last executing test programs: 6.600871528s ago: executing program 4 (id=3477): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000080201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x91cc, 0x2000000, 0x10000, 0x0, 0x0, 0x80, 0x0, 0xfffffffffffffffe}) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000001c0)) 5.643988303s ago: executing program 4 (id=3485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.114438187s ago: executing program 4 (id=3505): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3.956155326s ago: executing program 1 (id=3509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800) 3.925229332s ago: executing program 4 (id=3510): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(r1, r2) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 3.897932583s ago: executing program 3 (id=3511): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) 3.823634341s ago: executing program 0 (id=3513): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0) 3.759851419s ago: executing program 3 (id=3514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.62307303s ago: executing program 4 (id=3517): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) unshare(0x40200) r0 = semget(0x3, 0x4, 0x692) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, 0x0, 0x0}, 0x20) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 3.013713535s ago: executing program 3 (id=3525): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8800000000000000000000000001010000000000000000000000000000000100000000080000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff07000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000100cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d6163286165732900"/340], 0x1a0}}, 0x0) 2.919340514s ago: executing program 1 (id=3527): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() r2 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000010000304f9fffffffedbdf2500007400", @ANYRES32=r0, @ANYBLOB="049c01000750050008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 2.796537246s ago: executing program 3 (id=3529): r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0x2d59, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 2.616368822s ago: executing program 4 (id=3533): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 1.79332465s ago: executing program 3 (id=3543): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000080)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.157351063s ago: executing program 0 (id=3551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xbe8}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 1.124868784s ago: executing program 1 (id=3552): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x8, 0x3, 0x7f, 0x3ff}]}) 981.652507ms ago: executing program 1 (id=3554): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$inet6(0xa, 0x3, 0x3c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 942.801735ms ago: executing program 3 (id=3555): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0xc}, @rumble={0x8, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 865.519946ms ago: executing program 0 (id=3557): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_snmp6\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d4b}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents(r0, &(0x7f0000000dc0)=""/4106, 0x100a) 711.44479ms ago: executing program 2 (id=3558): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000000)="3805ad802bcd9f9aa7a3f836514cfd051c1065937debe9300ab708", 0x1b}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 657.112549ms ago: executing program 0 (id=3559): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 461.294175ms ago: executing program 2 (id=3560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x2, 0x0, 0x2, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x8, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x13}}, {0x4e24, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100, @val=0x80}, "c50b1747cfa03bd853e4c50ced"}}}}, 0x3f) 445.673571ms ago: executing program 0 (id=3561): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x10012, r3, 0x0) sendto(r2, &(0x7f0000000000), 0x2ad5, 0x0, 0x0, 0xffffffffffffff94) 381.187158ms ago: executing program 1 (id=3562): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r1) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4e9}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) close(r1) 325.286247ms ago: executing program 2 (id=3563): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0xfffffffd, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xa}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) io_uring_enter(r1, 0x27e2, 0x0, 0x7, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 243.85686ms ago: executing program 2 (id=3564): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x32ca81}) 227.958714ms ago: executing program 0 (id=3565): syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902"], 0x0) socket(0x40000000015, 0x5, 0x0) r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x2ad9c7b0a3158391, 0x4004, @fd_index=0x6, 0x5c4, 0x0, 0x0, 0x10, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 93.333301ms ago: executing program 1 (id=3566): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x8200d380, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 93.192206ms ago: executing program 2 (id=3567): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x114) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x10}) fstat(r0, &(0x7f0000000700)) 0s ago: executing program 2 (id=3568): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000001700)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa, 0x3f}}}}}}, 0x0) kernel console output (not intermixed with test programs): b 2-1: config 9 interface 48 has no altsetting 0 [ 403.438816][ T49] usb 2-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice=46.82 [ 403.438843][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.438862][ T49] usb 2-1: Product: syz [ 403.438876][ T49] usb 2-1: Manufacturer: syz [ 403.438891][ T49] usb 2-1: SerialNumber: syz [ 403.764908][ T49] io_ti 2-1:9.48: required endpoints missing [ 403.796791][ T49] usb 2-1: USB disconnect, device number 10 [ 404.438679][ T9961] netlink: 'syz.3.1349': attribute type 21 has an invalid length. [ 405.631481][T10012] netlink: 'syz.4.1364': attribute type 21 has an invalid length. [ 406.305485][T10025] netlink: 'syz.2.1370': attribute type 21 has an invalid length. [ 407.041423][ T5866] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 407.204133][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.204189][ T5866] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 407.204213][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.241543][ T5866] usb 5-1: config 0 descriptor?? [ 407.259551][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 407.333077][T10048] netlink: 'syz.2.1380': attribute type 21 has an invalid length. [ 407.750747][T10056] netlink: 'syz.2.1383': attribute type 21 has an invalid length. [ 407.966910][ T5866] pwc: recv_control_msg error -71 req 02 val 2700 [ 407.967444][ T5866] pwc: recv_control_msg error -71 req 02 val 2c00 [ 407.967913][ T5866] pwc: recv_control_msg error -71 req 04 val 1000 [ 407.968379][ T5866] pwc: recv_control_msg error -71 req 04 val 1300 [ 407.968816][ T5866] pwc: recv_control_msg error -71 req 04 val 1400 [ 407.969273][ T5866] pwc: recv_control_msg error -71 req 02 val 2000 [ 407.978885][ T5866] pwc: recv_control_msg error -71 req 02 val 2100 [ 407.981428][ T5866] pwc: recv_control_msg error -71 req 04 val 1500 [ 407.981923][ T5866] pwc: recv_control_msg error -71 req 02 val 2500 [ 407.982363][ T5866] pwc: recv_control_msg error -71 req 02 val 2400 [ 407.984110][ T5866] pwc: recv_control_msg error -71 req 02 val 2600 [ 407.992370][ T5866] pwc: recv_control_msg error -71 req 02 val 2900 [ 407.998712][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 408.008405][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 408.009502][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 408.107882][ T5866] pwc: Registered as video103. [ 408.153677][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 408.211049][ T5866] usb 5-1: USB disconnect, device number 7 [ 408.468017][T10096] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 408.468038][T10096] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1392'. [ 408.468064][T10096] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1392'. [ 409.162002][T10139] CUSE: zero length info key specified [ 409.220738][T10142] netlink: 'syz.4.1403': attribute type 21 has an invalid length. [ 409.431816][T10147] tipc: Started in network mode [ 409.431846][T10147] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 409.431902][T10147] tipc: Enabling of bearer rejected, failed to enable media [ 409.757648][T10158] can0: slcan on ptm0. [ 410.177204][T10157] can0 (unregistered): slcan off ptm0. [ 410.259679][ T6070] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 410.454729][ T6070] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 410.454761][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.490855][T10205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.612875][ T6070] usb 5-1: config 0 descriptor?? [ 410.672624][T10212] netlink: 'syz.1.1424': attribute type 21 has an invalid length. [ 410.895221][ T6070] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 411.348170][ T6070] gspca_sunplus: reg_w_riv err -71 [ 411.348396][ T6070] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 411.397014][T10235] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1433'. [ 411.400379][ T6070] usb 5-1: USB disconnect, device number 8 [ 411.522714][T10244] tipc: Started in network mode [ 411.522732][T10244] tipc: Node identity , cluster identity 4711 [ 411.915063][T10267] tipc: Enabled bearer , priority 14 [ 412.132135][T10280] netlink: 17271 bytes leftover after parsing attributes in process `syz.2.1446'. [ 412.585481][T10308] ptrace attach of "./syz-executor exec"[5799] was attempted by ""[10308] [ 412.697983][T10316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1457'. [ 412.864392][T10328] netlink: 'syz.1.1460': attribute type 1 has an invalid length. [ 412.864422][T10328] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1460'. [ 412.864437][T10328] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1460'. [ 413.093121][ T5982] tipc: Node number set to 4278321153 [ 413.563129][T10363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1474'. [ 413.659764][ T5982] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 413.820639][ T5982] usb 1-1: Using ep0 maxpacket: 8 [ 413.826585][ T5982] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 413.826613][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.826634][ T5982] usb 1-1: Product: syz [ 413.826648][ T5982] usb 1-1: Manufacturer: syz [ 413.826662][ T5982] usb 1-1: SerialNumber: syz [ 413.911101][ T5982] usb 1-1: config 0 descriptor?? [ 413.941182][ T5982] gspca_main: sq930x-2.14.0 probing 2770:930c [ 413.976736][T10377] netlink: 'syz.4.1478': attribute type 21 has an invalid length. [ 414.440372][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 414.717290][ T5982] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 414.717483][ T5982] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 414.739430][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.739456][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 414.765279][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 414.765310][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.765330][ T10] usb 3-1: Product: syz [ 414.765344][ T10] usb 3-1: Manufacturer: syz [ 414.765358][ T10] usb 3-1: SerialNumber: syz [ 414.816932][ T5982] usb 1-1: USB disconnect, device number 15 [ 414.868151][ T10] usb 3-1: config 0 descriptor?? [ 414.881720][T10408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1488'. [ 415.110001][T10424] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1493'. [ 415.248882][T10385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.249597][T10385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.274043][ T5801] Bluetooth: hci1: unknown advertising packet type: 0x17 [ 415.276595][ T5801] Bluetooth: hci1: unknown advertising packet type: 0x0d [ 415.276625][ T5801] Bluetooth: hci1: Malformed LE Event: 0x02 [ 415.349666][T10435] netlink: 'syz.4.1490': attribute type 21 has an invalid length. [ 415.655364][ T5982] usb 3-1: USB disconnect, device number 10 [ 416.017719][T10442] macsec1: entered promiscuous mode [ 416.017741][T10442] macvlan0: entered promiscuous mode [ 416.087884][T10442] macvlan0: left promiscuous mode [ 416.636836][T10456] syz.0.1500(10456): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 416.752684][T10459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1501'. [ 417.362050][T10486] netlink: 'syz.4.1508': attribute type 21 has an invalid length. [ 418.211995][T10502] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1514'. [ 418.321475][ T5982] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 418.492540][ T5982] usb 1-1: Using ep0 maxpacket: 16 [ 418.494618][ T5982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.494649][ T5982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.494669][ T5982] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 418.494705][ T5982] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 418.494729][ T5982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.561309][ T5982] usb 1-1: config 0 descriptor?? [ 418.675560][T10523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1523'. [ 418.711431][T10526] netlink: 'syz.2.1524': attribute type 1 has an invalid length. [ 419.048829][ T5982] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input8 [ 419.154502][ T5982] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 419.263202][ T5898] usb 1-1: USB disconnect, device number 16 [ 419.406125][T10572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1537'. [ 421.064820][T10630] RDS: rds_bind could not find a transport for 4004:0:20::, load rds_tcp or rds_rdma? [ 421.600316][ T5866] kernel write not supported for file /uhid (pid: 5866 comm: kworker/1:5) [ 422.543682][T10703] netlink: 'syz.2.1581': attribute type 21 has an invalid length. [ 423.461089][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1593'. [ 423.519337][T10724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1596'. [ 423.672389][T10732] bridge0: entered promiscuous mode [ 423.723538][T10739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1599'. [ 424.199196][T10759] netlink: 'syz.0.1602': attribute type 21 has an invalid length. [ 424.933621][T10757] nbd: socks must be embedded in a SOCK_ITEM attr [ 426.348082][T10793] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1617'. [ 426.348106][T10793] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 426.837189][ T36] audit: type=1800 audit(1772624067.046:785): pid=10818 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1626" name="bus" dev="tmpfs" ino=1698 res=0 errno=0 [ 426.901448][T10824] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1628'. [ 427.218483][T10840] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1634'. [ 427.376829][ T36] audit: type=1326 audit(1772624067.560:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.1.