last executing test programs: 2.766292523s ago: executing program 1 (id=18536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 2.727495033s ago: executing program 1 (id=18537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'TPROXY\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) 2.614340004s ago: executing program 1 (id=18541): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) listen(r0, 0x0) 2.507072326s ago: executing program 1 (id=18544): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') lseek(r0, 0x1, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) 2.450249627s ago: executing program 1 (id=18546): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x40, 0xc, 0x35, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) 2.294798283s ago: executing program 3 (id=18549): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) bind$netrom(r0, 0x0, 0x0) 1.995187957s ago: executing program 3 (id=18556): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/210, 0xd2}], 0x1) 1.738311598s ago: executing program 3 (id=18560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000340)={0x1ff, 0x4, 0x80a0000, 0x2000, &(0x7f000060b000/0x2000)=nil, 0x8000}) 1.538253998s ago: executing program 3 (id=18563): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xe4, 0x75, 0xb9, 0x8, 0x413c, 0x81b1, 0x776c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x80, 0x3, 0x60}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.215137659s ago: executing program 2 (id=18571): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 1.188924233s ago: executing program 2 (id=18573): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) write$UHID_INPUT(r0, 0x0, 0x0) 848.018242ms ago: executing program 0 (id=18578): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) epoll_pwait2(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 474.419099ms ago: executing program 0 (id=18579): r0 = syz_clone(0xa04000, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$int_out(r1, 0x5460, 0x0) 455.550992ms ago: executing program 0 (id=18580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4038ae7a, 0x0) 387.450359ms ago: executing program 0 (id=18581): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 291.335775ms ago: executing program 0 (id=18582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x70000, 0x0, 0xffffffffffffffff, 0x20}) 257.056277ms ago: executing program 2 (id=18583): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc", 0x13}], 0x1}, 0x40810) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000004800913a745c7388641f9c0e0a"], 0xfe33) 233.199994ms ago: executing program 0 (id=18584): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x0, 0xb, 0x4, "b29d74ae"}, 0x0, 0x0, 0x0, 0x0}) 201.085003ms ago: executing program 2 (id=18585): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) 90.167808ms ago: executing program 2 (id=18586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014000100"], 0x104}}, 0x0) 88.587261ms ago: executing program 3 (id=18587): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 7.081307ms ago: executing program 2 (id=18588): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x2a, 0x4, 0x0, {0x1, 0x7fff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 6.862549ms ago: executing program 1 (id=18589): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000400)={0x40, 0x12, 0x4, "dd3e97d5"}, 0x0, 0x0}) 0s ago: executing program 3 (id=18590): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4ef983ac5fa8701627c7dc40ea0d209956", 0x11) kernel console output (not intermixed with test programs): invalid length. [ 897.603458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 898.406273][ T6799] netlink: 'syz.1.15037': attribute type 4 has an invalid length. [ 898.416465][ T6799] netlink: 'syz.1.15037': attribute type 1 has an invalid length. [ 898.424946][ T6799] netlink: 228 bytes leftover after parsing attributes in process `syz.1.15037'. [ 898.457394][ T6802] netlink: 'syz.3.15039': attribute type 1 has an invalid length. [ 898.752990][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 898.974747][ T6840] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15054'. [ 898.984050][ T6840] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15054'. [ 898.993654][ T6840] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15054'. [ 899.085195][ T6845] netlink: 'syz.3.15057': attribute type 10 has an invalid length. [ 899.095695][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 899.103635][ T6845] netlink: 228 bytes leftover after parsing attributes in process `syz.3.15057'. [ 899.269045][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 899.282292][ T10] usb 3-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 899.323578][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 899.331844][ T10] usb 3-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 899.346527][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 899.381917][ T10] usb 3-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 899.398567][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 899.431585][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 899.457405][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.476693][ T10] usb 3-1: Product: syz [ 899.486574][ T10] usb 3-1: Manufacturer: syz [ 899.500493][ T10] usb 3-1: SerialNumber: syz [ 899.518804][ T10] usb 3-1: config 0 descriptor?? [ 899.542672][ T10] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 899.757726][ T10] pwc: Warning: more than 1 configuration available. [ 899.785147][ T10] pwc: Failed to set LED on/off time (-71) [ 899.792065][ T10] pwc: send_video_command error -71 [ 899.798363][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 899.806550][ T10] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 899.821481][ T10] usb 3-1: USB disconnect, device number 2 [ 900.105048][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 900.270443][ T6922] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15076'. [ 900.462006][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15080'. [ 900.944100][ T6966] netlink: 'syz.3.15090': attribute type 21 has an invalid length. [ 900.974581][ T6966] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15090'. [ 901.298662][ T6984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15098'. [ 902.403657][ T7058] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15124'. [ 902.715389][ T7078] netlink: 'syz.1.15135': attribute type 15 has an invalid length. [ 902.726140][ T7078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15135'. [ 902.932245][ T7097] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 902.942497][ T7098] netlink: 'syz.1.15144': attribute type 1 has an invalid length. [ 902.967805][ T6125] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 903.139090][ T6125] usb 3-1: Using ep0 maxpacket: 32 [ 903.153651][ T6125] usb 3-1: unable to get BOS descriptor or descriptor too short [ 903.172889][ T6125] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 903.195176][ T6125] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 903.206340][ T6125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.214957][ T6125] usb 3-1: Product: syz [ 903.219388][ T6125] usb 3-1: Manufacturer: syz [ 903.225149][ T6125] usb 3-1: SerialNumber: syz [ 903.463447][ T7130] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 903.473664][ T6125] usb 3-1: Not enough endpoints found in device, aborting! [ 903.686066][ T6193] usb 3-1: USB disconnect, device number 3 [ 904.062267][ T7175] tc_dump_action: action bad kind [ 904.115801][ T7177] binder: 7176:7177 ioctl 4018620d 0 returned -22 [ 904.208419][ T998] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 904.446173][ T7200] ceph: No source [ 904.622347][ T7209] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15194'. [ 904.651683][ T7209] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 904.664641][ T7209] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 904.860204][ T7227] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 905.273164][ T7257] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15212'. [ 905.410320][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15218'. [ 905.482640][ T7271] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 905.499636][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 905.704872][ T7288] dummy0: entered allmulticast mode [ 905.794896][ T7293] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 906.064289][ T7314] usb usb8: usbfs: process 7314 (syz.1.15242) did not claim interface 0 before use [ 906.215671][ T7323] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15245'. [ 906.336753][ T7331] ubi: mtd0 is already attached to ubi16 [ 906.629959][ T7349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15261'. [ 906.717020][ T7355] pimreg: entered allmulticast mode [ 906.827213][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15266'. [ 906.986670][ T7373] dvmrp12: entered allmulticast mode [ 908.089901][ T7444] bond0: entered promiscuous mode [ 908.121755][ T7444] bond0: entered allmulticast mode [ 908.343191][ T7458] netlink: 'syz.3.15311': attribute type 11 has an invalid length. [ 908.602033][ T7471] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15317'. [ 908.699470][ T7473] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.15318'. [ 908.841065][ T7482] tipc: Can't bind to reserved service type 0 [ 909.013633][ T7493] netlink: 'syz.1.15328': attribute type 27 has an invalid length. [ 909.192244][ T7493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 909.271067][ T7508] pim6reg: left allmulticast mode [ 909.402606][ T7517] overlay: Bad value for 'workdir' [ 909.625076][ T10] IPVS: starting estimator thread 0... [ 909.734959][ T7533] IPVS: using max 34 ests per chain, 81600 per kthread [ 909.764469][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15351'. [ 909.774432][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15351'. [ 909.788676][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15358'. [ 909.895077][ T7548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15355'. [ 909.943230][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15356'. [ 910.195227][ T6193] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 910.261736][ T7578] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 910.365727][ T6193] usb 3-1: Using ep0 maxpacket: 32 [ 910.371727][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 910.394997][ T6193] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 910.416741][ T6193] usb 3-1: config 0 has no interface number 0 [ 910.440830][ T6193] usb 3-1: config 0 interface 244 has no altsetting 0 [ 910.450435][ T6193] usb 3-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 910.468488][ T6193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.478234][ T6193] usb 3-1: Product: syz [ 910.482544][ T6193] usb 3-1: Manufacturer: syz [ 910.487336][ T6193] usb 3-1: SerialNumber: syz [ 910.496917][ T6193] usb 3-1: config 0 descriptor?? [ 910.517353][ T6193] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort found [ 910.735129][ T6193] snd_usb_toneport 3-1:0.244: cannot get proper max packet size [ 910.751777][ T6193] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort now disconnected [ 910.769525][ T6193] snd_usb_toneport 3-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 910.960821][ T6193] usb 3-1: USB disconnect, device number 4 [ 911.278072][ T7650] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 911.559454][ T7670] netlink: 'syz.3.15405': attribute type 27 has an invalid length. [ 911.600755][ T7670] sit0: left promiscuous mode [ 911.704913][ T7670] bridge0: port 2(dummy0) entered blocking state [ 911.711509][ T7670] bridge0: port 2(dummy0) entered forwarding state [ 911.719941][ T7670] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.727269][ T7670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.748393][ T7670] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.814894][ T7670] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 911.826051][ T7670] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 911.840779][ T7670] ipvlan0: left promiscuous mode [ 911.846859][ T7670] ipvlan0: left allmulticast mode [ 911.854456][ T7670] veth0_vlan: left allmulticast mode [ 911.870964][ T7670] veth1_macvtap: left allmulticast mode [ 911.879148][ T7670] .30XD: left allmulticast mode [ 911.885429][ T7670] veth0_macvtap: left allmulticast mode [ 911.894444][ T9] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 912.057925][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.095693][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 912.136395][ T9] usb 3-1: string descriptor 0 read error: -71 [ 912.151116][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 912.170853][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.195966][ T9] usb 3-1: can't set config #1, error -71 [ 912.204916][ T9] usb 3-1: USB disconnect, device number 5 [ 912.563607][ T3271] ip6_tunnel: K xmit: Local address not yet configured! [ 912.586130][ T3271] ip6_tunnel: K xmit: Local address not yet configured! [ 912.597003][ T6125] ip6_tunnel: K xmit: Local address not yet configured! [ 912.610314][ T30] audit: type=1400 audit(877.152:209): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F041321635 [ 912.663620][ T7724] netlink: 'syz.1.15427': attribute type 46 has an invalid length. [ 912.824741][ T6125] ip6_tunnel: K xmit: Local address not yet configured! [ 912.944523][ T6125] ip6_tunnel: K xmit: Local address not yet configured! [ 912.972957][ T7738] netlink: 'syz.3.15432': attribute type 10 has an invalid length. [ 912.983748][ T7739] binder: 7737:7739 ioctl c0306201 200000000180 returned -14 [ 913.047053][ T7738] team0 (unregistering): Port device team_slave_0 removed [ 913.088300][ T7738] team0 (unregistering): Port device team_slave_1 removed [ 913.145931][ T36] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 913.174861][ T6125] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 913.190069][ T36] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 913.249367][ T7760] Device name cannot be null; rc = [-22] [ 913.669332][ T6125] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 913.854486][ T6125] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 914.332355][ T7825] __nla_validate_parse: 1 callbacks suppressed [ 914.332376][ T7825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15470'. [ 914.540283][ T7837] netlink: 'syz.3.15476': attribute type 21 has an invalid length. [ 914.550884][ T7837] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15476'. [ 915.105853][ T7878] /dev/sg0: Can't lookup blockdev [ 915.174721][ T7881] netlink: 'syz.2.15499': attribute type 5 has an invalid length. [ 915.185497][ T7881] netlink: 'syz.2.15499': attribute type 9 has an invalid length. [ 915.267185][ T7888] veth0: left allmulticast mode [ 915.294429][ T7888] veth0: left promiscuous mode [ 915.308254][ T7888] bridge0: port 3(veth0) entered disabled state [ 915.346649][ T7888] bridge_slave_1: left allmulticast mode [ 915.354274][ T7888] bridge_slave_1: left promiscuous mode [ 915.360649][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.545245][ T7907] netlink: 220 bytes leftover after parsing attributes in process `syz.3.15505'. [ 915.621289][ T7911] netlink: get zone limit has 8 unknown bytes [ 915.633631][ T7913] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.15508'. [ 915.898552][ T7931] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 915.933782][ T7934] netlink: 'syz.2.15518': attribute type 11 has an invalid length. [ 915.952918][ T7934] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15518'. [ 916.162488][ T7952] cgroup2: Unknown parameter 'obj_user' [ 916.253145][ T7958] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 916.277589][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 916.414653][ T7971] bond0: (slave sit0): refused to change device type [ 916.452058][ T10] usb 2-1: config index 0 descriptor too short (expected 133, got 72) [ 916.464832][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 916.481203][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.492321][ T10] usb 2-1: Product: syz [ 916.496568][ T10] usb 2-1: Manufacturer: syz [ 916.504863][ T10] usb 2-1: SerialNumber: syz [ 916.526863][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 916.585243][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 916.907293][ T7995] netlink: 'syz.3.15543': attribute type 1 has an invalid length. [ 916.916773][ T7995] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15543'. [ 916.926411][ T7995] netlink: 658 bytes leftover after parsing attributes in process `syz.3.15543'. [ 916.936274][ T7995] netlink: 1 bytes leftover after parsing attributes in process `syz.3.15543'. [ 917.056346][ T8001] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 917.081379][ T9] usb 2-1: USB disconnect, device number 22 [ 917.742815][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 917.761454][ T10] ath9k_htc: Failed to initialize the device [ 917.775382][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 918.233979][ T6193] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 918.406512][ T6193] usb 3-1: Using ep0 maxpacket: 16 [ 918.426232][ T6193] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 918.447328][ T6193] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 918.478340][ T6193] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 918.488930][ T6193] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 918.508384][ T6193] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 918.519662][ T6193] usb 3-1: config 0 has no interface number 0 [ 918.526809][ T6193] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 918.538448][ T6193] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 918.548728][ T6193] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 918.562424][ T6193] usb 3-1: config 0 interface 125 has no altsetting 1 [ 918.572611][ T6193] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 918.598401][ T6193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.618924][ T6193] usb 3-1: Product: syz [ 918.623188][ T6193] usb 3-1: Manufacturer: syz [ 918.627818][ T6193] usb 3-1: SerialNumber: syz [ 918.653177][ T6193] usb 3-1: config 0 descriptor?? [ 918.835030][ T8123] netlink: 200 bytes leftover after parsing attributes in process `syz.3.15601'. [ 918.845174][ T8123] tc_dump_action: action bad kind [ 919.132348][ T6125] usb 3-1: USB disconnect, device number 6 [ 919.225036][ T8154] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15613'. [ 919.587343][ T8180] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 919.904241][ T8201] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15634'. [ 919.981670][ T8206] netlink: 'syz.3.15637': attribute type 1 has an invalid length. [ 920.121666][ T8215] kAFS: No cell specified [ 920.407180][ T8237] netlink: 'syz.0.15649': attribute type 1 has an invalid length. [ 920.940500][ T8275] (syz.0.15666,8275,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 920.972749][ T8275] (syz.0.15666,8275,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 920.994695][ T8275] (syz.0.15666,8275,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 921.024976][ T8275] (syz.0.15666,8275,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 921.241833][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15676'. [ 921.436523][ T8308] netlink: 'syz.2.15681': attribute type 6 has an invalid length. [ 921.444718][ T8308] netlink: 76 bytes leftover after parsing attributes in process `syz.2.15681'. [ 921.654745][ T8326] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 921.725906][ T8330] tmpfs: Bad value for 'mpol' [ 921.793948][ T6125] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 921.972547][ T6125] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 921.995913][ T6125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.017197][ T6125] usb 3-1: config 0 has no interface number 0 [ 922.023783][ T6125] usb 3-1: config 0 interface 2 has no altsetting 0 [ 922.035558][ T6125] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 922.047004][ T6125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.055393][ T6125] usb 3-1: Product: syz [ 922.062229][ T6125] usb 3-1: Manufacturer: syz [ 922.066895][ T6125] usb 3-1: SerialNumber: syz [ 922.083264][ T6125] usb 3-1: config 0 descriptor?? [ 922.319445][ T6125] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 922.442992][ T6125] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 922.466261][ T7558] udevd[7558]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 922.580373][ T9] usb 3-1: USB disconnect, device number 7 [ 923.692655][ T8458] AppArmor: change_hat: Invalid input '9' [ 924.305129][ T8505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.329496][ T8507] netlink: 'syz.1.15759': attribute type 21 has an invalid length. [ 924.348416][ T8507] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15759'. [ 924.369191][ T8507] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15759'. [ 924.500436][ T8516] netlink: 'syz.2.15764': attribute type 1 has an invalid length. [ 924.521842][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15764'. [ 924.635140][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15765'. [ 925.264085][ T8559] nftables ruleset with unbound chain [ 925.418375][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 925.418413][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 926.103398][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 926.213100][ T8623] netlink: 'syz.1.15810': attribute type 1 has an invalid length. [ 926.244022][ T8623] netlink: 228 bytes leftover after parsing attributes in process `syz.1.15810'. [ 926.814839][ T8664] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 927.221542][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15838'. [ 927.962692][ T8743] dvmrp0: entered allmulticast mode [ 928.188273][ T8761] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 928.324773][ T8770] netlink: zone id is out of range [ 928.430439][ T8770] netlink: set zone limit has 4 unknown bytes [ 929.295396][ T8836] netlink: 'syz.3.15901': attribute type 1 has an invalid length. [ 929.641155][ T8860] 9p: Bad value for 'port' [ 929.680328][ T8864] netlink: 'syz.0.15914': attribute type 33 has an invalid length. [ 929.688685][ T8864] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15914'. [ 930.390600][ T8910] libceph: secret too big 289 [ 930.721416][ T8934] usb usb8: usbfs: process 8934 (syz.3.15943) did not claim interface 0 before use [ 931.302329][ T8969] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15960'. [ 931.372073][ T8975] binder: 8974:8975 ioctl c0306201 2000000001c0 returned -22 [ 931.896598][ T6193] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 931.955595][ T9009] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15976'. [ 932.070996][ T6193] usb 4-1: config 0 has an invalid interface number: 32 but max is 2 [ 932.099713][ T6193] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.134866][ T6193] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 932.153457][ T6193] usb 4-1: config 0 has no interface number 0 [ 932.159737][ T6193] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 932.169714][ T6193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.181288][ T6193] usb 4-1: config 0 descriptor?? [ 932.368385][ T9031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.429547][ T9] usb 4-1: USB disconnect, device number 39 [ 933.007027][ T9071] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15998'. [ 933.094795][ T9074] netlink: 'syz.2.16000': attribute type 2 has an invalid length. [ 933.577802][ T9104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.645007][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16015'. [ 934.001554][ T9130] netlink: 'syz.1.16024': attribute type 1 has an invalid length. [ 934.273924][ T9146] QAT: failed to copy from user cfg_data. [ 934.492777][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16037'. [ 934.527302][ T9160] netlink: 'syz.0.16036': attribute type 63 has an invalid length. [ 934.564840][ T9160] netlink: 5 bytes leftover after parsing attributes in process `syz.0.16036'. [ 934.996049][ T9185] netlink: 'syz.0.16048': attribute type 2 has an invalid length. [ 935.653272][ T9227] netlink: 'syz.0.16067': attribute type 11 has an invalid length. [ 935.670968][ T6193] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 935.841394][ T6193] usb 3-1: Using ep0 maxpacket: 8 [ 935.861310][ T6193] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 935.900633][ T6193] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 935.918345][ T6193] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 935.934076][ T6193] usb 3-1: Product: syz [ 935.940982][ T6193] usb 3-1: Manufacturer: syz [ 935.945661][ T6193] usb 3-1: SerialNumber: syz [ 936.123230][ T9256] netlink: 'syz.0.16079': attribute type 16 has an invalid length. [ 936.132673][ T9256] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.16079'. [ 936.181002][ T6193] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 936.210219][ T6193] usb 3-1: Handspring Visor / Palm OS: port 76, is for unknown use [ 936.230667][ T6193] usb 3-1: Handspring Visor / Palm OS: port 111, is for HotSync use [ 936.253035][ T9261] netlink: 'syz.0.16081': attribute type 64 has an invalid length. [ 936.261163][ T6193] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 936.268599][ T9261] netlink: 'syz.0.16081': attribute type 4 has an invalid length. [ 936.279559][ T9261] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16081'. [ 936.395457][ T6193] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 936.415025][ T6193] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 936.438610][ T6193] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 936.478198][ T6193] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 936.510387][ T6193] usb 3-1: USB disconnect, device number 8 [ 936.551001][ T6193] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 936.560998][ T9288] random: crng reseeded on system resumption [ 936.591514][ T6193] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 936.612776][ T6193] visor 3-1:1.0: device disconnected [ 936.896047][ T9316] program syz.0.16095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 937.022707][ T9323] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.16098'. [ 937.132915][ T9331] netlink: 'syz.3.16102': attribute type 27 has an invalid length. [ 937.487909][ T9355] netlink: 'syz.2.16111': attribute type 25 has an invalid length. [ 937.684731][ T9370] netlink: 'syz.1.16118': attribute type 46 has an invalid length. [ 938.132587][ T30] audit: type=1400 audit(901.032:210): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=9401 comm="syz.1.16133" [ 938.256623][ T9409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16136'. [ 938.796668][ T9451] binder: 9450:9451 ioctl c018620c 200000000280 returned -1 [ 938.990290][ T9467] openvswitch: netlink: Key type 31 is not supported [ 939.009812][ T9468] XFS (nbd3): SB validate failed with error -5. [ 939.158222][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 939.243848][ T9483] kAFS: unable to lookup cell '.,cL' [ 939.338163][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 939.345123][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 939.354844][ T10] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 939.366109][ T10] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 939.377411][ T10] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 939.387670][ T10] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 939.397898][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 939.405222][ T10] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 939.414717][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.433106][ T10] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 939.472760][ T9501] netlink: 52 bytes leftover after parsing attributes in process `syz.2.16170'. [ 939.572530][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 939.589136][ T9505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 939.648160][ T10] scsi host1: usb-storage 2-1:1.0 [ 939.757337][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 939.767861][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 939.777071][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.801948][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 939.871809][ T6193] usb 2-1: USB disconnect, device number 23 [ 940.001149][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16180'. [ 940.010317][ T9538] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 940.174818][ T9547] netlink: 'syz.2.16184': attribute type 4 has an invalid length. [ 940.182963][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16184'. [ 940.230540][ T9549] netlink: 'syz.2.16185': attribute type 6 has an invalid length. [ 940.539302][ T9557] netlink: 830 bytes leftover after parsing attributes in process `syz.1.16189'. [ 940.583240][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16190'. [ 940.609752][ T9561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16191'. [ 940.899786][ T9] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 941.060230][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16203'. [ 941.114366][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 941.130710][ T9] stv0680 4-1:4.0: last error: 86, command = 0x0 [ 941.143209][ T9] usb 4-1: USB disconnect, device number 40 [ 941.343956][ T9609] netlink: 204 bytes leftover after parsing attributes in process `syz.1.16211'. [ 941.648239][ T9627] sctp: [Deprecated]: syz.2.16220 (pid 9627) Use of int in maxseg socket option. [ 941.648239][ T9627] Use struct sctp_assoc_value instead [ 941.839160][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 942.105797][ T9660] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 942.394114][ T9680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.418683][ T9680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.779327][ T9709] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 942.864127][ T9717] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 943.022438][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16263'. [ 943.207353][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 943.303951][ T9748] netlink: 'syz.2.16275': attribute type 10 has an invalid length. [ 943.319959][ T9748] team0: Port device geneve0 added [ 943.325641][ T3271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.343700][ T3271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.367808][ T3271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.402763][ T3271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.698632][ T9769] tmpfs: Bad value for 'mpol' [ 943.905961][ T9786] netlink: 'syz.3.16291': attribute type 28 has an invalid length. [ 944.650430][ T9835] netlink: 'syz.2.16314': attribute type 1 has an invalid length. [ 944.724240][ T9839] netlink: 'syz.2.16317': attribute type 1 has an invalid length. [ 944.732514][ T9839] __nla_validate_parse: 2 callbacks suppressed [ 944.732535][ T9839] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16317'. [ 944.749759][ T9782] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 944.843848][ T9845] netlink: 'syz.1.16319': attribute type 1 has an invalid length. [ 945.071401][ T9861] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16328'. [ 945.183360][ T9868] netlink: 393 bytes leftover after parsing attributes in process `syz.2.16331'. [ 945.511933][ T9889] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 945.572559][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16343'. [ 945.678450][ T9900] AppArmor: change_hat: Invalid input '' [ 945.792539][ T9906] x_tables: unsorted entry at hook 2 [ 946.840346][ T9978] sg_write: data in/out 393439/136 bytes for SCSI command 0xc7-- guessing data in; [ 946.840346][ T9978] program syz.0.16383 not setting count and/or reply_len properly [ 947.036933][ T9992] netlink: 'syz.3.16388': attribute type 21 has an invalid length. [ 947.069214][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16388'. [ 947.565829][T10023] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 947.575371][T10026] IPv6: NLM_F_REPLACE set, but no existing node found! [ 947.887311][T10042] netlink: 592 bytes leftover after parsing attributes in process `syz.3.16413'. [ 948.372198][T10072] netlink: 'syz.2.16431': attribute type 2 has an invalid length. [ 948.380302][T10072] netlink: 'syz.2.16431': attribute type 1 has an invalid length. [ 948.402210][T10077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 948.430052][T10078] netlink: 260 bytes leftover after parsing attributes in process `syz.0.16429'. [ 948.680537][T10093] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 948.688506][T10093] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 948.697226][T10093] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 948.712962][T10093] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 948.909663][T10103] netlink: 'syz.1.16443': attribute type 1 has an invalid length. [ 948.918157][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16444'. [ 949.172299][T10123] openvswitch: netlink: Duplicate key (type 21). [ 949.410124][T10143] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16463'. [ 949.484499][T10145] No source specified [ 949.825321][T10168] tmpfs: Bad value for 'mpol' [ 949.938790][T10176] tmpfs: Unknown parameter 'func' [ 950.144542][T10191] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 950.286938][T10200] netlink: 'syz.3.16490': attribute type 1 has an invalid length. [ 950.412392][T10208] netlink: 'syz.2.16495': attribute type 1 has an invalid length. [ 950.461144][T10208] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16495'. [ 950.750297][T10231] exFAT-fs (nbd2): unable to read boot sector [ 950.760138][T10231] exFAT-fs (nbd2): failed to read boot sector [ 950.769215][T10231] exFAT-fs (nbd2): failed to recognize exfat type [ 951.068482][T10253] netlink: 872 bytes leftover after parsing attributes in process `syz.3.16517'. [ 951.090309][T10253] netlink: 872 bytes leftover after parsing attributes in process `syz.3.16517'. [ 951.375465][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 951.396252][T10282] netlink: zone id is out of range [ 951.401578][T10282] netlink: set zone limit has 8 unknown bytes [ 951.524637][ T6190] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 951.546171][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 951.554719][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 951.564251][ T9] usb 2-1: config 179 has no interface number 0 [ 951.570994][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 951.582603][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 951.594325][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 951.605550][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 951.619293][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 951.628721][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.641679][T10256] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 951.687568][ T6190] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 951.695970][ T6190] usb 4-1: config 0 has no interface number 0 [ 951.704943][ T6190] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 951.717663][ T6190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.725771][ T6190] usb 4-1: Product: syz [ 951.730811][ T6190] usb 4-1: Manufacturer: syz [ 951.735486][ T6190] usb 4-1: SerialNumber: syz [ 951.743844][ T6190] usb 4-1: config 0 descriptor?? [ 951.746570][T10295] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 951.868197][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 951.877510][ T6125] usb 2-1: USB disconnect, device number 24 [ 951.977803][ T6190] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 952.001835][ T6190] usb 4-1: USB disconnect, device number 41 [ 952.521150][ T6193] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 952.600014][T10346] tmpfs: Bad value for 'mpol' [ 952.643804][T10348] netlink: 'syz.3.16547': attribute type 3 has an invalid length. [ 952.689885][ T6193] usb 3-1: Using ep0 maxpacket: 16 [ 952.704811][ T6193] usb 3-1: config 251 has an invalid interface number: 16 but max is 0 [ 952.721993][ T6193] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 952.753901][ T6193] usb 3-1: config 251 has no interface number 0 [ 952.760444][ T6193] usb 3-1: config 251 interface 16 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 952.771078][ T6193] usb 3-1: config 251 interface 16 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 952.782190][ T6193] usb 3-1: config 251 interface 16 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 952.799088][ T6193] usb 3-1: config 251 interface 16 has no altsetting 0 [ 952.809062][ T6193] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 952.819471][ T6193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.827635][ T6193] usb 3-1: Product: syz [ 952.832320][ T6193] usb 3-1: Manufacturer: syz [ 952.837093][ T6193] usb 3-1: SerialNumber: syz [ 952.976288][T10365] binder: 10364:10365 ioctl c00c620f 0 returned -14 [ 953.093345][ T6193] usb 3-1: USB disconnect, device number 9 [ 953.758681][T10421] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.16580'. [ 953.779036][T10421] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 953.835360][T10425] netlink: 'syz.3.16581': attribute type 2 has an invalid length. [ 953.843429][T10425] netlink: 228 bytes leftover after parsing attributes in process `syz.3.16581'. [ 954.192006][T10450] netlink: 'syz.3.16593': attribute type 40 has an invalid length. [ 954.405771][T10462] netlink: 'syz.3.16599': attribute type 1 has an invalid length. [ 954.444045][T10462] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16599'. [ 954.714429][ T30] audit: type=1400 audit(916.541:211): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=10488 comm="syz.0.16610" [ 954.915926][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16616'. [ 955.434575][T10535] CIFS: VFS: Malformed UNC in devname [ 955.497314][T10543] netlink: 'syz.3.16635': attribute type 15 has an invalid length. [ 955.527075][T10544] AppArmor: change_hat: Invalid input '' [ 955.618557][T10550] netlink: 'syz.3.16637': attribute type 2 has an invalid length. [ 955.639078][T10550] netlink: 'syz.3.16637': attribute type 1 has an invalid length. [ 955.693901][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 955.882824][ T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 955.892994][T10568] affs: No valid root block on device nbd3 [ 955.903589][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 955.921895][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 955.942722][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 955.962417][ T9] usb 3-1: config 1 has no interface number 0 [ 955.982543][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 955.996572][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.032855][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 956.146780][T10584] befs: (nbd1): No write support. Marking filesystem read-only [ 956.238013][ T9] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 956.253716][ T9] snd_usb_pod 3-1:1.1: invalid control EP [ 956.261801][ T9] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 956.268952][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 956.276904][ T9] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 956.457588][ T9] usb 3-1: USB disconnect, device number 10 [ 957.166273][T10656] overlayfs: unescaped trailing colons in lowerdir mount option. [ 957.320796][T10666] overlayfs: conflicting options: userxattr,redirect_dir=on [ 957.827465][T10702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.135855][T10724] netlink: 'syz.2.16720': attribute type 21 has an invalid length. [ 958.158451][T10724] netlink: 164 bytes leftover after parsing attributes in process `syz.2.16720'. [ 958.292671][T10734] befs: (nbd2): No write support. Marking filesystem read-only [ 958.357829][T10736] cgroup: Invalid name [ 959.285947][ T6193] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 959.405952][T10818] netlink: 180 bytes leftover after parsing attributes in process `syz.2.16764'. [ 959.446281][ T6193] usb 2-1: Using ep0 maxpacket: 32 [ 959.460607][ T6193] usb 2-1: unable to get BOS descriptor or descriptor too short [ 959.476029][ T6193] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 959.499829][ T6193] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 959.515166][ T6193] usb 2-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=71.88 [ 959.532081][ T6193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.541515][ T6193] usb 2-1: Product: syz [ 959.546658][ T6193] usb 2-1: Manufacturer: syz [ 959.551334][ T6193] usb 2-1: SerialNumber: syz [ 959.801986][ T6193] usb 2-1: USB disconnect, device number 25 [ 960.226759][ T6193] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 960.288676][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16788'. [ 960.299923][T10876] netlink: 480 bytes leftover after parsing attributes in process `syz.2.16788'. [ 960.309575][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16788'. [ 960.397867][ T6193] usb 4-1: Using ep0 maxpacket: 8 [ 960.411536][ T6193] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 960.432166][ T6193] usb 4-1: config 0 has no interface number 0 [ 960.441458][ T6193] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 960.457053][ T6193] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 960.469123][ T6193] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 960.480751][ T6193] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 960.491120][ T6193] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 960.509860][ T6193] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 960.530700][ T6193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.550694][ T6193] usb 4-1: config 0 descriptor?? [ 960.580263][ T6193] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 960.809744][T10857] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90 [ 960.839695][ T6193] usb 4-1: USB disconnect, device number 42 [ 960.874950][ T6193] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 961.150098][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16809'. [ 961.472928][T10951] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 961.651632][T10964] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 961.662597][T10964] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 961.667737][T10965] netlink: 'syz.2.16825': attribute type 6 has an invalid length. [ 961.808653][T10973] netlink: 9 bytes leftover after parsing attributes in process `syz.2.16829'. [ 961.823275][T10973] 0: renamed from hsr_slave_1 [ 961.831427][T10973] 0: entered allmulticast mode [ 961.840539][T10973] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 961.928455][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16832'. [ 963.404446][T11077] netlink: 'syz.3.16876': attribute type 4 has an invalid length. [ 963.660742][T11091] netlink: 'syz.1.16883': attribute type 2 has an invalid length. [ 963.681244][T11091] netlink: 244 bytes leftover after parsing attributes in process `syz.1.16883'. [ 963.942976][T11108] netlink: 'syz.1.16891': attribute type 2 has an invalid length. [ 963.951561][T11108] netlink: 228 bytes leftover after parsing attributes in process `syz.1.16891'. [ 964.401162][ T30] audit: type=1326 audit(925.605:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11138 comm="syz.1.16904" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2df59c799 code=0x0 [ 964.599144][ T6125] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 964.680529][T11155] program syz.0.16909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 964.774896][ T6125] usb 3-1: unable to get BOS descriptor or descriptor too short [ 964.793496][ T6125] usb 3-1: not running at top speed; connect to a high speed hub [ 964.806783][ T6125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 964.825314][ T6125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 964.843228][ T6125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 964.859014][ T6125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 964.869078][ T6125] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x14, changing to 0x4 [ 964.880764][ T6125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 964.896411][ T6125] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 964.907616][ T6125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.916324][ T6125] usb 3-1: Product: syz [ 964.920853][ T6125] usb 3-1: Manufacturer: syz [ 964.925574][ T6125] usb 3-1: SerialNumber: syz [ 964.934776][ T6125] usb 3-1: config 0 descriptor?? [ 964.941845][T11132] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 964.958055][ T6125] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 964.989003][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16914'. [ 965.011272][T11175] vivid-001: disconnect [ 965.026086][T11171] vivid-001: reconnect [ 965.074777][ T6125] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 965.167253][T11190] udevd[11190]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 