ? do_notify_parent+0xc80/0xd70 [ 612.234004][T22357] handle_bug+0x9c/0x200 [ 612.238715][T22357] exc_invalid_op+0x1a/0x50 [ 612.243251][T22357] asm_exc_invalid_op+0x1a/0x20 [ 612.248142][T22357] RIP: 0010:do_notify_parent+0xc7e/0xd70 [ 612.254081][T22357] Code: c6 05 2c 05 93 0e 01 48 c7 c7 c0 46 cb 8b be a3 08 00 00 48 c7 c2 40 48 cb 8b e8 6d 53 17 00 e9 c6 fa ff ff e8 a3 00 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 92 00 3b 00 90 0f 0b 90 e9 75 [ 612.273709][T22357] RSP: 0018:ffffc9000532fc40 EFLAGS: 00010093 [ 612.279816][T22357] RAX: ffffffff818aed2d RBX: dffffc0000000000 RCX: ffff888020359e80 [ 612.287810][T22357] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 612.295891][T22357] RBP: ffffc9000532fd90 R08: 0000000000000003 R09: 0000000000000004 [ 612.303883][T22357] R10: dffffc0000000000 R11: fffff52000a65fa4 R12: ffff888037545e50 [ 612.311960][T22357] R13: ffff888020359e80 R14: 0000000000000080 R15: 1ffff92000a65f90 [ 612.320000][T22357] ? do_notify_parent+0xc7d/0xd70 [ 612.325263][T22357] ? do_raw_spin_lock+0x12b/0x2f0 [ 612.330334][T22357] ? __pfx_do_notify_parent+0x10/0x10 [ 612.335834][T22357] ? do_raw_write_lock+0x11d/0x260 [ 612.340982][T22357] ? __pfx_do_raw_write_lock+0x10/0x10 [ 612.346584][T22357] ? kill_orphaned_pgrp+0x170/0x610 [ 612.351837][T22357] do_exit+0x15b3/0x2580 [ 612.356289][T22357] ? __pfx_do_exit+0x10/0x10 [ 612.360914][T22357] ? rcu_is_watching+0x15/0xb0 [ 612.365885][T22357] __x64_sys_exit+0x40/0x40 [ 612.370406][T22357] x64_sys_call+0x2231/0x2240 [ 612.375104][T22357] do_syscall_64+0x14d/0xf80 [ 612.379802][T22357] ? trace_irq_disable+0x3b/0x150 [ 612.384845][T22357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.391113][T22357] ? clear_bhb_loop+0x40/0x90 [ 612.395822][T22357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.401767][T22357] RIP: 0033:0x7f5670d9c799 [ 612.406383][T22357] Code: Unable to access opcode bytes at 0x7f5670d9c76f. [ 612.413412][T22357] RSP: 002b:00007f5671cd2fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 612.421841][T22357] RAX: ffffffffffffffda RBX: 00007f5671015fa0 RCX: 00007f5670d9c799 [ 612.429848][T22357] RDX: 00007f5671cd39c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 612.437957][T22357] RBP: 00007f5670e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 612.446074][T22357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.454088][T22357] R13: 00007f5671016038 R14: 00007f5671015fa0 R15: 00007ffec612a888 [ 612.462113][T22357] [ 612.465771][T22357] Kernel Offset: disabled [ 612.470132][T22357] Rebooting in 86400 seconds..