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a188c799 code=0x7ffc0000 [ 427.378243][ T36] audit: type=1326 audit(1772624067.560:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.1.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a188c799 code=0x7ffc0000 [ 427.380756][ T36] audit: type=1326 audit(1772624067.570:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.1.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a188c799 code=0x7ffc0000 [ 427.381150][ T36] audit: type=1326 audit(1772624067.570:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.1.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a188c799 code=0x7ffc0000 [ 427.381192][ T36] audit: type=1326 audit(1772624067.570:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.1.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f99a188c799 code=0x7ffc0000 [ 427.382003][ T36] audit: type=1326 audit(1772624067.570:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.1.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a188c799 code=0x7ffc0000 [ 427.384381][ T36] audit: type=1326 audit(1772624067.570:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.1.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a188c799 code=0x7ffc0000 [ 427.385405][ T36] audit: type=1326 audit(1772624067.570:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.1.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a188c799 code=0x7ffc0000 [ 427.385743][ T36] audit: type=1326 audit(1772624067.570:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.1.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a188c799 code=0x7ffc0000 [ 427.399643][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1636'. [ 428.575564][T10858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.021005][T10904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1657'. [ 429.041053][T10858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.192492][T10913] netlink: 'syz.3.1660': attribute type 3 has an invalid length. [ 429.192517][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1660'. [ 429.360449][T10858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.722298][T10858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.875488][T10944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1670'. [ 430.351978][T10963] netlink: 'syz.1.1673': attribute type 21 has an invalid length. [ 430.953793][T10964] 9p: Bad value for 'rfdno' [ 431.190384][ T67] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.329893][ T1309] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.329940][ T1309] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.376577][ T1309] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.558123][ T5866] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 431.575922][T11003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1684'. [ 431.745943][T11012] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1687'. [ 431.753834][ T5866] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 431.753880][ T5866] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 431.753907][ T5866] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.753928][ T5866] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 431.753954][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 431.753985][ T5866] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 431.754007][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.767925][ T5866] usb 5-1: config 0 descriptor?? [ 432.201733][T11029] netlink: 'syz.0.1688': attribute type 21 has an invalid length. [ 433.000524][ T5866] ryos 0003:1E7D:3138.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 433.274764][ T5866] usb 5-1: USB disconnect, device number 9 [ 433.369521][T11062] netlink: 'syz.0.1697': attribute type 21 has an invalid length. [ 433.993360][T11045] fido_id[11045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 434.019582][ T36] kauditd_printk_skb: 247 callbacks suppressed [ 434.019599][ T36] audit: type=1326 audit(1772624073.780:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11051 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 434.019643][ T36] audit: type=1326 audit(1772624073.780:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11051 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 434.019682][ T36] audit: type=1326 audit(1772624073.780:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11051 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f497ec08bec code=0x7ffc0000 [ 434.019722][ T36] audit: type=1326 audit(1772624073.780:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11051 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f497ec08c4e code=0x7ffc0000 [ 434.019760][ T36] audit: type=1326 audit(1772624073.780:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11051 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f497ec4c42b code=0x7ffc0000 [ 434.019798][ T36] audit: type=1326 audit(1772624073.780:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11051 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 434.019835][ T36] audit: type=1326 audit(1772624073.780:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11051 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 434.019873][ T36] audit: type=1326 audit(1772624073.780:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11051 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 434.195993][ T36] audit: type=1326 audit(1772624073.939:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11051 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 434.196042][ T36] audit: type=1326 audit(1772624073.939:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11051 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 434.235806][T11063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1699'. [ 434.403333][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1704'. [ 434.663773][T11097] vivid-002: disconnect [ 434.684454][T11096] vivid-002: reconnect [ 434.884476][T11105] netlink: 'syz.3.1707': attribute type 21 has an invalid length. [ 435.739031][T11117] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1714'. [ 435.867957][T11127] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.931281][T11117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1714'. [ 437.438286][T11176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.622625][T11179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1736'. [ 437.663192][ T49] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 437.776027][T11191] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1737'. [ 437.833034][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 437.835367][ T49] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 437.835391][ T49] usb 1-1: config 0 has no interface number 0 [ 437.835434][ T49] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 437.835459][ T49] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 437.878368][ T49] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 437.878399][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.878420][ T49] usb 1-1: Product: syz [ 437.878434][ T49] usb 1-1: Manufacturer: syz [ 437.878449][ T49] usb 1-1: SerialNumber: syz [ 437.898900][ T49] usb 1-1: config 0 descriptor?? [ 438.122139][ T49] radio-si470x 1-1:0.35: this is not a si470x device. [ 438.158253][ T49] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 438.376459][ T49] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 438.606091][ T49] usb 1-1: USB disconnect, device number 17 [ 438.608052][ T49] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 438.860255][T11242] lo: entered allmulticast mode [ 438.872263][T11242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.979772][T11249] use of bytesused == 0 is deprecated and will be removed in the future, [ 438.979790][T11249] use the actual size instead. [ 439.106621][ T5869] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 439.267057][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 439.268900][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.268931][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.268968][ T5869] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 439.268989][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.281747][ T5869] usb 2-1: config 0 descriptor?? [ 439.785622][ T5869] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 440.100034][ T5898] usb 2-1: USB disconnect, device number 11 [ 440.170776][T11317] macvlan0: entered promiscuous mode [ 440.171911][T11317] netlink: 'syz.3.1776': attribute type 2 has an invalid length. [ 440.288300][ T36] kauditd_printk_skb: 133 callbacks suppressed [ 440.288318][ T36] audit: type=1326 audit(1772624079.607:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11318 comm="syz.3.1777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x0 [ 440.450850][T11335] netlink: 'syz.4.1774': attribute type 21 has an invalid length. [ 441.416769][ T5898] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 441.587193][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 441.589413][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.589439][ T5898] usb 1-1: config 0 has no interfaces? [ 441.592223][ T5898] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 441.592251][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.592271][ T5898] usb 1-1: Product: syz [ 441.592285][ T5898] usb 1-1: Manufacturer: syz [ 441.592299][ T5898] usb 1-1: SerialNumber: syz [ 441.655031][ T5898] usb 1-1: config 0 descriptor?? [ 441.715503][ T5866] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 441.889859][ T5866] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 441.889886][ T5866] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 441.889902][ T5866] usb 3-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 441.889918][ T5866] usb 3-1: config 220 has no interface number 2 [ 441.889970][ T5866] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 441.889992][ T5866] usb 3-1: config 220 interface 0 has no altsetting 0 [ 441.890006][ T5866] usb 3-1: config 220 interface 76 has no altsetting 0 [ 441.890021][ T5866] usb 3-1: config 220 interface 1 has no altsetting 0 [ 441.893930][ T5866] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 441.893948][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.893959][ T5866] usb 3-1: Product: syz [ 441.893967][ T5866] usb 3-1: Manufacturer: syz [ 441.893975][ T5866] usb 3-1: SerialNumber: syz [ 442.013178][ T5869] usb 1-1: USB disconnect, device number 18 [ 442.180142][ T5866] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 442.180312][ T5866] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 442.180387][ T5866] uvcvideo 3-1:220.0: No valid video chain found. [ 442.180639][ T5866] usb 3-1: selecting invalid altsetting 0 [ 442.214645][ T5866] usb 3-1: selecting invalid altsetting 0 [ 442.214682][ T5866] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 442.258829][ T5866] usb 3-1: USB disconnect, device number 11 [ 442.486416][ T36] audit: type=1326 audit(1772624081.692:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 442.486467][ T36] audit: type=1326 audit(1772624081.692:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 442.486505][ T36] audit: type=1326 audit(1772624081.692:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 442.486541][ T36] audit: type=1326 audit(1772624081.692:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 442.486578][ T36] audit: type=1326 audit(1772624081.692:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 442.503468][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1799'. [ 442.517515][ T36] audit: type=1326 audit(1772624081.702:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 442.517570][ T36] audit: type=1326 audit(1772624081.702:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 442.517609][ T36] audit: type=1326 audit(1772624081.702:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 442.517648][ T36] audit: type=1326 audit(1772624081.702:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 442.667024][ T5869] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 442.829893][ T5869] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 442.829929][ T5869] usb 2-1: config 0 has no interface number 0 [ 442.833633][ T5869] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 442.833661][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.833680][ T5869] usb 2-1: Product: syz [ 442.833693][ T5869] usb 2-1: Manufacturer: syz [ 442.833707][ T5869] usb 2-1: SerialNumber: syz [ 442.892967][ T5869] usb 2-1: config 0 descriptor?? [ 442.902488][ T5866] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 443.062610][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 443.067197][ T5866] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 443.067352][ T5866] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.067375][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 443.067400][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.067423][ T5866] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.067510][ T5866] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 443.067532][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.101798][T11447] netlink: 'syz.3.1809': attribute type 1 has an invalid length. [ 443.157259][ T5869] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 443.233533][ T5869] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 443.236706][ T5869] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 443.237363][ T5869] usb 2-1: media controller created [ 443.242598][T11451] overlayfs: missing 'workdir' [ 443.370062][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.512160][ T5869] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 