965.221490][ T6190] usb 3-1: USB disconnect, device number 11 [ 965.409666][T11208] netlink: 'syz.0.16923': attribute type 15 has an invalid length. [ 965.502179][T11214] netlink: 'syz.0.16925': attribute type 16 has an invalid length. [ 965.510518][T11214] netlink: 'syz.0.16925': attribute type 25 has an invalid length. [ 965.518602][T11214] netlink: 64094 bytes leftover after parsing attributes in process `syz.0.16925'. [ 965.674626][T11224] tipc: Enabling of bearer rejected, failed to enable media [ 965.746113][T11228] netlink: 'syz.0.16933': attribute type 2 has an invalid length. [ 965.759526][T11228] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16933'. [ 966.149378][ T6190] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 966.345630][ T6190] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 966.363071][ T6190] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 966.377398][ T6190] usb 4-1: config 220 has no interface number 2 [ 966.406018][ T6190] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 966.428938][ T6190] usb 4-1: config 220 interface 0 has no altsetting 0 [ 966.447781][ T6190] usb 4-1: config 220 interface 76 has no altsetting 0 [ 966.465091][ T6190] usb 4-1: config 220 interface 1 has no altsetting 0 [ 966.483379][ T6190] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 966.502469][ T6190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.511633][ T6190] usb 4-1: Product: syz [ 966.519259][ T6190] usb 4-1: Manufacturer: syz [ 966.525725][ T6190] usb 4-1: SerialNumber: syz [ 966.595500][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16957'. [ 966.752748][T11290] program syz.2.16961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 966.781026][ T6190] usb 4-1: selecting invalid altsetting 0 [ 966.799901][ T6190] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 966.824054][ T6190] uvcvideo 4-1:220.0: No valid video chain found. [ 966.846621][ T6190] usb 4-1: selecting invalid altsetting 0 [ 966.852471][ T6190] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 966.874280][ T6190] usb 4-1: USB disconnect, device number 43 [ 966.903068][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 966.969457][ T6125] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 967.001400][ T6125] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 967.011654][ T6125] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 967.028899][ T6125] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 967.045837][ T6125] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 967.056140][ T6125] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 967.075194][ T6125] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 967.094112][ T6125] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 967.105694][ T6125] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 967.116659][ T6125] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 967.138829][ T6125] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 967.394234][T11321] fido_id[11321]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 968.608953][T11404] sp0: Synchronizing with TNC [ 970.122288][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17038'. [ 970.189854][T11491] netlink: 'syz.0.17039': attribute type 1 has an invalid length. [ 970.202435][T11491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17039'. [ 970.211954][T11491] netlink: 658 bytes leftover after parsing attributes in process `syz.0.17039'. [ 970.222010][T11491] netlink: 'syz.0.17039': attribute type 1 has an invalid length. [ 970.537617][T11502] random: crng reseeded on system resumption [ 970.738760][T11512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17049'. [ 970.757946][T11512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17049'. [ 970.944291][T11518] vivid-007: disconnect [ 970.955838][T11517] vivid-007: reconnect [ 971.395406][T11539] option changes via remount are deprecated (pid=11538 comm=syz.1.17061) [ 971.508633][T11543] sp0: Synchronizing with TNC [ 971.933344][ T6125] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 972.066821][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17081'. [ 972.103930][ T6125] usb 2-1: Using ep0 maxpacket: 8 [ 972.111594][ T6125] usb 2-1: unable to get BOS descriptor or descriptor too short [ 972.123226][ T6125] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.142363][ T6125] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 972.163966][ T6125] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 972.178005][ T6125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.190548][ T6125] usb 2-1: Product: syz [ 972.195550][ T6125] usb 2-1: Manufacturer: syz [ 972.202537][ T6125] usb 2-1: SerialNumber: syz [ 972.362043][T11605] ALSA: mixer_oss: invalid OSS volume '' [ 972.655140][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 972.673859][ T6125] usb 2-1: cannot find UAC_HEADER [ 972.746649][ T6125] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 972.761405][ T6125] usb 2-1: USB disconnect, device number 26 [ 972.816571][T11192] udevd[11192]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.886589][T11636] hub 9-0:1.0: USB hub found [ 972.894232][T11636] hub 9-0:1.0: 1 port detected [ 973.173245][ T6190] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 973.348034][ T6190] usb 3-1: Using ep0 maxpacket: 8 [ 973.356726][ T6190] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 973.368577][ T6190] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 973.378535][ T6190] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 973.386729][ T6190] usb 3-1: Product: syz [ 973.391057][ T6190] usb 3-1: Manufacturer: syz [ 973.395724][ T6190] usb 3-1: SerialNumber: syz [ 973.414821][T11670] netlink: 'syz.1.17108': attribute type 10 has an invalid length. [ 973.429968][T11670] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17108'. [ 973.461703][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 973.616662][T11682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17112'. [ 973.632702][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 973.638001][T11682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17112'. [ 973.650696][ T6190] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 973.662065][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.675620][ T6190] usb 3-1: Handspring Visor / Palm OS: port 138, is for unknown use [ 973.695042][ T6190] usb 3-1: Handspring Visor / Palm OS: port 172, is for unknown use [ 973.703802][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.718347][ T6190] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 973.725630][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 973.739879][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 973.755021][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.772925][ T10] usb 4-1: config 0 descriptor?? [ 973.865383][ T6190] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 973.882511][ T6190] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 973.904724][ T6190] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 973.941377][T11705] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17116'. [ 973.996392][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 974.100387][ T6190] usb 3-1: USB disconnect, device number 12 [ 974.132787][ T6190] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 974.182373][ T6190] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 974.206127][ T6190] visor 3-1:1.0: device disconnected [ 974.261682][ T10] hid_parser_main: 33 callbacks suppressed [ 974.261758][ T10] elecom 0003:056E:00FE.0003: unknown main item tag 0x4 [ 974.283767][ T10] elecom 0003:056E:00FE.0003: unknown main item tag 0x6 [ 974.292884][ T10] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 974.300988][ T10] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 974.308915][ T10] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 974.315951][ T10] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 974.325903][T11731] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_1, syncid = 0, id = 0 [ 974.330735][ T10] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 974.359636][ T10] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 974.367407][ T10] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 974.375475][ T10] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 974.438430][ T10] elecom 0003:056E:00FE.0003: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 974.472179][ T10] usb 4-1: USB disconnect, device number 44 [ 974.568374][T11735] fido_id[11735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 974.725992][ T6125] kernel write not supported for file /input/event2 (pid: 6125 comm: kworker/1:4) [ 974.794594][T11764] nbd: must specify a device to reconfigure [ 975.198101][T11792] mkiss: ax0: crc mode is auto. [ 976.048884][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 976.632445][T11892] netlink: 'syz.2.17178': attribute type 10 has an invalid length. [ 976.671152][T11892] team0: Port device dummy0 added [ 976.690973][T11892] netlink: 'syz.2.17178': attribute type 10 has an invalid length. [ 976.711250][T11892] team0: Port device dummy0 removed [ 976.779866][T11892] @: (slave dummy0): Enslaving as an active interface with an up link [ 977.647408][T11947] tipc: Enabling of bearer rejected, failed to enable media [ 978.001995][T11968] pim6reg: entered allmulticast mode [ 978.010997][T11968] pim6reg: left allmulticast mode [ 978.131222][T11978] netlink: 'syz.3.17205': attribute type 4 has an invalid length. [ 978.140956][T11978] __nla_validate_parse: 1 callbacks suppressed [ 978.140978][T11978] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17205'. [ 978.223741][T11983] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 978.599040][T12010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17219'. [ 978.626920][T12010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17219'. [ 978.723709][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 978.905869][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 978.913495][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 978.930468][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 978.950145][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 978.988321][ T10] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 979.003352][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.019849][ T10] usb 3-1: Product: syz [ 979.028834][ T10] usb 3-1: Manufacturer: syz [ 979.039003][ T10] usb 3-1: SerialNumber: syz [ 979.057716][ T10] usb 3-1: config 0 descriptor?? [ 979.199755][ T10] rc_core: IR keymap rc-streamzap not found [ 979.209835][ T10] Registered IR keymap rc-empty [ 979.223446][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 979.265262][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input148 [ 979.338794][ T10] usb 3-1: USB disconnect, device number 13 [ 979.446256][T12068] netlink: 216 bytes leftover after parsing attributes in process `syz.0.17235'. [ 979.457660][T12068] netlink: 'syz.0.17235': attribute type 2 has an invalid length. [ 979.601409][T12079] netlink: 'syz.0.17239': attribute type 39 has an invalid length. [ 979.613895][ T30] audit: type=1326 audit(939.833:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.3.17238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47c439c799 code=0x0 [ 979.745467][T12089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17241'. [ 980.328497][T12125] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17253'. [ 980.350898][T12127] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17252'. [ 980.912243][T12163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17263'. [ 980.943892][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17264'. [ 980.959083][T12163] netlink: 43 bytes leftover after parsing attributes in process `syz.2.17263'. [ 980.977059][T12163] netlink: 'syz.2.17263': attribute type 5 has an invalid length. [ 981.004014][T12167] pim6reg: entered allmulticast mode [ 981.030726][T12171] pim6reg: left allmulticast mode [ 981.693113][T12224] Invalid source name [ 982.416138][T12268] tmpfs: Bad value for 'nr_inodes' [ 982.665706][T12280] vimc link validate: Sensor B:src:256x16 (0x33424752, 6, 0, 2, 0) Raw Capture 1:snk:4096x2160 (0x30314742, 8, 0, 0, 0) [ 983.841495][T12306] __nla_validate_parse: 4 callbacks suppressed [ 983.841517][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17309'. [ 984.023909][ T6125] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 984.217754][ T6125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.223302][T12319] netlink: 184 bytes leftover after parsing attributes in process `syz.2.17315'. [ 984.229497][ T6125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.240982][T12319] xt_socket: unknown flags 0xd0 [ 984.251212][ T6125] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 984.263892][ T6125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.274497][ T6125] usb 2-1: config 0 descriptor?? [ 984.723315][ T6125] hkems 0003:2006:0118.0004: item fetching failed at offset 5/7 [ 984.734789][ T6125] hkems 0003:2006:0118.0004: parse failed [ 984.742427][ T6125] hkems 0003:2006:0118.0004: probe with driver hkems failed with error -22 [ 984.796210][T12342] Bluetooth: MGMT ver 1.23 [ 984.933457][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 984.946207][ T6125] usb 2-1: USB disconnect, device number 27 [ 985.537160][T12373] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17330'. [ 985.548730][T12370] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17330'. [ 985.710363][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17336'. [ 985.845164][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17340'. [ 987.369259][ T6193] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 987.455922][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 987.552794][ T6193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.573028][ T6193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.587797][ T6193] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 987.597558][ T6193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.614779][ T6193] usb 4-1: config 0 descriptor?? [ 987.931408][T12528] Bluetooth: MGMT ver 1.23 [ 988.012531][T12532] block nbd2: NBD_DISCONNECT [ 988.064737][ T6193] hid_parser_main: 49 callbacks suppressed [ 988.064763][ T6193] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 988.085831][ T6193] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 988.094074][ T6193] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 988.106496][ T6193] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 988.114308][ T6193] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 988.143818][ T6193] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 988.272740][ T6193] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 9: -71 [ 988.297782][ T6193] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -71 [ 988.331620][ T6193] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense [ 988.351326][ T6193] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 988.405602][ T6193] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -71 [ 988.442568][ T6193] usb 4-1: USB disconnect, device number 45 [ 989.239965][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 989.400216][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 989.412263][ T10] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 989.431450][ T10] usb 2-1: config 1 has no interface number 0 [ 989.439613][ T10] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 989.450054][ T10] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 989.460602][ T10] usb 2-1: config 1 interface 105 has no altsetting 0 [ 989.470695][ T10] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 989.487943][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 989.496230][ T10] usb 2-1: Product: syz [ 989.500936][ T10] usb 2-1: Manufacturer: syz [ 989.505609][ T10] usb 2-1: SerialNumber: syz [ 989.519764][T12588] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 989.541014][T12588] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 989.685814][T12623] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 989.998639][T12588] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 990.018348][T12588] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 990.037943][T12638] fuse: Bad value for 'group_id' [ 990.043296][T12638] fuse: Bad value for 'group_id' [ 990.241175][ T10] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 990.268181][ T10] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 990.298265][ T10] usb 2-1: USB disconnect, device number 28 [ 990.420792][ T30] audit: type=1326 audit(949.941:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12664 comm="syz.2.17447" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb68379c799 code=0x0 [ 990.506586][T12670] netlink: 'syz.3.17449': attribute type 1 has an invalid length. [ 990.516516][T12670] nbd: error processing sock list [ 991.070347][T12702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17462'. [ 991.130059][ T30] audit: type=1326 audit(950.605:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12703 comm="syz.0.17463" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab4199c799 code=0x0 [ 991.184122][T12708] autofs: Bad value for 'fd' [ 991.390405][T12721] program syz.3.17472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 991.747079][T12752] support for the xor transformation has been removed. [ 991.901557][ T6125] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 991.933605][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 992.049407][T12759] /dev/nullb0: Can't open blockdev [ 992.073633][ T6125] usb 3-1: Using ep0 maxpacket: 16 [ 992.082619][ T6125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.093439][ T6125] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 992.094186][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 992.103437][ T6125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.124917][ T6125] usb 3-1: config 0 descriptor?? [ 992.130331][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.130368][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.130392][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 992.130445][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 992.130471][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.138991][ T10] usb 2-1: config 0 descriptor?? [ 992.424364][ T9] usb 3-1: USB disconnect, device number 14 [ 992.630467][ T10] kye 0003:0458:4018.0006: unknown main item tag 0x0 [ 992.637223][ T10] kye 0003:0458:4018.0006: unknown main item tag 0x0 [ 992.645015][ T10] kye 0003:0458:4018.0006: unknown main item tag 0x0 [ 992.651875][ T10] kye 0003:0458:4018.0006: unknown main item tag 0x0 [ 992.655876][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 992.659028][ T10] kye 0003:0458:4018.0006: unknown main item tag 0x0 [ 992.684518][ T10] kye 0003:0458:4018.0006: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.1-1/input0 [ 992.849903][ T6193] usb 2-1: USB disconnect, device number 29 [ 992.927702][ T6125] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 993.090476][ T6125] usb 3-1: unable to get BOS descriptor or descriptor too short [ 993.101657][ T6125] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice= 0.f0 [ 993.111022][ T6125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.119052][ T6125] usb 3-1: Product: syz [ 993.123338][ T6125] usb 3-1: Manufacturer: syz [ 993.127990][ T6125] usb 3-1: SerialNumber: syz [ 993.363398][ T6125] gm12u320 3-1:9.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 993.372421][ T6125] gm12u320 3-1:9.0: probe with driver gm12u320 failed with error -5 [ 993.383569][ T6125] usb-storage 3-1:9.0: USB Mass Storage device detected [ 993.416670][ T6125] usb-storage 3-1:9.0: device ignored [ 993.499216][ T6125] usb 3-1: USB disconnect, device number 15 [ 993.632344][ T30] audit: type=1326 audit(952.944:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.3.17495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47c439c799 code=0x0 [ 994.017062][T12833] netlink: 84 bytes leftover after parsing attributes in process `syz.2.17498'. [ 994.722506][T12867] netlink: 'syz.3.17514': attribute type 1 has an invalid length. [ 994.730663][T12867] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.17514'. [ 994.904505][T12876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.017457][T12886] program syz.3.17523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 995.881384][T12947] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.17540'. [ 996.680731][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17555'. [ 996.915435][T13009] xt_l2tp: v2 sid > 0xffff: 1114112 [ 997.131057][T13028] program syz.0.17568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 998.122657][ T6125] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 998.166714][ T6193] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 998.296512][ T6125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 998.307667][ T6125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.317583][ T6125] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 998.330855][ T6125] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 998.340278][ T6125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.352607][ T6125] usb 4-1: config 0 descriptor?? [ 998.360697][ T6193] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 998.369542][ T6193] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 998.382854][ T6193] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 998.393742][ T6193] usb 3-1: config 220 has no interface number 2 [ 998.400157][ T6193] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 998.413722][ T6193] usb 3-1: config 220 interface 0 has no altsetting 0 [ 998.420554][ T6193] usb 3-1: config 220 interface 76 has no altsetting 0 [ 998.427550][ T6193] usb 3-1: config 220 interface 1 has no altsetting 0 [ 998.436897][ T6193] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 998.446422][ T6193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.454579][ T6193] usb 3-1: Product: syz [ 998.458820][ T6193] usb 3-1: Manufacturer: syz [ 998.463440][ T6193] usb 3-1: SerialNumber: syz [ 998.702110][ T6193] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 998.709517][ T6193] uvcvideo 3-1:220.0: No valid video chain found. [ 998.716434][ T6193] usb 3-1: selecting invalid altsetting 0 [ 998.732391][ T6193] usb 3-1: selecting invalid altsetting 0 [ 998.738301][ T6193] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 998.755621][ T6193] usb 3-1: USB disconnect, device number 16 [ 998.824862][ T6125] sunplus 0003:04FC:05D8.0007: hidraw0: USB HID v0.07 Device [HID 04fc:05d8] on usb-dummy_hcd.3-1/input0 [ 999.034318][ T10] usb 4-1: USB disconnect, device number 46 [ 999.554974][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 999.731065][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 999.739852][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 999.750413][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 999.764271][ T10] usb 2-1: config 220 has no interface number 2 [ 999.779638][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 999.805209][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 999.812284][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 999.819229][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 999.829604][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 999.846021][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.865034][ T10] usb 2-1: Product: syz [ 999.870972][ T10] usb 2-1: Manufacturer: syz [ 999.879429][ T10] usb 2-1: SerialNumber: syz [ 1000.140044][ T10] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1000.156190][ T10] uvcvideo 2-1:220.0: No valid video chain found. [ 1000.162891][ T10] usb 2-1: selecting invalid altsetting 0 [ 1000.200981][ T10] usb 2-1: selecting invalid altsetting 0 [ 1000.209317][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1000.226091][ T10] usb 2-1: USB disconnect, device number 30 [ 1000.519069][T13219] ALSA: seq fatal error: cannot create timer (-22) [ 1000.856723][T13244] netlink: zone id is out of range [ 1000.863830][T13244] netlink: zone id is out of range [ 1000.871274][T13244] netlink: zone id is out of range [ 1000.878695][T13244] netlink: zone id is out of range [ 1000.889136][T13244] netlink: zone id is out of range [ 1000.899948][T13244] netlink: zone id is out of range [ 1000.914405][T13244] netlink: zone id is out of range [ 1000.925078][T13244] netlink: zone id is out of range [ 1000.931031][T13244] netlink: zone id is out of range [ 1000.936524][T13244] netlink: zone id is out of range [ 1001.285111][T13268] program syz.2.17645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1001.494428][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17649'. [ 1001.512769][T13277] netlink: 'syz.1.17649': attribute type 2 has an invalid length. [ 1001.532628][T13277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17649'. [ 1001.896058][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1001.991575][T13307] tipc: Started in network mode [ 1001.998920][T13307] tipc: Node identity , cluster identity 4711 [ 1002.082544][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1002.094641][ T10] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 1002.114974][ T10] usb 4-1: config 127 has no interface number 0 [ 1002.126870][ T10] usb 4-1: config 127 interface 124 has no altsetting 0 [ 1002.146958][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1002.165122][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.184548][ T10] usb 4-1: Product: syz [ 1002.190493][ T10] usb 4-1: Manufacturer: syz [ 1002.201485][ T10] usb 4-1: SerialNumber: syz [ 1002.528623][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17675'. [ 1002.569459][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1002.652012][T13347] program syz.0.17678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1002.664189][T13349] netlink: 'syz.2.17677': attribute type 3 has an invalid length. [ 1002.746028][T13356] netlink: 'syz.2.17680': attribute type 4 has an invalid length. [ 1002.757306][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1002.774321][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.794875][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1002.826903][ T9] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1002.845867][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.867695][ T9] usb 2-1: config 0 descriptor?? [ 1003.170672][ T10] usb 4-1: reset high-speed USB device number 47 using dummy_hcd [ 1003.329335][ T9] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0 [ 1003.345683][ T9] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0 [ 1003.355622][ T9] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0 [ 1003.371163][ T9] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0 [ 1003.387117][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1003.396942][ T9] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0 [ 1003.411866][ T10] usb 4-1: device firmware changed [ 1003.420465][ T9] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0 [ 1003.434461][ T9] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0 [ 1003.455352][ T9] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0 [ 1003.472986][ T10] usb 4-1: USB disconnect, device number 47 [ 1003.488651][ T9] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0 [ 1003.513174][ T9] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0 [ 1003.530843][ T9] pantherlord 0003:0810:0002.0008: hidraw0: USB HID v0.08 Device [HID 0810:0002] on usb-dummy_hcd.1-1/input0 [ 1003.545543][ T9] pantherlord 0003:0810:0002.0008: no output reports found [ 1003.570585][ T9] usb 2-1: USB disconnect, device number 31 [ 1003.680563][T13409] fido_id[13409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1003.937122][T13434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17706'. [ 1004.331077][T13461] netlink: 'syz.2.17718': attribute type 4 has an invalid length. [ 1004.339255][T13461] netlink: 240 bytes leftover after parsing attributes in process `syz.2.17718'. [ 1004.685877][ T6193] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1004.709267][T13483] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.17727'. [ 1004.846136][ T6193] usb 3-1: Using ep0 maxpacket: 8 [ 1004.856307][ T6193] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1004.866733][ T6193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.875338][ T6193] usb 3-1: Product: syz [ 1004.880052][ T6193] usb 3-1: Manufacturer: syz [ 1004.884780][ T6193] usb 3-1: SerialNumber: syz [ 1004.897283][ T6193] usb 3-1: config 0 descriptor?? [ 1005.130350][ T6193] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1005.426113][ T6125] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1005.561007][ T6193] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1005.592060][T13506] fido_id[13506]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1005.607559][ T6193] usb 3-1: USB disconnect, device number 17 [ 1006.464550][ T30] audit: type=1326 audit(964.956:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13576 comm="syz.1.17763" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2df59c799 code=0x0 [ 1006.535085][ T6193] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1006.649100][T13586] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.17767'. [ 1006.708185][ T6193] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1006.716404][ T6193] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1006.726815][ T6193] usb 3-1: config 0 has no interface number 0 [ 1006.735402][ T6193] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 1006.746938][ T6193] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1006.761037][ T6193] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1006.769499][ T6193] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1006.778827][ T6193] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1006.787121][ T6193] usb 3-1: Manufacturer: syz [ 1006.795654][ T6193] usb 3-1: config 0 descriptor?? [ 1006.808531][ T6193] hub 3-1:0.52: bad descriptor, ignoring hub [ 1006.815152][ T6193] hub 3-1:0.52: probe with driver hub failed with error -5 [ 1007.010467][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17772'. [ 1007.045886][ T6193] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input149 [ 1007.267495][T13561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.279609][T13561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.291817][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1007.411800][ T10] usb 3-1: USB disconnect, device number 18 [ 1007.465021][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1007.636774][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1007.646055][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.660653][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.673015][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1007.687489][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1007.697594][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.712798][ T9] usb 4-1: config 0 descriptor?? [ 1008.138698][ T6193] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1008.167101][ T9] elecom 0003:056E:00FE.000A: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 1008.303718][ T6193] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1008.317575][ T6193] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1008.329390][ T6193] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1008.341056][ T6193] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1008.351262][ T6193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.365278][T13656] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1008.379449][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1008.388740][ T6125] usb 4-1: USB disconnect, device number 48 [ 1008.599172][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1008.971118][T13702] netlink: 763 bytes leftover after parsing attributes in process `syz.3.17795'. [ 1009.024761][T13704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17796'. [ 1009.262522][ T6193] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1009.300611][ T6193] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input150 [ 1009.361423][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1009.371259][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1009.389652][ T6193] usb 2-1: USB disconnect, device number 32 [ 1009.395675][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1010.245786][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17821'. [ 1010.438904][T13797] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.17827'. [ 1010.618752][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1010.684162][ T796] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1010.858946][ T796] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1010.876818][ T796] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.896489][ T796] usb 2-1: config 220 has no interface number 2 [ 1010.903380][ T796] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1010.917730][ T796] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1010.924575][ T796] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1010.932894][ T796] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1010.945737][ T796] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1010.955959][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.969000][ T796] usb 2-1: Product: syz [ 1010.973550][ T796] usb 2-1: Manufacturer: syz [ 1010.978210][ T796] usb 2-1: SerialNumber: syz [ 1011.216283][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1011.236491][ T796] usb 2-1: selecting invalid altsetting 0 [ 1011.246396][ T796] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1011.259208][ T796] uvcvideo 2-1:220.0: No valid video chain found. [ 1011.291336][ T796] usb 2-1: selecting invalid altsetting 0 [ 1011.311126][ T796] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1011.339499][ T796] usb 2-1: USB disconnect, device number 33 [ 1011.342634][T13857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17848'. [ 1011.367055][T13857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17848'. [ 1011.422910][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1011.604031][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1011.611664][T13875] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1011.628665][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1011.645092][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1011.665002][ T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1011.674794][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.689826][ T9] usb 4-1: Product: syz [ 1011.695527][ T9] usb 4-1: Manufacturer: syz [ 1011.700542][ T9] usb 4-1: SerialNumber: syz [ 1011.769515][T13880] netlink: 'syz.0.17855': attribute type 1 has an invalid length. [ 1011.964335][ T9] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1011.984851][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1012.167646][ T9] usb 4-1: 2:1 : can't get High Capability descriptor [ 1012.356168][T13924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17869'. [ 1012.399387][ T9] usb 4-1: USB disconnect, device number 49 [ 1012.606612][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1012.658008][T13945] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.17873'. [ 1012.777540][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1012.789403][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1012.809596][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.818607][ T10] usb 3-1: Product: syz [ 1012.823451][ T10] usb 3-1: Manufacturer: syz [ 1012.828125][ T10] usb 3-1: SerialNumber: syz [ 1012.837781][ T10] usb 3-1: config 0 descriptor?? [ 1012.849829][ T10] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1013.108716][T13958] netlink: 80 bytes leftover after parsing attributes in process `syz.3.17878'. [ 1013.118078][T13958] netlink: 'syz.3.17878': attribute type 3 has an invalid length. [ 1013.283676][ T10] usb 3-1: clie_3_5_startup: get interface number bad return length: 0 [ 1013.301457][ T10] visor 3-1:0.0: probe with driver visor failed with error -5 [ 1013.472146][T13972] netlink: 332 bytes leftover after parsing attributes in process `syz.3.17883'. [ 1013.506097][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1013.515415][ T10] usb 3-1: USB disconnect, device number 19 [ 1013.763597][ T30] audit: type=1326 audit(971.785:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.1.17875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2df59c799 code=0x7fc00000 [ 1014.162355][ T10] IPVS: starting estimator thread 0... [ 1014.245368][T14025] trusted_key: encrypted_key: key user:syz not found [ 1014.264042][T14019] IPVS: using max 27 ests per chain, 64800 per kthread [ 1014.365501][T14031] overlayfs: conflicting options: nfs_export=on,index=off [ 1014.607738][T14047] overlayfs: failed to resolve '//file0': -2 [ 1014.894215][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1015.000973][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1015.065051][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1015.072017][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.084456][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.095214][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1015.106005][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.117406][ T10] usb 4-1: config 0 descriptor?? [ 1015.173642][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1015.195587][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1015.204623][ T9] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 1015.225365][ T9] usb 3-1: config 127 has no interface number 0 [ 1015.231736][ T9] usb 3-1: config 127 interface 124 has no altsetting 0 [ 1015.242397][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1015.252081][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.260492][ T9] usb 3-1: Product: syz [ 1015.264813][ T9] usb 3-1: Manufacturer: syz [ 1015.269995][ T9] usb 3-1: SerialNumber: syz [ 1015.576085][ T10] konepure 0003:1E7D:2DB4.000B: item fetching failed at offset 0/4 [ 1015.588548][ T10] konepure 0003:1E7D:2DB4.000B: parse failed [ 1015.599883][ T10] konepure 0003:1E7D:2DB4.000B: probe with driver konepure failed with error -22 [ 1015.789090][ T796] usb 4-1: USB disconnect, device number 50 [ 1015.900264][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1016.198161][ T9] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 1016.382265][ T9] usb 3-1: device firmware changed [ 1016.413585][ T9] usb 3-1: USB disconnect, device number 20 [ 1016.561570][ T796] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1016.580234][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1016.734318][ T796] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1016.754204][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1016.765019][ T796] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.775568][ T9] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 1016.792128][ T796] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1016.795427][ T9] usb 3-1: config 127 has no interface number 0 [ 1016.814991][ T9] usb 3-1: config 127 interface 124 has no altsetting 0 [ 1016.821001][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1016.833049][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1016.833152][ T796] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1016.850201][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.871065][ T9] usb 3-1: Product: syz [ 1016.879802][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.882025][ T9] usb 3-1: Manufacturer: syz [ 1016.900988][ T796] usb 2-1: config 0 descriptor?? [ 1016.909185][ T9] usb 3-1: SerialNumber: syz [ 1016.966607][T14180] netlink: 104 bytes leftover after parsing attributes in process `syz.3.17944'. [ 1017.247100][T14194] sp0: Synchronizing with TNC [ 1017.320588][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1017.355286][ T796] hid_parser_main: 86 callbacks suppressed [ 1017.355310][ T796] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 1017.370126][ T796] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 1017.377506][ T796] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 1017.385507][ T796] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 1017.392550][ T796] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 1017.399805][ T796] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 1017.407574][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1017.407840][ T796] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 1017.424208][ T796] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 1017.432131][ T796] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 1017.439542][ T796] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 1017.473376][ T796] aureal 0003:0755:2626.000C: hidraw0: USB HID v0.0d Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 1017.515907][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.532673][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1017.561694][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1017.581018][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.603187][ T10] usb 4-1: config 0 descriptor?? [ 1017.635296][ T6190] usb 2-1: USB disconnect, device number 34 [ 1018.052641][ T10] hid (null): unknown global tag 0xd [ 1018.065360][ T10] kye 0003:0458:5019.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1018.081322][ T10] kye 0003:0458:5019.000D: unknown global tag 0xd [ 1018.087838][ T10] kye 0003:0458:5019.000D: item 0 1 1 13 parsing failed [ 1018.096023][ T10] kye 0003:0458:5019.000D: parse failed [ 1018.102097][ T10] kye 0003:0458:5019.000D: probe with driver kye failed with error -22 [ 1018.234684][T14251] ucma_write: process 8790 (syz.0.17960) changed security contexts after opening file descriptor, this is not allowed. [ 1018.274031][ T796] usb 4-1: USB disconnect, device number 51 [ 1018.324043][ T9] usb 3-1: USB disconnect, device number 21 [ 1018.498001][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1018.567649][T14281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17969'. [ 1018.680479][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1018.696164][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 1018.709710][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1018.731033][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 1018.751080][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 1018.764917][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1018.776158][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1018.788114][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65535, setting to 64 [ 1018.802263][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1018.819329][T14291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17974'. [ 1018.819811][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.854165][ T9] usb 3-1: Product: syz [ 1018.863800][ T9] usb 3-1: Manufacturer: syz [ 1018.882944][ T9] usb 3-1: SerialNumber: syz [ 1018.898617][ T9] usb 3-1: config 0 descriptor?? [ 1018.907609][T14229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1018.924570][T14229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1018.946308][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1018.997949][T14303] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1019.228465][ T9] usb 3-1: USB disconnect, device number 22 [ 1019.279051][T14325] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 1019.521019][T14346] Invalid source name [ 1020.267237][T14407] tmpfs: Invalid uid '0x00000000ffffffff' [ 1020.465415][T14417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18015'. [ 1021.220725][T14465] Bluetooth: MGMT ver 1.23 [ 1021.457363][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1021.564131][ T6190] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1021.628331][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1021.635571][ T9] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.647336][ T9] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.659035][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1021.666655][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1021.675833][ T30] audit: type=1326 audit(979.176:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.2.18023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68379c799 code=0x7fc00000 [ 1021.698095][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.710710][ T9] usb 2-1: config 0 descriptor?? [ 1021.716289][ T30] audit: type=1326 audit(979.176:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.2.18023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb68379c799 code=0x7fc00000 [ 1021.738525][ T6190] usb 4-1: Using ep0 maxpacket: 32 [ 1021.750786][ T30] audit: type=1326 audit(979.176:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.2.18023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68379c799 code=0x7fc00000 [ 1021.775009][ T30] audit: type=1326 audit(979.185:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.2.18023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68379c799 code=0x7fc00000 [ 1021.797168][ T6190] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.809346][ T6190] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.821635][ T6190] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1021.831152][ T6190] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1021.840275][ T6190] usb 4-1: Product: syz [ 1021.845030][ T6190] usb 4-1: Manufacturer: syz [ 1021.858180][ T30] audit: type=1326 audit(979.185:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.2.18023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68379c799 code=0x7fc00000 [ 1021.881536][ T6190] hub 4-1:4.0: USB hub found [ 1021.889853][ T30] audit: type=1326 audit(979.185:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.2.18023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68379c799 code=0x7fc00000 [ 1021.913362][ T30] audit: type=1326 audit(979.185:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.2.18023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68379c799 code=0x7fc00000 [ 1021.935961][ T30] audit: type=1326 audit(979.185:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.2.18023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68379c799 code=0x7fc00000 [ 1022.080991][ T6190] hub 4-1:4.0: 5 ports detected [ 1022.086395][ T6190] hub 4-1:4.0: insufficient power available to use all downstream ports [ 1022.217329][ T9] hid-corsair-void 0003:1B1C:1B25.000E: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.1-1/input0 [ 1022.295475][ T6190] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1022.327069][ T6190] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1022.368714][ T6190] usb 4-1: USB disconnect, device number 52 [ 1022.449330][ T9] hid-corsair-void 0003:1B1C:1B25.000E: failed to request battery (reason: -71) [ 1022.449614][ T796] usb 2-1: USB disconnect, device number 35 [ 1022.465183][ T10] hid-corsair-void 0003:1B1C:1B25.000E: failed to request firmware (reason: -71) [ 1022.485721][T14509] program syz.2.18038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1022.659343][T14522] overlayfs: failed to resolve './file1': -2 [ 1022.933983][T14527] xt_l2tp: invalid flags combination: 0 [ 1023.355087][T14544] can0: slcan on pty24. [ 1023.480304][T14543] can0 (unregistered): slcan off pty24. [ 1023.898878][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18064'. [ 1023.992260][T14594] comedi comedi1: das16m1: I/O port conflict (0x4e27,16) [ 1024.112472][T14602] xt_bpf: check failed: parse error [ 1026.441804][T14732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1026.660600][T14750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18124'. [ 1026.737817][ T796] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1026.793146][T14758] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1026.908750][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 1026.923018][ T796] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1026.934282][ T796] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1026.945604][ T796] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1026.956044][ T796] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1026.956085][ T796] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1026.956136][ T796] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1026.956161][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.970893][ T796] usbtmc 2-1:16.0: bulk endpoints not found [ 1027.164947][T14781] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18137'. [ 1027.213166][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1027.222437][ T796] usb 2-1: USB disconnect, device number 36 [ 1027.355139][T14796] Cannot find set identified by id 99 to match [ 1027.571810][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1027.641313][T14816] devtmpfs: Too few inodes for current use [ 1027.658760][ T30] audit: type=1326 audit(984.770:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14755 comm="syz.0.18127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4199c799 code=0x7fc00000 [ 1027.731833][ T6190] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 1027.906103][ T6190] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1027.917324][ T6190] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1027.930069][ T6190] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1027.940387][ T6190] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1027.940514][T14828] No buffer was provided with the request [ 1027.950314][ T6190] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1027.950369][ T6190] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=61.23 [ 1027.950393][ T6190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.991376][ T6190] usbtmc 2-1:16.0: bulk endpoints not found [ 1028.005108][ T6190] ati_remote 2-1:16.0: ati_remote_probe: Unexpected endpoint_in [ 1028.032375][T14833] fuse: Invalid rootmode [ 1028.205378][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1028.215251][ T796] usb 2-1: USB disconnect, device number 37 [ 1028.475326][T14867] vivid-000: disconnect [ 1028.482107][T14866] vivid-000: reconnect [ 1029.151060][T14895] Zero length message leads to an empty skb [ 1029.345277][ T30] audit: type=1326 audit(986.351:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14864 comm="syz.3.18168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c439c799 code=0x7fc00000 [ 1029.515688][T14912] [U] [ 1029.910132][T14939] mkiss: ax0: crc mode is auto. [ 1030.313083][T14972] binder: 14971:14972 ioctl 4018620d 0 returned -22 [ 1030.645441][T14997] netlink: 'syz.1.18223': attribute type 11 has an invalid length. [ 1030.960730][ T6190] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1031.094564][T15018] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18231'. [ 1031.143454][ T6190] usb 2-1: Using ep0 maxpacket: 16 [ 1031.152815][ T6190] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1031.162603][ T6190] usb 2-1: config 0 has no interface number 0 [ 1031.171038][ T6190] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.182722][ T6190] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.192785][ T6190] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1031.202816][ T6190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.215737][ T6190] usb 2-1: config 0 descriptor?? [ 1031.868557][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1031.876435][ T6190] uclogic 0003:28BD:0071.000F: failed retrieving string descriptor #100: -71 [ 1031.888386][ T6190] uclogic 0003:28BD:0071.000F: failed retrieving pen parameters: -71 [ 1031.911276][ T6190] uclogic 0003:28BD:0071.000F: pen probing failed: -71 [ 1031.923155][ T6190] uclogic 0003:28BD:0071.000F: failed probing parameters: -71 [ 1031.931181][ T6190] uclogic 0003:28BD:0071.000F: probe with driver uclogic failed with error -71 [ 1031.959909][ T6190] usb 2-1: USB disconnect, device number 38 [ 1032.062747][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1032.080312][ T10] usb 4-1: config 0 has no interface number 0 [ 1032.087322][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.098666][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.110168][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1032.119743][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.132356][ T10] usb 4-1: config 0 descriptor?? [ 1032.168435][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1032.269398][T15076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18246'. [ 1032.551591][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18252'. [ 1032.591892][ T10] prodikeys 0003:041E:2801.0010: item fetching failed at offset 5/7 [ 1032.622944][ T10] prodikeys 0003:041E:2801.0010: hid parse failed [ 1032.631912][ T10] prodikeys 0003:041E:2801.0010: probe with driver prodikeys failed with error -22 [ 1032.814391][ T10] usb 4-1: USB disconnect, device number 53 [ 1033.066298][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18266'. [ 1033.247894][T15145] netlink: 128 bytes leftover after parsing attributes in process `syz.2.18271'. [ 1033.354644][ T10] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1033.527225][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1033.550186][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.563987][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1033.573274][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.596575][ T10] hub 2-1:4.0: USB hub found [ 1033.599101][T15162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18280'. [ 1033.814930][ T10] hub 2-1:4.0: 2 ports detected [ 1033.824632][ T10] usb 2-1: selecting invalid altsetting 1 [ 1033.841964][ T10] hub 2-1:4.0: Using single TT (err -22) [ 1033.904789][T15178] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18285'. [ 1034.122783][T15188] ptrace attach of "./syz-executor exec"[6071] was attempted by ""[15188] [ 1034.272510][ T10] usb 2-1: USB disconnect, device number 39 [ 1034.374949][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1034.600358][T15225] comedi comedi3: mpc624: I/O port conflict (0x101,16) [ 1034.832699][T15241] support for cryptoloop has been removed. Use dm-crypt instead. [ 1035.250601][T15274] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1035.731001][T15302] binder: 15301:15302 ioctl c018620b 0 returned -14 [ 1036.095497][T15332] net_ratelimit: 30 callbacks suppressed [ 1036.095518][T15332] netlink: zone id is out of range [ 1036.125805][T15332] netlink: zone id is out of range [ 1036.134623][T15332] netlink: zone id is out of range [ 1036.139867][T15332] netlink: zone id is out of range [ 1036.145698][T15332] netlink: zone id is out of range [ 1036.150932][T15332] netlink: zone id is out of range [ 1036.156644][T15332] netlink: zone id is out of range [ 1036.161881][T15332] netlink: zone id is out of range [ 1036.167992][T15332] netlink: zone id is out of range [ 1036.173244][T15332] netlink: zone id is out of range [ 1036.430498][T15348] sp0: Synchronizing with TNC [ 1036.622187][T15367] fuse: Bad value for 'user_id' [ 1036.628508][T15367] fuse: Bad value for 'user_id' [ 1037.043827][T15385] IPVS: Error connecting to the multicast addr [ 1037.254913][T15399] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18377'. [ 1037.467075][T15409] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.18380'. [ 1037.619416][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1038.344829][T15458] sp0: Synchronizing with TNC [ 1038.363283][T15458] sp0: Found TNC [ 1038.370190][T15457] [U] ` [ 1039.790815][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18430'. [ 1040.598851][T15573] netlink: 104 bytes leftover after parsing attributes in process `syz.3.18446'. [ 1040.671092][ T6190] kernel read not supported for file /mdstat (pid: 6190 comm: kworker/0:7) [ 1040.813842][T15585] can0: slcan on ptm0. [ 1040.891387][T15584] can0 (unregistered): slcan off ptm0. [ 1040.944683][T15597] mkiss: ax0: crc mode is auto. [ 1041.163161][T15611] autofs: Bad value for 'fd' [ 1041.692870][T15651] tipc: Started in network mode [ 1041.701344][T15651] tipc: Node identity @, cluster identity 4711 [ 1041.709690][T15654] sd 0:0:1:0: device reset [ 1042.076740][ T6190] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1042.269096][ T6190] usb 3-1: Using ep0 maxpacket: 8 [ 1042.285736][ T6190] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1042.309297][ T6190] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1042.327778][T15694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1042.339580][ T6190] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1042.339611][ T6190] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1042.346696][ T6190] usb 3-1: New USB device found, idVendor=07b8, idProduct=b21d, bcdDevice=97.ae [ 1042.356246][T15694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1042.377604][T15694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1042.377640][ T6190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.389143][T15694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1042.441755][ T6190] usb 3-1: Product: syz [ 1042.454763][ T6190] usb 3-1: Manufacturer: syz [ 1042.475860][ T6190] usb 3-1: SerialNumber: syz [ 1042.491303][ T6190] usb 3-1: config 0 descriptor?? [ 1042.526511][ T30] audit: type=1800 audit(998.681:229): pid=15703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.18493" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1042.714559][T15713] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1042.723587][T15711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.751087][ T6190] usb 3-1: USB disconnect, device number 23 [ 1043.241883][ T6190] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1043.403149][ T6190] usb 3-1: Using ep0 maxpacket: 32 [ 1043.412483][ T6190] usb 3-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=fc.77 [ 1043.422286][ T6190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.430662][ T6190] usb 3-1: Product: syz [ 1043.435840][ T6190] usb 3-1: Manufacturer: syz [ 1043.440490][ T6190] usb 3-1: SerialNumber: syz [ 1043.449995][ T6190] usb 3-1: config 0 descriptor?? [ 1043.459864][ T6190] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 1043.466705][ T6190] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1043.472866][ T6190] dvb-usb: bulk message failed: -22 (2/0) [ 1043.483582][ T6190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1043.494828][ T6190] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 1043.502712][ T6190] usb 3-1: media controller created [ 1043.508061][ T6190] dvb-usb: bulk message failed: -22 (6/0) [ 1043.514078][ T6190] dw2102: i2c transfer failed. [ 1043.521232][ T6190] dvb-usb: bulk message failed: -22 (6/0) [ 1043.527063][ T6190] dw2102: i2c transfer failed. [ 1043.532042][ T6190] dvb-usb: bulk message failed: -22 (6/0) [ 1043.537798][ T6190] dw2102: i2c transfer failed. [ 1043.544299][ T6190] dvb-usb: bulk message failed: -22 (6/0) [ 1043.550059][ T6190] dw2102: i2c transfer failed. [ 1043.554946][ T6190] dvb-usb: bulk message failed: -22 (6/0) [ 1043.560705][ T6190] dw2102: i2c transfer failed. [ 1043.566179][ T6190] dvb-usb: bulk message failed: -22 (6/0) [ 1043.571941][ T6190] dw2102: i2c transfer failed. [ 1043.577363][ T6190] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1043.593096][ T6190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1043.620844][ T6190] dvb-usb: bulk message failed: -22 (1/0) [ 1043.626755][ T6190] dw2102: command 0x51 transfer failed. [ 1043.637379][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1043.680811][ T6190] DVB: Unable to find symbol m88rs2000_attach() [ 1043.698822][ T6190] dvb-usb: no frontend was attached by 'TeVii S421 PCI' [ 1043.769017][ T9] hid_parser_main: 37 callbacks suppressed [ 1043.769041][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1043.783322][ T6190] rc_core: IR keymap rc-su3000 not found [ 1043.789589][ T6190] Registered IR keymap rc-empty [ 1043.794656][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1043.803491][ T6190] rc rc0: TeVii S421 PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1043.812308][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1043.821927][ T6190] input: TeVii S421 PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input151 [ 1043.832556][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1043.840005][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1043.848689][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1043.854140][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1043.862667][ T6190] dvb-usb: schedule remote query interval to 150 msecs. [ 1043.869773][ T6190] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1043.876335][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1043.884177][ T6190] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 1043.892154][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1043.900513][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.913983][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1043.923500][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1043.931038][ T6190] usb 3-1: USB disconnect, device number 24 [ 1043.937067][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.949127][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1043.963106][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1043.982941][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1044.009642][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.030478][ T9] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1044.064669][ T10] usb 2-1: config 0 descriptor?? [ 1044.181819][T15776] fido_id[15776]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1044.199831][ T6190] dvb-usb: TeVii S421 PCI successfully deinitialized and disconnected. [ 1044.375199][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1044.428525][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1044.561357][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0012/input/input152 [ 1044.770550][ T796] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1044.936205][ T796] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1044.952450][ T796] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1044.972708][ T796] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.981351][ T10] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1044.988001][ T796] usb 3-1: config 220 has no interface number 2 [ 1045.001894][ T796] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1045.015747][ T796] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1045.024143][ T796] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1045.032357][ T796] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1045.043254][ T796] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1045.052775][ T10] usb 2-1: USB disconnect, device number 40 [ 1045.053392][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.089212][ T796] usb 3-1: Product: syz [ 1045.102645][ T796] usb 3-1: Manufacturer: syz [ 1045.113348][ T796] usb 3-1: SerialNumber: syz [ 1045.151428][T15849] fido_id[15849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1045.367560][ T796] uvcvideo 3-1:220.1: Unknown video format f2639f9c-5150-865f-d928-429415335200 [ 1045.377047][ T796] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1045.384614][ T796] uvcvideo 3-1:220.0: No valid video chain found. [ 1045.394639][ T796] usb 3-1: selecting invalid altsetting 0 [ 1045.458484][ T796] usb 3-1: selecting invalid altsetting 0 [ 1045.478046][ T796] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1045.510076][ T796] usb 3-1: USB disconnect, device number 25 [ 1046.470116][ T796] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1046.546199][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1046.642946][ T796] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.658113][ T796] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1046.667874][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.692335][ T796] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1046.863200][T15974] tipc: Failed to obtain node identity [ 1046.881532][T15974] tipc: Enabling of bearer rejected, failed to enable media [ 1047.378586][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1047.477269][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1047.583844][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1047.592679][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1047.601665][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.612202][ T10] usb 4-1: config 220 has no interface number 2 [ 1047.620803][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1047.634323][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1047.641305][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1047.648974][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1047.659214][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1047.668665][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.677071][ T10] usb 4-1: Product: syz [ 1047.681934][ T10] usb 4-1: Manufacturer: syz [ 1047.686664][ T10] usb 4-1: SerialNumber: syz [ 1047.932628][ T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1047.940370][ T10] uvcvideo 4-1:220.0: No valid video chain found. [ 1047.947167][ T10] usb 4-1: selecting invalid altsetting 0 [ 1047.974698][ T10] usb 4-1: selecting invalid altsetting 0 [ 1047.981100][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1047.995985][ T10] usb 4-1: USB disconnect, device number 54 [ 1048.016961][ T796] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1048.049246][ T796] stv0680 2-1:4.0: last error: 86, command = 0x78 [ 1048.070579][ T796] usb 2-1: USB disconnect, device number 41 [ 1048.253438][T16050] vimc link validate: Scaler:src:16x16 (0x33524742, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38414261, 8, 0, 0, 0) [ 1048.510322][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18586'. [ 1048.649956][T16073] ================================================================== [ 1048.658059][T16073] BUG: KASAN: use-after-free in fuse_copy_do+0x193/0x380 [ 1048.665131][T16073] Write of size 2 at addr ffff88804a648fff by task syz.2.18588/16073 [ 1048.673208][T16073] [ 1048.675581][T16073] CPU: 1 UID: 0 PID: 16073 Comm: syz.2.18588 Tainted: G L syzkaller #0 PREEMPT(full) [ 1048.675614][T16073] Tainted: [L]=SOFTLOCKUP [ 1048.675623][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1048.675638][T16073] Call Trace: [ 1048.675647][T16073] [ 1048.675657][T16073] dump_stack_lvl+0xe8/0x150 [ 1048.675692][T16073] print_report+0xba/0x230 [ 1048.675720][T16073] ? fuse_copy_do+0x193/0x380 [ 1048.675747][T16073] kasan_report+0x117/0x150 [ 1048.675777][T16073] ? fuse_copy_do+0x193/0x380 [ 1048.675807][T16073] kasan_check_range+0x264/0x2c0 [ 1048.675847][T16073] ? fuse_copy_do+0x193/0x380 [ 1048.675874][T16073] __asan_memcpy+0x40/0x70 [ 1048.675898][T16073] fuse_copy_do+0x193/0x380 [ 1048.675929][T16073] fuse_copy_folio+0xefc/0x1b00 [ 1048.675981][T16073] ? __folio_batch_add_and_move+0x78b/0xc50 [ 1048.676013][T16073] ? filemap_add_folio+0x356/0x530 [ 1048.676046][T16073] fuse_dev_do_write+0x2b9d/0x4060 [ 1048.676087][T16073] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 1048.676123][T16073] ? aa_file_perm+0x192/0x15e0 [ 1048.676156][T16073] ? aa_file_perm+0x50e/0x15e0 [ 1048.676185][T16073] ? aa_file_perm+0x192/0x15e0 [ 1048.676219][T16073] ? __pfx___futex_wait+0x10/0x10 [ 1048.676242][T16073] ? __pfx_aa_file_perm+0x10/0x10 [ 1048.676271][T16073] ? __pfx_futex_wake_mark+0x10/0x10 [ 1048.676297][T16073] fuse_dev_write+0x177/0x220 [ 1048.676325][T16073] ? __pfx_fuse_dev_write+0x10/0x10 [ 1048.676355][T16073] ? bpf_lsm_file_permission+0x9/0x20 [ 1048.676384][T16073] ? security_file_permission+0x75/0x260 [ 1048.676482][T16073] vfs_write+0x61d/0xb90 [ 1048.676514][T16073] ? __pfx_vfs_write+0x10/0x10 [ 1048.676546][T16073] ? __fget_files+0x2a/0x420 [ 1048.676585][T16073] ksys_write+0x150/0x270 [ 1048.676614][T16073] ? __pfx_ksys_write+0x10/0x10 [ 1048.676647][T16073] do_syscall_64+0x14d/0xf80 [ 1048.676676][T16073] ? trace_irq_disable+0x3b/0x150 [ 1048.676697][T16073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.676719][T16073] ? clear_bhb_loop+0x40/0x90 [ 1048.676743][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.676765][T16073] RIP: 0033:0x7fb68379c799 [ 1048.676787][T16073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.676806][T16073] RSP: 002b:00007fb684629028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1048.676830][T16073] RAX: ffffffffffffffda RBX: 00007fb683a15fa0 RCX: 00007fb68379c799 [ 1048.676847][T16073] RDX: 000000000000002a RSI: 0000200000000080 RDI: 0000000000000003 [ 1048.676862][T16073] RBP: 00007fb683832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1048.676877][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.676891][T16073] R13: 00007fb683a16038 R14: 00007fb683a15fa0 R15: 00007ffdd9afd1b8 [ 1048.676916][T16073] [ 1048.676925][T16073] [ 1048.953977][T16073] The buggy address belongs to the physical page: [ 1048.960414][T16073] page: refcount:3 mapcount:0 mapping:ffff88806bc11e20 index:0x7 pfn:0x4a648 [ 1048.969196][T16073] memcg:ffff88802c808100 [ 1048.973456][T16073] aops:empty_aops ino:1 dentry name(?):"/" [ 1048.979348][T16073] flags: 0xfff00000000005(locked|referenced|node=0|zone=1|lastcpupid=0x7ff) [ 1048.988052][T16073] raw: 00fff00000000005 0000000000000000 dead000000000122 ffff88806bc11e20 [ 1048.996659][T16073] raw: 0000000000000007 0000000000000000 00000003ffffffff ffff88802c808100 [ 1049.005252][T16073] page dumped because: kasan: bad access detected [ 1049.011681][T16073] page_owner tracks the page as allocated [ 1049.017406][T16073] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 16073, tgid 16069 (syz.2.18588), ts 1048649692030, free_ts 1048521786440 [ 1049.035577][T16073] post_alloc_hook+0x231/0x280 [ 1049.040379][T16073] get_page_from_freelist+0x23a1/0x2440 [ 1049.045950][T16073] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1049.051792][T16073] alloc_pages_mpol+0x232/0x4a0 [ 1049.056667][T16073] alloc_pages_noprof+0xa8/0x190 [ 1049.061632][T16073] folio_alloc_noprof+0x1e/0x30 [ 1049.066502][T16073] filemap_alloc_folio_noprof+0x111/0x470 [ 1049.072275][T16073] __filemap_get_folio_mpol+0x3fc/0xb00 [ 1049.077842][T16073] fuse_dev_do_write+0x298b/0x4060 [ 1049.082979][T16073] fuse_dev_write+0x177/0x220 [ 1049.087686][T16073] vfs_write+0x61d/0xb90 [ 1049.091953][T16073] ksys_write+0x150/0x270 [ 1049.096311][T16073] do_syscall_64+0x14d/0xf80 [ 1049.100926][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.106838][T16073] page last free pid 15985 tgid 15984 stack trace: [ 1049.113356][T16073] free_unref_folios+0xd71/0x1530 [ 1049.118401][T16073] folios_put_refs+0x9ff/0xb40 [ 1049.123186][T16073] free_pages_and_swap_cache+0x2e7/0x5b0 [ 1049.128837][T16073] tlb_flush_mmu+0x6d3/0xa30 [ 1049.133450][T16073] tlb_finish_mmu+0xf9/0x230 [ 1049.138069][T16073] exit_mmap+0x498/0xa10 [ 1049.142339][T16073] __mmput+0x118/0x430 [ 1049.146431][T16073] exit_mm+0x18e/0x250 [ 1049.150515][T16073] do_exit+0x8b9/0x2580 [ 1049.154691][T16073] do_group_exit+0x21b/0x2d0 [ 1049.159294][T16073] get_signal+0x1284/0x1330 [ 1049.163825][T16073] arch_do_signal_or_restart+0xbc/0x830 [ 1049.169394][T16073] exit_to_user_mode_loop+0x86/0x480 [ 1049.174700][T16073] do_syscall_64+0x32d/0xf80 [ 1049.179315][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.185227][T16073] [ 1049.187566][T16073] Memory state around the buggy address: [ 1049.193213][T16073] ffff88804a648f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.201292][T16073] ffff88804a648f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.209378][T16073] >ffff88804a649000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1049.217449][T16073] ^ [ 1049.221528][T16073] ffff88804a649080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1049.229609][T16073] ffff88804a649100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1049.237682][T16073] ================================================================== [ 1049.256485][T16073] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1049.263754][T16073] CPU: 0 UID: 0 PID: 16073 Comm: syz.2.18588 Tainted: G L syzkaller #0 PREEMPT(full) [ 1049.274816][T16073] Tainted: [L]=SOFTLOCKUP [ 1049.279173][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1049.289265][T16073] Call Trace: [ 1049.292582][T16073] [ 1049.295543][T16073] vpanic+0x56c/0xa60 [ 1049.299580][T16073] ? __pfx_vpanic+0x10/0x10 [ 1049.304142][T16073] ? __pfx___schedule+0x10/0x10 [ 1049.309135][T16073] panic+0xc5/0xd0 [ 1049.312908][T16073] ? __pfx_panic+0x10/0x10 [ 1049.317373][T16073] ? preempt_schedule_thunk+0x16/0x30 [ 1049.322804][T16073] ? fuse_copy_do+0x193/0x380 [ 1049.327652][T16073] check_panic_on_warn+0x89/0xb0 [ 1049.332634][T16073] ? fuse_copy_do+0x193/0x380 [ 1049.337475][T16073] end_report+0x73/0x180 [ 1049.341758][T16073] ? fuse_copy_do+0x193/0x380 [ 1049.346478][T16073] kasan_report+0x128/0x150 [ 1049.351015][T16073] ? fuse_copy_do+0x193/0x380 [ 1049.355735][T16073] kasan_check_range+0x264/0x2c0 [ 1049.360705][T16073] ? fuse_copy_do+0x193/0x380 [ 1049.365412][T16073] __asan_memcpy+0x40/0x70 [ 1049.369851][T16073] fuse_copy_do+0x193/0x380 [ 1049.374409][T16073] fuse_copy_folio+0xefc/0x1b00 [ 1049.379286][T16073] ? __folio_batch_add_and_move+0x78b/0xc50 [ 1049.385209][T16073] ? filemap_add_folio+0x356/0x530 [ 1049.390352][T16073] fuse_dev_do_write+0x2b9d/0x4060 [ 1049.395527][T16073] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 1049.401026][T16073] ? aa_file_perm+0x192/0x15e0 [ 1049.405856][T16073] ? aa_file_perm+0x50e/0x15e0 [ 1049.410651][T16073] ? aa_file_perm+0x192/0x15e0 [ 1049.415535][T16073] ? __pfx___futex_wait+0x10/0x10 [ 1049.420582][T16073] ? __pfx_aa_file_perm+0x10/0x10 [ 1049.425632][T16073] ? __pfx_futex_wake_mark+0x10/0x10 [ 1049.430942][T16073] fuse_dev_write+0x177/0x220 [ 1049.435651][T16073] ? __pfx_fuse_dev_write+0x10/0x10 [ 1049.440876][T16073] ? bpf_lsm_file_permission+0x9/0x20 [ 1049.446298][T16073] ? security_file_permission+0x75/0x260 [ 1049.451963][T16073] vfs_write+0x61d/0xb90 [ 1049.456246][T16073] ? __pfx_vfs_write+0x10/0x10 [ 1049.461037][T16073] ? __fget_files+0x2a/0x420 [ 1049.465683][T16073] ksys_write+0x150/0x270 [ 1049.470039][T16073] ? __pfx_ksys_write+0x10/0x10 [ 1049.474924][T16073] do_syscall_64+0x14d/0xf80 [ 1049.479551][T16073] ? trace_irq_disable+0x3b/0x150 [ 1049.484595][T16073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.490893][T16073] ? clear_bhb_loop+0x40/0x90 [ 1049.495593][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.501504][T16073] RIP: 0033:0x7fb68379c799 [ 1049.505936][T16073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.525579][T16073] RSP: 002b:00007fb684629028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1049.534032][T16073] RAX: ffffffffffffffda RBX: 00007fb683a15fa0 RCX: 00007fb68379c799 [ 1049.542034][T16073] RDX: 000000000000002a RSI: 0000200000000080 RDI: 0000000000000003 [ 1049.550038][T16073] RBP: 00007fb683832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1049.558062][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.566072][T16073] R13: 00007fb683a16038 R14: 00007fb683a15fa0 R15: 00007ffdd9afd1b8 [ 1049.574091][T16073] [ 1049.577750][T16073] Kernel Offset: disabled [ 1049.582137][T16073] Rebooting in 86400 seconds..