last executing test programs: 3.838100024s ago: executing program 4 (id=13159): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x9}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) 3.664471888s ago: executing program 4 (id=13163): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x190, 0x78, 0x0, 0x0, 0x40000, 0x11, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 3.445696584s ago: executing program 4 (id=13169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007"], 0x30}}, 0x0) 3.291100887s ago: executing program 0 (id=13173): r0 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 3.213299199s ago: executing program 4 (id=13176): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000240)={0x3, 0x0, 0x10, 0x1b, 0x1cb, 0x0}) 3.19009176s ago: executing program 0 (id=13178): pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) tee(r0, 0xffffffffffffffff, 0x53, 0x0) 3.043541143s ago: executing program 4 (id=13181): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.043354103s ago: executing program 0 (id=13182): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 2.827478589s ago: executing program 0 (id=13188): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x20108c0, &(0x7f00000018c0)=ANY=[], 0x1, 0x61f5, &(0x7f00000075c0)="$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") mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) 2.671914953s ago: executing program 3 (id=13191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x40, 0x18, 0x1, 0x70bd25, 0x25dfdbff, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8840}, 0x20040844) 2.426753019s ago: executing program 3 (id=13195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x62, 0x6, 0x3, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 2.270791643s ago: executing program 3 (id=13198): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) 1.55294752s ago: executing program 3 (id=13210): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0xbb80) 1.389752484s ago: executing program 3 (id=13214): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c0011"], 0x34}}, 0xc000) 1.320816987s ago: executing program 0 (id=13216): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x4bfb, 0xffffffffffffffff) 1.212591769s ago: executing program 0 (id=13219): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0}) 1.024489594s ago: executing program 3 (id=13223): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @private1}], 0x4c) 785.94472ms ago: executing program 2 (id=13226): r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x2020) 660.323793ms ago: executing program 2 (id=13228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}}, 0x0) 636.611734ms ago: executing program 1 (id=13229): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000100)) 503.361847ms ago: executing program 4 (id=13230): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x1000}, 0x4) 503.177807ms ago: executing program 2 (id=13231): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) 475.992328ms ago: executing program 1 (id=13232): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCCONS(r0, 0x541d) 354.766171ms ago: executing program 1 (id=13233): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) 273.331003ms ago: executing program 2 (id=13234): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) 243.700423ms ago: executing program 1 (id=13235): setreuid(0x0, 0xee00) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 143.219036ms ago: executing program 2 (id=13236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 79.457808ms ago: executing program 1 (id=13237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ppoll(&(0x7f0000001bc0)=[{r0, 0x4}], 0x1, &(0x7f0000001c40)={0x0, 0x989680}, 0x0, 0x0) 42.121569ms ago: executing program 2 (id=13238): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x3fe}, {0x0, 0x2, 0x3, 0x1000}, {0xa47, 0x5}}) 0s ago: executing program 1 (id=13239): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0xad) kernel console output (not intermixed with test programs): 0836][T24863] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9479'. [ 588.655595][T21975] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 588.664696][T21975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.715148][T21975] usb 3-1: Product: syz [ 588.719354][T21975] usb 3-1: Manufacturer: syz [ 588.723954][T21975] usb 3-1: SerialNumber: syz [ 588.797610][ T6441] usb 4-1: Using ep0 maxpacket: 8 [ 588.803178][T21975] usb 3-1: config 0 descriptor?? [ 588.877262][T21975] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 588.933767][ T6441] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 588.954528][ T6441] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 588.992156][ T6441] usb 4-1: config 0 has no interface number 0 [ 589.018663][ T6441] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 589.155607][ T6441] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 589.186049][ T6441] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 589.216871][ T6441] usb 4-1: Product: syz [ 589.237454][ T6441] usb 4-1: config 0 descriptor?? [ 589.320701][ T6441] usb 3-1: USB disconnect, device number 62 [ 589.502046][T21975] usb 4-1: USB disconnect, device number 53 [ 589.684688][T13951] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 589.790934][T24914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9502'. [ 589.896543][T24918] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 590.256799][T13951] usb 5-1: unable to get BOS descriptor or descriptor too short [ 590.392000][T13951] usb 5-1: config 172 has an invalid interface number: 190 but max is 1 [ 590.405459][T13951] usb 5-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 590.437934][ T6633] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 590.456330][T13951] usb 5-1: config 172 has no interface number 1 [ 590.462626][T13951] usb 5-1: config 172 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 590.524004][T13951] usb 5-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 590.647152][T24952] netlink: 'syz.0.9521': attribute type 3 has an invalid length. [ 590.715563][ T6633] usb 2-1: Using ep0 maxpacket: 32 [ 590.745560][ T6441] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 590.859841][T13951] usb 5-1: string descriptor 0 read error: -22 [ 590.866243][ T6633] usb 2-1: config 2 has an invalid interface number: 222 but max is 0 [ 590.874422][ T6633] usb 2-1: config 2 has no interface number 0 [ 590.885203][T13951] usb 5-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 590.924698][ T6633] usb 2-1: config 2 interface 222 has no altsetting 0 [ 590.934796][T13951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.017432][T13951] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 591.098356][T24969] netlink: 'syz.0.9529': attribute type 3 has an invalid length. [ 591.132442][ T6633] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=af.17 [ 591.158966][ T6633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.201942][ T6633] usb 2-1: Product: syz [ 591.206452][ T6633] usb 2-1: Manufacturer: syz [ 591.211058][ T6633] usb 2-1: SerialNumber: syz [ 591.271501][ T26] usb 5-1: USB disconnect, device number 66 [ 591.297563][T24971] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 591.445519][ T6441] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 591.454594][ T6441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.525134][ T6441] usb 4-1: Product: syz [ 591.539529][ T6441] usb 4-1: Manufacturer: syz [ 591.544160][ T6441] usb 4-1: SerialNumber: syz [ 591.564165][T24982] netlink: 'syz.2.9534': attribute type 3 has an invalid length. [ 591.576285][T24982] __nla_validate_parse: 7 callbacks suppressed [ 591.576303][T24982] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.9534'. [ 591.591520][ T6441] usb 4-1: config 0 descriptor?? [ 591.613127][ T6633] usb 2-1: USB disconnect, device number 65 [ 591.623400][T24984] netlink: 'syz.0.9535': attribute type 25 has an invalid length. [ 591.656305][T24984] netlink: 'syz.0.9535': attribute type 6 has an invalid length. [ 591.657353][ T6441] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 591.976660][T24996] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9541'. [ 592.124513][ T6633] usb 4-1: USB disconnect, device number 54 [ 592.277130][T25008] openvswitch: netlink: Actions may not be safe on all matching packets [ 593.165007][T25055] infiniband syz1: set active [ 593.333688][T25055] device bridge4 left promiscuous mode [ 593.386625][T25055] device ip6gretap1 left promiscuous mode [ 593.423917][T25055] device bridge5 left promiscuous mode [ 593.455450][T21977] lo speed is unknown, defaulting to 1000 [ 593.475283][T25069] netlink: 'syz.0.9577': attribute type 10 has an invalid length. [ 593.540867][T25069] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 593.595215][T25069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.820474][T25088] netlink: 'syz.4.9588': attribute type 12 has an invalid length. [ 594.248105][T25108] netlink: 'syz.4.9598': attribute type 10 has an invalid length. [ 594.305687][T25108] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 594.393845][T25108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.637640][ T26] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 594.985241][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 595.036512][T25144] autofs4:pid:25144:autofs_fill_super: called with bogus options [ 595.243621][ T26] usb 4-1: unable to get BOS descriptor or descriptor too short [ 595.365710][ T26] usb 4-1: config 25 has an invalid interface number: 91 but max is 0 [ 595.373928][ T26] usb 4-1: config 25 has no interface number 0 [ 595.435201][ T26] usb 4-1: config 25 interface 91 altsetting 7 bulk endpoint 0xE has invalid maxpacket 64 [ 595.475758][ T26] usb 4-1: config 25 interface 91 altsetting 7 bulk endpoint 0xD has invalid maxpacket 16 [ 595.533498][ T26] usb 4-1: config 25 interface 91 has no altsetting 0 [ 595.785450][ T26] usb 4-1: New USB device found, idVendor=0421, idProduct=00ab, bcdDevice=ee.96 [ 595.804788][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.865163][ T26] usb 4-1: Product: syz [ 595.889603][ T26] usb 4-1: Manufacturer: syz [ 595.915279][ T26] usb 4-1: SerialNumber: syz [ 595.977788][T25116] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 595.984865][T25116] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 596.106651][T25195] loop4: detected capacity change from 0 to 64 [ 596.385383][ T26] usb 4-1: bad CDC descriptors [ 596.392121][ T26] usb 4-1: bad CDC descriptors [ 596.460530][ T26] usb 4-1: USB disconnect, device number 55 [ 597.556018][T25262] autofs4:pid:25262:autofs_fill_super: called with bogus options [ 597.912001][T25279] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 598.407480][T25301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9692'. [ 599.356114][T25359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9720'. [ 599.638385][T25374] xt_TCPMSS: Only works on TCP SYN packets [ 599.875224][T25387] comedi: No check for data length of config insn id 30 is implemented [ 599.886869][ T150] block nbd2: Attempted send on invalid socket [ 599.893094][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 600.037768][T25387] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 600.112105][T25387] comedi: Assuming n=15 is correct [ 601.045261][T21975] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 601.316470][T21975] usb 2-1: Using ep0 maxpacket: 16 [ 601.515302][T21975] usb 2-1: config 0 has no interfaces? [ 601.601238][ T1201] block nbd3: Attempted send on invalid socket [ 601.607505][ T1201] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 601.725757][T21975] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 601.776832][T21975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.784870][T21975] usb 2-1: Product: syz [ 601.824277][T21975] usb 2-1: Manufacturer: syz [ 601.835154][T21975] usb 2-1: SerialNumber: syz [ 601.852804][T21975] r8152-cfgselector 2-1: config 0 descriptor?? [ 602.225023][T21975] r8152-cfgselector 2-1: Unknown version 0x0000 [ 602.277475][T25510] comedi: No check for data length of config insn id 30 is implemented [ 602.318578][T25510] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 602.336822][T25512] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 602.365269][T25510] comedi: Assuming n=15 is correct [ 602.446383][T21975] r8152-cfgselector 2-1: USB disconnect, device number 66 [ 602.628870][T25525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9801'. [ 603.157448][T25552] xt_ecn: cannot match TCP bits for non-tcp packets [ 603.250406][T25548] xt_CT: No such helper "snmp_trap" [ 604.027767][T25590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9833'. [ 604.397545][T25609] netlink: 'syz.1.9842': attribute type 1 has an invalid length. [ 604.625337][T25621] netlink: 'syz.3.9848': attribute type 1 has an invalid length. [ 604.814180][ T26] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 605.184748][T25638] xt_CT: No such helper "snmp_trap" [ 605.315717][ T26] usb 3-1: config 7 descriptor has 1 excess byte, ignoring [ 605.330792][ T26] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 605.571129][T21975] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 605.585362][ T26] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 605.630316][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.658733][ T26] usb 3-1: Product: syz [ 605.668803][ T26] usb 3-1: Manufacturer: syz [ 605.684034][ T26] usb 3-1: SerialNumber: syz [ 605.755324][ T26] rndis_wlan 3-1:7.0: skipping garbage [ 605.760855][ T26] usb 3-1: bad CDC descriptors [ 605.782108][ T26] rndis_host 3-1:7.0: skipping garbage [ 605.798008][ T26] usb 3-1: bad CDC descriptors [ 605.816785][ T26] option 3-1:7.0: GSM modem (1-port) converter detected [ 606.005158][T13951] usb 3-1: USB disconnect, device number 63 [ 606.005374][T21975] usb 4-1: config 0 has an invalid interface number: 178 but max is 2 [ 606.011864][T13951] option 3-1:7.0: device disconnected [ 606.049926][T21975] usb 4-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 606.098287][T21975] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 606.109847][T25676] netlink: 'syz.4.9872': attribute type 1 has an invalid length. [ 606.145150][T21975] usb 4-1: config 0 has no interface number 0 [ 606.166919][T21975] usb 4-1: too many endpoints for config 0 interface 178 altsetting 200: 174, using maximum allowed: 30 [ 606.217636][T21975] usb 4-1: config 0 interface 178 altsetting 200 has 0 endpoint descriptors, different from the interface descriptor's value: 174 [ 606.269876][T21975] usb 4-1: config 0 interface 178 has no altsetting 0 [ 606.310361][T21975] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 606.349895][T21975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.384092][T21975] usb 4-1: config 0 descriptor?? [ 606.679459][T21975] usb 4-1: string descriptor 0 read error: -71 [ 606.745175][T21975] usb 4-1: USB disconnect, device number 56 [ 606.812089][T25700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9882'. [ 607.615240][T25742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9906'. [ 608.591067][T25789] loop4: detected capacity change from 0 to 256 [ 609.164016][T25807] gre0: Master is either lo or non-ether device [ 609.986419][ T26] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 610.296328][T25843] netlink: 'syz.1.9955': attribute type 3 has an invalid length. [ 610.405647][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.429907][ T26] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 610.452903][T25849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9958'. [ 610.475516][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 610.511057][T25849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9958'. [ 610.565075][T25849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9958'. [ 610.657113][T25856] tmpfs: Bad value for 'mpol' [ 610.725923][ T26] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 610.745134][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.773743][ T26] usb 3-1: Product: syz [ 610.795201][ T26] usb 3-1: Manufacturer: syz [ 610.820247][ T26] usb 3-1: SerialNumber: syz [ 610.851266][ T26] usb 3-1: config 0 descriptor?? [ 611.165238][T13951] usb 3-1: USB disconnect, device number 64 [ 611.278526][ T150] block nbd4: Attempted send on invalid socket [ 611.284771][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 611.295757][T25881] hpfs: hpfs_map_sector(): read error [ 611.566312][T25895] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9980'. [ 611.822939][T25904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9984'. [ 611.853163][T25907] xt_TCPMSS: Only works on TCP SYN packets [ 611.916512][T21977] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 611.958575][T25910] netlink: 'syz.3.9988': attribute type 3 has an invalid length. [ 612.224723][T25925] netlink: 'syz.0.9995': attribute type 1 has an invalid length. [ 612.247459][T21977] usb 2-1: Using ep0 maxpacket: 16 [ 612.424852][T21977] usb 2-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 612.463663][T21977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.495792][T21977] usb 2-1: config 0 descriptor?? [ 612.524046][T25940] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 612.569333][T21977] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 612.588574][T25943] netlink: 'syz.0.10003': attribute type 3 has an invalid length. [ 612.621060][T25945] device macsec0 entered promiscuous mode [ 612.775631][T21977] pwc: send_video_command error -71 [ 612.781154][T21977] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 612.807935][T21977] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 612.862872][T21977] usb 2-1: USB disconnect, device number 67 [ 613.365276][T25975] xt_TCPMSS: Only works on TCP SYN packets [ 613.655962][T13951] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 613.947391][T13951] usb 2-1: Using ep0 maxpacket: 16 [ 614.057797][T26014] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10039'. [ 614.075220][T21977] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 614.101655][T13951] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 614.120107][T13951] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 614.175152][T13951] usb 2-1: config 0 interface 0 has no altsetting 0 [ 614.349488][T21977] usb 5-1: Using ep0 maxpacket: 16 [ 614.359767][T21975] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 614.375441][T13951] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 614.411755][T13951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.440150][T13951] usb 2-1: Product: syz [ 614.444474][T13951] usb 2-1: Manufacturer: syz [ 614.465535][T21977] usb 5-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 614.474633][T21977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.480870][T13951] usb 2-1: SerialNumber: syz [ 614.506834][T21977] usb 5-1: config 0 descriptor?? [ 614.547966][T21977] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 614.562032][T13951] usb 2-1: config 0 descriptor?? [ 614.593688][T26032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10046'. [ 614.635322][T26032] netlink: 'syz.2.10046': attribute type 1 has an invalid length. [ 614.755276][T21977] pwc: send_video_command error -71 [ 614.760508][T21977] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 614.793308][T21977] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 614.825594][T21975] usb 4-1: unable to get BOS descriptor or descriptor too short [ 614.844155][T21977] usb 5-1: USB disconnect, device number 67 [ 614.887493][T13951] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 614.895343][T21975] usb 4-1: not running at top speed; connect to a high speed hub [ 614.905545][T13951] imon 2-1:0.0: unable to initialize intf0, err -90 [ 614.932247][T13951] imon:imon_probe: failed to initialize context! [ 614.960953][T13951] imon 2-1:0.0: unable to register, err -19 [ 614.982189][T21975] usb 4-1: config 8 has an invalid interface number: 43 but max is 1 [ 615.005142][T21975] usb 4-1: config 8 has an invalid interface number: 35 but max is 1 [ 615.018030][T13951] usb 2-1: USB disconnect, device number 68 [ 615.021266][T21975] usb 4-1: config 8 has no interface number 0 [ 615.067835][T21975] usb 4-1: config 8 has no interface number 1 [ 615.073976][T21975] usb 4-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 615.152370][T21975] usb 4-1: config 8 interface 43 has no altsetting 0 [ 615.190589][T21975] usb 4-1: config 8 interface 35 has no altsetting 