last executing test programs: 6m52.219531095s ago: executing program 3 (id=2193): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 6m52.056254381s ago: executing program 3 (id=2196): unshare(0x24020400) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', 'nl80211\x00'}, 0x0, 0x0) 6m51.825116836s ago: executing program 3 (id=2200): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x7, 0xb01801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x3, 0x6, 0x5345) 6m51.607137196s ago: executing program 3 (id=2203): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m49.783495398s ago: executing program 3 (id=2219): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file0\x00') 6m49.568459974s ago: executing program 3 (id=2223): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, 0x0}) 6m34.300214514s ago: executing program 32 (id=2223): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, 0x0}) 2m39.887363644s ago: executing program 4 (id=6689): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010021"], 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c0001800800"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 2m39.68747431s ago: executing program 4 (id=6695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000002c0)) 2m39.371197939s ago: executing program 4 (id=6701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0x2}]}) 2m39.005681168s ago: executing program 4 (id=6708): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) quotactl_fd$Q_GETQUOTA(r1, 0x1, 0x0, 0x0) 2m38.740603793s ago: executing program 4 (id=6715): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7', @ANYRESOCT], 0xc) 2m38.556240089s ago: executing program 4 (id=6719): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 2m23.462719472s ago: executing program 33 (id=6719): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1m41.04795894s ago: executing program 6 (id=8034): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x93, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde1484db4241544716b9ea42231ed9953a3d05dacf5bb80b4b7ee0fae7aea53492b38978defbb39a1ffa8a175e825fc3c538679af0958a5dfa261b6ba5b9c3d33f35ed09754f6f92c2dc69f339e7fd955a6694659f2754ffa05ce3445bf17168f8012059dad0306b8e2d4c82b1b30c59e9653181182ba401f298ca57733261f9116b885ef2d", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1m40.716474571s ago: executing program 6 (id=8043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x60, r1, 0x405, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 1m40.50996349s ago: executing program 6 (id=8048): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0"], 0x120}}, 0x0) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname(r0, 0x0, &(0x7f0000000100)) 1m40.292084797s ago: executing program 6 (id=8051): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 1m40.047526582s ago: executing program 6 (id=8056): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) 1m39.871480016s ago: executing program 6 (id=8060): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x940e2689cab82739, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0xc8c0) 1m24.777557282s ago: executing program 34 (id=8060): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x940e2689cab82739, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0xc8c0) 3.075715284s ago: executing program 1 (id=9864): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa08, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 2.847307935s ago: executing program 1 (id=9868): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) 2.587261732s ago: executing program 1 (id=9875): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) 1.797371656s ago: executing program 7 (id=9891): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400cc04}, 0x0) 1.588131333s ago: executing program 1 (id=9895): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) close(r0) 1.528038194s ago: executing program 7 (id=9897): r0 = gettid() r1 = epoll_create(0x1) epoll_pwait2(r1, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.479366378s ago: executing program 0 (id=9899): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = dup(r0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0x1f, "80fb8096c798e3fbc23dc9ea3940df7e0dd634c07e7a47d46ca7900a608521"}, &(0x7f00000003c0)=0x27) 1.43477916s ago: executing program 1 (id=9900): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 1.272267247s ago: executing program 0 (id=9903): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.270981909s ago: executing program 7 (id=9904): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x1) close(0x3) 1.135415631s ago: executing program 1 (id=9907): bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 985.505834ms ago: executing program 0 (id=9909): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) io_uring_setup(0x4b12, &(0x7f0000002ac0)={0x0, 0x88e6, 0x48, 0x2, 0x159}) lseek(r0, 0x2000, 0x4) 951.616291ms ago: executing program 7 (id=9910): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0) 899.923235ms ago: executing program 5 (id=9911): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1}) 849.420745ms ago: executing program 2 (id=9912): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="09000000e7001400000088a8fbf788a83baa9900d6f18f8e950088a800008100", 0x20, 0x24042801, &(0x7f0000000c80)={0x11, 0x8100, r2, 0x1, 0x9, 0x6, @random="2a5ca7702f22"}, 0x14) 747.555534ms ago: executing program 0 (id=9913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r1, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) syz_genetlink_get_family_id$nl80211(0x0, r0) 689.64892ms ago: executing program 5 (id=9914): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x22, 0x0) 677.302399ms ago: executing program 2 (id=9915): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f000000d1c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/216, 0xd8}, 0x552e6df7}], 0x1, 0x2001, 0x0) 592.483083ms ago: executing program 5 (id=9916): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) 459.922079ms ago: executing program 0 (id=9917): syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x14, 0x3, &(0x7f0000000a00)=ANY=[], 0x0, 0xfffffff5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000025c0), 0x0, 0x10, 0x1c000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f00000003000000090000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000880)="d400aeed12d3215cf3f48935a296826f3a63a7405f6f55bfe861907ebd7ec276d649824d3665043aa7e6948f21941755968f5309d9c9d7036a7cd9d53ffaa2888d71183b7151c68b34d4dc1f0000000000f69a85d9196bdf2e37e553644db0cbb19586868900f9", 0x402, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, 0x0, &(0x7f0000000240), 0x6, r0}, 0x38) 459.789857ms ago: executing program 2 (id=9918): r0 = socket$inet6(0xa, 0x3, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 408.224845ms ago: executing program 7 (id=9919): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x3ffff, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000008c0), 0x2000006c, r1}, 0x38) 398.346198ms ago: executing program 5 (id=9920): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000003c0)=0x401, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x10, 0x4) 332.033247ms ago: executing program 2 (id=9921): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) 285.759532ms ago: executing program 0 (id=9922): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x1ff) r0 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x717e, 0x100, 0x0, 0xc5}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 226.927397ms ago: executing program 5 (id=9923): r0 = syz_io_uring_setup(0x598, &(0x7f0000000240)={0x0, 0x2000b728, 0x3180, 0x8000, 0xb}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000400), 0x20000001, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r3, 0x1, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 183.990807ms ago: executing program 2 (id=9924): unshare(0xe040400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x5}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 43.55153ms ago: executing program 7 (id=9925): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x58, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x14, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400}, 0x2000c040) 43.415414ms ago: executing program 5 (id=9926): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x109002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000002840)={0x0, [{0x3, 0x0, 0x26, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x7, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x5a5399dd, 0x0}, {0x6, 0x0, 0xf, 0x0}, {0x0, 0x0, 0x36a, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x142, 0x0}, {0x3, 0x0, 0xffffffff, 0x0}, {0x5, 0x0, 0x3, 0x0}, {0x0, 0x0, 0xff, 0x0}, {0x3, 0x0, 0xbab7, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x10000, 0x0}, {0x7, 0x0, 0x8, 0x0}]}) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001c00)={0x1, [{0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfff, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x2, 0x0, 0xf, 0x0}, {0x1, 0x0, 0x7fff, 0x0}, {0x0, 0x0, 0x10, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x8000, 0x0}, {0x0, 0x0, 0x50, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x52e, 0x0}, {0x1, 0x0, 0x936, 0x0}, {0x0, 0x0, 0x84, 0x0}, {0x1, 0x0, 0x9, 0x0}]}) 0s ago: executing program 2 (id=9927): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c) kernel console output (not intermixed with test programs): onnect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input25 [ 387.179892][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 387.179918][ T10] pctv452e: pctv452e_power_ctrl: 0 [ 387.179918][ T10] [ 387.179930][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 387.210391][ T10] usb 6-1: USB disconnect, device number 10 [ 387.411683][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 387.482949][ T37] audit: type=1400 audit(1773105953.821:206): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=15349 comm="syz.4.4395" daddr=::ffff:172.20.20.187 dest=20004 [ 388.152609][ T31] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 388.322696][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 388.328356][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 388.329887][ T31] usb 5-1: config 4 interface 0 has no altsetting 0 [ 388.338121][ T31] usb 5-1: string descriptor 0 read error: -22 [ 388.338229][ T31] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 388.338251][ T31] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 388.360529][ T31] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 388.429678][ T31] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 388.430065][ T31] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 388.430121][ T31] usb 5-1: media controller created [ 388.460614][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4414'. [ 388.534376][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.835562][T15405] ALSA: mixer_oss: invalid OSS volume '' [ 388.926075][T15408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4419'. [ 389.659149][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 389.664046][T15373] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 389.927419][ T31] usb 5-1: USB disconnect, device number 31 [ 390.210868][T15448] netlink: 'syz.0.4437': attribute type 1 has an invalid length. [ 390.702759][ T5866] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 390.852779][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 390.857427][ T5866] usb 6-1: unable to get BOS descriptor or descriptor too short [ 390.859101][ T5866] usb 6-1: config 9 has an invalid interface number: 57 but max is 0 [ 390.859126][ T5866] usb 6-1: config 9 has no interface number 0 [ 390.859159][ T5866] usb 6-1: config 9 interface 57 has no altsetting 0 [ 390.899798][ T5866] usb 6-1: string descriptor 0 read error: -22 [ 390.899965][ T5866] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 390.899991][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.150354][T15490] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4459'. [ 391.207251][ T5866] (null): keene_cmd_main failed (-71) [ 391.268314][ T5866] video4linux radio48: keene_cmd_main failed (-71) [ 391.268345][ T5866] radio-keene 6-1:9.57: V4L2 device registered as radio48 [ 391.271645][ T5866] usb 6-1: USB disconnect, device number 11 [ 392.245841][T15538] netlink: 'syz.4.4480': attribute type 2 has an invalid length. [ 392.245866][T15538] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4480'. [ 392.288735][ T37] audit: type=1326 audit(1773105958.631:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15541 comm="syz.5.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90ca8c799 code=0x7ffc0000 [ 392.288898][ T37] audit: type=1326 audit(1773105958.631:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15541 comm="syz.5.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90ca8c799 code=0x7ffc0000 [ 392.291851][ T37] audit: type=1326 audit(1773105958.631:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15541 comm="syz.5.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90ca8c799 code=0x7ffc0000 [ 392.291913][ T37] audit: type=1326 audit(1773105958.631:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15541 comm="syz.5.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fe90ca8c799 code=0x7ffc0000 [ 392.291964][ T37] audit: type=1326 audit(1773105958.631:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15541 comm="syz.5.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90ca8c799 code=0x7ffc0000 [ 392.292027][ T37] audit: type=1326 audit(1773105958.631:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15541 comm="syz.5.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90ca8c799 code=0x7ffc0000 [ 392.292090][ T37] audit: type=1326 audit(1773105958.631:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15541 comm="syz.5.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90ca8c799 code=0x7ffc0000 [ 392.292138][ T37] audit: type=1326 audit(1773105958.631:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15541 comm="syz.5.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe90ca8c799 code=0x7ffc0000 [ 392.292187][ T37] audit: type=1326 audit(1773105958.631:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15541 comm="syz.5.