last executing test programs: 7m10.557068092s ago: executing program 2 (id=1948): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000003"], 0x8) 7m10.2400102s ago: executing program 2 (id=1953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4800000, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) 7m9.850302195s ago: executing program 2 (id=1957): r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) unshare(0x40400) cachestat(r0, &(0x7f0000000c40), 0x0, 0x0) 7m9.60631494s ago: executing program 2 (id=1961): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, &(0x7f0000000380), 0x4) 7m9.405440377s ago: executing program 2 (id=1963): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) fstat(r0, &(0x7f0000002300)) 7m9.094429174s ago: executing program 2 (id=1965): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002e00)={0x2020}, 0x2020) lseek(r0, 0xfffffffffffffff5, 0x1) 6m53.940289973s ago: executing program 32 (id=1965): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002e00)={0x2020}, 0x2020) lseek(r0, 0xfffffffffffffff5, 0x1) 1m39.587340251s ago: executing program 4 (id=5191): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = io_uring_setup(0xaae, &(0x7f0000000d40)={0x0, 0xbfffeffb, 0x400, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m38.960103017s ago: executing program 4 (id=5196): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 1m38.458333109s ago: executing program 4 (id=5204): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], 0xa) 1m38.323737446s ago: executing program 4 (id=5206): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m38.090569939s ago: executing program 4 (id=5207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) close(0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0xa, 0x4e22, 0xffff0001, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000010000000000000018"], 0x30}, 0x240080c4) write$tun(r0, 0x0, 0x340a) 1m35.540434992s ago: executing program 4 (id=5224): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x80101) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='tran']) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x203, "9609fbb3aed2d3dac7684335cc84d173ac3d4728c6c968cd949c2d232a9c2067", 0x8, 0x0, 0x3, 0x75, 0x1, 0x101, 0xffffffe4, 0x5, [0x50690e8e, 0x9f5c, 0xfff]}) 1m34.816930356s ago: executing program 33 (id=5224): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x80101) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='tran']) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x203, "9609fbb3aed2d3dac7684335cc84d173ac3d4728c6c968cd949c2d232a9c2067", 0x8, 0x0, 0x3, 0x75, 0x1, 0x101, 0xffffffe4, 0x5, [0x50690e8e, 0x9f5c, 0xfff]}) 5.116173178s ago: executing program 0 (id=5784): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a34f124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r3, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000040)={"98c8f4a789fa0e8565f0798b992e9d137413fa16f7860b3955431774331ac67d", r4}) 4.863777626s ago: executing program 0 (id=5786): r0 = socket(0x10, 0x2, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x100000000000035) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) close_range(r0, 0xffffffffffffffff, 0x0) 4.837587783s ago: executing program 6 (id=5788): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4}) 4.702526496s ago: executing program 3 (id=5790): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) 4.48661033s ago: executing program 3 (id=5792): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.92402599s ago: executing program 6 (id=5795): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.922615673s ago: executing program 3 (id=5796): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0205647, &(0x7f0000000540)={0xf010000, @vbi={0x8000, 0x9, 0x6, 0x38414761, [0x7, 0x80000000], [0x800, 0x4], 0x2}}) 3.822286068s ago: executing program 0 (id=5797): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/sockcreate\x00') fchdir(r1) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000002140)=""/158, 0x9e) 3.774842675s ago: executing program 5 (id=5798): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x80000025a5, 0x0) 3.45972263s ago: executing program 0 (id=5799): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x3f9, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 3.388283127s ago: executing program 1 (id=5800): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000000640)=""/164, 0xa4}], 0x1) 3.169809289s ago: executing program 0 (id=5801): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x4, 0xa4, 0x7fff0003}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.581794509s ago: executing program 6 (id=5802): connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7d, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.575796866s ago: executing program 3 (id=5803): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f0000002440)='-', 0x1}], 0x1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r2, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) splice(r0, 0x0, r2, 0x0, 0xffff, 0xa) 2.290158223s ago: executing program 6 (id=5804): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 2.289676378s ago: executing program 5 (id=5805): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r1, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) 2.289288148s ago: executing program 3 (id=5806): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) inotify_init1(0x80000) epoll_create1(0x0) socket$packet(0x11, 0x3, 0x300) select(0x40, &(0x7f00000000c0)={0x2, 0x202, 0x9, 0xa52, 0xb7, 0x7, 0x3, 0xd31}, 0x0, &(0x7f0000000100)={0x7f, 0xfffffffe, 0x80000010, 0xe, 0xa, 0x200, 0x2, 0x22451915}, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) shutdown(r0, 0x1) 2.280932976s ago: executing program 0 (id=5807): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) 2.201616941s ago: executing program 1 (id=5808): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r1}, 0x38) 2.044034637s ago: executing program 5 (id=5809): userfaultfd(0x80801) r0 = eventfd2(0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r0, &(0x7f0000000100)="8492b2bc52621792", 0x8) 677.039928ms ago: executing program 6 (id=5810): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000", 0x3b}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c950011822", 0xa0}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0", 0xc1}, {&(0x7f0000000040)="7542473782798be019c27ed30b", 0xd}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba47", 0x41}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 676.466304ms ago: executing program 3 (id=5811): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 604.630137ms ago: executing program 1 (id=5812): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) 590.642975ms ago: executing program 5 (id=5813): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb664", 0xc2}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689", 0xe7}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 420.969399ms ago: executing program 6 (id=5814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 287.976265ms ago: executing program 1 (id=5815): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x9}, 0x8) 263.775912ms ago: executing program 5 (id=5816): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0xa) 162.801445ms ago: executing program 1 (id=5817): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) unshare(0x400) 144.495917ms ago: executing program 1 (id=5818): landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x2000}) 0s ago: executing program 5 (id=5819): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4ea1, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x10000016}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) kernel console output (not intermixed with test programs): rtl8150 failed with error -5 [ 469.488529][ T5804] usb 6-1: USB disconnect, device number 7 [ 470.477590][T14338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 470.517361][T14338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.528901][T14338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 470.584975][T14338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.615618][T13685] Bluetooth: hci1: command tx timeout [ 470.663702][T14338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 470.769605][T14338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.772358][T14338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 470.923541][T14338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.541445][T14544] netlink: 5204 bytes leftover after parsing attributes in process `syz.3.3872'. [ 471.541505][T14544] nbd: socks must be embedded in a SOCK_ITEM attr [ 471.616616][T14338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.640452][T14338] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.663262][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.681654][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.718181][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.718477][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.868000][T14550] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 473.100547][T14580] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 473.100794][T14580] pim6reg1: linktype set to 270 [ 473.370835][T14589] netlink: 'syz.1.3891': attribute type 11 has an invalid length. [ 473.370868][T14589] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3891'. [ 473.428030][T14338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.575898][T14618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3901'. [ 474.718012][T14620] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 474.718037][T14620] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 475.004248][T14338] veth0_vlan: entered promiscuous mode [ 475.129585][T14338] veth1_vlan: entered promiscuous mode [ 475.497005][T14640] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 475.500487][T14338] veth0_macvtap: entered promiscuous mode [ 475.779948][T14338] veth1_macvtap: entered promiscuous mode [ 476.053440][T14654] batman_adv: batadv0: Adding interface: ipvlan2 [ 476.053456][T14654] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.053473][T14654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.053483][T14654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.053489][T14654] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 476.084407][T14338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.105116][T14338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.165643][ T821] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 476.167788][ T1123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.171163][ T1123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.171213][ T1123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.171251][ T1123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.316277][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 476.320754][ T821] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.320789][ T821] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.320811][ T821] usb 1-1: config 0 interface 0 has no altsetting 0 [ 476.320844][ T821] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 476.320882][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.386916][ T821] usb 1-1: config 0 descriptor?? [ 476.846884][ T821] hid (null): unknown global tag 0xc [ 476.846933][ T821] hid (null): global environment stack underflow [ 476.848422][ T821] hid (null): global environment stack underflow [ 476.848441][ T821] hid (null): report_id 38787 is invalid [ 477.483166][ T821] usb 1-1: USB disconnect, device number 20 [ 477.956879][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.956922][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.217822][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3928'. [ 478.217850][T14680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3928'. [ 478.365816][T14683] : entered promiscuous mode [ 478.379235][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.379256][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.683441][T14693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3934'. [ 479.245533][ T5804] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 479.396047][ T5804] usb 6-1: Using ep0 maxpacket: 32 [ 479.399954][ T5804] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 479.399985][ T5804] usb 6-1: config 0 has no interface number 0 [ 479.400033][ T5804] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 479.400071][ T5804] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 479.400094][ T5804] usb 6-1: config 0 interface 85 has no altsetting 0 [ 479.467613][ T5804] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 479.467647][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.467667][ T5804] usb 6-1: Product: syz [ 479.467680][ T5804] usb 6-1: Manufacturer: syz [ 479.467694][ T5804] usb 6-1: SerialNumber: syz [ 479.475110][ T5804] usb 6-1: config 0 descriptor?? [ 479.971704][ T5804] appletouch 6-1:0.85: Geyser mode initialized. [ 480.003120][ T5804] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input19 [ 480.317576][ T9] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 480.423493][ T5886] usb 6-1: USB disconnect, device number 8 [ 480.553972][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.554002][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 480.554026][ T9] usb 1-1: config 1 has no interface number 0 [ 480.554073][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.599139][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.599162][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.599174][ T9] usb 1-1: Product: syz [ 480.599183][ T9] usb 1-1: Manufacturer: syz [ 480.599191][ T9] usb 1-1: SerialNumber: syz [ 480.707628][ T5886] appletouch 6-1:0.85: input: appletouch disconnected [ 480.800255][ T9] usb 1-1: selecting invalid altsetting 1 [ 480.915636][ T9] cdc_ncm 1-1:1.1: bind() failure [ 481.037969][ T9] usb 1-1: USB disconnect, device number 21 [ 483.626592][T14823] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 483.630430][T14823] team0: Port device batadv1 added [ 484.152911][T14831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3995'. [ 484.965559][ T5804] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 485.134560][ T5804] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.134598][ T5804] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.134621][ T5804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 485.134647][ T5804] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 485.134661][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.149446][ T5804] usb 4-1: config 0 descriptor?? [ 485.673344][ T5804] hid_parser_main: 14 callbacks suppressed [ 485.673371][ T5804] uclogic 0003:5543:0522.0021: unknown main item tag 0x0 [ 485.673402][ T5804] uclogic 0003:5543:0522.0021: unknown main item tag 0x0 [ 485.673429][ T5804] uclogic 0003:5543:0522.0021: unknown