0 [ 615.443724][T21975] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 615.475152][T21975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.511538][T21975] usb 4-1: Product: syz [ 615.535155][T21975] usb 4-1: Manufacturer: syz [ 615.555147][T21975] usb 4-1: SerialNumber: syz [ 615.858641][T26085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10071'. [ 615.916469][T21975] ums-alauda 4-1:8.43: USB Mass Storage device detected [ 616.185527][T21975] hub 4-1:8.35: Invalid hub with more than one config or interface [ 616.193464][T21975] hub: probe of 4-1:8.35 failed with error -22 [ 616.245617][T21975] ums-alauda 4-1:8.35: USB Mass Storage device detected [ 616.355872][T21975] usb 4-1: USB disconnect, device number 57 [ 616.465304][T26118] netlink: 'syz.1.10085': attribute type 3 has an invalid length. [ 616.926696][T26141] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 617.015428][T21984] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 617.299228][T26157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10107'. [ 617.715746][T21984] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 617.745242][T21984] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 617.780452][T21984] usb 3-1: Product: syz [ 617.795873][T21984] usb 3-1: SerialNumber: syz [ 617.836682][T21984] usb 3-1: config 0 descriptor?? [ 617.928355][T26191] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10124'. [ 617.988260][T26191] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10124'. [ 618.115704][T21984] hso 3-1:0.0: Can't find BULK IN endpoint [ 618.260580][T26207] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 618.318283][T21984] usb 3-1: USB disconnect, device number 65 [ 618.335773][T26211] netlink: 'syz.3.10133': attribute type 10 has an invalid length. [ 618.361827][T26211] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10133'. [ 618.374522][T26207] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 618.395152][T26211] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 618.435720][T26207] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 618.475286][T26207] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 619.435255][T26263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10158'. [ 619.708556][ T25] audit: type=1400 audit(1786091488.184:40): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=26277 comm="syz.1.10166" [ 619.872044][T26286] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10170'. [ 619.898157][T26288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10171'. [ 620.446965][T26322] loop4: detected capacity change from 0 to 64 [ 620.911756][T26350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10202'. [ 621.125205][T26359] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10204'. [ 621.165965][T26361] device netdevsim0 left promiscuous mode [ 621.548171][T26383] sctp: [Deprecated]: syz.0.10214 (pid 26383) Use of int in max_burst socket option deprecated. [ 621.548171][T26383] Use struct sctp_assoc_value instead [ 621.860970][T26402] netlink: 'syz.3.10225': attribute type 4 has an invalid length. [ 622.676990][T21984] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 622.795780][T26452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10250'. [ 622.955528][T21984] usb 3-1: Using ep0 maxpacket: 8 [ 623.065605][T26468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10259'. [ 623.195010][T21984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 623.322661][T26480] smc: removing ib device syz1 [ 623.330094][T21984] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 623.565424][T21984] usb 3-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 623.586980][T21984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.635311][T21984] usb 3-1: Product: syz [ 623.665152][T21984] usb 3-1: Manufacturer: syz [ 623.669823][T21984] usb 3-1: SerialNumber: syz [ 623.766745][T26497] sctp: [Deprecated]: syz.4.10274 (pid 26497) Use of int in max_burst socket option deprecated. [ 623.766745][T26497] Use struct sctp_assoc_value instead [ 624.172559][T26515] netlink: 'syz.0.10282': attribute type 4 has an invalid length. [ 624.212570][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.218923][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.239533][T21984] usb 3-1: USB disconnect, device number 66 [ 624.685409][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 625.323323][T26561] SET target dimension over the limit! [ 625.645228][T21975] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 625.909465][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10316'. [ 625.940625][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10316'. [ 626.065446][T21975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.120164][T21975] usb 5-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 626.135399][T26591] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 626.163894][T21975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.234870][T21975] usb 5-1: config 0 descriptor?? [ 626.287681][T21975] gspca_main: kinect-2.14.0 probing 045e:02bf [ 626.502567][T21979] usb 5-1: USB disconnect, device number 68 [ 626.685428][ T26] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 626.955441][T26618] SET target dimension over the limit! [ 626.999567][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 627.215626][ T26] usb 4-1: unable to get BOS descriptor or descriptor too short [ 627.355083][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.385898][ T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 627.488072][T26641] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 627.605473][ T26] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 627.645152][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.683626][ T26] usb 4-1: Product: syz [ 627.703793][ T26] usb 4-1: Manufacturer: syz [ 627.718795][ T26] usb 4-1: SerialNumber: syz [ 627.895358][T26656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10351'. [ 628.158750][ T26] usb 4-1: 0:1 : does not exist [ 628.163754][ T26] usb 4-1: unit 5 not found! [ 628.205760][ T26] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x200, type = 4 [ 628.235678][ T26] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 628.313059][ T26] usb 4-1: USB disconnect, device number 58 [ 628.397141][ T4318] udevd[4318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 628.495476][ T6441] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 629.095414][ T6441] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 629.103708][ T6441] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 629.185734][ T6441] usb 5-1: config 220 has no interface number 2 [ 629.192051][ T6441] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 629.308448][ T6441] usb 5-1: config 220 interface 0 has no altsetting 0 [ 629.355475][ T6441] usb 5-1: config 220 interface 76 has