443.586003][ T5866] usb 5-1: USB disconnect, device number 10 [ 443.695684][ T5869] usb 2-1: USB disconnect, device number 12 [ 443.886470][T11503] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 445.243814][ T5869] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 445.417219][ T5869] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 445.417249][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.424745][ T5869] usb 1-1: config 0 descriptor?? [ 445.663182][ T5869] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 445.679868][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1846'. [ 445.688217][T11579] netlink: 'syz.4.1844': attribute type 10 has an invalid length. [ 445.879140][ T5869] [drm:udl_init] *ERROR* Selecting channel failed [ 445.955716][T11579] batman_adv: batadv0: Adding interface: netdevsim0 [ 445.955734][T11579] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.955761][T11579] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 446.047573][ T5869] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 446.047599][ T5869] [drm] Initialized udl on minor 2 [ 446.077890][ T5869] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 446.098337][ T5869] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 446.187031][ T5122] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 446.187954][ T5122] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 446.193691][ T5869] usb 1-1: USB disconnect, device number 19 [ 446.454090][T11608] netlink: 'syz.4.1853': attribute type 21 has an invalid length. [ 447.372255][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 447.372273][ T36] audit: type=1326 audit(1772624086.275:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 447.372806][ T36] audit: type=1326 audit(1772624086.275:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 447.424031][T11631] program syz.0.1859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.442215][ T36] audit: type=1326 audit(1772624086.331:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 447.442267][ T36] audit: type=1326 audit(1772624086.331:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 447.442307][ T36] audit: type=1326 audit(1772624086.331:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 447.469090][ T36] audit: type=1326 audit(1772624086.359:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 447.469141][ T36] audit: type=1326 audit(1772624086.359:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 447.469200][ T36] audit: type=1326 audit(1772624086.359:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 447.469240][ T36] audit: type=1326 audit(1772624086.359:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 447.469279][ T36] audit: type=1326 audit(1772624086.359:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11625 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec4c799 code=0x7ffc0000 [ 447.958217][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 448.187901][T11674] IPv6: NLM_F_CREATE should be specified when creating new route [ 448.532986][ T5866] kernel write not supported for file /amidi2 (pid: 5866 comm: kworker/1:5) [ 449.116221][T11716] netlink: 'syz.4.1892': attribute type 7 has an invalid length. [ 449.246661][T11721] batadv_slave_0: entered promiscuous mode [ 449.255034][T11721] batman_adv: batadv0: Adding interface: macsec1 [ 449.255052][T11721] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.255079][T11721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.255095][T11721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.255110][T11721] batman_adv: batadv0: Interface activated: macsec1 [ 450.472524][T11743] netlink: 'syz.3.1897': attribute type 21 has an invalid length. [ 451.686366][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 452.093814][T11780] netlink: 'syz.2.1910': attribute type 21 has an invalid length. [ 453.146141][T11784] tmpfs: Too few inodes for current use [ 454.063378][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.084222][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.159810][T11800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1919'. [ 454.189143][T11798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1915'. [ 454.348351][T11812] delete_channel: no stack [ 454.653611][T11819] "syz.0.1925" (11819) uses obsolete ecb(arc4) skcipher [ 455.040414][T11847] tap0: tun_chr_ioctl cmd 1074025681 [ 455.341865][T11855] veth0_vlan: left promiscuous mode [ 455.801807][T11883] netlink: 'syz.3.1939': attribute type 21 has an invalid length. [ 456.640433][T11897] Driver unsupported XDP return value 0 on prog (id 160) dev N/A, expect packet loss! [ 458.581087][ T6070] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 458.737145][ T6070] usb 5-1: Using ep0 maxpacket: 32 [ 458.739629][ T6070] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 458.739656][ T6070] usb 5-1: config 0 has no interface number 0 [ 458.739704][ T6070] usb 5-1: config 0 interface 184 has no altsetting 0 [ 458.742830][ T6070] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 458.742860][ T6070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.742881][ T6070] usb 5-1: Product: syz [ 458.742894][ T6070] usb 5-1: Manufacturer: syz [ 458.742909][ T6070] usb 5-1: SerialNumber: syz [ 458.753859][ T6070] usb 5-1: config 0 descriptor?? [ 458.959677][T11986] netlink: 'syz.2.1976': attribute type 21 has an invalid length. [ 459.930319][T11989] veth2: entered allmulticast mode [ 460.042111][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'. [ 460.283808][ T6070] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 460.283838][ T6070] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 460.285104][ T6070] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 460.285130][ T6070] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 460.285148][ T6070] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 460.285165][ T6070] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 460.285729][ T6070] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 460.373891][ T6070] usb 5-1: USB disconnect, device number 11 [ 460.766374][T12032] netlink: 'syz.0.1987': attribute type 21 has an invalid length. [ 462.801837][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 462.802034][T12077] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2004'. [ 462.948701][T12090] tap0: tun_chr_ioctl cmd 1074025677 [ 462.948908][T12090] tap0: linktype set to 778 [ 463.056629][ T5866] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 463.110335][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2007'. [ 463.217069][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 463.220335][ T5866] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 463.220363][ T5866] usb 3-1: config 0 has no interface number 0 [ 463.220412][ T5866] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 463.220436][ T5866] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 463.220462][ T5866] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 463.220489][ T5866] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 463.220530][ T5866] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 463.220554][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.232109][ T5866] usb 3-1: config 0 descriptor?? [ 463.288067][ T5866] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 463.361051][T12112] input: syz1 as /devices/virtual/input/input9 [ 464.000594][ T5869] usb 3-1: USB disconnect, device number 12 [ 464.004836][ T5869] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 464.740317][T12173] netlink: 'syz.4.2024': attribute type 21 has an invalid length. [ 465.493291][T12178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2030'. [ 465.505073][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 465.505091][ T36] audit: type=1326 audit(1772624103.204:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12177 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356d63c799 code=0x7ffc0000 [ 465.505140][ T36] audit: type=1326 audit(1772624103.204:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12177 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356d63c799 code=0x7ffc0000 [ 465.505189][ T36] audit: type=1326 audit(1772624103.204:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12177 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356d63c799 code=0x7ffc0000 [ 465.505229][ T36] audit: type=1326 audit(1772624103.204:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12177 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f356d63c799 code=0x7ffc0000 [ 465.505268][ T36] audit: type=1326 audit(1772624103.204:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12177 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356d63c799 code=0x7ffc0000 [ 465.505310][ T36] audit: type=1326 audit(1772624103.204:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12177 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356d63c799 code=0x7ffc0000 [ 465.505349][ T36] audit: type=1326 audit(1772624103.204:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12177 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356d63c799 code=0x7ffc0000 [ 465.505389][ T36] audit: type=1326 audit(1772624103.213:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12177 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356d63c799 code=0x7ffc0000 [ 465.505428][ T36] audit: type=1326 audit(1772624103.213:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12177 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356d63c799 code=0x7ffc0000 [ 465.505467][ T36] audit: type=1326 audit(1772624103.213:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12177 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f356d63c799 code=0x7ffc0000 [ 465.842147][T12191] ip6tnl1: entered allmulticast mode [ 465.868638][ T5869] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 466.061154][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 466.065211][ T5869] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 466.065238][ T5869] usb 1-1: config 179 has no interface number 0 [ 466.065303][ T5869] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 466.065388][ T5869] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 466.065416][ T5869] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 466.065442][ T5869] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 466.065468][ T5869] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 466.065511][ T5869] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 466.065534][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.315937][T12170] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.417083][T12215] netlink: 'syz.4.2041': attribute type 21 has an invalid length. [ 467.161462][T12218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2044'. [ 467.593251][ T5869] usb 1-1: USB disconnect, device number 20 [ 467.593326][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 467.593388][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 467.662706][T12230] kvm: user requested TSC rate below hardware speed [ 467.683814][T12228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2046'. [ 468.136450][T12261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2057'. [ 468.552252][ T5122] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 468.712639][ T5122] usb 3-1: Using ep0 maxpacket: 16 [ 468.715058][ T5122] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.715089][ T5122] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.715110][ T5122] usb 3-1: config 0 interface 0 has no altsetting 0 [ 468.715221][ T5122] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 468.715245][ T5122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.725174][ T5122] usb 3-1: config 0 descriptor?? [ 469.016717][T12314] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2075'. [ 469.017611][T12314] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2075'. [ 469.164646][T12271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.169007][T12271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.192300][ T5122] hid (null): global environment stack underflow [ 469.192520][ T5122] hid (null): bogus close delimiter [ 469.237260][ T5122] hid_parser_main: 29 callbacks suppressed [ 469.237277][ T5122] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 469.237306][ T5122] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 469.237331][ T5122] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 469.237355][ T5122] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 469.237380][ T5122] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 469.237405][ T5122] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 469.237431][ T5122] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 469.237456][ T5122] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 469.237482][ T5122] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 469.237507][ T5122] cougar 0003:060B:500A.0007: unknown main item tag 0x0 [ 469.246010][ T5122] cougar 0003:060B:500A.0007: global environment stack underflow [ 469.246024][ T5122] cougar 0003:060B:500A.0007: item 0 2 1 11 parsing failed [ 469.246479][ T5122] cougar 0003:060B:500A.0007: parse failed [ 469.246536][ T5122] cougar 0003:060B:500A.0007: probe with driver cougar failed with error -22 [ 469.419772][ T5122] usb 3-1: USB disconnect, device number 13 [ 470.348474][ T5836] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 470.522919][ T5836] usb 3-1: unable to get BOS descriptor or descriptor too short [ 470.523493][ T5836] usb 3-1: not running at top speed; connect to a high speed hub [ 470.524635][ T5836] usb 3-1: config 2 has an invalid interface number: 222 but max is 0 [ 470.524658][ T5836] usb 3-1: config 2 has no interface number 0 [ 470.524687][ T5836] usb 3-1: config 2 interface 222 has no altsetting 0 [ 470.527250][ T5836] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.d9 [ 470.527277][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.527297][ T5836] usb 3-1: Product: syz [ 470.527312][ T5836] usb 3-1: Manufacturer: syz [ 470.527326][ T5836] usb 3-1: SerialNumber: syz [ 470.811223][ T5836] usb-storage 3-1:2.222: USB Mass Storage device detected [ 470.890730][ T5836] usb-storage 3-1:2.222: Quirks match for vid 04e6 pid 0007: 1 [ 470.890765][ T5836] usb-storage 3-1:2.222: This device (04e6,0007,01d9 S 87 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 470.890765][ T5836] Please send a copy of this message to and [ 471.053213][ T5836] usb 3-1: USB disconnect, device number 14 [ 472.027184][ T5898] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 472.201434][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 472.201470][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.201518][ T5898] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 472.201542][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.208519][ T5898] usb 5-1: config 0 descriptor?? [ 472.797534][ T5898] elan 0003:04F3:0755.0008: failed to start in urb: -90 [ 472.804740][ T5898] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 472.986921][ T5898] usb 5-1: USB disconnect, device number 12 [ 473.153251][T12503] fido_id[12503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 473.727126][ T5836] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 473.890381][ T5836] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 473.890409][ T5836] usb 2-1: config 160 has no interface number 0 [ 473.890454][ T5836] usb 2-1: config 160 interface 200 has no altsetting 0 [ 473.892836][ T5836] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 473.892890][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.892965][ T5836] usb 2-1: Product: syz [ 473.892980][ T5836] usb 2-1: Manufacturer: syz [ 473.892993][ T5836] usb 2-1: SerialNumber: syz [ 474.159515][ T5836] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 474.159565][ T5836] usb 2-1: MIDIStreaming interface descriptor not found [ 474.261560][ T5836] usb 2-1: USB disconnect, device number 13 [ 474.424882][ T7106] udevd[7106]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.167666][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2159'. [ 475.989062][ T5874] kworker/1:7 (5874) used greatest stack depth: 15168 bytes left [ 476.103591][T12647] netlink: 'syz.0.2170': attribute type 21 has an invalid length. [ 478.323103][T12690] netlink: 'syz.4.2183': attribute type 21 has an invalid length. [ 479.955382][T12697] ceph: No mds server is up or the cluster is laggy [ 480.092726][T12710] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2191'. [ 480.245789][T12714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.505313][T12723] kvm: user requested TSC rate below hardware speed [ 481.047078][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2203'. [ 481.047119][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2203'. [ 481.925715][T12743] netlink: 'syz.4.2200': attribute type 21 has an invalid length. [ 482.519032][T12756] macvlan2: entered promiscuous mode [ 482.519055][T12756] bridge0: entered promiscuous mode [ 483.281029][T12779] loop7: detected capacity change from 0 to 7 [ 483.318434][ T7251] buffer_io_error: 10 callbacks suppressed [ 483.318460][ T7251] Buffer I/O error on dev loop7, logical block 0, async page read [ 483.318503][ T7251] Buffer I/O error on dev loop7, logical block 0, async page read [ 483.318539][ T7251] Buffer I/O error on dev loop7, logical block 0, async page read [ 483.318571][ T7251] Buffer I/O error on dev loop7, logical block 0, async page read [ 483.318641][ T7251] Buffer I/O error on dev loop7, logical block 0, async page read [ 483.318692][ T7251] Buffer I/O error on dev loop7, logical block 0, async page read [ 483.318726][ T7251] Buffer I/O error on dev loop7, logical block 0, async page read [ 483.318749][ T7251] ldm_validate_partition_table(): Disk read failed. [ 483.318778][ T7251] Buffer I/O error on dev loop7, logical block 0, async page read [ 483.318810][ T7251] Buffer I/O error on dev loop7, logical block 0, async page read [ 483.318836][ T7251] Buffer I/O error on dev loop7, logical block 0, async page read [ 483.318872][ T7251] Dev loop7: unable to read RDB block 0 [ 483.318945][ T7251] loop7: unable to read partition table [ 483.319168][ T7251] loop7: partition table beyond EOD, truncated [ 483.321634][T12779] ldm_validate_partition_table(): Disk read failed. [ 483.321717][T12779] Dev loop7: unable to read RDB block 0 [ 483.321784][T12779] loop7: unable to read partition table [ 483.321989][T12779] loop7: partition table beyond EOD, truncated [ 483.322006][T12779] loop_reread_partitions: partition scan of loop7 (úùƒå¡7x~¾SêjÌ–ã¢P@½?ã•X) failed (rc=-5) [ 485.188371][ T36] kauditd_printk_skb: 215 callbacks suppressed [ 485.188389][ T36] audit: type=1326 audit(1772624121.629:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12830 comm="syz.4.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbca8c799 code=0x7ffc0000 [ 485.189391][ T36] audit: type=1326 audit(1772624121.629:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12830 comm="syz.4.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbca8c799 code=0x7ffc0000 [ 485.189652][ T36] audit: type=1326 audit(1772624121.648:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12830 comm="syz.4.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcdbca8c799 code=0x7ffc0000 [ 485.190613][ T36] audit: type=1326 audit(1772624121.648:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12830 comm="syz.4.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbca8c799 code=0x7ffc0000 [ 485.191403][ T36] audit: type=1326 audit(1772624121.648:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12830 comm="syz.4.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbca8c799 code=0x7ffc0000 [ 485.210318][ T5122] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 485.438023][ T5122] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.438076][ T5122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 485.438104][ T5122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 485.438130][ T5122] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 485.439481][ T5122] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 485.439506][ T5122] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 485.439525][ T5122] usb 3-1: Manufacturer: syz [ 485.444913][ T5122] usb 3-1: config 0 descriptor?? [ 485.841202][ T5122] rc_core: IR keymap rc-hauppauge not found [ 485.841220][ T5122] Registered IR keymap rc-empty [ 485.849768][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 485.872341][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 485.886513][ T5122] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 485.889616][ T5122] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 485.921513][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 485.938091][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 485.969822][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 485.991209][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 486.013430][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 486.044757][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 486.070447][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 486.087456][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 486.108664][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 486.130065][ T5122] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 486.152616][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 486.178502][ T5122] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 486.178526][ T5122] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 486.203186][ T5122] usb 3-1: USB disconnect, device number 15 [ 486.314275][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 486.316560][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 486.316585][ T10] usb 1-1: config 0 has no interface number 0 [ 486.320301][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 486.320328][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.320348][ T10] usb 1-1: Product: syz [ 486.320361][ T10] usb 1-1: Manufacturer: syz [ 486.320375][ T10] usb 1-1: SerialNumber: syz [ 486.419805][ T10] usb 1-1: config 0 descriptor?? [ 486.836971][T12899] netlink: 'syz.3.2251': attribute type 17 has an invalid length. [ 486.939508][T12905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.939538][T12905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.009329][T12905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.009360][T12905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.083106][T12911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2257'. [ 487.084284][T12911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2257'. [ 487.544232][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 487.544264][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 487.550482][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 487.550802][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 487.611560][ T10] usb 1-1: USB disconnect, device number 21 [ 488.193705][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 488.278983][ T5898] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 488.363313][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 488.363333][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 488.363347][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 488.377296][ T10] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 488.377326][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.377345][ T10] usb 2-1: Product: syz [ 488.377359][ T10] usb 2-1: Manufacturer: syz [ 488.377374][ T10] usb 2-1: SerialNumber: syz [ 488.388766][ T10] usb 2-1: config 0 descriptor?? [ 488.390410][T12947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 488.390583][T12947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 488.395664][ T10] usb 2-1: ucan: probing device on interface #0 [ 488.443957][ T5898] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 488.443982][ T5898] usb 5-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 488.444016][ T5898] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 488.444098][ T5898] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 488.447270][ T5898] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 488.447296][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 488.447363][ T5898] usb 5-1: SerialNumber: syz [ 488.538765][ T5898] cdc_acm 5-1:1.0: skipping garbage [ 488.538786][ T5898] cdc_acm 5-1:1.0: skipping garbage [ 488.538830][ T5898] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 488.539416][ T5898] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 488.539458][ T5898] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 488.765898][ T5122] usb 5-1: USB disconnect, device number 13 [ 489.108967][ T10] ucan 2-1:0.0 can0: registered device [ 489.293036][ T10] ucan 2-1:0.0 can0: firmware string: { [ 489.514323][ T5122] usb 2-1: USB disconnect, device number 14 [ 490.130856][T13047] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2291'. [ 490.151576][T13043] loop8: detected capacity change from 0 to 8 [ 490.252383][T13043] Dev loop8: unable to read RDB block 8 [ 490.252447][T13043] loop8: unable to read partition table [ 490.252662][T13043] loop8: partition table beyond EOD, truncated [ 490.252701][T13043] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 490.696805][T13075] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 490.697061][T13075] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 490.747224][T13078] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2299'. [ 490.879188][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2299'. [ 490.936975][T13078] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2299'. [ 492.353799][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 492.918428][T13116] hsr0: entered promiscuous mode [ 493.187768][T13122] hsr_slave_0: left promiscuous mode [ 493.229657][T13122] hsr_slave_1: left promiscuous mode [ 493.341029][T13125] vlan2: entered promiscuous mode [ 493.341050][T13125] gretap0: entered promiscuous mode [ 493.341211][T13125] vlan2: entered allmulticast mode [ 493.341223][T13125] gretap0: entered allmulticast mode [ 493.345870][T13108] lo speed is unknown, defaulting to 1000 [ 493.443751][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 493.603471][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 493.605705][ T10] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 493.605736][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 493.605767][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 493.605790][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.665488][ T10] usb 1-1: config 0 descriptor?? [ 493.860675][ T5122] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 494.031308][ T5122] usb 3-1: Using ep0 maxpacket: 32 [ 494.034897][ T5122] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 494.034926][ T5122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.073519][ T5122] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 494.267355][T13155] lo speed is unknown, defaulting to 1000 [ 494.548389][ T10] corsair-psu 0003:1B1C:1C09.0009: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 494.707801][ T10] corsair-psu 0003:1B1C:1C09.0009: unable to initialize device (-95) [ 494.783633][ T10] corsair-psu 0003:1B1C:1C09.0009: probe with driver corsair-psu failed with error -95 [ 494.930374][ T5836] usb 1-1: USB disconnect, device number 22 [ 495.131233][ T5122] gspca_nw80x: reg_w err -71 [ 495.131406][ T5122] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 495.137074][T13213] 9p: Bad value for 'rfdno' [ 495.188972][ T5122] usb 3-1: USB disconnect, device number 16 [ 496.410906][T13302] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2330'. [ 496.820219][T13322] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2336'. [ 496.866550][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 497.206680][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 497.359830][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2348'. [ 497.376156][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 497.383298][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 497.383322][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 497.383336][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.383349][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.383373][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 497.383385][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.741581][ T10] usb 3-1: usb_control_msg returned -32 [ 497.741631][ T10] usbtmc 3-1:16.0: can't read capabilities [ 497.773390][ T5122] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 497.896417][T13382] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2357'. [ 497.942324][ T5122] usb 2-1: Using ep0 maxpacket: 32 [ 497.944096][ T5122] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 497.944111][ T5122] usb 2-1: config 0 has no interface number 0 [ 497.944152][ T5122] usb 2-1: config 0 interface 184 has no altsetting 