main item tag 0x0 [ 485.673456][ T5804] uclogic 0003:5543:0522.0021: unknown main item tag 0x0 [ 485.673483][ T5804] uclogic 0003:5543:0522.0021: unknown main item tag 0x0 [ 485.673509][ T5804] uclogic 0003:5543:0522.0021: unknown main item tag 0x0 [ 485.673533][ T5804] uclogic 0003:5543:0522.0021: unknown main item tag 0x0 [ 485.673560][ T5804] uclogic 0003:5543:0522.0021: unknown main item tag 0x0 [ 485.678881][ T5804] uclogic 0003:5543:0522.0021: unknown main item tag 0x0 [ 485.678913][ T5804] uclogic 0003:5543:0522.0021: unknown main item tag 0x0 [ 485.786351][ T5804] uclogic 0003:5543:0522.0021: hidraw0: USB HID vff.fa Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 485.871804][ T5797] usb 4-1: USB disconnect, device number 22 [ 486.104710][T14860] fido_id[14860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 486.571747][T14878] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 486.586655][ T5797] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 486.771750][ T5797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 486.771792][ T5797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 486.773388][ T5797] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 486.773419][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 486.773441][ T5797] usb 5-1: SerialNumber: syz [ 486.845256][ T5797] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 486.846898][ T5797] usb-storage 5-1:1.0: USB Mass Storage device detected [ 486.970269][ T5797] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 486.971253][ T5797] scsi host1: usb-storage 5-1:1.0 [ 488.009073][T14922] netlink: 'syz.3.4031': attribute type 10 has an invalid length. [ 488.426913][ T9] usb 5-1: USB disconnect, device number 31 [ 488.668852][T14922] team0 (unregistering): Port device team_slave_0 removed [ 488.697448][T14922] team0 (unregistering): Port device team_slave_1 removed [ 488.862885][T14922] team0 (unregistering): Port device batadv1 removed [ 489.765464][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 489.916146][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 489.919542][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.919579][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.919619][ T9] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 489.919643][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.977709][ T9] usb 5-1: config 0 descriptor?? [ 489.996576][T14963] program syz.5.4051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.433988][ T9] ntrig 0003:1B96:0008.0022: item fetching failed at offset 5/7 [ 490.446636][ T9] ntrig 0003:1B96:0008.0022: parse failed [ 490.446758][ T9] ntrig 0003:1B96:0008.0022: probe with driver ntrig failed with error -22 [ 490.622516][ T821] usb 5-1: USB disconnect, device number 32 [ 491.114784][T14993] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.4061'. [ 491.114912][T14993] openvswitch: netlink: Message has 16 unknown bytes. [ 491.537967][T15002] netlink: 'syz.4.4066': attribute type 83 has an invalid length. [ 491.945644][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 492.143966][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.143997][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.167144][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 492.167178][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 492.167200][ T9] usb 5-1: SerialNumber: syz [ 492.416828][ T9] usb 5-1: 0:2 : does not exist [ 492.416914][ T9] usb 5-1: unit 1 not found! [ 492.549605][ T9] usb 5-1: USB disconnect, device number 33 [ 492.740178][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.070732][ T5886] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 493.160408][T15047] netlink: 'syz.4.4087': attribute type 29 has an invalid length. [ 493.161919][T15047] netlink: 'syz.4.4087': attribute type 29 has an invalid length. [ 493.189947][T15047] netlink: 'syz.4.4087': attribute type 29 has an invalid length. [ 493.215770][ T5797] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 493.239325][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 493.239383][ T5886] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 493.239405][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.298733][ T5886] usb 1-1: config 0 descriptor?? [ 493.385481][ T5797] usb 4-1: Using ep0 maxpacket: 32 [ 493.389296][ T5797] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 493.389328][ T5797] usb 4-1: config 0 has no interface number 0 [ 493.389586][ T5797] usb 4-1: config 0 interface 184 has no altsetting 0 [ 493.425396][ T5797] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 493.425429][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.425451][ T5797] usb 4-1: Product: syz [ 493.425575][ T5797] usb 4-1: Manufacturer: syz [ 493.425591][ T5797] usb 4-1: SerialNumber: syz [ 493.467369][ T5797] usb 4-1: config 0 descriptor?? [ 493.820361][T15058] program syz.5.4091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.823731][ T5886] elecom 0003:056E:011C.0023: item fetching failed at offset 2/40 [ 493.850573][ T5886] elecom 0003:056E:011C.0023: probe with driver elecom failed with error -22 [ 494.008477][ T821] usb 1-1: USB disconnect, device number 22 [ 494.323776][ T5797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 494.323814][ T5797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 494.352738][ T5797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 494.352773][ T5797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 494.352793][ T5797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 494.352812][ T5797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 494.353158][ T5797] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 494.413452][ T5797] usb 4-1: USB disconnect, device number 23 [ 494.626865][T15071] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4098'. [ 494.626893][T15071] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 495.518515][T13685] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 496.345467][ T821] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 496.496642][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 496.501458][ T821] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 496.501494][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.602204][ T821] pvrusb2: Hardware description: Terratec Grabster AV400 [ 496.602226][ T821] pvrusb2: ********** [ 496.602233][ T821] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 496.602245][ T821] pvrusb2: Important functionality might not be entirely working. [ 496.602256][ T821] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 496.602268][ T821] pvrusb2: ********** [ 496.793351][ T2377] pvrusb2: Invalid write control endpoint [ 496.988858][ T821] usb 5-1: USB disconnect, device number 34 [ 497.970457][ T2377] pvrusb2: Invalid write control endpoint [ 497.970475][ T2377] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 497.970485][ T2377] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 497.970493][ T2377] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 497.970504][ T2377] pvrusb2: Device being rendered inoperable [ 497.985182][ T2377] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 498.009567][ T2377] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 498.259207][ T2377] pvrusb2: Attached sub-driver cx25840 [ 498.259228][ T2377] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 498.259239][ T2377] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 499.650364][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4139'. [ 499.650391][T15164] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4139'. [ 500.567903][ T37] audit: type=1326 audit(1776718592.185:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15190 comm="syz.4.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 500.568252][ T37] audit: type=1326 audit(1776718592.185:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15190 comm="syz.4.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 500.593398][ T37] audit: type=1326 audit(1776718592.205:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15190 comm="syz.4.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 500.594711][ T37] audit: type=1326 audit(1776718592.205:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15190 comm="syz.4.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 500.595057][ T37] audit: type=1326 audit(1776718592.205:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15190 comm="syz.4.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 500.599542][ T37] audit: type=1326 audit(1776718592.215:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15190 comm="syz.4.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 500.599882][ T37] audit: type=1326 audit(1776718592.215:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15190 comm="syz.4.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 500.601577][ T37] audit: type=1326 audit(1776718592.215:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15190 comm="syz.4.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 500.601688][ T37] audit: type=1326 audit(1776718592.215:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15190 comm="syz.4.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 500.602181][ T37] audit: type=1326 audit(1776718592.215:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15190 comm="syz.4.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 500.779143][ T5797] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 500.796460][T15193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4153'. [ 500.927651][ T5797] usb 1-1: Using ep0 maxpacket: 16 [ 500.942274][ T5797] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.942308][ T5797] usb 1-1: config 0 interface 0 has no altsetting 0 [ 500.942342][ T5797] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 500.942363][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.018223][ T5797] usb 1-1: config 0 descriptor?? [ 501.146546][T15193] bond0: entered promiscuous mode [ 501.146571][T15193] bond_slave_0: entered promiscuous mode [ 501.146983][T15193] bond_slave_1: entered promiscuous mode [ 501.215197][T15193] ipvlan0: entered promiscuous mode [ 501.253917][T15193] ipvlan0: left promiscuous mode [ 501.278727][T15193] bond0: left promiscuous mode [ 501.278754][T15193] bond_slave_0: left promiscuous mode [ 501.279331][T15193] bond_slave_1: left promiscuous mode [ 501.331615][T15199] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4156'. [ 501.532415][ T5797] hid_parser_main: 19 callbacks suppressed [ 501.532443][ T5797] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 501.532475][ T5797] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 501.532503][ T5797] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 501.532529][ T5797] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 501.532556][ T5797] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 501.547297][ T5797] nzxt-smart2 0003:1E71:2009.0024: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 501.633343][ C0] usb 1-1: input irq status -75 received [ 501.766953][ T5835] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 501.915429][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 501.949652][ T5835] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 501.949687][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.949710][ T5835] usb 4-1: Product: syz [ 501.949726][ T5835] usb 4-1: Manufacturer: syz [ 501.949741][ T5835] usb 4-1: SerialNumber: syz [ 501.951948][ T5797] usb 1-1: USB disconnect, device number 23 [ 502.026367][ T5835] usb 4-1: config 0 descriptor?? [ 502.080664][ T5835] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 502.140405][T15210] fido_id[15210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 502.249386][T15215] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 502.360243][T15217] program syz.1.4163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.475458][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 502.639742][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 502.646819][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.646855][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 502.646896][ T9] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 502.646936][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.661009][ T9] usb 5-1: config 0 descriptor?? [ 502.849240][ T5835] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 502.883880][ T5835] usb 4-1: USB disconnect, device number 24 [ 503.152471][ T9] aquacomputer_d5next 0003:0C70:F003.0025: unknown main item tag 0x0 [ 503.152513][ T9] aquacomputer_d5next 0003:0C70:F003.0025: unknown main item tag 0x0 [ 503.152541][ T9] aquacomputer_d5next 0003:0C70:F003.0025: unknown main item tag 0x0 [ 503.152570][ T9] aquacomputer_d5next 0003:0C70:F003.0025: unknown main item tag 0x0 [ 503.152598][ T9] aquacomputer_d5next 0003:0C70:F003.0025: unknown main item tag 0x0 [ 503.169403][ T9] aquacomputer_d5next 0003:0C70:F003.0025: hidraw0: USB HID v0.0a Device [HID 0c70:f003] on usb-dummy_hcd.4-1/input0 [ 503.364432][ T9] usb 5-1: USB disconnect, device number 35 [ 503.562337][T15234] fido_id[15234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 504.463193][T15264] bond0: option mode: unable to set because the bond device has slaves [ 504.531654][T15268] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4187'. [ 504.531865][T15268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4187'. [ 504.535540][ T5804] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 504.705504][ T5804] usb 5-1: Using ep0 maxpacket: 32 [ 504.707655][ T5804] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 504.707687][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.745080][ T5804] usb 5-1: config 0 descriptor?? [ 504.759357][ T5804] gspca_main: sunplus-2.14.0 probing 041e:400b [ 504.786023][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4191'. [ 504.821753][T15274] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 504.822650][T15274] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.877349][T15274] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.200194][ T5804] gspca_sunplus: reg_w_riv err -71 [ 505.200305][ T5804] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 505.226661][ T5804] usb 5-1: USB disconnect, device number 36 [ 505.735439][ T5804] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 505.891143][ T5804] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 505.891175][ T5804] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 505.891198][ T5804] usb 4-1: config 150 has no interface number 0 [ 505.891245][ T5804] usb 4-1: config 150 interface 204 has no altsetting 0 [ 505.928504][ T5804] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 505.928535][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.928557][ T5804] usb 4-1: Product: syz [ 505.928573][ T5804] usb 4-1: Manufacturer: syz [ 505.928588][ T5804] usb 4-1: SerialNumber: syz [ 