no altsetting 0 [ 629.392606][ T6441] usb 5-1: config 220 interface 1 has no altsetting 0 [ 629.635652][ T6441] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 629.644749][ T6441] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.686504][T26735] netlink: 'syz.3.10384': attribute type 21 has an invalid length. [ 629.709740][ T6441] usb 5-1: Product: syz [ 629.713982][ T6441] usb 5-1: Manufacturer: syz [ 629.729915][ T6441] usb 5-1: SerialNumber: syz [ 629.783477][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10388'. [ 630.233518][ T6441] usb 5-1: selecting invalid altsetting 0 [ 630.239922][ T6441] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 630.278620][ T6441] usb 5-1: No valid video chain found. [ 630.448377][ T6441] usb 5-1: selecting invalid altsetting 0 [ 630.454153][ T6441] usbtest: probe of 5-1:220.1 failed with error -22 [ 630.535178][ T6441] usb 5-1: USB disconnect, device number 69 [ 630.989050][T26798] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 631.027634][T26803] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10417'. [ 631.337804][T26816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10425'. [ 631.431536][T26821] netlink: 'syz.2.10427': attribute type 21 has an invalid length. [ 631.829343][T26839] loop4: detected capacity change from 0 to 256 [ 631.945427][T26846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10439'. [ 631.998861][T26839] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 632.055363][T21975] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 632.335191][T21975] usb 3-1: Using ep0 maxpacket: 16 [ 632.526592][T21975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 632.676991][T21975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.708409][T21975] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 632.925415][T21975] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 632.955142][T21975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.993702][T21975] usb 3-1: Product: syz [ 633.013772][T21975] usb 3-1: Manufacturer: syz [ 633.026473][T21975] usb 3-1: SerialNumber: syz [ 633.206419][T21984] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 633.425218][T26901] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10466'. [ 633.445348][T21975] usb 3-1: 0:1 : does not exist [ 633.450262][T21975] usb 3-1: unit 5 not found! [ 633.502899][T21975] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x200, type = 4 [ 633.531009][T21975] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 633.594859][T21975] usb 3-1: USB disconnect, device number 67 [ 633.629720][T21984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.715694][T26911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 633.719420][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.855439][T21984] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 633.888085][T21984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.935160][T21984] usb 5-1: Product: syz [ 633.959950][T21984] usb 5-1: Manufacturer: syz [ 633.964602][T21984] usb 5-1: SerialNumber: syz [ 634.016607][T21984] usb 5-1: config 0 descriptor?? [ 634.105698][T21984] CoreChips: probe of 5-1:0.0 failed with error -22 [ 634.117736][T26923] tmpfs: Bad value for 'mpol' [ 634.285606][T26929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10480'. [ 634.330706][T26929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10480'. [ 634.444700][ T6445] kworker/dying (6445) used greatest stack depth: 16416 bytes left [ 635.047078][T26953] tmpfs: Bad value for 'mpol' [ 635.115275][T26956] netlink: 'syz.0.10491': attribute type 11 has an invalid length. [ 635.170302][T26956] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10491'. [ 635.199980][T26960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10494'. [ 635.265302][T26960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10494'. [ 635.905274][T21984] usb 5-1: USB disconnect, device number 70 [ 636.443237][ T26] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 637.005324][ T26] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 637.035143][ T26] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 637.095902][ T26] usb 4-1: config 220 has no interface number 2 [ 637.102230][ T26] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 637.223830][ T26] usb 4-1: config 220 interface 0 has no altsetting 0 [ 637.264197][ T26] usb 4-1: config 220 interface 76 has no altsetting 0 [ 637.291978][T27050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10541'. [ 637.304619][ T26] usb 4-1: config 220 interface 1 has no altsetting 0 [ 637.351497][T27050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10541'. [ 637.384774][T27054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10542'. [ 637.458406][T27054] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 637.549351][ T26] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 637.559673][T27060] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10545'. [ 637.605152][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.605849][T27060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10545'. [ 637.652509][ T26] usb 4-1: Product: syz [ 637.675141][ T26] usb 4-1: Manufacturer: syz [ 637.688492][T27060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10545'. [ 637.695138][ T26] usb 4-1: SerialNumber: syz [ 637.745450][T27060] netlink: 'syz.0.10545': attribute type 8 has an invalid length. [ 637.920244][ T6441] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 638.164220][T27087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10557'. [ 638.177820][ T26] usb 4-1: selecting invalid altsetting 0 [ 638.184124][ T26] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 638.213684][ T25] audit: type=1326 audit(1786091506.684:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27088 comm="syz.2.10558" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c6f0f0d9 code=0x7ffc0000 [ 638.215146][ T26] usb 4-1: No valid video chain found. [ 638.248326][T27087] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 638.298818][ T25] audit: type=1326 audit(1786091506.724:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27088 comm="syz.2.10558" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c6f0f0d9 code=0x7ffc0000 [ 638.317006][T27091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10559'. [ 638.402787][T27091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10559'. [ 638.431443][ T26] usb 4-1: selecting invalid altsetting 0 [ 638.455414][ T25] audit: type=1326 audit(1786091506.724:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27088 comm="syz.2.10558" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c6f0f0d9 code=0x7ffc0000 [ 638.480071][ T6441] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 638.505915][ T26] usbtest: probe of 4-1:220.1 failed with error -22 [ 638.522942][ T6441] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.577794][T27097] device bond5 entered promiscuous mode [ 638.585546][ T6441] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 638.598946][ T26] usb 4-1: USB disconnect, device number 59 [ 638.625337][T27097] 8021q: adding VLAN 0 to HW filter on device bond5 [ 638.655154][ T25] audit: type=1326 audit(1786091506.724:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27088 comm="syz.2.10558" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f06c6f0f0d9 code=0x7ffc0000 [ 638.735175][ T6441] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 638.744251][ T6441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.838222][ T6441] usb 5-1: config 0 descriptor?? [ 638.849129][ T25] audit: type=1326 audit(1786091506.724:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27088 comm="syz.2.10558" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c6f0f0d9 code=0x7ffc0000 [ 638.948385][ T6441] usb-storage 5-1:0.0: USB Mass Storage device detected [ 638.994878][ T25] audit: type=1326 audit(1786091506.734:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27088 comm="syz.2.10558" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f06c6f0f0d9 code=0x7ffc0000 [ 639.030231][ T6441] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 639.125155][ T25] audit: type=1326 audit(1786091506.734:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27088 comm="syz.2.10558" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f06c6f0f0d9 code=0x7ffc0000 [ 639.206822][ T6441] usb 5-1: USB disconnect, device number 71 [ 639.295147][ T25] audit: type=1326 audit(1786091506.734:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27088 comm="syz.2.10558" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c6f0f0d9 code=0x7ffc0000 [ 639.313319][T21977] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 639.505720][T27140] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by ""[27140] [ 639.743436][T21977] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 639.771984][T21977] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 639.822040][T21977] usb 2-1: config 220 has no interface number 2 [ 639.872514][T21977] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 639.936460][T21977] usb 2-1: config 220 interface 0 has no altsetting 0 [ 639.964716][T21977] usb 2-1: config 220 interface 76 has no altsetting 0 [ 639.989031][T21977] usb 2-1: config 220 interface 1 has no altsetting 0 [ 640.178197][ T25] audit: type=1326 audit(1786091508.654:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27161 comm="syz.4.10593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca342c0d9 code=0x7ffc0000 [ 640.185437][T21977] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 640.285175][ T25] audit: type=1326 audit(1786091508.684:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27161 comm="syz.4.10593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca342c0d9 code=0x7ffc0000 [ 640.317746][T21977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.356274][T21977] usb 2-1: Product: syz [ 640.360475][T21977] usb 2-1: Manufacturer: syz [ 640.365074][T21977] usb 2-1: SerialNumber: syz [ 640.556539][T27173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10597'. [ 640.788902][T21977] usb 2-1: selecting invalid altsetting 0 [ 640.806844][T21977] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 640.853701][T21977] usb 2-1: No valid video chain found. [ 640.956380][T21977] usb 2-1: selecting invalid altsetting 0 [ 640.962178][T21977] usbtest: probe of 2-1:220.1 failed with error -22 [ 641.056777][T21977] usb 2-1: USB disconnect, device number 69 [ 641.160888][T27198] device bond5 entered promiscuous mode [ 641.199810][T27198] 8021q: adding VLAN 0 to HW filter on device bond5 [ 641.527542][T27216] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 641.584131][T27216] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 641.637632][T27216] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 642.095160][T27236] device bond4 entered promiscuous mode [ 642.153216][T27236] 8021q: adding VLAN 0 to HW filter on device bond4 [ 642.740238][T27269] xt_HMARK: spi-set and port-set can't be combined [ 642.864132][T27273] device bond2 entered promiscuous mode [ 642.895474][T27273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 643.071323][T27290] netlink: 'syz.0.10653': attribute type 10 has an invalid length. [ 643.122413][T27290] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 643.328444][T27300] ieee802154 phy0 wpan0: encryption failed: -22 [ 643.347961][T27303] xt_HMARK: spi-set and port-set can't be combined [ 643.585428][T27311] device bond4 entered promiscuous mode [ 643.647923][T27311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 643.761352][T27323] netlink: 'syz.3.10669': attribute type 10 has an invalid length. [ 643.809469][T27323] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 643.878348][T27332] __nla_validate_parse: 2 callbacks suppressed [ 643.878367][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10674'. [ 644.636526][T27365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10691'. [ 644.668532][T27365] openvswitch: netlink: Missing key (keys=40, expected=100) [ 645.347824][T27397] device bond5 entered promiscuous mode [ 645.386937][T27397] 8021q: adding VLAN 0 to HW filter on device bond5 [ 645.633931][T27415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10715'. [ 645.720685][T27422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10718'. [ 645.857746][T27427] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 645.915304][T27427] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 645.975682][T27427] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 646.181134][T27448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10732'. [ 646.245161][T27453] syz.4.10735[27453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 646.245284][T27453] syz.4.10735[27453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 646.545079][T27464] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.10740'. [ 647.338489][T27503] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 647.465636][T27503] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 647.474108][T27503] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 648.497613][T27558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10785'. [ 648.715279][T27572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10801'. [ 649.188434][T27597] device gre2 entered promiscuous mode [ 649.457151][T27611] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10811'. [ 649.768314][T27627] device gre3 entered promiscuous mode [ 650.492916][T27657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10834'. [ 650.509642][T27659] netlink: ct family unspecified [ 650.539716][T27659] openvswitch: netlink: Actions may not be safe on all matching packets [ 650.577380][T27657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10834'. [ 650.775209][T21984] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 650.916679][T27674] netlink: 'syz.4.10843': attribute type 1 has an invalid length. [ 650.924535][T27674] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10843'. [ 650.930328][T27675] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10842'. [ 651.026352][T21984] usb 2-1: Using ep0 maxpacket: 8 [ 651.120798][T27681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10846'. [ 651.155445][T27681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10846'. [ 651.175327][T21984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.215453][T27685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10848'. [ 651.375441][T21984] usb 2-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 651.404823][T21984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.435140][T21984] usb 2-1: Product: syz [ 651.446527][T27691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10851'. [ 651.449482][T21984] usb 2-1: Manufacturer: syz [ 651.505148][T21984] usb 2-1: SerialNumber: syz [ 651.521895][T27691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10851'. [ 651.532575][T21984] usb 2-1: config 0 descriptor?? [ 651.617827][T21984] gspca_main: t613-2.14.0 probing 17a1:0128 [ 651.855401][T21984] gspca_t613: unknown sensor 0000 [ 651.860730][T21984] t613: probe of 2-1:0.0 failed with error -22 [ 651.895687][T21984] usb 2-1: USB disconnect, device number 70 [ 652.056163][T27707] netlink: ct family unspecified [ 652.095160][T27707] openvswitch: netlink: Actions may not be safe on all matching packets [ 652.158020][T27683] loop4: detected capacity change from 0 to 32768 [ 652.401596][T27683] ERROR: (device loop4): diAllocAG: error reading iag [ 652.401596][T27683] [ 652.437301][T27683] ialloc: diAlloc returned -5! [ 652.676352][T27733] netlink: 'syz.1.10872': attribute type 3 has an invalid length. [ 653.094102][T27757] netlink: 'syz.3.10884': attribute type 21 has an invalid length. [ 653.145288][T27757] netlink: 'syz.3.10884': attribute type 4 has an invalid length. [ 653.298673][T21975] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 653.367500][T27767] netlink: 'syz.3.10888': attribute type 3 has an invalid length. [ 653.618886][ T25] kauditd_printk_skb: 6 callbacks suppressed [ 653.618901][ T25] audit: type=1400 audit(1786091522.094:57): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=27780 comm="syz.2.10898" [ 653.772021][T27789] xt_HMARK: proto mask must be zero with L3 mode [ 653.936542][T21975] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 653.985164][T21975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.008715][T21975] usb 2-1: Product: syz [ 654.013429][T21975] usb 2-1: Manufacturer: syz [ 654.037028][T21975] usb 2-1: SerialNumber: syz [ 654.074929][T21975] usb 2-1: config 0 descriptor?? [ 654.136380][T21975] ch341 2-1:0.0: ch341-uart converter detected [ 654.325264][T27820] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 654.414999][T27817] loop4: detected capacity change from 0 to 4096 [ 654.551502][T21975] usb 2-1: failed to send control message: -71 [ 654.565183][T21975] ch341-uart: probe of ttyUSB0 failed with error -71 [ 654.607381][T21975] usb 2-1: USB disconnect, device number 71 [ 654.655845][T21975] ch341 2-1:0.0: device disconnected [ 655.164430][T27843] netlink: 'syz.1.10927': attribute type 21 has an invalid length. [ 655.261522][T27843] __nla_validate_parse: 7 callbacks suppressed [ 655.261539][T27843] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10927'. [ 655.354505][T27843] netlink: 'syz.1.10927': attribute type 4 has an invalid length. [ 655.402956][T27843] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10927'. [ 655.443508][T27847] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 655.850505][T27869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10939'. [ 655.975591][T21975] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 656.246323][T21975] usb 2-1: Using ep0 maxpacket: 16 [ 656.369121][T21975] usb 2-1: config index 0 descriptor too short (expected 17170, got 18) [ 656.397851][T21975] usb 2-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 656.438245][T21975] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 656.688176][T21975] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 656.717321][T21975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.763608][T21975] usb 2-1: Product: syz [ 656.792963][T21975] usb 2-1: Manufacturer: syz [ 656.813010][T21975] usb 2-1: SerialNumber: syz [ 656.839146][T21975] usb 2-1: config 0 descriptor?? [ 656.903404][T21975] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 657.023151][T27913] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10971'. [ 657.092981][T27913] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 657.175559][T21975] usb 2-1: USB disconnect, device number 72 [ 657.624030][T27941] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10975'. [ 657.643045][T27947] netlink: 'syz.3.10977': attribute type 10 has an invalid length. [ 657.701614][T27947] netlink: 'syz.3.10977': attribute type 10 has an invalid length. [ 657.792937][T27950] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10979'. [ 657.846602][T27950] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 657.966556][T27955] device sit0 entered promiscuous mode [ 658.016517][T27955] netlink: 'syz.4.10982': attribute type 1 has an invalid length. [ 658.065274][T27955] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10982'. [ 658.077073][T27963] xt_hashlimit: size too large, truncated to 1048576 [ 658.144554][T27967] IPv6: Can't replace route, no match found [ 658.515261][T27985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10997'. [ 658.723651][T27999] xt_hashlimit: size too large, truncated to 1048576 [ 658.737538][T27997] IPv6: Can't replace route, no match found [ 658.867465][T28003] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11006'. [ 659.098277][T28019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11014'. [ 659.205756][T21984] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 659.472714][T28038] netlink: 'syz.0.11020': attribute type 10 has an invalid length. [ 659.501054][T28038] netlink: 'syz.0.11020': attribute type 10 has an invalid length. [ 659.834088][T21984] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 659.856539][T21984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.895275][T21984] usb 3-1: Product: syz [ 659.909771][T21984] usb 3-1: Manufacturer: syz [ 659.914406][T21984] usb 3-1: SerialNumber: syz [ 659.999950][T21984] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 660.105262][T21975] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 660.389254][T21975] usb 2-1: Using ep0 maxpacket: 16 [ 