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe90ca8c799 code=0x7ffc0000 [ 392.936922][T15569] netlink: 'syz.1.4497': attribute type 7 has an invalid length. [ 392.936947][T15569] netlink: 'syz.1.4497': attribute type 8 has an invalid length. [ 392.936961][T15569] netlink: 'syz.1.4497': attribute type 4 has an invalid length. [ 392.936974][T15569] netlink: 209728 bytes leftover after parsing attributes in process `syz.1.4497'. [ 393.865760][T15622] macsec2: entered promiscuous mode [ 393.865789][T15622] macsec2: entered allmulticast mode [ 394.022765][T15631] netlink: 'syz.5.4525': attribute type 4 has an invalid length. [ 394.022789][T15631] netlink: 'syz.5.4525': attribute type 2 has an invalid length. [ 394.542677][ T809] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 394.695573][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 394.699187][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.699223][ T809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 394.699269][ T809] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 394.699294][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.759271][ T809] usb 2-1: config 0 descriptor?? [ 395.224504][ T809] hid_parser_main: 28 callbacks suppressed [ 395.224531][ T809] logitech 0003:046D:C295.0024: unknown main item tag 0x0 [ 395.224562][ T809] logitech 0003:046D:C295.0024: unknown main item tag 0x0 [ 395.224588][ T809] logitech 0003:046D:C295.0024: unknown main item tag 0x0 [ 395.224613][ T809] logitech 0003:046D:C295.0024: unknown main item tag 0x0 [ 395.224637][ T809] logitech 0003:046D:C295.0024: unknown main item tag 0x0 [ 395.225358][ T809] logitech 0003:046D:C295.0024: unknown main item tag 0x0 [ 395.225388][ T809] logitech 0003:046D:C295.0024: unknown main item tag 0x0 [ 395.225413][ T809] logitech 0003:046D:C295.0024: unknown main item tag 0x0 [ 395.225437][ T809] logitech 0003:046D:C295.0024: unknown main item tag 0x0 [ 395.225462][ T809] logitech 0003:046D:C295.0024: unknown main item tag 0x0 [ 395.326644][ T809] logitech 0003:046D:C295.0024: hidraw0: USB HID v0.fe Device [HID 046d:c295] on usb-dummy_hcd.1-1/input0 [ 395.326683][ T809] logitech 0003:046D:C295.0024: no inputs found [ 395.432188][ T5889] usb 2-1: USB disconnect, device number 28 [ 395.626956][ T809] kernel read not supported for file /1787/uid_map (pid: 809 comm: kworker/0:2) [ 395.678300][T15691] fido_id[15691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 397.008991][T15744] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4580'. [ 397.009036][T15744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4580'. [ 397.009054][T15744] netlink: 23 bytes leftover after parsing attributes in process `syz.0.4580'. [ 397.009070][T15744] netlink: 'syz.0.4580': attribute type 2 has an invalid length. [ 397.009084][T15744] netlink: 'syz.0.4580': attribute type 3 has an invalid length. [ 397.009097][T15744] netlink: 23 bytes leftover after parsing attributes in process `syz.0.4580'. [ 397.238257][T15754] netlink: 'syz.0.4584': attribute type 11 has an invalid length. [ 397.238286][T15754] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4584'. [ 398.280278][T15792] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4603'. [ 400.108494][T15882] xt_l2tp: wrong L2TP version: 8 [ 400.403177][ T31] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 400.562726][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 400.566471][ T31] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 400.566506][ T31] usb 5-1: config 0 has no interface number 0 [ 400.566562][ T31] usb 5-1: config 0 interface 12 has no altsetting 0 [ 400.571231][ T31] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 400.571266][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.571287][ T31] usb 5-1: Product: syz [ 400.571313][ T31] usb 5-1: Manufacturer: syz [ 400.571329][ T31] usb 5-1: SerialNumber: syz [ 400.595592][ T31] usb 5-1: config 0 descriptor?? [ 400.619024][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4657'. [ 401.397559][ T31] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71 [ 401.397621][ T31] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 401.397637][ T31] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 401.397739][ T31] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 401.436384][ T31] usb 5-1: USB disconnect, device number 32 [ 401.465851][T15919] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 401.479945][T15921] UHID_CREATE from different security context by process 891 (syz.5.4665), this is not allowed. [ 401.762347][T15934] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4672'. [ 401.766206][T15934] openvswitch: netlink: Message has 6 unknown bytes. [ 402.275077][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4685'. [ 402.651689][T15977] bond0: option all_slaves_active: invalid value (6) [ 402.742360][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4695'. [ 403.262716][T16009] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4709'. [ 404.592702][ T809] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 404.747373][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.747412][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.747454][ T809] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 404.747545][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.800810][ T809] usb 6-1: config 0 descriptor?? [ 405.245054][ T809] stadia 0003:18D1:9400.0025: item fetching failed at offset 1/5 [ 405.247085][ T809] stadia 0003:18D1:9400.0025: parse failed [ 405.247168][ T809] stadia 0003:18D1:9400.0025: probe with driver stadia failed with error -22 [ 405.450218][ T809] usb 6-1: USB disconnect, device number 12 [ 406.372674][ T5866] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 406.538198][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.538279][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 406.538308][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 406.538336][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 406.538368][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 406.542263][ T5866] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 406.542295][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 406.542317][ T5866] usb 6-1: Product: syz [ 406.542331][ T5866] usb 6-1: Manufacturer: syz [ 406.542354][ T5866] usb 6-1: SerialNumber: syz [ 406.657741][ T5866] usb 6-1: config 0 descriptor?? [ 406.884311][ T5866] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 406.884341][ T5866] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 407.099085][ T5866] radio-si470x 6-1:0.0: software version 38, hardware version 200 [ 407.099116][ T5866] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 407.310301][ T5866] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 407.310368][ T5866] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 407.328328][ T5866] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 407.328746][ T5866] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 407.366124][ T5866] usb 6-1: USB disconnect, device number 13 [ 407.690946][T16208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.542048][T16289] veth0: entered promiscuous mode [ 409.542168][T16289] macsec1: entered allmulticast mode [ 409.542182][T16289] veth0: entered allmulticast mode [ 409.614212][T16289] veth0: left allmulticast mode [ 409.628125][T16289] veth0: left promiscuous mode [ 410.047447][T16302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4851'. [ 411.403045][T16341] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4870'. [ 411.422644][ T809] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 411.532761][T16347] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4872'. [ 411.575772][ T809] usb 6-1: Using ep0 maxpacket: 32 [ 411.578410][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.578447][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.578489][ T809] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 411.578514][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.632935][ T809] usb 6-1: config 0 descriptor?? [ 411.635163][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4874'. [ 411.662975][ T809] hub 6-1:0.0: USB hub found [ 411.865114][ T809] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 412.092811][ T809] usbhid 6-1:0.0: can't add hid device: -71 [ 412.092945][ T809] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 412.134055][ T809] usb 6-1: USB disconnect, device number 14 [ 413.482689][ T31] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 413.642696][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 413.645148][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.645182][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.646659][ T31] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 413.646687][ T31] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 413.646710][ T31] usb 5-1: Manufacturer: syz [ 413.674519][ T31] usb 5-1: config 0 descriptor?? [ 414.092246][ T31] hid (null): unknown global tag 0xd [ 414.135717][ T31] creative-sb0540 0003:041E:3100.0026: unknown global tag 0xd [ 414.135744][ T31] creative-sb0540 0003:041E:3100.0026: item 0 1 1 13 parsing failed [ 414.136624][ T31] creative-sb0540 0003:041E:3100.0026: parse failed [ 414.136738][ T31] creative-sb0540 0003:041E:3100.0026: probe with driver creative-sb0540 failed with error -22 [ 414.330908][ T5866] usb 5-1: USB disconnect, device number 33 [ 415.203179][T16478] netlink: 'syz.4.4926': attribute type 8 has an invalid length. [ 415.203202][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4926'. [ 415.654730][T16496] netlink: 'syz.4.4934': attribute type 1 has an invalid length. [ 415.654757][T16496] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4934'. [ 415.654775][T16496] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4934'. [ 415.654790][T16496] netlink: 'syz.4.4934': attribute type 1 has an invalid length. [ 415.992928][T16506] netlink: 'syz.1.4939': attribute type 4 has an invalid length. [ 415.992973][T16506] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4939'. [ 417.108589][ T31] hid_parser_main: 28 callbacks suppressed [ 417.108618][ T31] hid-generic 0004:0004:FFFF0001.0027: unknown main item tag 0x0 [ 417.108649][ T31] hid-generic 0004:0004:FFFF0001.0027: unknown main item tag 0x0 [ 417.108675][ T31] hid-generic 0004:0004:FFFF0001.0027: unknown main item tag 0x0 [ 417.120618][ T31] hid-generic 0004:0004:FFFF0001.0027: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 417.144230][ T5888] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 417.306038][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.306102][ T5888] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 417.306128][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.307383][T16559] fido_id[16559]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 417.314864][ T5888] usb 5-1: config 0 descriptor?? [ 417.457353][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4965'. [ 417.713332][T16563] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 417.757345][T16563] bond1 (unregistering): Released all slaves [ 417.761815][ T5888] usb 5-1: USB disconnect, device number 34 [ 418.757631][T16623] pimreg3: entered allmulticast mode [ 418.802688][ T5889] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 418.954827][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 418.954866][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.954908][ T5889] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 418.954931][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.967270][ T5889] usb 2-1: config 0 descriptor?? [ 419.416838][ T5889] elan 0003:04F3:0755.0028: item fetching failed at offset 3/5 [ 419.417721][ T5889] elan 0003:04F3:0755.0028: Hid Parse failed [ 419.417835][ T5889] elan 0003:04F3:0755.0028: probe with driver elan failed with error -22 [ 419.634749][ T10] usb 2-1: USB disconnect, device number 29 [ 420.391184][T16702] tipc: Invalid UDP bearer configuration [ 420.391244][T16702] tipc: Enabling of bearer rejected, failed to enable media [ 421.417176][ T37] audit: type=1326 audit(1773105987.761:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16714 comm="syz.5.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90ca8c799 code=0x7fc00000 [ 422.593021][ T5866] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 422.640848][T16815] openvswitch: netlink: Missing valid actions attribute. [ 422.640887][T16815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.748009][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 422.750661][ T5866] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 422.750688][ T5866] usb 6-1: config 0 has no interface number 0 [ 422.750738][ T5866] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.750765][ T5866] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.750808][ T5866] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 422.750833][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.771585][ T5866] usb 6-1: config 0 descriptor?? [ 423.448896][ T5866] usb 6-1: USB disconnect, device number 15 [ 423.933530][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5108'. [ 424.377421][T16878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.702602][ T5866] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 424.856868][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 424.859570][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.859675][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.859700][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.859745][ T5866] usb 6-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 424.859769][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.890358][ T5866] usb 6-1: config 0 descriptor?? [ 425.413191][T16925] netlink: 'syz.4.5142': attribute type 22 has an invalid length. [ 425.541782][ T5866] usb 6-1: string descriptor 0 read error: -71 [ 425.544959][ T5866] uclogic 0003:5543:0047.002A: failed retrieving string descriptor #200: -71 [ 425.545028][ T5866] uclogic 0003:5543:0047.002A: failed retrieving pen parameters: -71 [ 425.545047][ T5866] uclogic 0003:5543:0047.002A: failed probing pen v2 parameters: -71 [ 425.545107][ T5866] uclogic 0003:5543:0047.002A: failed probing parameters: -71 [ 425.545222][ T5866] uclogic 0003:5543:0047.002A: probe with driver uclogic failed with error -71 [ 425.561630][T16928] netlink: 182 bytes leftover after parsing attributes in process `syz.4.5145'. [ 425.583002][ T5866] usb 6-1: USB disconnect, device number 16 [ 426.363343][ T5812] Bluetooth: hci5: link tx timeout [ 426.363598][ T5812] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 426.639144][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5167'. [ 426.789935][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5172'. [ 427.850360][ T37] audit: type=1326 audit(1773105994.191:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb8cc799 code=0x7ffc0000 [ 427.850426][ T37] audit: type=1326 audit(1773105994.191:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb8cc799 code=0x7ffc0000 [ 427.900548][ T37] audit: type=1326 audit(1773105994.231:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcfcb8cc799 code=0x7ffc0000 [ 427.900609][ T37] audit: type=1326 audit(1773105994.241:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb8cc799 code=0x7ffc0000 [ 427.900659][ T37] audit: type=1326 audit(1773105994.241:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb8cc799 code=0x7ffc0000 [ 427.900703][ T37] audit: type=1326 audit(1773105994.241:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fcfcb8cc799 code=0x7ffc0000 [ 427.947434][ T37] audit: type=1326 audit(1773105994.241:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.4.