506.193213][ T5804] xr_serial 4-1:150.204: skipping garbage [ 506.193274][ T5804] xr_serial 4-1:150.204: xr_serial converter detected [ 506.798557][ T5804] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 506.798629][ T5804] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 506.819530][ T5804] usb 4-1: USB disconnect, device number 25 [ 506.911957][ T5804] xr_serial 4-1:150.204: device disconnected [ 507.571996][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.633628][T15314] erspan0: entered promiscuous mode [ 507.995556][T15326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4213'. [ 507.995597][T15326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4213'. [ 508.106399][T15326] erspan0: entered promiscuous mode [ 508.229730][T15326] erspan0: left promiscuous mode [ 509.115473][ T821] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 509.255807][ T5835] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 509.278475][ T821] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 509.278511][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.359242][ T821] usb 4-1: config 0 descriptor?? [ 509.371804][ T821] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 509.420169][ T5835] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 509.420293][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.420316][ T5835] usb 1-1: config 0 has no interface number 0 [ 509.462954][ T5835] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 509.463048][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.463070][ T5835] usb 1-1: Product: syz [ 509.463086][ T5835] usb 1-1: Manufacturer: syz [ 509.463101][ T5835] usb 1-1: SerialNumber: syz [ 509.507125][ T5835] usb 1-1: config 0 descriptor?? [ 509.582410][ T821] gp8psk: usb in 128 operation failed. [ 509.583748][ T821] gp8psk: usb in 137 operation failed. [ 509.583767][ T821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 509.585172][ T821] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 509.616347][ T821] usb 4-1: media controller created [ 509.677122][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.761011][ T821] gp8psk_fe: Frontend attached [ 509.796130][ T821] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 509.814342][ T820] usb 1-1: USB disconnect, device number 24 [ 509.838812][ T821] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 510.223410][ T821] gp8psk: usb in 137 operation failed. [ 510.223433][ T821] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 510.223446][ T821] gp8psk: found Genpix USB device pID = 203 (hex) [ 510.254927][ T821] usb 4-1: USB disconnect, device number 26 [ 510.456255][T15365] macvlan0: entered promiscuous mode [ 511.240564][ T821] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 512.416064][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 512.632488][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 512.636179][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 512.640304][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 512.641637][ T9] usb 6-1: language id specifier not provided by device, defaulting to English [ 512.744122][ T9] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 512.744157][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.744178][ T9] usb 6-1: Manufacturer: 홢릫ä¼æ“»ç’ºãˆ£í—Ÿê„¥è™æ›„죒è­à³šâ €ìˆ¦áŠ¹ [ 513.054372][ T9] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 513.144627][ T9] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 513.521919][ T9] usb 6-1: USB disconnect, device number 9 [ 513.973195][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 514.343595][T15457] input: syz1 as /devices/virtual/input/input23 [ 515.031019][T15475] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4278'. [ 515.065488][ T821] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 515.239083][ T821] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 515.239126][ T821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 515.239162][ T821] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 515.239188][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.302184][ T821] usb 6-1: config 0 descriptor?? [ 515.314862][T15471] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 515.679700][T15481] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input24 [ 515.765915][T15471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.772047][T15471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.151288][T15481] input: failed to attach handler evdev to device input24, error: -4 [ 516.189626][ T821] hid_parser_main: 33 callbacks suppressed [ 516.189651][ T821] mcp2200 0003:04D8:00DF.0026: unknown main item tag 0x0 [ 516.189683][ T821] mcp2200 0003:04D8:00DF.0026: unknown main item tag 0x0 [ 516.189711][ T821] mcp2200 0003:04D8:00DF.0026: unknown main item tag 0x0 [ 516.189738][ T821] mcp2200 0003:04D8:00DF.0026: unknown main item tag 0x0 [ 516.189766][ T821] mcp2200 0003:04D8:00DF.0026: unknown main item tag 0x0 [ 516.189793][ T821] mcp2200 0003:04D8:00DF.0026: unknown main item tag 0x0 [ 516.189820][ T821] mcp2200 0003:04D8:00DF.0026: unknown main item tag 0x0 [ 516.189847][ T821] mcp2200 0003:04D8:00DF.0026: unknown main item tag 0x0 [ 516.189873][ T821] mcp2200 0003:04D8:00DF.0026: unknown main item tag 0x0 [ 516.189900][ T821] mcp2200 0003:04D8:00DF.0026: unknown main item tag 0x0 [ 516.191168][ T821] mcp2200 0003:04D8:00DF.0026: unexpected long global item [ 516.194636][ T821] mcp2200 0003:04D8:00DF.0026: can't parse reports [ 516.194754][ T821] mcp2200 0003:04D8:00DF.0026: probe with driver mcp2200 failed with error -22 [ 516.274626][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 516.274645][ T37] audit: type=1326 audit(1776718607.885:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15490 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 516.274690][ T37] audit: type=1326 audit(1776718607.885:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15490 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 516.279463][ T37] audit: type=1326 audit(1776718607.895:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15490 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 516.279514][ T37] audit: type=1326 audit(1776718607.895:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15490 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c95c5d04e code=0x7ffc0000 [ 516.281955][ T37] audit: type=1326 audit(1776718607.895:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15490 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 516.282012][ T37] audit: type=1326 audit(1776718607.895:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15490 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 516.282117][ T37] audit: type=1326 audit(1776718607.895:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15490 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 516.282424][ T37] audit: type=1326 audit(1776718607.895:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15490 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 516.284920][ T37] audit: type=1326 audit(1776718607.895:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15490 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 516.285018][ T37] audit: type=1326 audit(1776718607.895:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15490 comm="syz.4.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95c9c819 code=0x7ffc0000 [ 516.566545][ T821] usb 6-1: USB disconnect, device number 10 [ 518.748733][T15544] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 519.707230][ T5478] veth1_macvtap: left promiscuous mode [ 521.342440][T15596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4320'. [ 521.342471][T15596] nbd: must specify at least one socket [ 521.607448][T15604] nr0: tun_chr_ioctl cmd 1074025677 [ 521.607701][T15604] nr0: linktype set to 774 [ 524.112117][T15668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4346'. [ 524.240600][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 524.395763][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 524.397928][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 524.397966][ T9] usb 6-1: config 0 has no interface number 0 [ 524.398013][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.398041][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.398082][ T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 524.398107][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.415314][ T9] usb 6-1: config 0 descriptor?? [ 525.011267][T13685] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 525.127487][ T9] uclogic 0003:28BD:0071.0027: pen parameters not found [ 525.127515][ T9] uclogic 0003:28BD:0071.0027: interface is invalid, ignoring [ 525.138145][ T9] usb 6-1: USB disconnect, device number 11 [ 525.544985][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 525.545006][ T37] audit: type=1326 audit(1776718617.155:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15693 comm="syz.1.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4d89c819 code=0x7ffc0000 [ 525.549520][ T37] audit: type=1326 audit(1776718617.165:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15693 comm="syz.1.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4d89c819 code=0x7ffc0000 [ 525.549572][ T37] audit: type=1326 audit(1776718617.165:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15693 comm="syz.1.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4d89c819 code=0x7ffc0000 [ 525.553108][ T37] audit: type=1326 audit(1776718617.165:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15693 comm="syz.1.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4d89c819 code=0x7ffc0000 [ 525.553163][ T37] audit: type=1326 audit(1776718617.165:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15693 comm="syz.1.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f2d4d89c819 code=0x7ffc0000 [ 525.553204][ T37] audit: type=1326 audit(1776718617.165:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15693 comm="syz.1.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4d89c819 code=0x7ffc0000 [ 525.553246][ T37] audit: type=1326 audit(1776718617.165:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15693 comm="syz.1.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4d89c819 code=0x7ffc0000 [ 525.559124][ T37] audit: type=1326 audit(1776718617.165:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15693 comm="syz.1.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4d89c819 code=0x7ffc0000 [ 525.583195][ T37] audit: type=1326 audit(1776718617.165:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15693 comm="syz.1.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4d89c819 code=0x7ffc0000 [ 525.583246][ T37] audit: type=1326 audit(1776718617.195:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15693 comm="syz.1.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4d89c819 code=0x7ffc0000 [ 527.277974][T15728] overlayfs: failed to clone lowerpath [ 529.204167][T15793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4399'. [ 531.303379][T15858] netlink: 424 bytes leftover after parsing attributes in process `syz.4.4426'. [ 531.303619][T15858] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 531.832101][T15881] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 531.985532][ T821] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 532.178452][ T821] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 532.178487][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.220443][ T821] usb 1-1: config 0 descriptor?? [ 532.236100][ T821] cp210x 1-1:0.0: cp210x converter detected [ 532.848518][ T821] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 532.848582][ T821] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 532.915704][ T821] usb 1-1: cp210x converter now attached to ttyUSB0 [ 532.920079][ T821] usb 1-1: USB disconnect, device number 25 [ 532.948137][ T821] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 532.949171][ T821] cp210x 1-1:0.0: device disconnected [ 533.154364][T15912] netlink: 300 bytes leftover after parsing attributes in process `syz.5.4450'. [ 533.301809][T15914] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4451'. [ 534.008827][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4458'. [ 534.088714][ T5886] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 534.258321][ T5886] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 534.258354][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.291455][ T5886] usb 6-1: config 0 descriptor?? [ 534.312456][ T5886] cp210x 6-1:0.0: cp210x converter detected [ 534.771385][ T5886] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 534.773452][ T5886] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 534.773514][ T5886] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 534.808216][ T5886] usb 6-1: cp210x converter now attached to ttyUSB0 [ 534.841288][ T5886] usb 6-1: USB disconnect, device number 12 [ 534.907899][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 534.957898][ T5886] cp210x 6-1:0.0: device disconnected [ 535.240373][T15953] bpf: Bad value for 'uid' [ 536.452457][T15985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4475'. [ 536.815442][ T5804] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 537.028248][ T5804] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 537.028278][ T5804] usb 1-1: config 1 has no interface number 0 [ 537.028329][ T5804] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 537.028363][ T5804] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 537.028387][ T5804] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 537.110303][ T5804] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 537.110338][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.110361][ T5804] usb 1-1: Product: syz [ 537.110377][ T5804] usb 1-1: Manufacturer: syz [ 537.110393][ T5804] usb 1-1: SerialNumber: syz [ 537.161970][T15983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 537.162107][T15983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 537.186399][ T5804] usb 1-1: Expected 3 endpoints, found: 2 [ 537.431338][ T5886] usb 1-1: USB disconnect, device number 26 [ 537.679472][T16024] program syz.1.4488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.049149][T13685] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 538.054400][T16034] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4493'. [ 538.097911][T16035] vivid-002: disconnect [ 538.180370][T16032] vivid-002: reconnect [ 538.319009][T16042] loop3: detected capacity change from 0 to 7 [ 538.409933][T16044] dvmrp1: entered allmulticast mode [ 538.732852][T16042] Dev loop3: unable to read RDB block 7 [ 538.732893][T16042] loop3: AHDI p1 p2 [ 538.732925][T16042] loop3: partition table partially beyond EOD, truncated [ 538.840252][T16042] loop3: p1 start 1702000233 is beyond EOD, truncated [ 539.287564][T16065] program syz.3.4506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.614802][T16073] IPv6: NLM_F_REPLACE set, but no existing node found! [ 540.145583][ T5804] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 540.323498][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 540.323536][ T5804] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 540.323562][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 540.323596][ T5804] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 540.345574][ T5804] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 540.345614][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.345633][ T5804] usb 5-1: Product: syz [ 540.345647][ T5804] usb 5-1: Manufacturer: syz [ 540.345661][ T5804] usb 5-1: SerialNumber: syz [ 540.382423][ T5804] usb 5-1: config 0 descriptor?? [ 540.396766][ T5804] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 540.448114][ T5835] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 540.669027][ T5804] scsi host1: usb-storage 5-1:0.0 [ 540.750395][ T5804] usb 5-1: USB disconnect, device number 37 [ 540.913221][ T5835] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 540.913256][ T5835] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 540.913277][ T5835] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 540.913333][ T5835] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 540.913363][ T5835] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 540.966127][ T5835] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 540.966157][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 540.966176][ T5835] usb 6-1: Product: syz [ 540.966190][ T5835] usb 6-1: Manufacturer: syz [ 541.038069][ T5835] cdc_wdm 6-1:1.0: skipping garbage [ 541.038094][ T5835] cdc_wdm 6-1:1.0: skipping garbage [ 541.137467][ T5835] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 541.137493][ T5835] cdc_wdm 6-1:1.0: Unknown control protocol [ 541.573263][ T5835] usb 6-1: USB disconnect, device number 13 [ 541.709192][T16080] cdc_wdm 6-1:1.0: Error submitting int urb - -19 [ 541.896149][ T9] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 542.070849][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 542.070888][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.070929][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 542.070953][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.138933][ T9] usb 1-1: config 0 descriptor?? [ 542.175686][T16103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4522'. [ 542.612624][ T9] kye 0003:0458:5016.0028: control desc unexpectedly large [ 542.681692][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0028/input/input25 [ 542.900593][T16120] netlink: 428 bytes leftover after parsing attributes in process `syz.1.4528'. [ 542.900634][T16120] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4528'. [ 543.280282][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0028/input/input26 [ 543.579884][ T9] kye 0003:0458:5016.0028: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 544.495844][ T820] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 544.684271][ T820] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 544.684317][ T820] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 544.684335][ T820] usb 4-1: config 0 has no interface number 0 [ 544.687882][ T820] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 544.687911][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.687930][ T820] usb 4-1: Product: syz [ 544.687943][ T820] usb 4-1: Manufacturer: syz [ 544.687958][ T820] usb 4-1: SerialNumber: syz [ 544.774742][ T820] usb 4-1: config 0 descriptor?? [ 545.415481][ T820] uvcvideo 4-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 545.415520][ T820] uvcvideo 4-1:0.64: No valid video chain found. [ 545.634310][ T5804] usb 4-1: USB disconnect, device number 27 [ 545.702816][ T43] usb 1-1: USB disconnect, device number 27 [ 547.127525][T16191] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 547.127554][T16191] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 547.162053][T16193] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4560'. [ 547.315460][ T43] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 547.465440][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 547.473819][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.473856][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.473897][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 547.473922][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.538376][ T43] usb 4-1: config 0 descriptor?? [ 547.555770][ T43] hub 4-1:0.0: USB hub found [ 547.679137][T16202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.756826][ T43] hub 4-1:0.0: 2 ports detected [ 548.023136][ T43] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 548.023167][ T43] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 548.064268][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 548.072002][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 548.106792][ T43] usb 4-1: USB disconnect, device number 28 [ 548.189860][T16213] program syz.0.4568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.114434][T16245] veth0: entered promiscuous mode [ 549.114742][T16245] veth0: left promiscuous mode [ 549.643056][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4589'. [ 549.883656][T16260] block nbd1: server does not support multiple connections per device. [ 549.884601][T16260] block nbd1: shutting down sockets [ 550.075944][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 550.249116][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 550.249181][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.249206][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.331414][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 551.239514][ T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 551.272768][ T9] usb 4-1: USB disconnect, device number 29 [ 551.314684][T16293] program syz.4.4605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.458584][T16298] program syz.1.4607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.798371][T16311] program syz.0.4612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.838400][T16312] Bluetooth: MGMT ver 1.23 [ 551.838442][T16312] Bluetooth: hci1: expected 3912 bytes, got 2 bytes [ 552.124094][T16318] ieee802154 phy0 wpan0: encryption failed: -22 [ 552.525626][ T5835] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 552.675384][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 552.683723][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 552.683760][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 552.683787][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 552.683810][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 552.696693][ T5835] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 552.696728][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.696749][ T5835] usb 4-1: Product: syz [ 552.696764][ T5835] usb 4-1: Manufacturer: syz [ 552.696778][ T5835] usb 4-1: SerialNumber: syz [ 552.782679][ T5835] usb 4-1: config 0 descriptor?? [ 553.148614][ T43] usb 4-1: USB disconnect, device number 30 [ 554.186510][T16373] netlink: 'syz.5.4638': attribute type 1 has an invalid length. [ 554.186557][T16373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.485442][ T9] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 554.668115][ T9] usb 1-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 554.668223][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 554.668253][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 554.668281][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 1464, setting to 64 [ 554.668309][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 554.671765][ T9] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 554.671799][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 554.671820][ T9] usb 1-1: Product: syz [ 554.671835][ T9] usb 1-1: Manufacturer: syz [ 554.671851][ T9] usb 1-1: SerialNumber: syz [ 554.691262][ T9] usb 1-1: config 0 descriptor?? [ 554.693271][T16374] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 554.932396][ T9] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 554.932425][ T9] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 555.141287][ T9] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 555.141319][ T9] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 555.141341][ T9] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 555.342384][ T9] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 555.342699][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 555.343017][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 555.343343][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 555.343504][ T9] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 555.343602][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 555.399718][ T9] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 555.425514][ T5797] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 555.549989][ T9] usb 1-1: USB disconnect, device number 28 [ 555.636726][ T5797] usb 4-1: Using ep0 maxpacket: 32 [ 555.646368][ T5797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.667449][ T5797] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 555.667480][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.667492][ T5797] usb 4-1: Product: syz [ 555.667501][ T5797] usb 4-1: Manufacturer: syz [ 555.667510][ T5797] usb 4-1: SerialNumber: syz [ 555.694372][ T5797] usb 4-1: config 0 descriptor?? [ 555.811631][ T5797] cdc_ether 4-1:0.0: skipping garbage [ 555.811647][ T5797] usb 4-1: No union descriptors [ 555.847314][ T5797] usb 4-1: unsupported MDLM descriptors [ 556.053505][ T5797] usb 4-1: USB disconnect, device number 31 [ 556.371548][ T5835] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 556.467096][T16425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.547120][ T5835] usb 1-1: Using ep0 maxpacket: 8 [ 556.551302][ T5835] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 556.551332][ T5835] usb 1-1: config 179 has no interface number 0 [ 556.551379][ T5835] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 556.551409][ T5835] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 556.551439][ T5835] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 556.551466][ T5835] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 556.551489][ T5835] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 556.551518][ T5835] usb 1-1: config 179 interface 65 has no altsetting 0 [ 556.551584][ T5835] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 556.551608][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.763504][ T5835] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input27 [ 557.117807][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 557.118219][ T5835] usb 1-1: USB disconnect, device number 29 [ 558.028008][T16458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4678'. [ 558.028041][T16458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4678'. [ 558.423579][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4684'. [ 559.102377][T16481] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4688'. [ 559.615504][ T5835] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 559.810831][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 559.810933][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 559.810981][ T5835] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 559.811007][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.918976][ T5835] usb 5-1: config 0 descriptor?? [ 559.921386][T16486] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 560.305662][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 560.364869][ T5835] hid_parser_main: 62 callbacks suppressed [ 560.364898][ T5835] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 560.364932][ T5835] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 560.364958][ T5835] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 560.364983][ T5835] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 560.365009][ T5835] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 560.365034][ T5835] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 560.365060][ T5835] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 560.365087][ T5835] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 560.365111][ T5835] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 560.365137][ T5835] lenovo 0003:17EF:6047.0029: unknown main item tag 0x0 [ 560.452625][ T5835] lenovo 0003:17EF:6047.0029: hidraw0: USB HID v0.05 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 560.455682][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 560.462660][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.462693][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 560.462732][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 560.462752][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.538061][ T9] usb 4-1: config 0 descriptor?? [ 560.703704][ T43] usb 5-1: USB disconnect, device number 38 [ 560.776708][T16513] fido_id[16513]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 561.043031][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 561.112037][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002A/input/input28 [ 561.230402][ T9] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 561.271761][T16523] program syz.0.4707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.527599][ T9] usb 4-1: USB disconnect, device number 32 [ 561.684766][T16525] fido_id[16525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 562.046961][T16543] program syz.5.4715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.678184][T16564] program syz.0.4725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.891478][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 564.140265][T16605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.267735][T16608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4744'. [ 564.267789][T16608] netlink: 'syz.3.4744': attribute type 7 has an invalid length. [ 564.267803][T16608] netlink: 'syz.3.4744': attribute type 8 has an invalid length. [ 564.267817][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4744'. [ 565.965563][T13685] Bluetooth: hci5: command 0x0406 tx timeout [ 568.443796][T16722] batman_adv: batadv0: Adding interface: gretap1 [ 568.443816][T16722] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.443853][T16722] batman_adv: batadv0: Interface activated: gretap1 [ 569.005672][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 569.011187][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.083641][T16742] block nbd4: shutting down sockets [ 571.221062][T16786] mkiss: ax0: crc mode is auto. [ 571.545603][ T5835] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 571.756669][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 571.759916][ T5835] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 571.759948][ T5835] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 571.759975][ T5835] usb 6-1: config 0 interface 0 has no altsetting 0 [ 571.763488][ T5835] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 571.763521][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.763541][ T5835] usb 6-1: Product: syz [ 571.763557][ T5835] usb 6-1: Manufacturer: syz [ 571.763572][ T5835] usb 6-1: SerialNumber: syz [ 571.774311][ T5835] usb 6-1: config 0 descriptor?? [ 572.213549][T16818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4834'. [ 572.221154][ T5835] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 572.770592][ T5835] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 572.887829][ T5835] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 572.952582][ T5835] usb 6-1: USB disconnect, device number 14 [ 574.258294][T16852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4848'. [ 574.350324][T16853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4848'. [ 574.886560][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 574.940180][T16858] sctp: [Deprecated]: syz.5.4850 (pid 16858) Use of int in max_burst socket option deprecated. [ 574.940180][T16858] Use struct sctp_assoc_value instead [ 575.067971][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.068002][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 575.068023][ T9] usb 5-1: config 1 has no interface number 0 [ 575.068073][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.068102][ T9] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 575.073362][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 575.073397][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.073418][ T9] usb 5-1: Product: syz [ 575.073434][ T9] usb 5-1: Manufacturer: syz [ 575.073450][ T9] usb 5-1: SerialNumber: syz [ 575.775743][ T5886] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 575.955420][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 575.963418][ T5886] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 575.985868][ T5886] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 575.986136][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.986159][ T5886] usb 1-1: Product: syz [ 575.986175][ T5886] usb 1-1: Manufacturer: syz [ 575.986190][ T5886] usb 1-1: SerialNumber: syz [ 576.034030][ T9] cdc_ncm 5-1:1.1: bind() failure [ 576.050954][ T5886] r8152-cfgselector 1-1: Unknown version 0x0000 [ 576.050984][ T5886] r8152-cfgselector 1-1: config 0 descriptor?? [ 576.284743][ T5835] usb 5-1: USB disconnect, device number 39 [ 576.541014][ T9] r8152-cfgselector 1-1: USB disconnect, device number 30 [ 578.802935][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 578.802957][ T37] audit: type=1326 audit(1776718926.419:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16931 comm="syz.5.4882" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3db1fc819 code=0x0 [ 579.816078][T16955] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4893'. [ 580.567588][T16971] loop2: detected capacity change from 0 to 7 [ 580.789769][T16971] Dev loop2: unable to read RDB block 7 [ 580.789818][T16971] loop2: unable to read partition table [ 580.790300][T16971] loop2: partition table beyond EOD, truncated [ 580.790323][T16971] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 580.895456][ T5797] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 581.056447][ T5797] usb 4-1: Using ep0 maxpacket: 32 [ 581.060411][ T5797] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 581.060440][ T5797] usb 4-1: config 0 has no interface number 0 [ 581.060486][ T5797] usb 4-1: config 0 interface 184 has no altsetting 0 [ 581.065005][ T5797] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 581.065033][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.065049][ T5797] usb 4-1: Product: syz [ 581.065061][ T5797] usb 4-1: Manufacturer: syz [ 581.065073][ T5797] usb 4-1: SerialNumber: syz [ 581.294468][ T5797] usb 4-1: config 0 descriptor?? [ 581.923320][ T5797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 581.923354][ T5797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 582.134436][ T5797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 582.134471][ T5797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 582.134492][ T5797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 582.134903][ T5797] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 582.188397][ T5797] usb 4-1: USB disconnect, device number 33 [ 583.265972][ T5797] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 583.412934][ T43] kernel read not supported for file bpf-prog (pid: 43 comm: kworker/1:1) [ 583.431189][ T5797] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 583.431225][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.462898][ T5797] usb 5-1: config 0 descriptor?? [ 583.480498][ T5797] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 583.568689][ T5835] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 583.728867][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 583.734578][ T5835] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 51, changing to 9 [ 583.734616][ T5835] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33540, setting to 1024 [ 583.734646][ T5835] usb 6-1: config 0 interface 0 has no altsetting 0 [ 583.734679][ T5835] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 583.734701][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.750146][ T5835] usb 6-1: config 0 descriptor?? [ 583.887005][ T5797] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 584.065575][T17046] veth1_to_team: entered promiscuous mode [ 584.189838][ T5835] hid (null): unknown global tag 0xe [ 584.189875][ T5835] hid (null): unknown global tag 0xe [ 584.191404][ T5835] hid (null): unknown global tag 0xe4 [ 584.191911][ T5835] hid (null): unknown global tag 0x52 [ 584.191929][ T5835] hid (null): unknown global tag 0xe [ 584.191995][ T5835] hid (null): invalid report_size 222345300 [ 584.299076][ T5797] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 584.455687][ T5886] usb 6-1: USB disconnect, device number 15 [ 584.546488][ T5835] usb 5-1: USB disconnect, device number 40 [ 585.685461][ T5835] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 585.837767][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.837805][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.837847][ T5835] usb 4-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 585.837871][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.895111][ T5835] usb 4-1: config 0 descriptor?? [ 586.389268][ T5835] hid (null): invalid report_size 29535 [ 586.435447][ T5835] hid_parser_main: 27 callbacks suppressed [ 586.435474][ T5835] hid-generic 0003:0B05:1AFE.002C: unknown main item tag 0x0 [ 586.435510][ T5835] hid-generic 0003:0B05:1AFE.002C: unknown main item tag 0x0 [ 586.435536][ T5835] hid-generic 0003:0B05:1AFE.002C: unknown main item tag 0x0 [ 586.435563][ T5835] hid-generic 0003:0B05:1AFE.002C: unknown main item tag 0x0 [ 586.435596][ T5835] hid-generic 0003:0B05:1AFE.002C: unknown main item tag 0x0 [ 586.435623][ T5835] hid-generic 0003:0B05:1AFE.002C: unknown main item tag 0x0 [ 586.435650][ T5835] hid-generic 0003:0B05:1AFE.002C: unknown main item tag 0x0 [ 586.435677][ T5835] hid-generic 0003:0B05:1AFE.002C: unknown main item tag 0x0 [ 586.435705][ T5835] hid-generic 0003:0B05:1AFE.002C: unknown main item tag 0x0 [ 586.435732][ T5835] hid-generic 0003:0B05:1AFE.002C: unknown main item tag 0x0 [ 586.438026][ T5835] hid-generic 0003:0B05:1AFE.002C: invalid report_size 29535 [ 586.438044][ T5835] hid-generic 0003:0B05:1AFE.002C: item 0 2 1 7 parsing failed [ 586.438577][ T5835] hid-generic 0003:0B05:1AFE.002C: probe with driver hid-generic failed with error -22 [ 586.661365][ T5835] usb 4-1: USB disconnect, device number 34 [ 586.735100][T17075] ipvlan2: entered promiscuous mode [ 588.854047][T17133] input: syz0 as /devices/virtual/input/input29 [ 589.799071][T17147] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 590.060894][ T5835] IPVS: starting estimator thread 0... [ 590.128507][ T5826] block nbd2: Receive control failed (result -32) [ 590.150859][T13685] block nbd2: Receive control failed (result -32) [ 590.162407][T13685] block nbd2: Receive control failed (result -32) [ 590.269912][T17159] IPVS: using max 9 ests per chain, 21600 per kthread [ 591.550315][T17190] netlink: 'syz.5.4987': attribute type 29 has an invalid length. [ 591.552433][T17190] netlink: 'syz.5.4987': attribute type 29 has an invalid length. [ 592.815184][T17213] sctp: [Deprecated]: syz.5.4997 (pid 17213) Use of int in max_burst socket option. [ 592.815184][T17213] Use struct sctp_assoc_value instead [ 593.885857][ T5832] Bluetooth: hci2: command 0x1003 tx timeout [ 593.886290][T17161] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 595.375462][ T5835] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 595.536719][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.536758][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.542903][ T5835] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 595.542936][ T5835] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 595.542957][ T5835] usb 6-1: Manufacturer: syz [ 595.665735][ T5835] usb 6-1: config 0 descriptor?? [ 596.075511][ T43] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 596.264651][ T43] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 596.264748][ T43] usb 5-1: config 6 has no interface number 0 [ 596.264800][ T43] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 596.264825][ T43] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 596.264914][ T43] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 596.322207][ T43] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 596.322312][ T43] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 596.322335][ T43] usb 5-1: Product: syz [ 596.322350][ T43] usb 5-1: Manufacturer: syz [ 596.322365][ T43] usb 5-1: SerialNumber: syz [ 596.363866][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 596.364446][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 596.364946][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 596.388137][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 596.389028][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 596.390018][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 596.391858][ T5835] uclogic 0003:256C:006D.002D: interface is invalid, ignoring [ 596.441060][ T5835] usb 6-1: USB disconnect, device number 16 [ 596.453162][T17282] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 596.512011][ T43] hso 5-1:6.2: Failed to find BULK eps [ 596.694905][ T821] usb 5-1: USB disconnect, device number 41 [ 597.071266][T17297] IPVS: stopping backup sync thread 15881 ... [ 599.609223][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5053'. [ 599.609261][T17360] netlink: 'syz.1.5053': attribute type 2 has an invalid length. [ 600.683120][T17385] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5063'. [ 600.795418][ T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 600.945587][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 600.948659][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 600.948692][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 600.948719][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 600.948744][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.948789][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 600.948815][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.289736][ T43] usb 4-1: GET_CAPABILITIES returned 0 [ 601.289789][ T43] usbtmc 4-1:16.0: can't read capabilities [ 601.726211][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.746356][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.746443][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.746795][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.746873][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.750546][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.750634][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.750715][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.751306][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.751385][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.751457][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.755156][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.755303][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.787178][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.787258][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.787323][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.810505][T17410] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5073'. [ 601.810529][T17410] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 601.977550][ T9] usb 4-1: USB disconnect, device number 35 [ 602.275491][ T43] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 602.425537][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 602.432836][ T43] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 602.432872][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 602.432892][ T43] usb 6-1: Product: syz [ 602.432908][ T43] usb 6-1: Manufacturer: syz [ 602.432923][ T43] usb 6-1: SerialNumber: syz [ 602.484294][ T43] usb 6-1: config 0 descriptor?? [ 602.503847][ T43] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 602.700898][ T43] gspca_sn9c2028: read1 error -32 [ 602.701916][ T43] gspca_sn9c2028: read1 error -32 [ 602.913033][ T5797] usb 6-1: USB disconnect, device number 17 [ 603.388022][T17445] Invalid argument reading file caps for ./file0 [ 603.796765][ T5835] hid_parser_main: 47 callbacks suppressed [ 603.796792][ T5835] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 603.870119][ T5835] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 603.985454][ T5886] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 604.105388][ T43] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 604.186045][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 604.188191][ T5886] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 604.188221][ T5886] usb 5-1: config 0 has no interface number 0 [ 604.188273][ T5886] usb 5-1: config 0 interface 184 has no altsetting 0 [ 604.192679][ T5886] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 604.192711][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.192733][ T5886] usb 5-1: Product: syz [ 604.192749][ T5886] usb 5-1: Manufacturer: syz [ 604.192763][ T5886] usb 5-1: SerialNumber: syz [ 604.222289][ T5886] usb 5-1: config 0 descriptor?? [ 604.265486][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 604.274176][ T43] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 604.274209][ T43] usb 6-1: config 0 has no interface number 0 [ 604.274257][ T43] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 604.274280][ T43] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 604.274304][ T43] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 604.274332][ T43] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 604.274358][ T43] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.315843][ T43] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 604.315876][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.315898][ T43] usb 6-1: Product: syz [ 604.315914][ T43] usb 6-1: Manufacturer: syz [ 604.315929][ T43] usb 6-1: SerialNumber: syz [ 604.399349][ T43] usb 6-1: config 0 descriptor?? [ 604.871041][ T43] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 604.959659][ T5886] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 604.959682][ T5886] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 604.987420][ T43] usb 6-1: USB disconnect, device number 18 [ 605.163481][ T5886] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 605.163504][ T5886] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 605.163516][ T5886] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 605.163527][ T5886] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 605.163719][ T5886] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 605.192522][ T5886] usb 5-1: USB disconnect, device number 42 [ 606.579550][ T37] audit: type=1326 audit(1776718954.199:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17492 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201509c819 code=0x7ffc0000 [ 606.579738][ T37] audit: type=1326 audit(1776718954.199:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17492 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201509c819 code=0x7ffc0000 [ 606.634130][ T37] audit: type=1326 audit(1776718954.249:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17492 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201509c819 code=0x7ffc0000 [ 606.634299][ T37] audit: type=1326 audit(1776718954.249:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17492 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201509c819 code=0x7ffc0000 [ 606.635061][ T37] audit: type=1326 audit(1776718954.249:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17492 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f201509c819 code=0x7ffc0000 [ 606.635205][ T37] audit: type=1326 audit(1776718954.249:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17492 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201509c819 code=0x7ffc0000 [ 606.647663][ T37] audit: type=1326 audit(1776718954.269:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17492 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201509c819 code=0x7ffc0000 [ 606.647718][ T37] audit: type=1326 audit(1776718954.269:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17492 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201509c819 code=0x7ffc0000 [ 606.647758][ T37] audit: type=1326 audit(1776718954.269:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17492 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f201509c819 code=0x7ffc0000 [ 606.647799][ T37] audit: type=1326 audit(1776718954.269:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17492 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201509c819 code=0x7ffc0000 [ 609.742251][T17567] vcan0: tx drop: invalid sa for name 0x0000000008000000 [ 610.143538][T17580] netlink: 'syz.5.5148': attribute type 2 has an invalid length. [ 610.143564][T17580] netlink: 'syz.5.5148': attribute type 1 has an invalid length. [ 610.143577][T17580] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5148'. [ 612.075407][ T5835] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 612.075688][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 612.205576][ T5835] usb 1-1: device descriptor read/64, error -32 [ 612.489040][ T5835] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 612.635378][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 612.637760][ T5835] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 612.637789][ T5835] usb 1-1: config 0 has no interface number 0 [ 612.687220][ T5835] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 612.687255][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.687276][ T5835] usb 1-1: Product: syz [ 612.687292][ T5835] usb 1-1: Manufacturer: syz [ 612.687307][ T5835] usb 1-1: SerialNumber: syz [ 612.764759][ T5835] usb 1-1: config 0 descriptor?? [ 612.774552][ T5835] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 613.078560][ T5835] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 613.120907][ T821] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 613.169715][ T5835] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 613.288616][ T821] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 613.288719][ T821] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 613.292806][ T821] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 613.292905][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.292929][ T821] usb 5-1: Product: syz [ 613.292943][ T821] usb 5-1: Manufacturer: syz [ 613.292956][ T821] usb 5-1: SerialNumber: syz [ 613.386936][ T821] usb 5-1: config 0 descriptor?? [ 613.439330][ T821] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 613.449532][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 613.450986][ T9] usb 1-1: USB disconnect, device number 32 [ 613.543827][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 613.580177][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 613.582309][ T9] quatech2 1-1:0.51: device disconnected [ 614.224964][T17652] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 614.225012][T17652] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 614.479046][ T821] gspca_sunplus: reg_r err -71 [ 614.479183][ T821] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 614.512188][ T821] usb 5-1: USB disconnect, device number 43 [ 616.103179][T17702] IPVS: Scheduler module ip_vs_sip not found [ 616.185389][ T821] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 616.339247][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.339277][ T821] usb 4-1: config 0 has no interfaces? [ 616.341465][ T821] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 616.341500][ T821] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 616.341520][ T821] usb 4-1: Manufacturer: syz [ 616.467915][ T821] usb 4-1: config 0 descriptor?? [ 617.474235][ T821] usb 4-1: USB disconnect, device number 36 [ 618.693260][ T821] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 618.868033][ T821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.868091][ T821] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 618.868114][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.872962][ T821] usb 4-1: config 0 descriptor?? [ 619.042255][T17760] loop8: detected capacity change from 0 to 7 [ 619.123871][ T821] usbhid 4-1:0.0: can't add hid device: -71 [ 619.124014][ T821] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 619.148259][ T821] usb 4-1: USB disconnect, device number 37 [ 619.274589][T17760] Dev loop8: unable to read RDB block 7 [ 619.274652][T17760] loop8: unable to read partition table [ 619.274908][T17760] loop8: partition table beyond EOD, truncated [ 619.274943][T17760] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 619.974469][ T821] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 620.135412][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 620.137393][ T821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.137445][ T821] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 620.137470][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.189688][ T821] usb 4-1: config 0 descriptor?? [ 620.195046][ T821] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 620.226805][ T821] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 620.375532][ T9] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 620.584765][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 620.584802][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.584847][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 620.584873][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.749518][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 620.906002][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 620.913869][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 620.940048][ T9] usb 1-1: usb_control_msg returned -32 [ 620.940095][ T9] usbtmc 1-1:16.0: can't read capabilities [ 620.972584][ T1488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.995677][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 621.042745][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 621.074406][ T5797] usb 4-1: USB disconnect, device number 38 [ 621.159537][T17769] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -19 [ 621.353539][ T9] usb 1-1: USB disconnect, device number 33 [ 621.381356][ T5797] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 622.015492][ T821] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 622.165543][ T821] usb 6-1: Using ep0 maxpacket: 16 [ 622.167726][ T821] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 622.167834][ T821] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 622.167852][ T821] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 10044, setting to 1024 [ 622.167868][ T821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 622.170598][ T821] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 622.170627][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.170640][ T821] usb 6-1: Product: syz [ 622.170648][ T821] usb 6-1: Manufacturer: syz [ 622.170656][ T821] usb 6-1: SerialNumber: syz [ 622.178160][ T821] usb 6-1: config 0 descriptor?? [ 622.197454][T17791] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 622.421638][T17791] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 622.429350][ T821] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input30 [ 622.472646][ T1488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.673445][ T9] usb 6-1: USB disconnect, device number 19 [ 622.674209][ T5168] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 622.899321][T17798] team0: Port device vlan1 added [ 623.122907][T17806] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5245'. [ 623.343802][ T1488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.365614][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 623.485627][T17161] Bluetooth: hci1: command tx timeout [ 623.555405][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 623.561248][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.561284][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.561307][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 623.561352][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 623.561376][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.638453][ T9] usb 1-1: config 0 descriptor?? [ 624.059578][T17804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.060275][T17804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.542165][ T1488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.582525][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002F/input/input31 [ 624.644667][ T9] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 624.735893][ T821] usb 1-1: USB disconnect, device number 34 [ 625.107315][T17829] fido_id[17829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 625.565523][T17161] Bluetooth: hci1: command tx timeout [ 626.238793][T17860] binder: 17858:17860 ioctl c0306201 200000000480 returned -14 [ 626.677507][T17775] chnl_net:caif_netlink_parms(): no params data found [ 627.645721][T17161] Bluetooth: hci1: command tx timeout [ 628.626039][ T1488] bridge_slave_1: left allmulticast mode [ 628.626073][ T1488] bridge_slave_1: left promiscuous mode [ 628.626362][ T1488] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.729077][ T1488] bridge_slave_0: left allmulticast mode [ 628.729113][ T1488] bridge_slave_0: left promiscuous mode [ 628.729416][ T1488] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.825756][ T1488] batman_adv: batadv0: Interface deactivated: gretap1 [ 629.725706][T17161] Bluetooth: hci1: command tx timeout [ 630.028117][ T1488] batman_adv: batadv0: Removing interface: gretap1 [ 630.266186][ T1488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.351402][ T1488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.374006][ T1488] bond0 (unregistering): Released all slaves [ 630.405785][T17890] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5279'. [ 630.498316][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.212548][T17775] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.212695][T17775] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.212973][T17775] bridge_slave_0: entered allmulticast mode [ 631.226262][T17775] bridge_slave_0: entered promiscuous mode [ 631.262051][T17775] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.262170][T17775] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.262438][T17775] bridge_slave_1: entered allmulticast mode [ 631.270512][T17775] bridge_slave_1: entered promiscuous mode [ 631.605136][T17775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.638635][T17775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.088903][T17775] team0: Port device team_slave_0 added [ 632.134604][T17775] team0: Port device team_slave_1 added [ 632.422603][T17775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.422624][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.422654][T17775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.460649][T17775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.460669][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.460696][T17775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.745445][ T43] hid (null): global environment stack underflow [ 636.011247][ T43] hid-generic 0005:0006:0004.0030: global environment stack underflow [ 636.011271][ T43] hid-generic 0005:0006:0004.0030: item 0 2 1 11 parsing failed [ 636.014558][ T43] hid-generic 0005:0006:0004.0030: probe with driver hid-generic failed with error -22 [ 636.773299][ T5478] 8021q: adding VLAN 0 to HW filter on device eth5 [ 636.885447][ T43] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 636.909013][T17775] hsr_slave_0: entered promiscuous mode [ 636.910305][T17775] hsr_slave_1: entered promiscuous mode [ 636.911323][T17775] debugfs: 'hsr0' already exists in 'hsr' [ 636.911352][T17775] Cannot create hsr debugfs directory [ 637.054082][ T43] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 637.070255][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.070288][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 637.070309][ T43] usb 1-1: SerialNumber: syz [ 637.581031][T18024] netlink: 'syz.3.5328': attribute type 4 has an invalid length. [ 637.581052][T18024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5328'. [ 639.156455][ T43] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 639.179343][ T43] usb 1-1: USB disconnect, device number 35 [ 639.208744][ T43] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 640.405789][ T1488] hsr_slave_0: left promiscuous mode [ 640.447465][ T1488] hsr_slave_1: left promiscuous mode [ 640.448877][ T1488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.448906][ T1488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.507534][ T1488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.507564][ T1488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.054406][ T1488] veth1_macvtap: left promiscuous mode [ 641.054523][ T1488] veth0_macvtap: left promiscuous mode [ 641.061082][ T1488] veth1_vlan: left promiscuous mode [ 641.061301][ T1488] veth0_vlan: left promiscuous mode [ 641.321406][T18093] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5347'. [ 643.222719][T18121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5359'. [ 643.787027][ T1488] team0 (unregistering): Port device team_slave_1 removed [ 643.893092][ T1488] team0 (unregistering): Port device team_slave_0 removed [ 644.313252][ T5478] 8021q: adding VLAN 0 to HW filter on device eth6 [ 646.655532][ T821] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 646.805580][ T821] usb 6-1: Using ep0 maxpacket: 32 [ 646.810145][ T821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.810199][ T821] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.810224][ T821] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.810246][ T821] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 646.810271][ T821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 646.810303][ T821] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 646.810324][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.999435][ T821] usb 6-1: config 0 descriptor?? [ 647.489243][ T821] hid-thrustmaster 0003:044F:B65D.0031: unknown main item tag 0x0 [ 647.489282][ T821] hid-thrustmaster 0003:044F:B65D.0031: unknown main item tag 0x0 [ 647.489311][ T821] hid-thrustmaster 0003:044F:B65D.0031: unknown main item tag 0x0 [ 647.489338][ T821] hid-thrustmaster 0003:044F:B65D.0031: unknown main item tag 0x0 [ 647.489365][ T821] hid-thrustmaster 0003:044F:B65D.0031: unknown main item tag 0x0 [ 647.592198][ T821] hid-thrustmaster 0003:044F:B65D.0031: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 647.610892][ T821] hid-thrustmaster 0003:044F:B65D.0031: Wrong number of endpoints? [ 647.671108][ C1] hid-thrustmaster 0003:044F:B65D.0031: Unknown packet type 0x0, unable to proceed further with wheel init [ 647.773653][ T5478] 8021q: adding VLAN 0 to HW filter on device eth7 [ 647.892965][ T821] usb 6-1: USB disconnect, device number 20 [ 648.067317][T18177] fido_id[18177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 648.320065][ T5835] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 648.495646][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 648.511355][ T5835] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 648.511387][ T5835] usb 1-1: config 0 has no interface number 0 [ 648.511440][ T5835] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 648.523648][ T5835] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 648.523681][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.523703][ T5835] usb 1-1: Product: syz [ 648.523718][ T5835] usb 1-1: Manufacturer: syz [ 648.523733][ T5835] usb 1-1: SerialNumber: syz [ 648.596074][ T5835] usb 1-1: config 0 descriptor?? [ 648.601330][T18181] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 648.822411][T18181] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 649.143011][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 649.143031][ T37] audit: type=1326 audit(1776718996.759:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18193 comm="syz.5.5383" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3db1fc819 code=0x0 [ 649.441227][T18198] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5384'. [ 649.844671][ T5835] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 649.844997][ T5835] asix 1-1:0.188: probe with driver asix failed with error -71 [ 649.902418][ T5835] usb 1-1: USB disconnect, device number 36 [ 650.102158][T17775] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 650.231725][T18203] syz.1.5386 (18203) used greatest stack depth: 18136 bytes left [ 650.396231][T17775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.405445][T17775] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 650.544713][T17775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.620739][T17775] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 650.750389][T17775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.753422][T17775] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 650.780311][T17775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 650.990350][ T5478] 8021q: adding VLAN 0 to HW filter on device eth8 [ 651.787152][T18247] UHID_CREATE from different security context by process 1529 (syz.5.5397), this is not allowed. [ 651.819543][ T43] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 651.819582][ T43] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 651.819609][ T43] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 651.819635][ T43] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 651.819662][ T43] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 651.878039][ T43] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.03 Device [syz1] on syz1 [ 652.007009][T17775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.066919][T18252] fido_id[18252]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 652.298380][T17775] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.343003][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.394110][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.629681][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.632205][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.171952][T18276] loop8: detected capacity change from 0 to 7 [ 653.728798][T18276] Dev loop8: unable to read RDB block 7 [ 653.728860][T18276] loop8: unable to read partition table [ 653.729111][T18276] loop8: partition table beyond EOD, truncated [ 653.729165][T18276] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 654.472417][T18309] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5416'. [ 654.876324][T17775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.258656][ T5835] libceph: connect (1)[c::]:6789 error -22 [ 655.305849][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 655.374741][T18316] ceph: No mds server is up or the cluster is laggy [ 655.423522][ T5835] libceph: connect (1)[c::]:6789 error -22 [ 655.423717][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 655.700601][ T5835] libceph: connect (1)[c::]:6789 error -22 [ 655.700817][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 656.208131][ T5835] libceph: connect (1)[c::]:6789 error -22 [ 656.208346][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 656.544580][T17775] veth0_vlan: entered promiscuous mode [ 656.683738][T17775] veth1_vlan: entered promiscuous mode [ 656.871586][T18348] loop8: detected capacity change from 0 to 7 [ 656.891204][T17775] veth0_macvtap: entered promiscuous mode [ 656.926637][T17775] veth1_macvtap: entered promiscuous mode [ 657.036247][T17775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.042501][T17775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.193724][T18348] Dev loop8: unable to read RDB block 7 [ 657.193775][T18348] loop8: unable to read partition table [ 657.194022][T18348] loop8: partition table beyond EOD, truncated [ 657.194065][T18348] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 657.197983][ T3544] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.225408][ T3544] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.239085][ T1488] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.239343][ T1488] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.192062][T18365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5436'. [ 658.291860][ T5835] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 658.609925][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 658.621835][ T5835] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 658.621884][ T5835] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 658.621924][ T5835] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 658.621953][ T5835] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.621978][ T5835] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.622004][ T5835] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 658.622031][ T5835] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 658.622059][ T5835] usb 6-1: config 168 interface 0 has no altsetting 0 [ 658.627898][ T5835] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 658.627947][ T5835] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 658.628000][ T5835] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 658.628029][ T5835] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.628056][ T5835] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.628083][ T5835] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 658.628112][ T5835] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 658.628141][ T5835] usb 6-1: config 168 interface 0 has no altsetting 0 [ 658.631380][ T5835] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 658.631414][ T5835] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 658.631447][ T5835] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 658.631478][ T5835] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 658.631497][ T5835] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.631516][ T5835] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 658.631536][ T5835] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 658.631560][ T5835] usb 6-1: config 168 interface 0 has no altsetting 0 [ 658.644244][ T5835] usb 6-1: string descriptor 0 read error: -22 [ 658.644401][ T5835] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 658.644427][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.050158][ T5835] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 659.342803][ T5835] usb 6-1: USB disconnect, device number 21 [ 660.414787][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.459478][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.653784][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5446'. [ 660.653811][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5446'. [ 661.036757][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.036780][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.066646][ T5835] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 662.217726][ T5835] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.217780][ T5835] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 662.220792][ T5835] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.220824][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.220845][ T5835] usb 7-1: Product: syz [ 662.220860][ T5835] usb 7-1: Manufacturer: syz [ 662.220875][ T5835] usb 7-1: SerialNumber: syz [ 663.430864][ T5835] cdc_ncm 7-1:1.0: bind() failure [ 663.541749][ T5835] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 663.544766][ T5835] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 663.567845][ T5835] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 663.585703][ T5835] usb 7-1: USB disconnect, device number 2 [ 665.955562][ T5804] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 666.110695][ T5804] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.110728][ T5804] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.114214][ T5804] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 666.114246][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 666.114269][ T5804] usb 6-1: SerialNumber: syz [ 666.477565][ T5804] usb 6-1: 0:2 : does not exist [ 666.680109][ T5804] usb 6-1: USB disconnect, device number 22 [ 666.934016][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 667.505424][ T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 667.621737][T18543] syzkaller1: entered promiscuous mode [ 667.621770][T18543] syzkaller1: entered allmulticast mode [ 667.659257][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.659289][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 667.661022][ T43] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 667.661050][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 667.661069][ T43] usb 6-1: SerialNumber: syz [ 667.964731][ T43] usb 6-1: 0:2 : does not exist [ 668.229486][ T43] usb 6-1: USB disconnect, device number 23 [ 669.246930][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.052493][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5536'. [ 673.052523][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5536'. [ 673.454348][T18679] tracefs: Bad value for 'mode' [ 673.484951][T18681] netlink: 'syz.6.5541': attribute type 1 has an invalid length. [ 673.484976][T18681] netlink: 'syz.6.5541': attribute type 22 has an invalid length. [ 673.596233][T18681] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.742392][T18681] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.735946][T18706] dummy0: entered allmulticast mode [ 674.791507][T18705] dummy0: left allmulticast mode [ 675.122850][T18712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5548'. [ 675.762127][ T37] audit: type=1326 audit(1776719023.379:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18723 comm="syz.0.5555" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7f51bc819 code=0x0 [ 676.433632][T18736] loop8: detected capacity change from 0 to 7 [ 676.453925][T18736] Dev loop8: unable to read RDB block 7 [ 676.453975][T18736] loop8: unable to read partition table [ 676.454233][T18736] loop8: partition table beyond EOD, truncated [ 676.454734][T18736] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 677.565560][T17161] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 680.125975][T18374] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 680.285726][T18374] usb 6-1: Using ep0 maxpacket: 32 [ 680.294212][T18374] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 680.294245][T18374] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 680.294266][T18374] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 680.294327][T18374] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 680.294348][T18374] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 680.294372][T18374] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 680.294415][T18374] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 680.294438][T18374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.309231][T18374] usb 6-1: config 0 descriptor?? [ 680.544484][T18374] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 680.751334][T18804] loop2: detected capacity change from 0 to 7 [ 680.906619][T18804] Dev loop2: unable to read RDB block 7 [ 680.906663][T18804] loop2: AHDI p1 p2 p3 [ 680.906701][T18804] loop2: partition table partially beyond EOD, truncated [ 680.911137][T18804] loop2: p1 start 