0 [ 497.947484][ T5122] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 497.947511][ T5122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.947530][ T5122] usb 2-1: Product: syz [ 497.947544][ T5122] usb 2-1: Manufacturer: syz [ 497.947557][ T5122] usb 2-1: SerialNumber: syz [ 497.990530][ T5122] usb 2-1: config 0 descriptor?? [ 499.059065][ T5122] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 499.059098][ T5122] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 499.196045][T13400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2363'. [ 499.196073][T13400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2363'. [ 499.282980][ T5122] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 499.283009][ T5122] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 499.283028][ T5122] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 499.284007][ T5122] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 499.295695][ T5122] usb 2-1: USB disconnect, device number 15 [ 500.424306][ T5982] usb 3-1: USB disconnect, device number 17 [ 500.548451][T13448] netlink: 'syz.3.2375': attribute type 21 has an invalid length. [ 502.952045][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2393'. [ 503.059580][T13502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.112167][T13502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.493565][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 503.664589][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 503.666646][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.666692][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 503.666714][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.718237][ T10] usb 1-1: config 0 descriptor?? [ 503.921185][ T5836] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 503.948687][ T10] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 504.081534][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 504.085267][ T5836] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.085299][ T5836] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.085321][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 504.085452][ T5836] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 504.085475][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.097323][ T5836] usb 5-1: config 0 descriptor?? [ 504.231411][ T5982] usb 1-1: USB disconnect, device number 23 [ 504.575607][ T5836] hid_parser_main: 312 callbacks suppressed [ 504.575631][ T5836] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 504.575663][ T5836] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 504.575689][ T5836] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 504.575715][ T5836] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 504.575741][ T5836] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 504.613943][ T5836] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 504.787075][ T5982] usb 5-1: USB disconnect, device number 14 [ 505.787381][T13634] binder: 13633:13634 ioctl 40046205 0 returned -22 [ 507.251902][ T36] audit: type=1326 audit(1772624142.271:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13692 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8cfdc799 code=0x7ffc0000 [ 507.251953][ T36] audit: type=1326 audit(1772624142.271:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13692 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8cfdc799 code=0x7ffc0000 [ 507.252763][ T36] audit: type=1326 audit(1772624142.271:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13692 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8cfdc799 code=0x7ffc0000 [ 507.254022][ T36] audit: type=1326 audit(1772624142.271:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13692 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8cfdc799 code=0x7ffc0000 [ 507.254067][ T36] audit: type=1326 audit(1772624142.271:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13692 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4a8cfdc799 code=0x7ffc0000 [ 507.406740][ T36] audit: type=1326 audit(1772624142.271:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13692 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8cfdc799 code=0x7ffc0000 [ 507.406792][ T36] audit: type=1326 audit(1772624142.383:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13692 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8cfdc799 code=0x7ffc0000 [ 507.406830][ T36] audit: type=1326 audit(1772624142.411:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13692 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f4a8cfdc799 code=0x7ffc0000 [ 507.406868][ T36] audit: type=1326 audit(1772624142.411:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13692 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8cfdc799 code=0x7ffc0000 [ 507.406903][ T36] audit: type=1326 audit(1772624142.411:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13692 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8cfdc799 code=0x7ffc0000 [ 507.459798][T13693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2447'. [ 508.845363][T13718] evm: overlay not supported [ 510.122573][ T5866] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 510.285549][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 510.288538][ T5866] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 510.288573][ T5866] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 510.288597][ T5866] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 510.290039][ T5866] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.290068][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 510.290088][ T5866] usb 5-1: SerialNumber: syz [ 510.359148][T13752] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 510.582776][ T5866] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 510.604290][ T5866] usb 5-1: USB disconnect, device number 15 [ 511.090384][ T5866] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 511.288684][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.288723][ T5866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.288767][ T5866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 511.288790][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.502104][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 511.874175][ T5866] usb 3-1: GET_CAPABILITIES returned 0 [ 511.874225][ T5866] usbtmc 3-1:16.0: can't read capabilities [ 512.064714][ T49] usb 3-1: USB disconnect, device number 18 [ 512.186569][ T5866] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 512.285242][ T5122] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 512.351407][ T5866] usb 5-1: unable to get BOS descriptor or descriptor too short [ 512.352598][ T5866] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 512.352624][ T5866] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 512.352645][ T5866] usb 5-1: config 63 has no interface number 0 [ 512.352676][ T5866] usb 5-1: config 63 interface 66 has no altsetting 0 [ 512.399670][ T5866] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 512.399708][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.399738][ T5866] usb 5-1: Product: syz [ 512.421593][ T5866] usb 5-1: Manufacturer: syz [ 512.421613][ T5866] usb 5-1: SerialNumber: syz [ 512.474816][ T5122] usb 2-1: Using ep0 maxpacket: 8 [ 512.476978][ T5122] usb 2-1: config 53 has an invalid interface number: 101 but max is 0 [ 512.477009][ T5122] usb 2-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 512.477027][ T5122] usb 2-1: config 53 has no interface number 0 [ 512.478992][ T5122] usb 2-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 512.479073][ T5122] usb 2-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 512.479095][ T5122] usb 2-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 512.479120][ T5122] usb 2-1: config 53 interface 101 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 512.560261][ T5122] usb 2-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 512.560291][ T5122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.560310][ T5122] usb 2-1: Product: syz [ 512.560322][ T5122] usb 2-1: Manufacturer: syz [ 512.560431][ T5122] usb 2-1: SerialNumber: syz [ 512.692710][ T5866] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 512.693884][ T5866] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 512.694720][ T5866] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 512.695359][ T5866] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 512.696012][ T5866] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 512.696663][ T5866] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 512.696802][ T5866] uvcvideo 5-1:63.66: No streaming interface found for terminal 29. [ 512.696942][ T5866] uvcvideo 5-1:63.66: Entity type for entity Output 32773 was not initialized! [ 512.805008][T13878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2504'. [ 512.822433][ T5866] usb 5-1: USB disconnect, device number 16 [ 512.864828][ T5122] kvaser_usb 2-1:53.101: error -ENODEV: Cannot get usb endpoint(s) [ 512.924530][ T5122] usb 2-1: USB disconnect, device number 16 [ 513.048739][T13904] kvm: kvm [13903]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xffffffffffffffff [ 513.330657][ T5866] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 513.496497][ T5866] usb 5-1: unable to get BOS descriptor or descriptor too short [ 513.499400][ T5866] usb 5-1: not running at top speed; connect to a high speed hub [ 513.516667][ T5866] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 513.516696][ T5866] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 513.516724][ T5866] usb 5-1: config 63 has no interface number 0 [ 513.516754][ T5866] usb 5-1: config 63 interface 66 has no altsetting 0 [ 513.536764][ T5866] usb 5-1: string descriptor 0 read error: -22 [ 513.536918][ T5866] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 513.536942][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.591465][ T5866] uvcvideo 5-1:63.66: Found UVC 0.07 device (174f:8acf) [ 513.703612][T13935] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 513.812107][ T5866] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC error code control 6 on unit 1: -71 (exp. 1). [ 513.812648][ T5866] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 513.813156][ T5866] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 513.813624][ T5866] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 513.814240][ T5866] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 513.814322][ T5866] uvcvideo 5-1:63.66: No streaming interface found for terminal 29. [ 513.814343][ T5866] uvcvideo 5-1:63.66: Entity type for entity Output 32773 was not initialized! [ 513.929339][ T5866] usb 5-1: USB disconnect, device number 17 [ 514.916421][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2524'. [ 514.916458][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2524'. [ 516.915839][T14057] Invalid argument reading file caps for ./file0 [ 517.051158][T14059] loop7: detected capacity change from 0 to 7 [ 517.085091][ C1] blk_print_req_error: 10 callbacks suppressed [ 517.085112][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 517.124399][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 517.139409][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.139444][ C0] buffer_io_error: 38 callbacks suppressed [ 517.139455][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 517.146627][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.146648][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 517.193129][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.193152][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 517.211263][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.211297][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 517.217088][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.217119][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 517.564139][ T5866] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 517.578481][T14098] sctp: [Deprecated]: syz.4.2567 (pid 14098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.578481][T14098] Use struct sctp_sack_info instead [ 517.650830][T14100] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.2568'. [ 517.745875][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 517.768620][ T5866] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 517.768650][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.768670][ T5866] usb 3-1: Product: syz [ 517.768684][ T5866] usb 3-1: Manufacturer: syz [ 517.768699][ T5866] usb 3-1: SerialNumber: syz [ 517.810683][ T5866] usb 3-1: config 0 descriptor?? [ 517.817635][ T5866] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 518.115036][ T809] usb 3-1: USB disconnect, device number 19 [ 518.147931][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 518.147948][ T36] audit: type=1326 audit(1772624152.465:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14115 comm="syz.0.2571" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a8cfdc799 code=0x0 [ 518.687412][T14144] loop5: detected capacity change from 0 to 7 [ 518.705823][ T7251] Dev loop5: unable to read RDB block 7 [ 518.705866][ T7251] loop5: unable to read partition table [ 518.706096][ T7251] loop5: partition table beyond EOD, truncated [ 518.734640][T14144] Dev loop5: unable to read RDB block 7 [ 518.734685][T14144] loop5: unable to read partition table [ 518.735070][T14144] loop5: partition table beyond EOD, truncated [ 518.735102][T14144] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 519.047907][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'. [ 519.429522][T14166] netlink: 'syz.0.2584': attribute type 21 has an invalid length. [ 519.777634][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.778115][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 521.036611][T14227] netlink: 'syz.0.2601': attribute type 21 has an invalid length. [ 521.830885][T14230] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2606'. [ 522.441415][ T809] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 522.606291][ T809] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 522.606324][ T809] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 522.606349][ T809] usb 3-1: config 1 interface 0 has no altsetting 0 [ 522.607161][T14259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2619'. [ 522.624929][ T809] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 522.624958][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.624976][ T809] usb 3-1: Product: syz [ 