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb8cc799 code=0x7ffc0000 [ 428.460030][T16969] Bluetooth: hci5: command 0x0406 tx timeout [ 428.522309][T17070] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5212'. [ 428.522340][T17070] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 428.588034][T17074] netlink: 'syz.1.5213': attribute type 1 has an invalid length. [ 428.822953][T17089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5220'. [ 429.524850][T17127] netlink: 'syz.5.5239': attribute type 153 has an invalid length. [ 429.732738][ T809] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 429.886000][ T809] usb 5-1: unable to get BOS descriptor or descriptor too short [ 429.886809][ T809] usb 5-1: not running at top speed; connect to a high speed hub [ 429.888267][ T809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.888291][ T809] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 429.888360][ T809] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 429.888386][ T809] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.895445][ T809] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.895475][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.895493][ T809] usb 5-1: Product: syz [ 429.895506][ T809] usb 5-1: Manufacturer: syz [ 429.895519][ T809] usb 5-1: SerialNumber: syz [ 430.322697][T17155] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5253'. [ 430.571371][ T809] usb 5-1: 0:2 : does not exist [ 430.757456][ T809] usb 5-1: USB disconnect, device number 35 [ 430.882277][ T7986] udevd[7986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.478462][T17202] netlink: 'syz.4.5273': attribute type 1 has an invalid length. [ 431.478487][T17202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5273'. [ 431.696154][T17215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5279'. [ 432.207712][T17233] : entered promiscuous mode [ 432.315670][T17241] netlink: 'syz.1.5293': attribute type 2 has an invalid length. [ 432.757770][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5301'. [ 433.048802][ T37] audit: type=1326 audit(1773105999.391:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17268 comm="syz.4.5307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfcb8cc799 code=0x0 [ 433.969008][ T37] audit: type=1400 audit(1773106000.311:225): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=17316 comm="syz.5.5330" dest=19972 [ 434.242929][ T31] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 434.392976][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 434.398498][ T31] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 434.398532][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.398554][ T31] usb 5-1: Product: syz [ 434.398569][ T31] usb 5-1: Manufacturer: syz [ 434.398584][ T31] usb 5-1: SerialNumber: syz [ 434.442079][ T31] usb 5-1: config 0 descriptor?? [ 434.464490][ T31] gspca_main: se401-2.14.0 probing 047d:5003 [ 435.087980][ T31] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 435.143081][ T31] usb 5-1: USB disconnect, device number 36 [ 435.660248][T17375] sp0: Synchronizing with TNC [ 435.789939][T17379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5357'. [ 435.790401][T17379] unsupported nlmsg_type 40 [ 436.602970][ T31] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 436.758996][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.759058][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB [ 436.759086][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 436.759114][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 50562, setting to 64 [ 436.759141][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89 [ 436.759168][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 436.760710][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 436.760738][ T31] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 436.760759][ T31] usb 2-1: Manufacturer: syz [ 436.874124][ T31] usb 2-1: config 0 descriptor?? [ 436.878494][T17396] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 437.220891][T17425] netlink: 7060 bytes leftover after parsing attributes in process `syz.5.5379'. [ 437.322743][ T31] rc_core: IR keymap rc-hauppauge not found [ 437.322768][ T31] Registered IR keymap rc-empty [ 437.327685][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 437.354490][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 437.374974][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 437.379229][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 437.412056][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 437.433314][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 437.452990][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 437.483068][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 437.513308][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 437.543475][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 437.573492][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 437.593086][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 437.614764][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 437.633133][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 437.656781][ T31] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 437.656808][ T31] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 437.688665][ T31] usb 2-1: USB disconnect, device number 30 [ 438.277856][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5399'. [ 438.277904][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5399'. [ 438.422668][T17465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.430260][T17465] bond1: entered allmulticast mode [ 438.444945][T17465] team0: Port device bond1 added [ 438.602736][ T5866] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 438.756819][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.756857][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.756879][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 438.756927][ T5866] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 438.756952][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.772757][ T5812] Bluetooth: hci5: command 0x0406 tx timeout [ 438.866545][ T5866] usb 2-1: config 0 descriptor?? [ 438.988390][T17499] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.5414'. [ 439.317876][ T5866] uclogic 0003:28BD:0055.002B: interface is invalid, ignoring [ 439.531563][ T5888] usb 2-1: USB disconnect, device number 31 [ 440.220841][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.220933][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.752604][ T5888] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 440.923287][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 440.925990][ T5888] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 440.926018][ T5888] usb 2-1: config 0 has no interface number 0 [ 440.926068][ T5888] usb 2-1: config 0 interface 184 has no altsetting 0 [ 440.929149][ T5888] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 440.929187][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.929207][ T5888] usb 2-1: Product: syz [ 440.929221][ T5888] usb 2-1: Manufacturer: syz [ 440.929236][ T5888] usb 2-1: SerialNumber: syz [ 440.939024][ T5888] usb 2-1: config 0 descriptor?? [ 441.122655][ T809] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 441.275953][ T809] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 441.275984][ T809] usb 6-1: config 0 has no interface number 0 [ 441.276030][ T809] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 441.276055][ T809] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 441.276092][ T809] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 441.276117][ T809] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 441.276144][ T809] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 441.276170][ T809] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 441.276215][ T809] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 441.276237][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.388884][ T809] usb 6-1: config 0 descriptor?? [ 441.390398][T17583] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 441.390698][T17583] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 441.424956][ T809] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 441.610380][ T5888] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 441.610414][ T5888] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 441.610433][ T5888] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 441.610768][ T5888] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 441.667207][ T5888] usb 2-1: USB disconnect, device number 32 [ 441.705401][ T31] usb 6-1: USB disconnect, device number 17 [ 441.767919][ T31] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 442.602634][ T5888] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 442.774260][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 442.809282][ T5888] usb 6-1: config 127 has an invalid interface number: 124 but max is 0 [ 442.809314][ T5888] usb 6-1: config 127 has no interface number 0 [ 442.809347][ T5888] usb 6-1: config 127 interface 124 has no altsetting 0 [ 442.825336][ T5888] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 442.825367][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.825385][ T5888] usb 6-1: Product: syz [ 442.825399][ T5888] usb 6-1: Manufacturer: syz [ 442.825411][ T5888] usb 6-1: SerialNumber: syz [ 443.112639][ T809] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 443.262672][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 443.264986][ T809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.265046][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 443.265075][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 443.265098][ T809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 443.265130][ T809] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.268672][ T809] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 443.268702][ T809] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 443.268724][ T809] usb 5-1: Manufacturer: syz [ 443.365950][ T809] usb 5-1: config 0 descriptor?? [ 443.704827][ T809] rc_core: IR keymap rc-hauppauge not found [ 443.704850][ T809] Registered IR keymap rc-empty [ 443.705030][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 443.731136][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 443.744178][ T809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 443.747256][ T809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 443.786194][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 443.803035][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 443.823159][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 443.834012][ T5888] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 443.842701][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 443.862742][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 443.882699][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 443.902673][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 443.922723][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 443.942662][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 443.962676][ T809] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 443.995200][ T809] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 443.995451][ T809] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 444.149333][ T809] usb 5-1: USB disconnect, device number 37 [ 444.381849][ T5888] usb 6-1: failed to restore interface 124 altsetting 11 (error=-71) [ 444.435601][ T5888] usb 6-1: USB disconnect, device number 18 [ 445.312614][ T5866] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 445.482648][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 445.499439][ T5866] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 445.499473][ T5866] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 445.499493][ T5866] usb 2-1: config 254 has no interface number 0 [ 445.499544][ T5866] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 445.499568][ T5866] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 0 [ 445.499594][ T5866] usb 2-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.499622][ T5866] usb 2-1: config 254 interface 235 has no altsetting 0 [ 445.541744][T17762] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5542'. [ 445.582980][ T5866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 445.583013][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.583034][ T5866] usb 2-1: Product: syz [ 445.583047][ T5866] usb 2-1: Manufacturer: syz [ 445.583060][ T5866] usb 2-1: SerialNumber: syz [ 445.636357][ T5866] usbtest 2-1:254.235: couldn't get endpoints, -22 [ 445.636463][ T5866] usbtest 2-1:254.235: probe with driver usbtest failed with error -22 [ 445.843261][ T5866] usb 2-1: USB disconnect, device number 33 [ 448.810733][ T37] audit: type=1400 audit(1773106015.151:226): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=17881 comm="syz.5.5600" daddr=::ffff:127.0.0.1 dest=16385 [ 449.281292][T17902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5610'. [ 449.576743][T17920] netlink: 'syz.4.5617': attribute type 6 has an invalid length. [ 451.572274][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.573835][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.574500][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.574537][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.211202][T18014] tipc: Enabling of bearer rejected, failed to enable media [ 453.568613][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5690'. [ 453.765525][T18093] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5696'. [ 453.839502][ T37] audit: type=1326 audit(1773106020.181:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18095 comm="syz.1.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f34b6c799 code=0x7ffc0000 [ 453.866758][ T37] audit: type=1326 audit(1773106020.211:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18095 comm="syz.1.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f34b6c799 code=0x7ffc0000 [ 453.873048][ T37] audit: type=1326 audit(1773106020.211:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18095 comm="syz.1.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1f34b6c799 code=0x7ffc0000 [ 453.873113][ T37] audit: type=1326 audit(1773106020.211:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18095 comm="syz.1.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f34b6c799 code=0x7ffc0000 [ 453.873155][ T37] audit: type=1326 audit(1773106020.211:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18095 comm="syz.1.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f34b6c799 code=0x7ffc0000 [ 453.873195][ T37] audit: type=1326 audit(1773106020.211:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18095 comm="syz.1.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f1f34b6c799 code=0x7ffc0000 [ 453.873236][ T37] audit: type=1326 audit(1773106020.211:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18095 comm="syz.1.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f34b6c799 code=0x7ffc0000 [ 453.873276][ T37] audit: type=1326 audit(1773106020.211:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18095 comm="syz.1.