1818582900 is beyond EOD, truncated [ 680.911166][T18804] loop2: p3 start 335544320 is beyond EOD, truncated [ 681.297600][ T43] usb 6-1: USB disconnect, device number 24 [ 681.450880][ T43] usblp0: removed [ 681.575457][ T5804] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 681.729404][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.729442][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.729485][ T5804] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 681.729510][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.787313][ T5804] usb 7-1: config 0 descriptor?? [ 682.208321][ T5804] hid_parser_main: 78 callbacks suppressed [ 682.208349][ T5804] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 682.208383][ T5804] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 682.208410][ T5804] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 682.208436][ T5804] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 682.208462][ T5804] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 682.279343][ T5804] playstation 0003:054C:0DF2.0033: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 682.718668][ T5797] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 682.828893][ T5804] playstation 0003:054C:0DF2.0033: Failed to retrieve feature with reportID 5: -71 [ 682.828923][ T5804] playstation 0003:054C:0DF2.0033: Failed to retrieve DualSense calibration info: -71 [ 682.828972][ T5804] playstation 0003:054C:0DF2.0033: Failed to get calibration data from DualSense [ 682.828991][ T5804] playstation 0003:054C:0DF2.0033: Failed to create dualsense. [ 682.953191][ T5804] playstation 0003:054C:0DF2.0033: probe with driver playstation failed with error -71 [ 682.965911][ T5797] usb 6-1: Using ep0 maxpacket: 32 [ 682.993801][ T5804] usb 7-1: USB disconnect, device number 3 [ 683.011688][ T5797] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 683.011723][ T5797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.011744][ T5797] usb 6-1: Product: syz [ 683.011760][ T5797] usb 6-1: Manufacturer: syz [ 683.011775][ T5797] usb 6-1: SerialNumber: syz [ 683.072220][ T5797] usb 6-1: config 0 descriptor?? [ 683.113523][ T5797] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 684.594761][ T5797] gspca_ov534_9: reg_r err -71 [ 684.746850][T18857] trusted_key: syz.0.5605 sent an empty control message without MSG_MORE. [ 684.855376][ T5797] gspca_ov534_9: Unknown sensor 0000 [ 684.855488][ T5797] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 684.880397][ T5797] usb 6-1: USB disconnect, device number 25 [ 688.415343][ T5804] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 688.570192][ T5804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 688.570232][ T5804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 688.570277][ T5804] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 688.570305][ T5804] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 688.573732][ T5804] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 688.573766][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 688.573788][ T5804] usb 4-1: Product: syz [ 688.573803][ T5804] usb 4-1: SerialNumber: syz [ 688.663266][T18924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 688.886404][T18924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 688.886717][T18924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 689.505781][T18924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 689.506061][T18924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 689.709872][ T5804] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 689.709901][ T5804] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 690.885728][ T5804] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 691.081274][ T5804] usb 4-1: USB disconnect, device number 39 [ 691.112132][ T5804] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 691.313005][ T5835] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 691.477447][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.477481][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.477494][ T5835] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 691.477520][ T5835] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 691.477534][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.600256][ T5835] usb 7-1: config 0 descriptor?? [ 691.645534][ T821] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 691.877813][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 691.893882][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.967586][ T821] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 691.967622][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.967713][ T821] usb 6-1: Product: syz [ 691.967730][ T821] usb 6-1: Manufacturer: syz [ 691.967746][ T821] usb 6-1: SerialNumber: syz [ 692.011264][ T821] usb 6-1: config 0 descriptor?? [ 692.263878][ T821] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 692.594561][ T5835] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 692.632344][ T5835] usb 7-1: USB disconnect, device number 4 [ 693.077970][T18982] fido_id[18982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 693.575149][ T821] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 693.629682][ T821] usb 6-1: USB disconnect, device number 26 [ 694.214104][T19018] syzkaller0: entered promiscuous mode [ 694.214123][T19018] syzkaller0: entered allmulticast mode [ 696.782473][ T5835] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 696.938187][ T5835] usb 1-1: config 0 has no interfaces? [ 696.943325][ T5835] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 696.943360][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.943381][ T5835] usb 1-1: Product: syz [ 696.943397][ T5835] usb 1-1: Manufacturer: syz [ 696.943413][ T5835] usb 1-1: SerialNumber: syz [ 696.987674][ T5835] usb 1-1: config 0 descriptor?? [ 697.210186][ T5835] usb 1-1: USB disconnect, device number 37 [ 698.489826][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5690'. [ 699.130827][T17161] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 701.957764][T19176] netlink: 'syz.5.5713': attribute type 1 has an invalid length. [ 703.359751][T19208] netlink: 'syz.5.5721': attribute type 12 has an invalid length. [ 703.782928][ T37] audit: type=1804 audit(1776719054.300:521): pid=19214 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.5722" name="/newroot/1148/file0" dev="tmpfs" ino=5837 res=1 errno=0 [ 704.171852][T19229] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5728'. [ 704.885443][ T5797] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 705.056266][ T5797] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.056307][ T5797] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 705.056361][ T5797] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 705.063142][ T5797] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 705.063177][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.063198][ T5797] usb 4-1: Product: syz [ 705.063211][ T5797] usb 4-1: Manufacturer: syz [ 705.063227][ T5797] usb 4-1: SerialNumber: syz [ 705.557020][ T5797] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 705.557080][ T5797] cdc_ncm 4-1:1.0: bind() failure [ 705.771630][ T5804] usb 4-1: USB disconnect, device number 40 [ 709.666454][T19364] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5782'. [ 709.666608][T19364] netlink: Conntrack attr has 4 unknown bytes [ 713.357205][ T5804] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 713.957666][ T5804] usb 1-1: config 0 has no interfaces? [ 713.957709][ T5804] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 713.957724][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.976225][ T5804] usb 1-1: config 0 descriptor?? [ 714.250073][ T5804] usb 1-1: USB disconnect, device number 38 [ 714.322531][T19442] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5814'. [ 714.324464][T19442] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5814'. [ 714.769671][T19421] ------------[ cut here ]------------ [ 714.769688][T19421] kcov->t != t [ 714.769696][T19421] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.0.5807/19421 [ 714.769812][T19421] Modules linked in: [ 714.769860][T19421] CPU: 1 UID: 0 PID: 19421 Comm: syz.0.5807 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 714.769889][T19421] Tainted: [L]=SOFTLOCKUP [ 714.769896][T19421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 714.769908][T19421] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 714.769941][T19421] Code: 10 00 00 48 8b bb 90 00 00 00 e8 f6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 19 6e 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 7b d4 69 09 48 89 df be 03 00 [ 714.769961][T19421] RSP: 0018:ffffc9000e4afd20 EFLAGS: 00010202 [ 714.769981][T19421] RAX: cb6d28b322203300 RBX: ffff88801e3f8c00 RCX: 0000000000000000 [ 714.769998][T19421] RDX: 00000000d18430c8 RSI: ffffffff8ba73e40 RDI: 00000000ffffffff [ 714.770014][T19421] RBP: ffffc9000e4afe78 R08: ffffffff8b2e6740 R09: ffffffff8dfc80c0 [ 714.770031][T19421] R10: dffffc0000000000 R11: fffffbfff1f1771f R12: dffffc0000000000 [ 714.770049][T19421] R13: 0000000000000000 R14: ffff88801e3f8c08 R15: ffff888029321ec0 [ 714.770066][T19421] FS: 000055556062b500(0000) GS:ffff888126201000(0000) knlGS:0000000000000000 [ 714.770085][T19421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 714.770098][T19421] CR2: 00007ff3dbfada08 CR3: 000000005a03a000 CR4: 00000000003526f0 [ 714.770119][T19421] Call Trace: [ 714.770128][T19421] [ 714.770139][T19421] do_exit+0x150/0x22c0 [ 714.770200][T19421] ? lockdep_hardirqs_on+0x7a/0x110 [ 714.770233][T19421] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 714.770266][T19421] ? reacquire_held_locks+0x104/0x190 [ 714.770316][T19421] ? rt_spin_lock+0x1e0/0x400 [ 714.770343][T19421] ? __pfx_do_exit+0x10/0x10 [ 714.770369][T19421] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 714.770406][T19421] ? rt_spin_unlock+0x160/0x200 [ 714.770435][T19421] do_group_exit+0x21b/0x2d0 [ 714.770464][T19421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.770489][T19421] __x64_sys_exit_group+0x3f/0x40 [ 714.770514][T19421] x64_sys_call+0x221a/0x2240 [ 714.770540][T19421] do_syscall_64+0x15f/0xf80 [ 714.770574][T19421] ? trace_irq_disable+0x3b/0x140 [ 714.770709][T19421] ? clear_bhb_loop+0x40/0x90 [ 714.770738][T19421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.770760][T19421] RIP: 0033:0x7fe7f51bc819 [ 714.770782][T19421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.770800][T19421] RSP: 002b:00007ffe6fa51da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 714.770822][T19421] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe7f51bc819 [ 714.770837][T19421] RDX: 00007fe7f4411000 RSI: 0000000000000000 RDI: 0000000000000000 [ 714.770851][T19421] RBP: 00007ffe6fa51e0c R08: 0000000000000000 R09: 00000000000927c0 [ 714.770866][T19421] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000004ab [ 714.770879][T19421] R13: 00000000000927c0 R14: 00000000000ad9cb R15: 00007ffe6fa51e60 [ 714.770911][T19421] [ 714.770922][T19421] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 714.770941][T19421] CPU: 1 UID: 0 PID: 19421 Comm: syz.0.5807 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 714.770976][T19421] Tainted: [L]=SOFTLOCKUP [ 714.770984][T19421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 714.770997][T19421] Call Trace: [ 714.771005][T19421] [ 714.771015][T19421] vpanic+0x56c/0xa60 [ 714.771038][T19421] ? __pfx__printk+0x10/0x10 [ 714.771063][T19421] ? __pfx_vpanic+0x10/0x10 [ 714.771083][T19421] ? is_bpf_text_address+0x292/0x2b0 [ 714.771169][T19421] ? is_bpf_text_address+0x26/0x2b0 [ 714.771205][T19421] panic+0xc5/0xd0 [ 714.771228][T19421] ? __pfx_panic+0x10/0x10 [ 714.771271][T19421] __warn+0x315/0x4c0 [ 714.771294][T19421] ? kcov_task_exit+0xf5/0x160 [ 714.771331][T19421] ? kcov_task_exit+0xf5/0x160 [ 714.771367][T19421] __report_bug+0x29a/0x540 [ 714.771405][T19421] ? kcov_task_exit+0xf5/0x160 [ 714.771436][T19421] ? __pfx___report_bug+0x10/0x10 [ 714.771468][T19421] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 714.771500][T19421] ? rt_spin_lock+0x1e0/0x400 [ 714.771528][T19421] ? rt_spin_lock+0x1e0/0x400 [ 714.771557][T19421] ? kcov_task_exit+0xf5/0x160 [ 714.771585][T19421] report_bug+0x16a/0x220 [ 714.771614][T19421] ? kcov_task_exit+0xf5/0x160 [ 714.771643][T19421] ? kcov_task_exit+0xf7/0x160 [ 714.771673][T19421] handle_bug+0x9c/0x200 [ 714.771697][T19421] exc_invalid_op+0x1a/0x50 [ 714.771721][T19421] asm_exc_invalid_op+0x1a/0x20 [ 714.771740][T19421] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 714.771770][T19421] Code: 10 00 00 48 8b bb 90 00 00 00 e8 f6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 19 6e 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 7b d4 69 09 48 89 df be 03 00 [ 714.771787][T19421] RSP: 0018:ffffc9000e4afd20 EFLAGS: 00010202 [ 714.771806][T19421] RAX: cb6d28b322203300 RBX: ffff88801e3f8c00 RCX: 0000000000000000 [ 714.771822][T19421] RDX: 00000000d18430c8 RSI: ffffffff8ba73e40 RDI: 00000000ffffffff [ 714.771836][T19421] RBP: ffffc9000e4afe78 R08: ffffffff8b2e6740 R09: ffffffff8dfc80c0 [ 714.771851][T19421] R10: dffffc0000000000 R11: fffffbfff1f1771f R12: dffffc0000000000 [ 714.771867][T19421] R13: 0000000000000000 R14: ffff88801e3f8c08 R15: ffff888029321ec0 [ 714.771891][T19421] ? rt_spin_lock+0x1e0/0x400 [ 714.771928][T19421] do_exit+0x150/0x22c0 [ 714.771955][T19421] ? lockdep_hardirqs_on+0x7a/0x110 [ 714.771989][T19421] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 714.772028][T19421] ? reacquire_held_locks+0x104/0x190 [ 714.772059][T19421] ? rt_spin_lock+0x1e0/0x400 [ 714.772087][T19421] ? __pfx_do_exit+0x10/0x10 [ 714.772116][T19421] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 714.772167][T19421] ? rt_spin_unlock+0x160/0x200 [ 714.772201][T19421] do_group_exit+0x21b/0x2d0 [ 714.772232][T19421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.772257][T19421] __x64_sys_exit_group+0x3f/0x40 [ 714.772287][T19421] x64_sys_call+0x221a/0x2240 [ 714.772313][T19421] do_syscall_64+0x15f/0xf80 [ 714.772348][T19421] ? trace_irq_disable+0x3b/0x140 [ 714.772372][T19421] ? clear_bhb_loop+0x40/0x90 [ 714.772401][T19421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.772424][T19421] RIP: 0033:0x7fe7f51bc819 [ 714.772444][T19421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.772463][T19421] RSP: 002b:00007ffe6fa51da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 714.772486][T19421] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe7f51bc819 [ 714.772501][T19421] RDX: 00007fe7f4411000 RSI: 0000000000000000 RDI: 0000000000000000 [ 714.772515][T19421] RBP: 00007ffe6fa51e0c R08: 0000000000000000 R09: 00000000000927c0 [ 714.772530][T19421] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000004ab [ 714.772545][T19421] R13: 00000000000927c0 R14: 00000000000ad9cb R15: 00007ffe6fa51e60 [ 714.772582][T19421] [ 714.773214][T19421] Kernel Offset: disabled