522.624990][ T809] usb 3-1: Manufacturer: syz [ 522.625003][ T809] usb 3-1: SerialNumber: syz [ 522.698334][T14241] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 522.698463][T14241] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 523.215785][T14266] netlink: 'syz.1.2617': attribute type 21 has an invalid length. [ 524.088700][ T809] (unnamed net_device) (uninitialized): Assigned a random MAC address: 86:2a:a8:f7:d7:66 [ 524.109010][T14279] loop8: detected capacity change from 0 to 7 [ 524.149813][ T809] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 524.150158][T14279] Dev loop8: unable to read RDB block 7 [ 524.150433][T14279] loop8: unable to read partition table [ 524.150612][T14279] loop8: partition table beyond EOD, truncated [ 524.150646][T14279] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 524.196190][ T809] usb 3-1: USB disconnect, device number 20 [ 524.638716][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2630'. [ 525.122399][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 525.156627][T14335] netlink: 'syz.1.2633': attribute type 21 has an invalid length. [ 525.663226][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.663307][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.760461][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 525.760491][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 525.760512][ T10] usb 5-1: SerialNumber: syz [ 525.879754][ T5866] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 526.034446][ T5866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.034474][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.036203][ T5866] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 526.036230][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 526.036251][ T5866] usb 1-1: SerialNumber: syz [ 526.092943][ T10] usb 5-1: 0:2 : does not exist [ 526.206752][ T10] usb 5-1: USB disconnect, device number 18 [ 526.350673][ T7251] udevd[7251]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.356007][ T5866] usb 1-1: 0:2 : does not exist [ 526.563842][ T5866] usb 1-1: USB disconnect, device number 24 [ 526.689920][ T7251] udevd[7251]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.119796][T14404] netlink: 'syz.3.2648': attribute type 21 has an invalid length. [ 527.899766][T14396] team0 (unregistering): Port device team_slave_0 removed [ 527.940549][T14396] team0 (unregistering): Port device team_slave_1 removed [ 528.493404][T14442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2661'. [ 528.663554][T14442] hsr_slave_1 (unregistering): left promiscuous mode [ 530.918361][ T5801] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 531.110776][ T809] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 531.282752][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 531.286180][ T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.286403][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.286432][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 531.286453][ T809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 531.286477][ T809] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.288439][ T809] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 531.288466][ T809] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 531.288486][ T809] usb 2-1: Manufacturer: syz [ 531.301458][ T809] usb 2-1: config 0 descriptor?? [ 531.818831][ T809] rc_core: IR keymap rc-hauppauge not found [ 531.818854][ T809] Registered IR keymap rc-empty [ 531.819005][ T809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 531.841002][ T809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 531.879394][ T809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 531.892451][ T809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 531.928758][ T809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 531.944954][ T809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 531.966268][ T809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 531.990644][ T809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 531.997451][T14566] sctp: [Deprecated]: syz.3.2698 (pid 14566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.997451][T14566] Use struct sctp_sack_info instead [ 532.008936][ T809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 532.031585][ T809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 532.053220][ T809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 532.073112][ T809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 532.094642][ T809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 532.115863][ T809] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 532.140534][ T809] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 532.140557][ T809] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 532.155820][ T809] usb 2-1: USB disconnect, device number 17 [ 532.201498][ T5836] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 532.370388][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.370423][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.370445][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 532.370487][ T5836] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 532.370518][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.440588][ T5836] usb 1-1: config 0 descriptor?? [ 532.682535][ T809] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 532.845305][ T809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.845332][ T809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.846835][ T809] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 532.846862][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 532.846882][ T809] usb 3-1: SerialNumber: syz [ 532.905948][ T5836] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 532.905983][ T5836] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 532.906008][ T5836] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 532.906033][ T5836] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 532.906059][ T5836] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 532.906084][ T5836] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 532.906110][ T5836] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 532.906135][ T5836] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 532.906160][ T5836] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 532.906199][ T5836] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 533.015298][ T5836] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 533.078121][ T5898] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 533.160371][ T809] usb 3-1: 0:2 : does not exist [ 533.232111][ T10] usb 1-1: USB disconnect, device number 25 [ 533.238543][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 533.243108][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.243142][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.243184][ T5898] usb 2-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 533.243206][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.267264][ T5898] usb 2-1: config 0 descriptor?? [ 533.369359][ T809] usb 3-1: USB disconnect, device number 21 [ 533.706867][ T5898] apple 0003:05AC:0273.000C: unknown global tag 0xc [ 533.706891][ T5898] apple 0003:05AC:0273.000C: item 0 1 1 12 parsing failed [ 533.707806][ T5898] apple 0003:05AC:0273.000C: parse failed [ 533.707959][ T5898] apple 0003:05AC:0273.000C: probe with driver apple failed with error -22 [ 533.931270][ T5836] usb 2-1: USB disconnect, device number 18 [ 533.933508][ T5866] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 534.121123][ T5866] usb 5-1: unable to get BOS descriptor or descriptor too short [ 534.122180][ T5866] usb 5-1: config 1 interface 0 has no altsetting 0 [ 534.144609][ T5866] usb 5-1: string descriptor 0 read error: -22 [ 534.144692][ T5866] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 534.144704][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.254271][ T49] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 534.414536][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 534.421081][ T49] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 534.421112][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 534.421180][ T49] usb 3-1: Product: syz [ 534.421195][ T49] usb 3-1: Manufacturer: syz [ 534.421209][ T49] usb 3-1: SerialNumber: syz [ 534.473089][ T49] usb 3-1: config 0 descriptor?? [ 534.496193][ T49] gspca_main: sq905-2.14.0 probing 2770:9120 [ 534.812555][ T5866] glorious 0003:22D4:1503.000D: hidraw0: USB HID vff.7f Device [Glorious Model I] on usb-dummy_hcd.4-1/input0 [ 534.873108][ T5866] usb 5-1: USB disconnect, device number 19 [ 534.900476][T14714] fido_id[14714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 535.195407][ T809] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 535.355466][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 535.364507][ T809] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 535.364536][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.364556][ T809] usb 2-1: Product: syz [ 535.364570][ T809] usb 2-1: Manufacturer: syz [ 535.364584][ T809] usb 2-1: SerialNumber: syz [ 535.380921][ T809] usb 2-1: config 0 descriptor?? [ 535.574424][ T49] gspca_sq905: bulk read fail (-22) len 0/4 [ 535.574513][ T49] sq905 3-1:0.0: probe with driver sq905 failed with error -5 [ 535.661107][ T809] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 535.664698][ T809] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 535.698739][ T809] usb 2-1: USB disconnect, device number 19 [ 535.794169][ T5982] usb 3-1: USB disconnect, device number 22 [ 536.068729][T14794] sctp: [Deprecated]: syz.4.2732 (pid 14794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.068729][T14794] Use struct sctp_sack_info instead [ 536.289022][T14798] netlink: 'syz.4.2733': attribute type 1 has an invalid length. [ 536.396818][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2735'. [ 536.396855][T14825] netlink: 'syz.3.2735': attribute type 8 has an invalid length. [ 536.396868][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2735'. [ 536.453475][T14798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 536.492783][T14837] netlink: 'syz.1.2736': attribute type 7 has an invalid length. [ 536.499012][T14810] bond2: (slave geneve3): making interface the new active one [ 536.514685][T14810] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 536.519151][T14842] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2738'. [ 536.555305][T14825] geneve3: entered promiscuous mode [ 536.555329][T14825] geneve3: entered allmulticast mode [ 536.587314][T14837] netlink: 'syz.1.2736': attribute type 7 has an invalid length. [ 537.011471][T14866] fuse: Bad value for 'fd' [ 537.999145][T14907] batadv_slave_1: entered promiscuous mode [ 538.002580][T14907] batadv_slave_0: entered promiscuous mode [ 538.002902][T14906] batadv_slave_0: left promiscuous mode [ 538.003245][T14906] batadv_slave_1: left promiscuous mode [ 538.088119][T14909] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.2764'. [ 538.088150][T14909] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.2764'. [ 540.587850][ T809] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 540.875295][ T809] usb 5-1: config 1 interface 0 has no altsetting 0 [ 540.882775][ T809] usb 5-1: string descriptor 0 read error: -22 [ 540.882915][ T809] usb 5-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.40 [ 540.882939][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.990220][ T6070] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 541.837976][ T6070] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.838055][ T6070] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.839846][ T6070] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 541.839922][ T6070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 541.839942][ T6070] usb 3-1: SerialNumber: syz [ 542.191235][ T6070] usb 3-1: 0:2 : does not exist [ 542.206614][ T809] saitek 0003:0738:1713.000E: unknown global tag 0xd [ 542.206638][ T809] saitek 0003:0738:1713.000E: item 0 2 1 13 parsing failed [ 542.207356][ T809] saitek 0003:0738:1713.000E: parse failed [ 542.207434][ T809] saitek 0003:0738:1713.000E: probe with driver saitek failed with error -22 [ 542.328402][ T6070] usb 3-1: USB disconnect, device number 23 [ 542.396424][ T7251] udevd[7251]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.439438][ T809] usb 5-1: USB disconnect, device number 20 [ 542.615565][T15050] hugetlbfs: syz.3.2800 (15050): Using mlock ulimits for SHM_HUGETLB is obsolete [ 542.711871][ T5836] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 543.803072][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 543.807590][ T5836] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 543.807619][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.818167][ T5836] usb 2-1: config 0 descriptor?? [ 543.839003][ T5836] gspca_main: sq930x-2.14.0 probing 041e:403c [ 544.939662][ T5836] gspca_sq930x: ucbus_write failed -71 [ 544.939750][ T5836] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 546.045451][ T5836] usb 2-1: USB disconnect, device number 20 [ 546.449691][T15142] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 546.838431][T15162] binder: 15160:15162 ioctl c0306201 200000000540 returned -14 [ 547.192541][ T5836] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 547.362046][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.362089][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.362110][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 547.363727][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.363758][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.363780][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 547.364892][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.364923][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.364945][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 547.366533][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.366563][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.366586][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 547.388488][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.388521][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.388544][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 547.388586][ T5836] usb 2-1: New USB device found, idVendor=04b4, idProduct=0000, bcdDevice= 0.00 [ 547.388610][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.556962][ T5836] usb 2-1: config 0 descriptor?? [ 