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f34b6c799 code=0x7ffc0000 [ 455.003853][ T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 455.153274][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 455.158487][ T31] usb 6-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 455.158525][ T31] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 455.158554][ T31] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 455.158583][ T31] usb 6-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 455.158611][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 455.162041][ T31] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 455.162071][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.162092][ T31] usb 6-1: Product: syz [ 455.162107][ T31] usb 6-1: Manufacturer: syz [ 455.162130][ T31] usb 6-1: SerialNumber: syz [ 455.186761][ T31] usb 6-1: config 0 descriptor?? [ 455.187745][T18130] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 455.213386][ T31] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input29 [ 455.352452][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 455.531012][ T31] usb 6-1: USB disconnect, device number 19 [ 455.531065][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 456.919589][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5766'. [ 457.108975][T18243] tipc: Started in network mode [ 457.109008][T18243] tipc: Node identity ac14140f, cluster identity 4711 [ 457.109856][T18243] tipc: New replicast peer: 10.1.1.0 [ 457.110155][T18243] tipc: Enabled bearer , priority 10 [ 457.604686][ T37] audit: type=1400 audit(1773106023.951:235): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=18267 comm="syz.4.5783" daddr=::ffff:172.20.20.0 [ 458.226161][ T809] tipc: Node number set to 2886997007 [ 458.533280][ T809] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 458.685333][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.685371][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.685412][ T809] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 458.685436][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.736365][ T809] usb 5-1: config 0 descriptor?? [ 458.970427][T18339] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 459.167958][ T809] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 459.167994][ T809] cp2112 0003:10C4:EA90.002C: collection stack underflow [ 459.168017][ T809] cp2112 0003:10C4:EA90.002C: item 0 1 0 12 parsing failed [ 459.168860][ T809] cp2112 0003:10C4:EA90.002C: parse failed [ 459.169015][ T809] cp2112 0003:10C4:EA90.002C: probe with driver cp2112 failed with error -22 [ 459.169474][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5821'. [ 459.390018][ T5888] usb 5-1: USB disconnect, device number 38 [ 460.480623][T18405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5848'. [ 461.249968][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5867'. [ 461.552025][T18464] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 462.274808][ T31] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 462.282604][ T5888] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 462.422800][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 462.425214][ T31] usb 5-1: config 162 has an invalid interface number: 79 but max is 1 [ 462.425243][ T31] usb 5-1: config 162 has an invalid interface number: 183 but max is 1 [ 462.425266][ T31] usb 5-1: config 162 has no interface number 0 [ 462.425283][ T31] usb 5-1: config 162 has no interface number 1 [ 462.425349][ T31] usb 5-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 462.425392][ T31] usb 5-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 462.425419][ T31] usb 5-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 462.425446][ T31] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 462.425474][ T31] usb 5-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 462.425500][ T31] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 462.425528][ T31] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 462.425550][ T31] usb 5-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 462.425576][ T31] usb 5-1: config 162 interface 79 has no altsetting 0 [ 462.425594][ T31] usb 5-1: config 162 interface 183 has no altsetting 0 [ 462.428373][ T31] usb 5-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 462.428404][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.428424][ T31] usb 5-1: Product: syz [ 462.428440][ T31] usb 5-1: Manufacturer: syz [ 462.428455][ T31] usb 5-1: SerialNumber: syz [ 462.519448][ T5888] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 462.519485][ T5888] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 462.519522][ T5888] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 462.519607][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.563533][T18491] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 462.690701][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.695151][ T31] pl2303 5-1:162.79: required endpoints missing [ 462.756625][ T31] pl2303 5-1:162.183: pl2303 converter detected [ 462.761805][ T31] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 462.762285][ T31] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 462.773566][ T31] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 462.775757][ T31] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 462.776279][ T31] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 462.776779][ T31] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 462.777250][ T31] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 462.777645][ T31] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 462.778046][ T31] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 462.784202][ T31] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 462.784847][ T31] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 462.807042][ T31] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 462.925579][ T31] usb 5-1: USB disconnect, device number 39 [ 463.026841][ T31] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 463.027876][ T31] pl2303 5-1:162.183: device disconnected [ 463.126723][T18522] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5905'. [ 463.261522][ T5888] usb 2-1: USB disconnect, device number 34 [ 463.874878][T18557] syz_tun: Device is already in use. [ 464.054060][ T1167] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.056455][ T1167] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.056528][ T1167] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.056567][ T1167] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.652849][T18599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5941'. [ 466.868618][T18721] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5999'. [ 467.272597][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 467.278218][T18741] vlan2: entered promiscuous mode [ 467.278241][T18741] bridge0: entered promiscuous mode [ 467.458728][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 467.469332][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.469369][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.469410][ T31] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 467.469433][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.480680][ T31] usb 2-1: config 0 descriptor?? [ 467.919983][ T31] corsair 0003:1B1C:1B02.002D: unknown main item tag 0x0 [ 467.920031][ T31] corsair 0003:1B1C:1B02.002D: unknown main item tag 0x0 [ 467.920057][ T31] corsair 0003:1B1C:1B02.002D: unknown main item tag 0x0 [ 467.920082][ T31] corsair 0003:1B1C:1B02.002D: unknown main item tag 0x0 [ 467.920107][ T31] corsair 0003:1B1C:1B02.002D: unknown main item tag 0x0 [ 467.929427][ T31] corsair 0003:1B1C:1B02.002D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 468.117910][ T31] corsair 0003:1B1C:1B02.002D: Failed to get K90 initial state (error -71). [ 468.157092][ T31] usb 2-1: USB disconnect, device number 35 [ 468.540123][ T37] audit: type=1400 audit(1773106034.881:236): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=18792 comm="syz.5.6035" [ 468.864148][T18807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6042'. [ 470.289552][T18879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6077'. [ 471.110395][ T809] Process accounting resumed [ 471.152724][T18916] Process accounting resumed [ 471.733705][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6105'. [ 472.934371][T18906] kexec: Could not allocate control_code_buffer [ 472.949152][ T5866] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 473.052740][T18995] netlink: 'syz.0.6132': attribute type 2 has an invalid length. [ 473.052765][T18995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6132'. [ 473.098525][ T5866] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 473.098559][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.098580][ T5866] usb 2-1: Product: syz [ 473.098594][ T5866] usb 2-1: Manufacturer: syz [ 473.098610][ T5866] usb 2-1: SerialNumber: syz [ 473.136938][ T5866] usb 2-1: config 0 descriptor?? [ 473.161927][ T5866] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 473.178817][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 473.180753][ T5866] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 473.180815][ T5866] usb 2-1: media controller created [ 473.222075][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.307219][ T5866] DVB: Unable to find symbol mt352_attach() [ 473.369627][T18979] dvb-usb: bulk message failed: -22 (7/0) [ 473.402810][ T5866] DVB: Unable to find symbol nxt6000_attach() [ 473.402828][ T5866] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 473.407591][ T5866] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 473.410799][ T5866] dvb-usb: schedule remote query interval to 1000 msecs. [ 473.410825][ T5866] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 473.410843][ T5866] dvb-usb: bulk message failed: -22 (7/0) [ 473.410860][ T5866] dvb-usb: bulk message failed: -22 (7/0) [ 473.491165][ T5866] usb 2-1: USB disconnect, device number 36 [ 473.743438][ T5866] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 473.880075][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6144'. [ 475.000655][T19088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6176'. [ 475.663589][T19123] sp0: Synchronizing with TNC [ 475.946929][T19141] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6201'. [ 476.172686][ T5866] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 476.279094][T19161] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6210'. [ 476.279160][T19161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6210'. [ 476.330026][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.330057][ T5866] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.349073][ T5866] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 476.349108][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.349129][ T5866] usb 6-1: Product: syz [ 476.349144][ T5866] usb 6-1: Manufacturer: syz [ 476.349158][ T5866] usb 6-1: SerialNumber: syz [ 476.390006][ T5866] usb 6-1: config 0 descriptor?? [ 476.627483][T19140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.628047][T19140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.634654][ T5812] Bluetooth: hci5: unknown advertising packet type: 0x17 [ 476.634689][ T5812] Bluetooth: hci5: unknown advertising packet type: 0x0d [ 476.634712][ T5812] Bluetooth: hci5: Malformed LE Event: 0x02 [ 476.637420][ T5888] usb 6-1: USB disconnect, device number 20 [ 477.042659][ T809] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 477.196350][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 477.196389][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.196429][ T809] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 477.196452][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.251020][ T809] usb 2-1: config 0 descriptor?? [ 477.653963][T19220] tipc: Started in network mode [ 477.654055][T19220] tipc: Node identity , cluster identity 4711 [ 477.654072][T19220] tipc: Failed to obtain node identity [ 477.654100][T19220] tipc: Enabling of bearer rejected, failed to enable media [ 477.705841][ T809] cypress 0003:04B4:DE64.002E: item fetching failed at offset 1/3 [ 477.706762][ T809] cypress 0003:04B4:DE64.002E: parse failed [ 477.706830][ T809] cypress 0003:04B4:DE64.002E: probe with driver cypress failed with error -22 [ 477.894356][ T5888] usb 2-1: USB disconnect, device number 37 [ 478.500178][ T37] audit: type=1326 audit(1773106044.841:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19258 comm="syz.5.6260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe90ca8c799 code=0x0 [ 478.692867][T16969] Bluetooth: hci0: command 0x1003 tx timeout [ 478.715970][ T5812] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 479.942572][ T31] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 480.135956][ T31] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 480.135986][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.136006][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 480.136068][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.138406][ T31] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 480.138435][ T31] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 480.138456][ T31] usb 6-1: Product: syz [ 480.138471][ T31] usb 6-1: Manufacturer: syz [ 480.170335][ T31] cdc_wdm 6-1:1.0: skipping garbage [ 480.170356][ T31] cdc_wdm 6-1:1.0: skipping garbage [ 480.170456][ T31] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 480.300356][T19326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6290'. [ 480.413788][ T5888] usb 6-1: USB disconnect, device number 21 [ 481.347507][T19383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6319'. [ 481.458677][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6322'. [ 481.872634][ T5866] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 481.877537][T19406] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6330'. [ 482.023524][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 482.031277][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.031313][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.031354][ T5866] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 482.031378][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.085431][ T5866] usb 6-1: config 0 descriptor?? [ 482.542024][ T5866] koneplus 0003:1E7D:2D51.002F: unknown main item tag 0x0 [ 482.542063][ T5866] koneplus 0003:1E7D:2D51.002F: unknown main item tag 0x0 [ 482.542089][ T5866] koneplus 0003:1E7D:2D51.002F: unknown main item tag 0x0 [ 482.542113][ T5866] koneplus 0003:1E7D:2D51.002F: unknown main item tag 0x0 [ 482.542137][ T5866] koneplus 0003:1E7D:2D51.002F: unknown main item tag 0x0 [ 482.589077][ T5866] koneplus 0003:1E7D:2D51.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 482.717343][ T5866] koneplus 0003:1E7D:2D51.002F: couldn't init struct koneplus_device [ 482.717408][ T5866] koneplus 0003:1E7D:2D51.002F: couldn't install mouse [ 482.746058][ T5866] koneplus 0003:1E7D:2D51.002F: probe with driver koneplus failed with error -71 [ 482.765158][ T5866] usb 6-1: USB disconnect, device number 22 [ 482.850895][T19431] fido_id[19431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 483.265889][ T5888] kernel read not supported for file /vcs (pid: 5888 comm: kworker/1:4) [ 484.135815][T19506] : entered promiscuous mode [ 484.305901][T19515] vlan3: entered allmulticast mode [ 484.305925][T19515] hsr0: entered allmulticast mode [ 484.305939][T19515] hsr_slave_0: entered allmulticast mode [ 484.305958][T19515] hsr_slave_1: entered allmulticast mode [ 485.102882][ T31] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 485.262898][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 485.265281][ T31] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 485.265311][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.299880][ T31] usb 2-1: config 0 descriptor?? [ 485.531322][ T31] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 485.569850][ T31] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 485.569906][ T31] dib0700: firmware download failed at 7 with -22 [ 485.589703][ T31] usb 2-1: USB disconnect, device number 38 [ 487.142554][ T5888] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 487.303586][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 487.308701][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 487.308745][ T5888] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 487.308770][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 487.317286][ T5888] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 487.317315][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.317334][ T5888] usb 2-1: Product: syz [ 487.317346][ T5888] usb 2-1: Manufacturer: syz [ 487.317359][ T5888] usb 2-1: SerialNumber: syz [ 487.338606][ T5888] usb 2-1: config 0 descriptor?? [ 487.770513][ T5888] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 488.172748][ T5888] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 488.286194][ T5888] usb 2-1: USB disconnect, device number 39 [ 488.472606][ T31] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 488.623432][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 488.628762][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.628840][ T31] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.628868][ T31] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.628892][ T31] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.628920][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 488.628956][ T31] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 488.628979][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.647639][ T31] usb 5-1: config 0 descriptor?? [ 489.154330][ T31] corsair-cpro 0003:1B1C:0C10.0030: unknown main item tag 0x0 [ 489.154369][ T31] corsair-cpro 0003:1B1C:0C10.0030: item fetching failed at offset 4/5 [ 489.155440][ T31] corsair-cpro 0003:1B1C:0C10.0030: probe with driver corsair-cpro failed with error -22 [ 489.372654][ T5866] usb 5-1: USB disconnect, device number 40 [ 489.914822][ T31] kernel write not supported for file /input/event2 (pid: 31 comm: kworker/1:0) [ 489.946344][T19751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6497'. [ 489.946371][T19751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6497'. [ 490.086083][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6501'. [ 490.892765][ T5866] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 490.943244][ T37] audit: type=1400 audit(1773106057.281:238): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=19805 comm="syz.0.6523" dest=20000 [ 491.045608][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 491.045647][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.045689][ T5866] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 491.045723][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.061472][ T5866] usb 2-1: config 0 descriptor?? [ 491.519716][ T5866] isku 0003:1E7D:319C.0031: unknown main item tag 0x0 [ 491.519764][ T5866] isku 0003:1E7D:319C.0031: unknown main item tag 0x0 [ 491.519789][ T5866] isku 0003:1E7D:319C.0031: unknown main item tag 0x0 [ 491.519814][ T5866] isku 0003:1E7D:319C.0031: unknown main item tag 0x0 [ 491.519837][ T5866] isku 0003:1E7D:319C.0031: unknown main item tag 0x0 [ 491.519862][ T5866] isku 0003:1E7D:319C.0031: unknown main item tag 0x0 [ 491.519886][ T5866] isku 0003:1E7D:319C.0031: unknown main item tag 0x0 [ 491.585980][ T5866] isku 0003:1E7D:319C.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 491.954671][ T5866] usb 2-1: USB disconnect, device number 40 [ 491.967237][T19830] fido_id[19830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 492.190730][ T37] audit: type=1326 audit(1773106058.531:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19845 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdec6c799 code=0x7ffc0000 [ 492.190791][ T37] audit: type=1326 audit(1773106058.531:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19845 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdec6c799 code=0x7ffc0000 [ 492.225826][ T37] audit: type=1326 audit(1773106058.561:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19845 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdec6c799 code=0x7ffc0000 [ 492.225880][ T37] audit: type=1326 audit(1773106058.571:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19845 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdec6c799 code=0x7ffc0000 [ 492.225919][ T37] audit: type=1326 audit(1773106058.571:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19845 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3fdec6c799 code=0x7ffc0000 [ 492.225958][ T37] audit: type=1326 audit(1773106058.571:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19845 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdec6c799 code=0x7ffc0000 [ 492.226006][ T37] audit: type=1326 audit(1773106058.571:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19845 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdec6c799 code=0x7ffc0000 [ 492.226044][ T37] audit: type=1326 audit(1773106058.571:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19845 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdec6c799 code=0x7ffc0000 [ 492.226083][ T37] audit: type=1326 audit(1773106058.571:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19845 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f3fdec6c799 code=0x7ffc0000 [ 492.444311][T19854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 493.282911][ T5866] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 493.433131][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 493.435921][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.435980][ T5866] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.436011][ T5866] usb 2-1: config 0 interface 0 has no altsetting 0 [ 493.436046][ T5866] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 493.436070][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.442183][ T5866] usb 2-1: config 0 descriptor?? [ 493.956178][ T5866] corsair-psu 0003:1B1C:1C09.0032: unknown main item tag 0x0 [ 493.956224][ T5866] corsair-psu 0003:1B1C:1C09.0032: unknown main item tag 0x0 [ 493.990754][ T5866] corsair-psu 0003:1B1C:1C09.0032: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 494.042737][ T5866] corsair-psu 0003:1B1C:1C09.0032: unable to initialize device (-38) [ 494.078651][ T5866] corsair-psu 0003:1B1C:1C09.0032: probe with driver corsair-psu failed with error -38 [ 494.135856][ T5866] usb 2-1: USB disconnect, device number 41 [ 494.290709][T19920] fido_id[19920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 494.874739][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6594'. [ 495.845719][T20005] program syz.1.6619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.062670][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 496.214741][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 496.222611][ T10] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 496.222638][ T10] usb 5-1: config 0 has no interface number 0 [ 496.222689][ T10] usb 5-1: config 0 interface 12 has no altsetting 0 [ 496.254241][ T10] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 496.254274][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.254296][ T10] usb 5-1: Product: syz [ 496.254311][ T10] usb 5-1: Manufacturer: syz [ 496.254324][ T10] usb 5-1: SerialNumber: syz [ 496.319904][ T10] usb 5-1: config 0 descriptor?? [ 497.168542][ T10] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 497.168612][ T10] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 497.168629][ T10] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 497.168743][ T10] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 497.211511][T20068] netlink: 'syz.1.6652': attribute type 9 has an invalid length. [ 497.233711][ T10] usb 5-1: USB disconnect, device number 41 [ 497.530583][T20086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6660'. [ 497.530646][T20086] netlink: 'syz.0.6660': attribute type 30 has an invalid length. [ 497.601998][T20089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6660'. [ 497.602036][T20089] netlink: 'syz.0.6660': attribute type 30 has an invalid length. [ 497.603899][ T1109] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.614564][ T1109] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.617686][ T1109] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.617728][ T1109] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.793902][T20094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 499.443665][T20179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6706'. [ 500.636768][T20233] program syz.0.6732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.634897][T20289] Bluetooth: MGMT ver 1.23 [ 501.664757][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.664827][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.092625][ T5888] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 505.245243][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 505.247765][ T5888] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 505.247839][ T5888] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 505.247886][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 505.247911][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 505.247936][ T5888] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.247982][ T5888] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 505.248008][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.482912][ T5888] usb 2-1: GET_CAPABILITIES returned 0 [ 505.483016][ T5888] usbtmc 2-1:16.0: can't read capabilities [ 505.695236][ T10] usb 2-1: USB disconnect, device number 42 [ 506.274458][T20551] netlink: 'syz.0.6890': attribute type 10 has an invalid length. [ 506.446496][T20551] team0: Port device netdevsim0 added [ 506.622624][ T5866] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 506.783549][ T5866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.783597][ T5866] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 506.786147][ T5866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.786177][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.786197][ T5866] usb 2-1: Product: syz [ 506.786212][ T5866] usb 2-1: Manufacturer: syz [ 506.786227][ T5866] usb 2-1: SerialNumber: syz [ 507.094832][T20559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.095427][T20559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.126664][ T5866] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 507.154245][ T5866] usb 2-1: USB disconnect, device number 43 [ 507.633147][ T31] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 507.797484][ T31] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 507.797518][ T31] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 507.797572][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.797596][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 507.797624][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 507.797661][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.797702][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 507.797726][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.023807][ T31] usb 2-1: usb_control_msg returned -71 [ 508.023844][ T31] usbtmc 2-1:16.0: can't read capabilities [ 508.023876][ T31] usbtmc 2-1:16.0: Failed to submit iin_urb [ 508.023937][ T31] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -90 [ 508.067920][ T31] usb 2-1: USB disconnect, device number 44 [ 509.144805][ T1167] Bluetooth: hci0: Frame reassembly failed (-84) [ 509.446724][T20712] kvm: kvm [20709]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xcd [ 510.729147][T20792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7004'. [ 511.172873][ T5812] Bluetooth: hci0: command 0x1003 tx timeout [ 511.173510][T16969] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 512.053017][ T31] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 512.202635][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 512.205153][ T31] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 512.205183][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.227811][ T31] pvrusb2: Hardware description: Terratec Grabster AV400 [ 512.227829][ T31] pvrusb2: ********** [ 512.227835][ T31] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 512.227846][ T31] pvrusb2: Important functionality might not be entirely working. [ 512.227854][ T31] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 512.227864][ T31] pvrusb2: ********** [ 512.451515][ T2367] pvrusb2: Invalid write control endpoint [ 512.646993][ T2367] pvrusb2: Invalid write control endpoint [ 512.647011][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 512.647022][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 512.647031][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 512.647041][ T2367] pvrusb2: Device being rendered inoperable [ 512.711598][T20854] pvrusb2: Attempted to execute control transfer when device not ok [ 512.714057][ T5889] usb 2-1: USB disconnect, device number 45 [ 512.733969][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 512.734038][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 512.770874][ T2367] pvrusb2: Attached sub-driver cx25840 [ 512.770894][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 512.770904][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 513.329812][T20915] EXT4-fs (loop2): unable to read superblock [ 513.431097][T20920] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7068'. [ 515.447528][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.474116][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.476692][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.514858][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.517551][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 515.903512][T21040] kvm_intel: kvm [21039]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x7e [ 516.091693][T21020] chnl_net:caif_netlink_parms(): no params data found [ 516.447030][T21020] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.447269][T21020] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.447559][T21020] bridge_slave_0: entered allmulticast mode [ 516.450603][T21020] bridge_slave_0: entered promiscuous mode [ 516.462976][T21020] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.463186][T21020] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.463396][T21020] bridge_slave_1: entered allmulticast mode [ 516.466055][T21020] bridge_slave_1: entered promiscuous mode [ 516.521152][T21020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.538886][T21020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.604308][T21020] team0: Port device team_slave_0 added [ 516.608241][T21020] team0: Port device team_slave_1 added [ 516.669440][T21020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.669459][T21020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.669483][T21020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.672100][T21020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.672115][T21020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.672141][T21020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.851805][T21020] hsr_slave_0: entered promiscuous mode [ 516.859801][T21020] hsr_slave_1: entered promiscuous mode [ 516.860853][T21020] debugfs: 'hsr0' already exists in 'hsr' [ 516.860879][T21020] Cannot create hsr debugfs directory [ 517.575560][T16969] Bluetooth: hci0: command tx timeout [ 517.919502][T21020] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 517.978812][T21020] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 518.018260][T21020] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 518.065472][T21020] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 518.268230][T21126] netlink: 'syz.1.7162': attribute type 10 has an invalid length. [ 518.268255][T21126] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7162'. [ 518.411311][T21020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.457656][T21020] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.490685][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.496516][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.536591][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.537650][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.308359][T21020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.653031][T16969] Bluetooth: hci0: command tx timeout [ 520.010282][T21020] veth0_vlan: entered promiscuous mode [ 520.065593][T21020] veth1_vlan: entered promiscuous mode [ 520.199065][T21020] veth0_macvtap: entered promiscuous mode [ 520.212112][T21020] veth1_macvtap: entered promiscuous mode [ 520.263737][T21020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.279282][T21020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.343540][ T1109] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.343946][ T1109] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.343988][ T1109] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.344027][ T1109] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.731692][T21231] netlink: 'syz.0.7210': attribute type 32 has an invalid length. [ 520.731717][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7210'. [ 520.878865][T21231] bond2: option coupled_control: invalid value (46) [ 520.901589][T21231] bond2 (unregistering): Released all slaves [ 521.159511][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.159535][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.354136][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.354158][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.733312][ T5812] Bluetooth: hci0: command tx timeout [ 521.862771][ T5888] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 521.863682][T21272] input: syz1 as /devices/virtual/input/input32 [ 522.029426][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 522.029461][ T5888] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 522.029486][ T5888] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.032032][ T5888] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 522.032064][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 522.032086][ T5888] usb 2-1: Product: syz [ 522.032101][ T5888] usb 2-1: Manufacturer: syz [ 522.032116][ T5888] usb 2-1: SerialNumber: syz [ 522.310003][ T5888] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 522.517260][ T5866] usb 2-1: USB disconnect, device number 46 [ 522.536140][ T5866] usblp0: removed [ 523.043003][ T5912] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 523.192529][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 523.199451][ T5912] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 523.199482][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.199501][ T5912] usb 7-1: Product: syz [ 523.199514][ T5912] usb 7-1: Manufacturer: syz [ 523.199529][ T5912] usb 7-1: SerialNumber: syz [ 523.247862][ T5912] usb 7-1: config 0 descriptor?? [ 523.332764][ T5812] Bluetooth: hci6: command 0x1003 tx timeout [ 523.336075][T16969] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 523.452692][ T5912] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 523.460952][ T5912] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 523.488883][ T5912] usb 7-1: USB disconnect, device number 2 [ 523.812920][T16969] Bluetooth: hci0: command tx timeout [ 524.011757][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 524.011841][ T37] audit: type=1400 audit(1773106090.351:258): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=21363 comm="syz.0.7273" dest=19998 [ 524.235436][T21374] Bluetooth: MGMT ver 1.23 [ 524.554135][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7284'. [ 525.173245][T21413] program syz.0.7297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.292632][T16969] Bluetooth: hci0: command tx timeout [ 526.437847][T21466] input: syz1 as /devices/virtual/input/input33 [ 528.550265][T21575] netlink: 196 bytes leftover after parsing attributes in process `syz.0.7371'. [ 528.577469][ T37] audit: type=1326 audit(1773106094.921:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21572 comm="syz.6.7372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8397a6c799 code=0x0 [ 530.322057][T21639] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.329070][ T5866] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 530.389483][ T37] audit: type=1800 audit(1773106096.731:260): pid=21663 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.7415" name="bus" dev="tmpfs" ino=6081 res=0 errno=0 [ 530.499521][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 530.502229][ T5866] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 530.502256][ T5866] usb 2-1: config 0 has no interface number 0 [ 530.502303][ T5866] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.502329][ T5866] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.502368][ T5866] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 530.502561][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.562584][ T5866] usb 2-1: config 0 descriptor?? [ 530.718025][T21639] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.116045][T21639] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.197023][ T5912] usb 2-1: USB disconnect, device number 47 [ 531.418420][T21639] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.745417][ T1109] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.821647][ T1109] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.872359][ T1109] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.924225][T10185] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.147665][T21734] program syz.0.7448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.933130][T21811] kvm: kvm [21809]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xcd [ 534.380580][T21836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.380627][T21836] IPv6: NLM_F_CREATE should be set when creating new route [ 534.380661][T21836] IPv6: NLM_F_CREATE should be set when creating new route [ 534.381500][T21836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.381809][T21836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.623203][ T809] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 536.682805][T21957] __vm_enough_memory: pid: 21957, comm: syz.1.7558, bytes: 11727869145088 not enough memory for the allocation [ 536.772645][ T809] usb 7-1: Using ep0 maxpacket: 8 [ 536.775076][ T809] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 536.775110][ T809] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 536.775136][ T809] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 536.775161][ T809] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.775207][ T809] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 536.775230][ T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.081510][ T809] usb 7-1: GET_CAPABILITIES returned 0 [ 537.081567][ T809] usbtmc 7-1:16.0: can't read capabilities [ 537.153937][T21976] vivid-002: disconnect [ 537.209395][T21974] vivid-002: reconnect [ 537.301438][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 537.301703][T21939] usbtmc 7-1:16.0: Unable to send data, error -71 [ 537.313037][ T809] usb 7-1: USB disconnect, device number 3 [ 539.299972][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7618'. [ 541.237515][T22163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.642583][ T809] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 541.792650][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 541.795051][ T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.795113][ T809] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 541.795137][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.850695][ T809] usb 2-1: config 0 descriptor?? [ 542.090276][T22206] netlink: 277 bytes leftover after parsing attributes in process `syz.0.7682'. [ 542.099906][ T31] usb 2-1: USB disconnect, device number 48 [ 542.830590][ T809] hid_parser_main: 3 callbacks suppressed [ 542.830619][ T809] hid-generic 0000:0000:0004.0034: unknown main item tag 0x0 [ 542.830650][ T809] hid-generic 0000:0000:0004.0034: unknown main item tag 0x0 [ 542.830676][ T809] hid-generic 0000:0000:0004.0034: unknown main item tag 0x0 [ 542.830701][ T809] hid-generic 0000:0000:0004.0034: unknown main item tag 0x0 [ 542.830726][ T809] hid-generic 0000:0000:0004.0034: unknown main item tag 0x0 [ 542.830750][ T809] hid-generic 0000:0000:0004.0034: unknown main item tag 0x0 [ 542.830773][ T809] hid-generic 0000:0000:0004.0034: unknown main item tag 0x0 [ 542.830798][ T809] hid-generic 0000:0000:0004.0034: unknown main item tag 0x0 [ 542.830823][ T809] hid-generic 0000:0000:0004.0034: unknown main item tag 0x0 [ 542.830847][ T809] hid-generic 0000:0000:0004.0034: unknown main item tag 0x0 [ 542.960523][ T809] hid-generic 0000:0000:0004.0034: hidraw0: HID v0.03 Device [syz0] on syz1 [ 543.211017][T22248] fido_id[22248]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 544.219057][ T37] audit: type=1326 audit(1773106110.561:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22306 comm="syz.6.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a6c799 code=0x7ffc0000 [ 544.225173][ T37] audit: type=1326 audit(1773106110.561:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22306 comm="syz.6.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a6c799 code=0x7ffc0000 [ 544.235625][ T37] audit: type=1326 audit(1773106110.581:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22306 comm="syz.6.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f8397a6c799 code=0x7ffc0000 [ 544.235677][ T37] audit: type=1326 audit(1773106110.581:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22306 comm="syz.6.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a6c799 code=0x7ffc0000 [ 544.236478][ T37] audit: type=1326 audit(1773106110.581:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22306 comm="syz.6.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8397a6c799 code=0x7ffc0000 [ 544.237018][ T37] audit: type=1326 audit(1773106110.581:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22306 comm="syz.6.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a6c799 code=0x7ffc0000 [ 544.237601][ T37] audit: type=1326 audit(1773106110.581:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22306 comm="syz.6.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a6c799 code=0x7ffc0000 [ 544.245333][ T37] audit: type=1326 audit(1773106110.581:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22306 comm="syz.6.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8397a6c799 code=0x7ffc0000 [ 544.246908][ T37] audit: type=1326 audit(1773106110.591:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22306 comm="syz.6.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8397a6c799 code=0x7ffc0000 [ 544.259918][ T5912] kernel read not supported for file /media4 (pid: 5912 comm: kworker/1:6) [ 544.355653][ T31] IPVS: starting estimator thread 0... [ 544.463154][T22313] IPVS: using max 8 ests per chain, 19200 per kthread [ 544.735314][T22330] pimreg: entered allmulticast mode [ 544.751593][T22330] pimreg: left allmulticast mode [ 546.407288][T22421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7783'. [ 547.454735][T22467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7809'. [ 547.815476][T11294] hid-generic 000A:0004:0009.0035: hidraw0: HID v0.04 Device [syz1] on syz0 [ 547.942594][T22489] fido_id[22489]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 548.755846][T22522] netlink: 'syz.0.7833': attribute type 3 has an invalid length. [ 548.755871][T22522] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7833'. [ 550.445721][ T37] audit: type=1400 audit(1773106116.761:270): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="[" object="_" requested=w pid=22609 comm="syz.1.7877" src=16384 daddr=ff02::1 dest=3618 netif=gretap0 [ 551.297079][T22645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.028776][T22764] program syz.0.7951 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.042939][T22813] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.7977'. [ 556.111862][T22869] tap0: tun_chr_ioctl cmd 1074025677 [ 556.112121][T22869] tap0: linktype set to 804 [ 556.193167][ T5912] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 556.343198][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 556.345640][ T5912] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 556.345673][ T5912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 556.345699][ T5912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 556.345734][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.345779][ T5912] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 556.345803][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.585438][ T5912] usb 7-1: GET_CAPABILITIES returned 0 [ 556.585503][ T5912] usbtmc 7-1:16.0: can't read capabilities [ 556.834834][ T5912] usb 7-1: USB disconnect, device number 4 [ 557.280811][T22923] netlink: 'syz.1.8028': attribute type 2 has an invalid length. [ 557.280838][T22923] netlink: 'syz.1.8028': attribute type 11 has an invalid length. [ 557.280853][T22923] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8028'. [ 557.399271][T22929] program syz.6.8034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.578476][T22937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8035'. [ 559.114796][ T5912] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 559.263273][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 559.265925][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 559.265958][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 559.270285][ T5912] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 559.270318][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.270338][ T5912] usb 2-1: Product: syz [ 559.270352][ T5912] usb 2-1: Manufacturer: syz [ 559.270367][ T5912] usb 2-1: SerialNumber: syz [ 559.376269][ T5912] usb 2-1: config 0 descriptor?? [ 559.386082][ T5912] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 559.386115][ T5912] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 560.017548][ T5912] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 560.224536][ T5912] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 560.225012][ T5912] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 560.225030][ T5912] em28xx 2-1:0.0: No AC97 audio processor [ 560.269760][ T5912] usb 2-1: USB disconnect, device number 49 [ 560.296325][ T5912] em28xx 2-1:0.0: Disconnecting em28xx [ 560.300802][T19008] udevd[19008]: setting mode of /dev/media28 to 020660 failed: No such file or directory [ 560.300917][T19008] udevd[19008]: setting owner of /dev/media28 to uid=0, gid=28 failed: No such file or directory [ 560.315323][ T5912] em28xx 2-1:0.0: Freeing device [ 560.521134][ T37] audit: type=1400 audit(1773106126.861:271): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=23051 comm="syz.0.8092" daddr=::ffff:172.20.20.10 dest=20003 [ 563.101116][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.101194][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.630072][T23168] input: syz0 as /devices/virtual/input/input34 [ 564.112574][ T809] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 564.285338][ T809] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 9 [ 564.285375][ T809] usb 2-1: config 0 interface 0 has no altsetting 0 [ 564.291801][ T809] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 564.291834][ T809] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 564.291854][ T809] usb 2-1: Product: syz [ 564.291869][ T809] usb 2-1: Manufacturer: syz [ 564.291881][ T809] usb 2-1: SerialNumber: syz [ 564.354823][ T809] usb 2-1: config 0 descriptor?? [ 564.355603][T23176] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 564.383963][ T809] usb 2-1: selecting invalid altsetting 0 [ 564.667785][ T809] usb 2-1: USB disconnect, device number 50 [ 565.172781][ T5813] Bluetooth: hci5: command 0x0406 tx timeout [ 566.302599][T11294] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 566.452934][T11294] usb 2-1: Using ep0 maxpacket: 16 [ 566.460073][T11294] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.460102][T11294] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.473143][T11294] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.473175][T11294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.473193][T11294] usb 2-1: Product: syz [ 566.473206][T11294] usb 2-1: Manufacturer: syz [ 566.473219][T11294] usb 2-1: SerialNumber: syz [ 566.713306][T11294] usb 2-1: 0:2 : does not exist [ 566.722200][T11294] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 566.886728][T11294] usb 2-1: USB disconnect, device number 51 [ 566.996428][T19016] udevd[19016]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.392779][T23340] sctp: [Deprecated]: syz.1.8234 (pid 23340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.392779][T23340] Use struct sctp_sack_info instead [ 569.778105][T23392] netlink: 'syz.1.8259': attribute type 2 has an invalid length. [ 569.778130][T23392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8259'. [ 570.830249][ T37] audit: type=1400 audit(1773106137.171:272): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=23431 comm="syz.1.8279" daddr=::ffff:127.0.0.1 dest=20000 [ 571.319019][T23448] block nbd0: server does not support multiple connections per device. [ 571.370146][T23448] block nbd0: shutting down sockets [ 572.313033][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8311'. [ 574.315765][T23556] netem: change failed [ 574.407551][ T5813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 574.437804][ T5813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 574.452910][ T5813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 574.460437][ T5813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 574.461303][ T5813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 576.110870][ T43] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.449175][ T43] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.533187][ T5812] Bluetooth: hci6: command tx timeout [ 576.705960][ T43] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.716597][T23659] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8387'. [ 577.004515][T23668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.043964][ T43] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.160716][T23551] chnl_net:caif_netlink_parms(): no params data found [ 577.259783][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8395'. [ 577.500983][T23551] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.533621][T23551] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.533919][T23551] bridge_slave_0: entered allmulticast mode [ 577.537034][T23551] bridge_slave_0: entered promiscuous mode [ 577.577018][T23551] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.577160][T23551] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.577453][T23551] bridge_slave_1: entered allmulticast mode [ 577.580410][T23551] bridge_slave_1: entered promiscuous mode [ 577.687165][T23551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.891735][T23551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.156458][T23551] team0: Port device team_slave_0 added [ 578.244787][T23551] team0: Port device team_slave_1 added [ 578.510004][T23551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.510024][T23551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.510054][T23551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.523648][T23551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.523666][T23551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.523691][T23551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.550978][ T43] bridge_slave_1: left allmulticast mode [ 578.551172][ T43] bridge_slave_1: left promiscuous mode [ 578.566260][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.613414][ T5812] Bluetooth: hci6: command tx timeout [ 578.724522][ T43] bridge_slave_0: left allmulticast mode [ 578.724554][ T43] bridge_slave_0: left promiscuous mode [ 578.724873][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.988274][ T5866] kernel write not supported for file bpf-map (pid: 5866 comm: kworker/0:3) [ 580.697019][ T5812] Bluetooth: hci6: command tx timeout [ 581.264102][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.367256][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.429617][ T43] bond0 (unregistering): Released all slaves [ 581.937806][T23817] bond0: option miimon: invalid value (18446744073334219755) [ 581.937836][T23817] bond0: option miimon: allowed values 0 - 2147483647 [ 582.658026][T23851] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8479'. [ 582.658056][T23851] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 582.772657][ T5812] Bluetooth: hci6: command tx timeout [ 582.788089][T23551] hsr_slave_0: entered promiscuous mode [ 582.799982][T23551] hsr_slave_1: entered promiscuous mode [ 582.800632][T23551] debugfs: 'hsr0' already exists in 'hsr' [ 582.800656][T23551] Cannot create hsr debugfs directory [ 582.885073][T23868] option changes via remount are deprecated (pid=23865 comm=syz.1.8487) [ 582.885091][T23868] cgroup: option or name mismatch, new: 0x10000 "", old: 0x0 "" [ 584.184496][T23921] tmpfs: Too few inodes for current use [ 584.449924][T23932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8511'. [ 584.469323][ T43] hsr_slave_0: left promiscuous mode [ 584.519147][ T43] hsr_slave_1: left promiscuous mode [ 584.520898][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.521057][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.585003][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.585035][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.786436][ T43] veth1_macvtap: left promiscuous mode [ 584.786746][ T43] veth0_macvtap: left promiscuous mode [ 584.789672][ T43] veth1_vlan: left promiscuous mode [ 584.790068][ T43] veth0_vlan: left promiscuous mode [ 586.463573][ T43] team0 (unregistering): Port device team_slave_1 removed [ 586.526464][ T43] team0 (unregistering): Port device team_slave_0 removed [ 587.958171][T23551] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 588.122545][T23551] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 588.171826][T23551] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 588.193870][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8583'. [ 588.233652][T24086] netlink: 'syz.0.8583': attribute type 3 has an invalid length. [ 588.233679][T24086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8583'. [ 588.280274][T23551] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 589.029712][ T43] IPVS: stop unused estimator thread 0... [ 589.078717][T23551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.121960][T23551] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.189319][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.218769][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.221812][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.221962][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.281716][T23551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.684280][T23551] veth0_vlan: entered promiscuous mode [ 591.770153][T23551] veth1_vlan: entered promiscuous mode [ 591.982202][T23551] veth0_macvtap: entered promiscuous mode [ 592.120358][T24205] program syz.1.8623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 592.142024][T23551] veth1_macvtap: entered promiscuous mode [ 592.325975][T23551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.348847][T23551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.420324][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.420732][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.420773][ T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.420809][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.007207][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.007231][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.232656][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.232682][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.675351][T24306] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 598.083063][T24456] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8733'. [ 598.246335][T24462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8735'. [ 598.246373][T24462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8735'. [ 600.440311][T24535] program syz.1.8769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.797015][T24604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8802'. [ 601.850217][T24608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8802'. [ 601.957932][T24604] n: the hash_elasticity option has been deprecated and is always 16 [ 601.957957][T24604] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 601.990185][T24608] n: the hash_elasticity option has been deprecated and is always 16 [ 601.990208][T24608] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 602.612769][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 602.762546][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 602.765142][ T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.765179][ T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.765203][ T10] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 602.765230][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 602.765276][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 602.765300][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.843023][ T10] usb 2-1: config 0 descriptor?? [ 603.071091][T24630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.071700][T24630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.512813][ T5912] usb 2-1: USB disconnect, device number 52 [ 603.571166][ T37] audit: type=1400 audit(2000000024.810:273): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=24677 comm="syz.7.8838" daddr=::ffff:172.20.20.187 [ 604.160051][T24705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.054749][T24725] kexec: Could not allocate control_code_buffer [ 607.082590][ T809] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 607.242684][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 607.245046][ T809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.245072][ T809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.281231][ T809] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 607.281267][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.281288][ T809] usb 2-1: Product: syz [ 607.281303][ T809] usb 2-1: Manufacturer: syz [ 607.281318][ T809] usb 2-1: SerialNumber: syz [ 607.560909][ T809] usb 2-1: 0:2 : does not exist [ 607.586256][ T809] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 607.613784][T24845] 9p: Unknown access argument c: -22 [ 607.684949][ T809] usb 2-1: USB disconnect, device number 53 [ 607.866090][T24233] udevd[24233]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.092989][T11294] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 609.242584][T11294] usb 2-1: Using ep0 maxpacket: 32 [ 609.245238][T11294] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 609.245271][T11294] usb 2-1: config 0 interface 0 has no altsetting 0 [ 609.245304][T11294] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 609.245327][T11294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.297349][T11294] usb 2-1: config 0 descriptor?? [ 610.131322][T11294] hid_parser_main: 108 callbacks suppressed [ 610.131352][T11294] corsair-psu 0003:1B1C:1C09.0037: unknown main item tag 0x0 [ 610.131382][T11294] corsair-psu 0003:1B1C:1C09.0037: unknown main item tag 0x0 [ 610.131408][T11294] corsair-psu 0003:1B1C:1C09.0037: unknown main item tag 0x0 [ 610.131434][T11294] corsair-psu 0003:1B1C:1C09.0037: unknown main item tag 0x0 [ 610.131459][T11294] corsair-psu 0003:1B1C:1C09.0037: unknown main item tag 0x0 [ 610.150663][T11294] corsair-psu 0003:1B1C:1C09.0037: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 610.484045][T11294] corsair-psu 0003:1B1C:1C09.0037: unable to initialize device (-110) [ 610.488676][T11294] corsair-psu 0003:1B1C:1C09.0037: probe with driver corsair-psu failed with error -110 [ 610.501744][T11294] usb 2-1: USB disconnect, device number 54 [ 612.017508][T25027] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8984'. [ 613.247198][T25085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9007'. [ 613.692598][T11294] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 613.858038][T11294] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 613.858073][T11294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.858094][T11294] usb 2-1: Product: syz [ 613.858109][T11294] usb 2-1: Manufacturer: syz [ 613.858122][T11294] usb 2-1: SerialNumber: syz [ 614.313420][T11294] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 614.313492][T11294] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 614.516089][T11294] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 614.516157][T11294] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 614.519527][T11294] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 614.626527][T11294] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 614.680454][T11294] usb 2-1: USB disconnect, device number 55 [ 615.247411][T25161] netlink: 'syz.7.9040': attribute type 6 has an invalid length. [ 615.500372][T25131] futex_wake_op: syz.0.9024 tries to shift op by -1; fix this program [ 615.723724][T25180] sctp: [Deprecated]: syz.7.9049 (pid 25180) Use of int in maxseg socket option. [ 615.723724][T25180] Use struct sctp_assoc_value instead [ 615.925171][T25190] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9054'. [ 616.396173][T25214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9065'. [ 616.396202][T25214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.396227][T25214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.462644][T25214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.462677][T25214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.631254][T25268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9090'. [ 617.631297][T25268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9090'. [ 618.006485][T25282] program syz.1.9099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.438183][T25306] program syz.7.9111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.144036][T25392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9153'. [ 623.135414][ T37] audit: type=1326 audit(2000000044.380:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25541 comm="syz.7.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8686c799 code=0x7ffc0000 [ 623.175368][ T37] audit: type=1326 audit(2000000044.380:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25541 comm="syz.7.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8686c799 code=0x7ffc0000 [ 623.175425][ T37] audit: type=1326 audit(2000000044.410:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25541 comm="syz.7.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee8686c799 code=0x7ffc0000 [ 623.175470][ T37] audit: type=1326 audit(2000000044.420:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25541 comm="syz.7.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8686c799 code=0x7ffc0000 [ 623.177078][ T37] audit: type=1326 audit(2000000044.420:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25541 comm="syz.7.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8686c799 code=0x7ffc0000 [ 623.177135][ T37] audit: type=1326 audit(2000000044.420:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25541 comm="syz.7.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8686c799 code=0x7ffc0000 [ 623.177182][ T37] audit: type=1326 audit(2000000044.420:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25541 comm="syz.7.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8686c799 code=0x7ffc0000 [ 623.177958][ T37] audit: type=1326 audit(2000000044.420:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25541 comm="syz.7.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fee8686c799 code=0x7ffc0000 [ 623.178009][ T37] audit: type=1326 audit(2000000044.420:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25541 comm="syz.7.