547.800893][ T5898] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 547.967388][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 547.970765][ T5898] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 547.970818][ T5898] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 547.970842][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 547.970867][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 547.970890][ T5898] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.970925][ T5898] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 547.970947][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.015202][ T5836] hid (null): bogus close delimiter [ 548.019854][ T5836] hid-generic 0003:04B4:0000.000F: bogus close delimiter [ 548.019876][ T5836] hid-generic 0003:04B4:0000.000F: item 0 1 2 10 parsing failed [ 548.020689][ T5836] hid-generic 0003:04B4:0000.000F: probe with driver hid-generic failed with error -22 [ 548.236050][ T5898] usb 1-1: usb_control_msg returned -32 [ 548.236096][ T5898] usbtmc 1-1:16.0: can't read capabilities [ 548.348761][ T5836] usb 2-1: USB disconnect, device number 21 [ 548.554359][ T5866] usb 1-1: USB disconnect, device number 26 [ 548.566243][T15206] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 548.815236][ T5801] Bluetooth: hci1: connection err: -111 [ 549.725522][ T49] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 549.885818][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 549.892320][ T49] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 549.892348][ T49] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 549.892368][ T49] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 549.892417][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 549.892439][ T49] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 549.892453][ T49] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 549.892477][ T49] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 549.892490][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.980110][ T49] usb 5-1: config 0 descriptor?? [ 550.652189][ T49] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 551.081450][ T49] usb 5-1: USB disconnect, device number 21 [ 551.113236][ T49] usblp0: removed [ 551.436094][ T5866] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 552.408792][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.408819][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 552.408839][ T5866] usb 3-1: config 1 has no interface number 0 [ 552.408900][ T5866] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 552.446315][ T5866] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 552.446351][ T5866] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 552.449281][ T5866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.449310][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.449330][ T5866] usb 3-1: Product: syz [ 552.449345][ T5866] usb 3-1: Manufacturer: syz [ 552.449359][ T5866] usb 3-1: SerialNumber: syz [ 552.511742][T15358] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 552.977085][T15358] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 553.035305][T15396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.035515][T15396] batadv_slave_0: entered promiscuous mode [ 554.007050][ T5866] cdc_ncm 3-1:1.1: bind() failure [ 554.193840][ T5801] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 554.194009][ T5801] Bluetooth: hci3: Injecting HCI hardware error event [ 554.197143][ T5801] Bluetooth: hci3: hardware error 0x00 [ 554.228787][ T809] usb 3-1: USB disconnect, device number 24 [ 556.622336][ T5801] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 557.327471][ T49] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 557.705477][ T49] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.705505][ T49] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.706823][ T49] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 557.706850][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 557.706869][ T49] usb 5-1: SerialNumber: syz [ 558.809849][ T49] usb 5-1: 0:2 : does not exist [ 558.828221][ T49] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 558.920551][ T6070] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 559.083634][ T6070] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 559.083664][ T6070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.170620][ T6070] usb 3-1: config 0 descriptor?? [ 559.191886][ T6070] cp210x 3-1:0.0: cp210x converter detected [ 559.634437][ T49] usb 5-1: USB disconnect, device number 22 [ 559.662203][ T6070] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 559.751252][ T6070] usb 3-1: cp210x converter now attached to ttyUSB0 [ 559.824825][ T7251] udevd[7251]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.929075][ T5869] usb 3-1: USB disconnect, device number 25 [ 559.960297][ T5869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 560.114279][ T5869] cp210x 3-1:0.0: device disconnected [ 560.265380][T15575] input: syz1 as /devices/virtual/input/input12 [ 561.250519][T15610] netlink: 'syz.3.2951': attribute type 10 has an invalid length. [ 561.275091][T15610] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.303097][T15610] bond0: (slave team0): Enslaving as an active interface with an up link [ 562.192510][ T5898] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 562.309558][T15636] netlink: 'syz.1.2960': attribute type 3 has an invalid length. [ 562.376100][ T5898] usb 1-1: config 1 interface 0 has no altsetting 0 [ 562.380859][ T5898] usb 1-1: string descriptor 0 read error: -22 [ 562.381007][ T5898] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 562.381032][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.904920][ T5898] hid_parser_main: 4111 callbacks suppressed [ 562.904944][ T5898] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 562.904976][ T5898] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 562.905003][ T5898] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 562.905030][ T5898] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 562.905055][ T5898] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 562.905082][ T5898] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 562.905108][ T5898] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 562.905134][ T5898] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 562.905160][ T5898] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 562.905186][ T5898] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 563.037506][ T5898] isku 0003:1E7D:319C.0010: hidraw0: USB HID vff.7f Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 563.133094][ T809] usb 1-1: USB disconnect, device number 27 [ 563.288716][T15663] fido_id[15663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 563.421754][ T49] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 563.582204][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 563.592230][ T49] usb 2-1: string descriptor 0 read error: -22 [ 563.592368][ T49] usb 2-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice= 0.40 [ 563.592392][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.645140][ T49] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 563.868695][ T5898] usb 2-1: USB disconnect, device number 22 [ 564.415487][T15707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.415526][T15707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 564.513706][T15729] fuse: Bad value for 'fd' [ 564.648485][T15743] loop2: detected capacity change from 0 to 7 [ 564.667289][T15743] Dev loop2: unable to read RDB block 7 [ 564.667333][T15743] loop2: unable to read partition table [ 564.667515][T15743] loop2: partition table beyond EOD, truncated [ 564.668271][T15743] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 565.728223][T15707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.728263][T15707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 566.757300][T15707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.757339][T15707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 567.186500][T15707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.186545][T15707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 567.260068][T15795] syz_tun: entered allmulticast mode [ 567.262601][T15790] syz_tun: left allmulticast mode [ 567.682137][ T36] audit: type=1326 audit(1772624198.790:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15812 comm="syz.2.3002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f356d63c799 code=0x0 [ 569.067172][ T49] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 569.249089][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 569.251487][ T49] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 569.251593][ T49] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 569.251618][ T49] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 569.251643][ T49] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 569.251685][ T49] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 569.251806][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.314894][ T49] usbtmc 3-1:16.0: bulk endpoints not found [ 569.536466][ T5898] usb 3-1: USB disconnect, device number 26 [ 570.247879][T15892] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 570.288470][T15895] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3026'. [ 570.327114][T15892] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 570.504803][T15895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.575458][T15895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.675327][T15895] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 570.936739][T15895] bond0 (unregistering): (slave team0): Releasing backup interface [ 570.974429][T15895] bond0 (unregistering): Released all slaves [ 571.066567][ T5869] syz1: Port: 1 Link DOWN [ 571.705140][T15949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.391947][T15961] 9p: Bad value for 'wfdno' [ 572.820650][T15969] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 572.822927][T15969] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 572.847643][T15969] overlayfs: inode number too big (/cpu.stat, ino=4611686018427387913, xinobits=3) [ 572.998499][T15974] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 572.998529][T15974] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 572.998540][T15974] overlayfs: maximum fs stacking depth exceeded [ 573.027019][T15976] netlink: 'syz.0.3052': attribute type 1 has an invalid length. [ 573.027041][T15976] netlink: 'syz.0.3052': attribute type 2 has an invalid length. [ 574.766068][ T5869] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 574.794324][T16030] trusted_key: syz.3.3069 sent an empty control message without MSG_MORE. [ 574.940615][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.940650][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.940674][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.940716][ T5869] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.940740][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.951057][ T5869] usb 2-1: config 0 descriptor?? [ 575.025245][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3070'. [ 575.025271][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3070'. [ 575.550968][ T5869] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 576.309651][T16072] netlink: 'syz.3.3080': attribute type 1 has an invalid length. [ 576.583109][T16072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.359637][ C0] plantronics 0003:047F:FFFF.0011: usb_submit_urb(ctrl) failed: -1 [ 577.373508][ T5122] usb 2-1: USB disconnect, device number 23 [ 577.934699][T16076] bond0: (slave ip6erspan0): making interface the new active one [ 577.948332][T16133] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3084'. [ 577.995712][T16076] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 578.099887][T16135] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3085'. [ 578.235536][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3090'. [ 578.235573][T16145] netlink: 'syz.0.3090': attribute type 30 has an invalid length. [ 578.235588][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3090'. [ 578.236635][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3090'. [ 578.236663][T16145] netlink: 'syz.0.3090': attribute type 30 has an invalid length. [ 578.236676][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3090'. [ 580.264740][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 581.981580][T16201] lo speed is unknown, defaulting to 1000 [ 582.249048][T16237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3115'. [ 582.249996][T16237] 8021q: VLANs not supported on ip_vti0 [ 583.199092][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3119'. [ 583.279389][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3119'. [ 583.279470][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.280592][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.280632][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.280666][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.423458][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.423524][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.677120][T16338] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 585.677143][T16338] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 586.903803][T16354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.920242][T16374] IPv6: NLM_F_CREATE should be specified when creating new route [ 587.920383][T16374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 587.920395][T16374] IPv6: NLM_F_CREATE should be set when creating new route [ 587.923126][T16374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 587.923141][T16374] IPv6: NLM_F_CREATE should be set when creating new route [ 589.609492][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3151'. [ 591.445429][ T5982] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 591.541599][ T5898] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 591.638310][ T5982] usb 3-1: Using ep0 maxpacket: 32 [ 591.642616][ T5982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.642641][ T5982] usb 3-1: config 0 has no interfaces? [ 591.645105][ T5982] usb 3-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.40 [ 591.645122][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.645133][ T5982] usb 3-1: Product: syz [ 591.645140][ T5982] usb 3-1: Manufacturer: syz [ 591.645148][ T5982] usb 3-1: SerialNumber: syz [ 591.655301][ T5982] usb 3-1: config 0 