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8686c799 code=0x7ffc0000 [ 623.178056][ T37] audit: type=1326 audit(2000000044.420:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25541 comm="syz.7.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8686c799 code=0x7ffc0000 [ 623.525146][T25549] vlan2: entered promiscuous mode [ 623.525175][T25549] bond0: entered promiscuous mode [ 623.525185][T25549] bond_slave_0: entered promiscuous mode [ 623.525369][T25549] bond_slave_1: entered promiscuous mode [ 624.557609][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.557696][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.784212][T25645] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9276'. [ 626.055183][T25658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9284'. [ 628.210231][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 628.210251][ T37] audit: type=1400 audit(2000000049.450:292): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=25771 comm="syz.7.9337" daddr=::1c9a:e7ff:fe9a:6f34 [ 629.683681][T25849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.101456][T25856] cgroup: fork rejected by pids controller in /syz1 [ 632.206301][T26451] netlink: 71 bytes leftover after parsing attributes in process `syz.7.9418'. [ 633.958479][T26520] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.9447'. [ 634.307492][T26537] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9458'. [ 634.792493][ T809] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 634.942523][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 634.944947][ T809] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.944982][ T809] usb 2-1: config 0 interface 0 has no altsetting 0 [ 634.945018][ T809] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 634.945043][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.999031][ T809] usb 2-1: config 0 descriptor?? [ 635.463610][ T809] mcp2221 0003:04D8:00DD.0038: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 635.904264][ T809] usb 2-1: USB disconnect, device number 56 [ 637.803412][T26660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9518'. [ 638.813490][T26691] netlink: 'syz.1.9531': attribute type 1 has an invalid length. [ 640.522801][T26761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9562'. [ 643.621699][T26879] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9617'. [ 643.964703][T26892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9622'. [ 643.964853][T26892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.267667][T26892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.117254][ T37] audit: type=1400 audit(2000000066.360:293): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=26936 comm="syz.0.9644" dest=65533 [ 649.874160][ T37] audit: type=1400 audit(2000000071.120:294): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=27154 comm="syz.1.9748" [ 650.242639][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 650.394280][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 650.396399][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 650.401143][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 650.401174][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.401196][ T10] usb 2-1: Product: syz [ 650.401209][ T10] usb 2-1: Manufacturer: syz [ 650.401224][ T10] usb 2-1: SerialNumber: syz [ 650.468550][ T10] usb 2-1: config 0 descriptor?? [ 650.483562][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 650.483599][ T10] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 650.796539][T27187] input: syz0 as /devices/virtual/input/input36 [ 651.114750][ T10] em28xx 2-1:0.0: chip ID is em2765 [ 651.642054][ T10] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 651.642089][ T10] em28xx 2-1:0.0: board has no eeprom [ 651.726862][ T10] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 651.726896][ T10] em28xx 2-1:0.0: dvb set to bulk mode. [ 651.727311][T11294] em28xx 2-1:0.0: Binding DVB extension [ 651.781142][ T10] usb 2-1: USB disconnect, device number 57 [ 651.791113][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 651.876695][T11294] em28xx 2-1:0.0: Registering input extension [ 651.876998][ T10] em28xx 2-1:0.0: Closing input extension [ 651.921508][ T10] em28xx 2-1:0.0: Freeing device [ 652.330155][T27241] overlayfs: upper fs does not support file handles, falling back to index=off. [ 652.330598][T27241] overlayfs: overlapping lowerdir path [ 653.156331][T27284] netlink: 'syz.1.9813': attribute type 2 has an invalid length. [ 653.482941][T27297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9820'. [ 653.626217][T27297] team0: Port device team_slave_0 removed [ 654.437251][ T37] audit: type=1804 audit(2000000075.660:295): pid=27341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.9841" name="/newroot/1612/file1" dev="tmpfs" ino=8182 res=1 errno=0 [ 654.487834][ T37] audit: type=1804 audit(2000000075.710:296): pid=27341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.9841" name="/newroot/1612/file1" dev="tmpfs" ino=8182 res=1 errno=0 [ 654.649658][T27353] loop8: detected capacity change from 0 to 7 [ 654.742658][T27353] Dev loop8: unable to read RDB block 7 [ 654.742700][T27353] loop8: unable to read partition table [ 654.742906][T27353] loop8: partition table beyond EOD, truncated [ 654.742938][T27353] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 655.225002][ T37] audit: type=1400 audit(2000000076.470:297): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=27372 comm="syz.1.9856" daddr=::ffff:127.0.0.1 dest=20002 [ 657.314255][ T37] audit: type=1400 audit(2000000078.560:298): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="[" requested=w pid=27471 comm="syz.7.9904" daddr=::1c9a:e7ff:fe9a:6f34 [ 658.452859][ T38] INFO: task syz.4.6719:20205 blocked for more than 143 seconds. [ 658.452888][ T38] Tainted: G L syzkaller #0 [ 658.452900][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 658.452910][ T38] task:syz.4.6719 state:D stack:27264 pid:20205 tgid:20204 ppid:5799 task_flags:0x400140 flags:0x00080002 [ 658.452977][ T38] Call Trace: [ 658.452985][ T38] [ 658.452999][ T38] __schedule+0x1553/0x5240 [ 658.453038][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 658.453066][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.453116][ T38] ? rt_spin_lock+0x1e0/0x400 [ 658.453143][ T38] ? __pfx___schedule+0x10/0x10 [ 658.453182][ T38] ? schedule+0x90/0x360 [ 658.453212][ T38] schedule+0x164/0x360 [ 658.453241][ T38] __fuse_simple_request+0x121f/0x1c60 [ 658.453287][ T38] ? __pfx___fuse_simple_request+0x10/0x10 [ 658.453315][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 658.453361][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 658.453394][ T38] ? __kasan_kmalloc+0x93/0xb0 [ 658.453431][ T38] ? fuse_send_init+0x57/0x6a0 [ 658.453458][ T38] fuse_send_init+0x40f/0x6a0 [ 658.453482][ T38] ? __pfx_fuse_fill_super+0x10/0x10 [ 658.453508][ T38] get_tree_nodev+0xbb/0x150 [ 658.453542][ T38] fuse_get_tree+0x304/0x500 [ 658.453572][ T38] vfs_get_tree+0x92/0x2a0 [ 658.453607][ T38] do_new_mount+0x341/0xd30 [ 658.453631][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 658.453668][ T38] ? __pfx_do_new_mount+0x10/0x10 [ 658.453800][ T38] ? ns_capable+0x89/0xe0 [ 658.453836][ T38] ? path_mount+0x690/0x10e0 [ 658.453868][ T38] ? user_path_at+0xd4/0x160 [ 658.453900][ T38] __se_sys_mount+0x31d/0x420 [ 658.453935][ T38] ? __pfx___se_sys_mount+0x10/0x10 [ 658.453969][ T38] ? __x64_sys_mount+0x20/0xc0 [ 658.453998][ T38] do_syscall_64+0x14d/0xf80 [ 658.454025][ T38] ? trace_irq_disable+0x3b/0x150 [ 658.454049][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.454071][ T38] ? clear_bhb_loop+0x40/0x90 [ 658.454105][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.454127][ T38] RIP: 0033:0x7fcfcb8cc799 [ 658.454147][ T38] RSP: 002b:00007fcfc9b26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 658.454168][ T38] RAX: ffffffffffffffda RBX: 00007fcfcbb45fa0 RCX: 00007fcfcb8cc799 [ 658.454184][ T38] RDX: 00002000000020c0 RSI[ 658.454184][ T38] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000 [ 658.454197][ T38] RBP: 00007fcfcb962bd9 R08: 00002000000003c0 R09: 0000000000000000 [ 658.454210][ T38] R10: 0000000000000413 R11: 0000000000000246 R12: 0000000000000000 [ 658.454224][ T38] R13: 00007fcfcbb46038 R14: 00007fcfcbb45fa0 R15: 00007ffca733e858 [ 658.454261][ T38] [ 658.454286][ T38] [ 658.454286][ T38] Showing all locks held in the system: [ 658.454295][ T38] 2 locks held by kworker/u8:1/13: [ 658.454307][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 658.454374][ T38] #1: ffffc90000127c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 658.454432][ T38] 3 locks held by kworker/1:0/31: [ 658.454445][ T38] 1 lock held by khungtaskd/38: [ 658.454456][ T38] #0: ffffffff8ddcb840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 658.454509][ T38] 2 locks held by kworker/u8:5/94: [ 658.454521][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 658.454578][ T38] #1: ffffc9000155fc40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 658.454659][ T38] 1 lock held by udevd/5164: [ 658.454673][ T38] 2 locks held by getty/5553: [ 658.454684][ T38] #0: ffff8880292c00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 658.454746][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 658.454806][ T38] 6 locks held by syz-executor/5796: [ 658.454823][ T38] 3 locks held by syz-executor/11099: [ 658.459249][ T38] 1 lock held by syz.4.6719/20205: [ 658.459268][ T38] #0: ffff88803655c0d0 (&type->s_umount_key#66/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 658.459350][ T38] 1 lock held by syz.1.9907/27502: [ 658.459362][ T38] 2 locks held by syz.0.9922/27511: [ 658.459374][ T38] 2 locks held by syz-executor/27517: [ 658.459486][ T38] [ 658.459494][ T38] ============================================= [ 658.459494][ T38] [ 658.459502][ T38] NMI backtrace for cpu 0 [ 658.459520][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 658.459548][ T38] Tainted: [L]=SOFTLOCKUP [ 658.459555][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.459566][ T38] Call Trace: [ 658.459574][ T38] [ 658.459583][ T38] dump_stack_lvl+0xe8/0x150 [ 658.459615][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 658.459638][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 658.459670][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 658.459697][ T38] sys_info+0x135/0x170 [ 658.459725][ T38] watchdog+0xfd9/0x1030 [ 658.459755][ T38] ? watchdog+0x21a/0x1030 [ 658.459789][ T38] kthread+0x388/0x470 [ 658.459812][ T38] ? __pfx_watchdog+0x10/0x10 [ 658.459833][ T38] ? __pfx_kthread+0x10/0x10 [ 658.459855][ T38] ret_from_fork+0x51e/0xb90 [ 658.459887][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 658.459913][ T38] ? __switch_to+0xc7d/0x1450 [ 658.459943][ T38] ? __pfx_kthread+0x10/0x10 [ 658.459964][ T38] ret_from_fork_asm+0x1a/0x30 [ 658.460001][ T38] [ 658.460009][ T38] Sending NMI from CPU 0 to CPUs 1: [ 658.460038][ C1] NMI backtrace for cpu 1 [ 658.460055][ C1] CPU: 1 UID: 0 PID: 5164 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 658.460079][ C1] Tainted: [L]=SOFTLOCKUP [ 658.460085][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.460095][ C1] RIP: 0010:should_fail_ex+0x87/0x600 [ 658.460117][ C1] Code: 2c 24 09 eb 0f 84 f6 00 00 00 4c 89 eb 48 c1 eb 03 80 3c 13 00 74 0e 4c 89 ef 49 89 d6 e8 91 7a 52 fd 4c 89 f2 49 83 7d 00 00 <0f> 84 13 01 00 00 4d 8d 65 20 4c 89 e0 48 c1 e8 03 0f b6 04 10 84 [ 658.460131][ C1] RSP: 0018:ffffc900031a76f8 EFLAGS: 00000246 [ 658.460147][ C1] RAX: 0000000000000000 RBX: 1ffffffff1be16e0 RCX: 0000000000000046 [ 658.460158][ C1] RDX: dffffc0000000000 RSI: 0000000000000100 RDI: ffffffff8df0b700 [ 658.460170][ C1] RBP: 0000000000000000 R08: ffffffff821c21ac R09: ffffffff8df02c20 [ 658.460182][ C1] R10: dffffc0000000000 R11: ffffed100e606a7e R12: ffff88803a7e718c [ 658.460194][ C1] R13: ffffffff8df0b700 R14: 0000000000000000 R15: ffff88803a7e5b80 [ 658.460206][ C1] FS: 00007f421b5de880(0000) GS:ffff88812643f000(0000) knlGS:0000000000000000 [ 658.460221][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.460233][ C1] CR2: 00007fee8761da08 CR3: 000000003a134000 CR4: 00000000003526f0 [ 658.460251][ C1] Call Trace: [ 658.460257][ C1] [ 658.460268][ C1] should_failslab+0xa8/0x100 [ 658.460286][ C1] __kmalloc_noprof+0xdf/0x7b0 [ 658.460310][ C1] ? security_inode_init_security+0x102/0x3d0 [ 658.460328][ C1] ? __pfx___get_acl+0x10/0x10 [ 658.460358][ C1] security_inode_init_security+0x102/0x3d0 [ 658.460378][ C1] ? __pfx_shmem_initxattrs+0x10/0x10 [ 658.460400][ C1] ? __pfx_security_inode_init_security+0x10/0x10 [ 658.460419][ C1] ? set_cached_acl+0xd2/0x180 [ 658.460438][ C1] ? simple_acl_create+0x184/0x1b0 [ 658.460461][ C1] shmem_mknod+0x1fe/0x360 [ 658.460482][ C1] ? __pfx_shmem_create+0x10/0x10 [ 658.460500][ C1] path_openat+0x13b4/0x38a0 [ 658.460543][ C1] ? __pfx_path_openat+0x10/0x10 [ 658.460575][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 658.460602][ C1] do_file_open+0x23e/0x4a0 [ 658.460624][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.460648][ C1] ? __pfx_do_file_open+0x10/0x10 [ 658.460669][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 658.460699][ C1] ? alloc_fd+0x64e/0x6c0 [ 658.460724][ C1] do_sys_openat2+0x113/0x200 [ 658.460743][ C1] ? fput_close_sync+0x11f/0x240 [ 658.460763][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 658.460783][ C1] ? fput_close_sync+0x11f/0x240 [ 658.460802][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 658.460827][ C1] __x64_sys_openat+0x138/0x170 [ 658.460849][ C1] do_syscall_64+0x14d/0xf80 [ 658.460870][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.460887][ C1] ? clear_bhb_loop+0x40/0x90 [ 658.460906][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.460922][ C1] RIP: 0033:0x7f421b6cc407 [ 658.460937][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 658.460951][ C1] RSP: 002b:00007ffd61893020 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 658.460968][ C1] RAX: ffffffffffffffda RBX: 00007f421b5de880 RCX: 00007f421b6cc407 [ 658.460980][ C1] RDX: 0000000000080141 RSI: 000055c1cb1b102e RDI: ffffffffffffff9c [ 658.460992][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 658.461002][ C1] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 658.461013][ C1] R13: 00000000ffffffff R14: ffffffffffffffff R15: 00007ffd61893340 [ 658.461035][ C1] [ 658.704018][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 658.704043][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 658.704077][ T38] Tainted: [L]=SOFTLOCKUP [ 658.704084][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.704095][ T38] Call Trace: [ 658.704103][ T38] [ 658.704111][ T38] vpanic+0x56c/0xa60 [ 658.704143][ T38] ? __pfx___schedule+0x10/0x10 [ 658.704167][ T38] ? __pfx_vpanic+0x10/0x10 [ 658.704202][ T38] panic+0xc5/0xd0 [ 658.704226][ T38] ? __pfx_panic+0x10/0x10 [ 658.704254][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 658.704282][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 658.704306][ T38] watchdog+0x1023/0x1030 [ 658.704334][ T38] ? watchdog+0x21a/0x1030 [ 658.704363][ T38] kthread+0x388/0x470 [ 658.704383][ T38] ? __pfx_watchdog+0x10/0x10 [ 658.704403][ T38] ? __pfx_kthread+0x10/0x10 [ 658.704423][ T38] ret_from_fork+0x51e/0xb90 [ 658.704452][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 658.704475][ T38] ? __switch_to+0xc7d/0x1450 [ 658.704500][ T38] ? __pfx_kthread+0x10/0x10 [ 658.704521][ T38] ret_from_fork_asm+0x1a/0x30 [ 658.704554][ T38] [ 658.705751][ T38] Kernel Offset: disabled