descriptor?? [ 591.737026][ T5898] usb 1-1: config 0 has no interfaces? [ 591.737049][ T5898] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 591.737062][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.747455][ T5898] usb 1-1: config 0 descriptor?? [ 591.903978][ T6070] usb 3-1: USB disconnect, device number 27 [ 591.940897][T16460] binder: 16459:16460 ioctl 4018620d 0 returned -22 [ 591.993233][T16465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.993790][T16465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.019186][T16465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.021416][T16465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.065893][ T5982] usb 1-1: USB disconnect, device number 28 [ 592.503775][ T49] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 592.677101][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 592.681918][ T49] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 592.681945][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.681964][ T49] usb 1-1: Product: syz [ 592.681977][ T49] usb 1-1: Manufacturer: syz [ 592.681990][ T49] usb 1-1: SerialNumber: syz [ 592.734627][ T49] usb 1-1: config 0 descriptor?? [ 592.746184][ T49] gspca_main: spca500-2.14.0 probing 046d:0900 [ 593.190112][ T49] gspca_spca500: reg write: error -71 [ 593.190505][ T49] gspca_spca500: reg write: error -71 [ 593.190994][ T49] gspca_spca500: reg write: error -71 [ 593.191426][ T49] gspca_spca500: reg write: error -71 [ 593.191866][ T49] gspca_spca500: reg write: error -71 [ 593.194464][ T49] gspca_spca500: reg write: error -71 [ 593.241769][ T49] gspca_spca500: reg write: error -71 [ 593.242167][ T49] gspca_spca500: reg write: error -71 [ 593.242553][ T49] gspca_spca500: reg write: error -71 [ 593.242930][ T49] gspca_spca500: reg write: error -71 [ 593.243300][ T49] gspca_spca500: reg write: error -71 [ 593.243786][ T49] gspca_spca500: reg write: error -71 [ 593.244165][ T49] gspca_spca500: reg write: error -71 [ 593.290466][ T49] usb 1-1: USB disconnect, device number 29 [ 593.298077][T16541] kvm: emulating exchange as write [ 603.265204][T16652] netlink: 'syz.1.3230': attribute type 1 has an invalid length. [ 603.376966][T16695] bond1: (slave gretap1): making interface the new active one [ 603.385451][T16695] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 603.495089][ T6070] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 603.656484][ T6070] usb 5-1: Using ep0 maxpacket: 32 [ 603.659106][ T6070] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 603.659133][ T6070] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 603.659154][ T6070] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 603.659220][ T6070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 603.659242][ T6070] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 603.659266][ T6070] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 603.659308][ T6070] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 603.659331][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.665741][ T6070] usb 5-1: config 0 descriptor?? [ 603.824909][T16727] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 603.914053][ T6070] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 603.957132][ T6070] usb 5-1: USB disconnect, device number 23 [ 603.994671][ T6070] usblp0: removed [ 604.500148][ T6070] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 604.672689][ T6070] usb 5-1: Using ep0 maxpacket: 32 [ 604.675610][ T6070] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 604.675638][ T6070] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 604.675659][ T6070] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 604.675722][ T6070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 604.675745][ T6070] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 604.675768][ T6070] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 604.675809][ T6070] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 604.675831][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.683572][ T6070] usb 5-1: config 0 descriptor?? [ 604.910451][ T6070] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 605.163571][ T5122] usb 5-1: USB disconnect, device number 24 [ 605.195086][ T5122] usblp0: removed [ 607.343948][ T36] audit: type=1326 audit(1772624235.883:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16881 comm="syz.4.3285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdbca8c799 code=0x0 [ 608.432577][T16943] fuse: Bad value for 'fd' [ 608.952199][T16972] fuse: Bad value for 'fd' [ 610.846236][T17038] fuse: Bad value for 'fd' [ 610.963353][T17045] syzkaller0: entered promiscuous mode [ 610.963377][T17045] syzkaller0: entered allmulticast mode [ 611.138985][T17055] overlayfs: failed to get inode (-116) [ 611.143595][T17055] overlayfs: failed to get inode (-116) [ 611.145209][T17055] overlayfs: failed to get inode (-116) [ 611.147964][T17055] overlayfs: failed to get inode (-116) [ 611.325815][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3344'. [ 611.326255][T17068] chnl_net:caif_netlink_parms(): no params data found [ 612.730564][T17102] RDS: rds_bind could not find a transport for a0:ff00:20:0:d0:ff00:20:0, load rds_tcp or rds_rdma? [ 613.135108][T17132] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 613.143895][T17132] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 613.143966][T17132] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 613.144019][T17132] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 618.493415][T17311] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 618.592418][ T5122] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 618.754941][ T5122] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.754974][ T5122] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.754996][ T5122] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 618.755038][ T5122] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 618.755060][ T5122] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.812946][ T5122] usb 1-1: config 0 descriptor?? [ 618.900403][T17327] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3433'. [ 618.900887][T17327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3433'. [ 619.827190][ T5122] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 619.953450][T17358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3440'. [ 621.566922][ T10] usb 1-1: USB disconnect, device number 30 [ 621.839614][T17428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.106415][T17443] tipc: Can't bind to reserved service type 1 [ 622.109162][T17443] tipc: Started in network mode [ 622.109182][T17443] tipc: Node identity 84e, cluster identity 4711 [ 622.109194][T17443] tipc: Node number set to 2126 [ 623.352370][T17472] netlink: 'syz.3.3476': attribute type 1 has an invalid length. [ 623.422450][T17472] bond1: entered promiscuous mode [ 623.423006][T17472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 623.527591][T17472] bond1: (slave bridge1): making interface the new active one [ 623.527616][T17472] bridge1: entered promiscuous mode [ 623.529274][T17472] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 624.747398][T17551] ======================================================= [ 624.747398][T17551] WARNING: The mand mount option has been deprecated and [ 624.747398][T17551] and is ignored by this kernel. Remove the mand [ 624.747398][T17551] option from the mount to silence this warning. [ 624.747398][T17551] ======================================================= [ 626.646056][T17608] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.671081][T17608] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.257625][ T49] hid_parser_main: 4007 callbacks suppressed [ 627.257649][ T49] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.293103][ T49] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 627.622799][T17608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.031291][T17750] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.3555'. [ 629.031315][T17750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3555'. [ 629.829936][ T5982] ------------[ cut here ]------------ [ 629.829951][ T5982] in_task() && kcov_mode_enabled(mode) [ 629.829962][ T5982] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/0:6/5982 [ 629.830014][ T5982] Modules linked in: [ 629.830039][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 629.830144][ T5982] Tainted: [L]=SOFTLOCKUP [ 629.830153][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 629.830166][ T5982] Workqueue: usb_hub_wq hub_event [ 629.830271][ T5982] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 629.830329][ T5982] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 12 d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 da bc 5d 09 89 c0 48 c7 c7 20 94 4e [ 629.830356][ T5982] RSP: 0018:ffffc9000514f7e8 EFLAGS: 00010202 [ 629.830381][ T5982] RAX: 0000000000000002 RBX: ffff888037da0000 RCX: 0000000000000000 [ 629.830397][ T5982] RDX: 0000000000000000 RSI: ffffffff8ba64a60 RDI: ffffffff8ba64a20 [ 629.830412][ T5982] RBP: ffffc9000514faf0 R08: ffffffff8b2451d0 R09: ffffffff8ddcd780 [ 629.830429][ T5982] R10: dffffc0000000000 R11: fffffbfff1ed46b7 R12: ffff888029a50000 [ 629.830445][ T5982] R13: dffffc0000000000 R14: 0100000000000001 R15: ffff888029aa5000 [ 629.830461][ T5982] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 629.830479][ T5982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.830494][ T5982] CR2: 0000001b2f01dff8 CR3: 0000000061d4c000 CR4: 00000000003526f0 [ 629.830512][ T5982] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 629.830525][ T5982] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 629.830539][ T5982] Call Trace: [ 629.830551][ T5982] [ 629.830566][ T5982] hub_event+0x150/0x4f60 [ 629.830602][ T5982] ? __lock_acquire+0x6b5/0x2cf0 [ 629.830642][ T5982] ? __lock_acquire+0x6b5/0x2cf0 [ 629.830667][ T5982] ? look_up_lock_class+0x57/0x110 [ 629.830744][ T5982] ? register_lock_class+0x31/0x2e0 [ 629.830783][ T5982] ? __lock_acquire+0x6b5/0x2cf0 [ 629.830820][ T5982] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 629.830853][ T5982] ? __pfx_hub_event+0x10/0x10 [ 629.830895][ T5982] ? process_scheduled_works+0xa25/0x1830 [ 629.830930][ T5982] ? process_scheduled_works+0xa25/0x1830 [ 629.830979][ T5982] process_scheduled_works+0xb02/0x1830 [ 629.831041][ T5982] ? __pfx_process_scheduled_works+0x10/0x10 [ 629.831077][ T5982] ? assign_work+0x3d5/0x5e0 [ 629.831113][ T5982] worker_thread+0xa50/0xfc0 [ 629.831174][ T5982] kthread+0x388/0x470 [ 629.831197][ T5982] ? __pfx_worker_thread+0x10/0x10 [ 629.831225][ T5982] ? __pfx_kthread+0x10/0x10 [ 629.831250][ T5982] ret_from_fork+0x51e/0xb90 [ 629.831285][ T5982] ? __pfx_ret_from_fork+0x10/0x10 [ 629.831313][ T5982] ? __switch_to+0xc7d/0x1450 [ 629.831370][ T5982] ? __pfx_kthread+0x10/0x10 [ 629.831394][ T5982] ret_from_fork_asm+0x1a/0x30 [ 629.831440][ T5982] [ 629.831454][ T5982] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 629.831474][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 629.831504][ T5982] Tainted: [L]=SOFTLOCKUP [ 629.831512][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 629.831527][ T5982] Workqueue: usb_hub_wq hub_event [ 629.831558][ T5982] Call Trace: [ 629.831566][ T5982] [ 629.831574][ T5982] vpanic+0x56c/0xa60 [ 629.831616][ T5982] ? __pfx__printk+0x10/0x10 [ 629.831639][ T5982] ? __pfx_vpanic+0x10/0x10 [ 629.831668][ T5982] ? is_bpf_text_address+0x292/0x2b0 [ 629.831699][ T5982] ? is_bpf_text_address+0x26/0x2b0 [ 629.831738][ T5982] panic+0xc5/0xd0 [ 629.831768][ T5982] ? __pfx_panic+0x10/0x10 [ 629.831809][ T5982] ? ret_from_fork_asm+0x1a/0x30 [ 629.831835][ T5982] __warn+0x315/0x4f0 [ 629.831913][ T5982] ? kcov_remote_start+0x5d8/0x710 [ 629.831941][ T5982] ? kcov_remote_start+0x5d8/0x710 [ 629.831970][ T5982] __report_bug+0x29a/0x540 [ 629.832061][ T5982] ? kcov_remote_start+0x5d8/0x710 [ 629.832088][ T5982] ? __pfx___report_bug+0x10/0x10 [ 629.832120][ T5982] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 629.832178][ T5982] ? do_raw_spin_lock+0x12b/0x2f0 [ 629.832218][ T5982] ? kcov_remote_start+0x5d8/0x710 [ 629.832243][ T5982] report_bug+0x16a/0x220 [ 629.832266][ T5982] ? kcov_remote_start+0x5d8/0x710 [ 629.832287][ T5982] ? kcov_remote_start+0x5da/0x710 [ 629.832310][ T5982] handle_bug+0x9c/0x200 [ 629.832371][ T5982] exc_invalid_op+0x1a/0x50 [ 629.832404][ T5982] asm_exc_invalid_op+0x1a/0x20 [ 629.832445][ T5982] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 629.832472][ T5982] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 12 d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 da bc 5d 09 89 c0 48 c7 c7 20 94 4e [ 629.832491][ T5982] RSP: 0018:ffffc9000514f7e8 EFLAGS: 00010202 [ 629.832511][ T5982] RAX: 0000000000000002 RBX: ffff888037da0000 RCX: 0000000000000000 [ 629.832526][ T5982] RDX: 0000000000000000 RSI: ffffffff8ba64a60 RDI: ffffffff8ba64a20 [ 629.832541][ T5982] RBP: ffffc9000514faf0 R08: ffffffff8b2451d0 R09: ffffffff8ddcd780 [ 629.832555][ T5982] R10: dffffc0000000000 R11: fffffbfff1ed46b7 R12: ffff888029a50000 [ 629.832570][ T5982] R13: dffffc0000000000 R14: 0100000000000001 R15: ffff888029aa5000 [ 629.832593][ T5982] ? rt_spin_lock+0x1e0/0x400 [ 629.832625][ T5982] ? kcov_remote_start+0xe0/0x710 [ 629.832653][ T5982] hub_event+0x150/0x4f60 [ 629.832688][ T5982] ? __lock_acquire+0x6b5/0x2cf0 [ 629.832712][ T5982] ? __lock_acquire+0x6b5/0x2cf0 [ 629.832736][ T5982] ? look_up_lock_class+0x57/0x110 [ 629.832774][ T5982] ? register_lock_class+0x31/0x2e0 [ 629.832812][ T5982] ? __lock_acquire+0x6b5/0x2cf0 [ 629.832850][ T5982] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 629.832884][ T5982] ? __pfx_hub_event+0x10/0x10 [ 629.832926][ T5982] ? process_scheduled_works+0xa25/0x1830 [ 629.832956][ T5982] ? process_scheduled_works+0xa25/0x1830 [ 629.832987][ T5982] process_scheduled_works+0xb02/0x1830 [ 629.833047][ T5982] ? __pfx_process_scheduled_works+0x10/0x10 [ 629.833085][ T5982] ? assign_work+0x3d5/0x5e0 [ 629.833119][ T5982] worker_thread+0xa50/0xfc0 [ 629.833180][ T5982] kthread+0x388/0x470 [ 629.833202][ T5982] ? __pfx_worker_thread+0x10/0x10 [ 629.833231][ T5982] ? __pfx_kthread+0x10/0x10 [ 629.833254][ T5982] ret_from_fork+0x51e/0xb90 [ 629.833288][ T5982] ? __pfx_ret_from_fork+0x10/0x10 [ 629.833316][ T5982] ? __switch_to+0xc7d/0x1450 [ 629.833347][ T5982] ? __pfx_kthread+0x10/0x10 [ 629.833372][ T5982] ret_from_fork_asm+0x1a/0x30 [ 629.833411][ T5982] [ 629.833697][ T5982] Kernel Offset: disabled