660.535627][T21975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.563547][T21975] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 660.613205][T21975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.631900][ T6484] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 660.659545][T21975] usb 2-1: config 0 descriptor?? [ 660.717197][T21975] xbox_remote_probe: Unexpected endpoint_in [ 660.723719][T21975] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 660.837352][T21979] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 660.948183][T21975] usb 2-1: USB disconnect, device number 73 [ 661.055368][T21984] usb 3-1: USB disconnect, device number 68 [ 661.095172][T21979] usb 5-1: Using ep0 maxpacket: 32 [ 661.255343][T21979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 661.355361][T21979] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 661.397276][T21979] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 49556, setting to 1024 [ 661.663823][T21979] usb 5-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 661.693376][T21979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.703555][T28102] __nla_validate_parse: 2 callbacks suppressed [ 661.703579][T28102] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11052'. [ 661.722487][ T6484] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 661.735211][ T6484] ath9k_htc: Failed to initialize the device [ 661.753635][T21979] usb 5-1: Product: syz [ 661.766453][T21984] usb 3-1: ath9k_htc: USB layer deinitialized [ 661.782758][T21979] usb 5-1: Manufacturer: syz [ 661.801741][T21979] usb 5-1: SerialNumber: syz [ 662.200243][T28126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.216210][T21979] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 662.246254][T21979] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 662.338288][T21979] usb 5-1: USB disconnect, device number 72 [ 662.644691][ T4318] udevd[4318]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 662.906882][T28160] netlink: 'syz.2.11081': attribute type 4 has an invalid length. [ 662.942990][T28160] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11081'. [ 663.034647][T28160] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 663.980558][T28200] autofs4:pid:28200:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 663.988091][T28198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11100'. [ 664.922303][T28241] loop4: detected capacity change from 0 to 1024 [ 665.175282][T28241] EXT4-fs (loop4): Ignoring removed bh option [ 665.356118][T28241] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,dioread_lock,barrier=0x0000000000000404,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,i_version,bh,init_itable,. Quota mode: none. [ 665.605260][T28274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11136'. [ 666.122747][T28303] program syz.3.11150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 666.675196][T21979] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 666.815478][ T26] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 666.966480][T21979] usb 2-1: Using ep0 maxpacket: 32 [ 667.128164][T21979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 667.179215][T28363] netlink: 'syz.0.11180': attribute type 2 has an invalid length. [ 667.205493][T28365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11181'. [ 667.225534][T21979] usb 2-1: config 6 has an invalid interface number: 49 but max is 0 [ 667.254943][T21979] usb 2-1: config 6 has no interface number 0 [ 667.278753][T21979] usb 2-1: config 6 interface 49 altsetting 14 has an invalid endpoint descriptor of length 2, skipping [ 667.343381][T21979] usb 2-1: config 6 interface 49 altsetting 14 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 667.417588][T21979] usb 2-1: config 6 interface 49 has no altsetting 0 [ 667.633458][T28385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11190'. [ 667.645404][T21979] usb 2-1: New USB device found, idVendor=0c45, idProduct=602d, bcdDevice=fa.ff [ 667.649727][ T26] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 667.679613][T21979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.687895][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.707931][T21979] usb 2-1: Product: syz [ 667.712276][T21979] usb 2-1: Manufacturer: syz [ 667.745144][ T26] usb 4-1: Product: syz [ 667.764651][T21979] usb 2-1: SerialNumber: syz [ 667.765142][ T26] usb 4-1: Manufacturer: syz [ 667.804200][ T26] usb 4-1: SerialNumber: syz [ 667.844671][ T26] usb 4-1: config 0 descriptor?? [ 667.936843][ T4199] Bluetooth: hci5: urb ffff88802b382e00 submission failed (2) [ 668.087843][T21979] gspca_main: sonixb-2.14.0 probing 0c45:602d [ 668.131164][T21979] sonixb 2-1:6.49: Error reading register 00: -71 [ 668.145337][ T26] usb 4-1: USB disconnect, device number 60 [ 668.175327][T21979] usb 2-1: USB disconnect, device number 74 [ 668.540725][T28417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11206'. [ 668.942097][T28435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11217'. [ 669.206036][T28448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11223'. [ 669.780007][T28473] tmpfs: Bad value for 'mpol' [ 670.212435][T28495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11246'. [ 670.283800][T28495] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 670.311330][T28501] netlink: set zone limit has 4 unknown bytes [ 670.791759][T28522] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11260'. [ 670.845422][T21984] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 670.867156][T28525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11261'. [ 671.015652][T28529] netlink: 'syz.4.11264': attribute type 1 has an invalid length. [ 671.023503][T28529] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11264'. [ 671.157790][T21984] usb 3-1: Using ep0 maxpacket: 32 [ 671.275474][T21984] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 671.301941][T21984] usb 3-1: config 2 has no interface number 0 [ 671.328422][T21984] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 671.378844][T21984] usb 3-1: config 2 interface 88 has no altsetting 0 [ 671.571095][T21984] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 671.590490][T21984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.645300][T21984] usb 3-1: Product: syz [ 671.649506][T21984] usb 3-1: Manufacturer: syz [ 671.696704][T21984] usb 3-1: SerialNumber: syz [ 671.745496][T28511] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 671.761435][T28557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11276'. [ 671.825876][T28560] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 671.881530][T28562] netlink: 'syz.0.11278': attribute type 1 has an invalid length. [ 671.977618][T28511] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 672.236443][T21984] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 672.267086][T21984] asix: probe of 3-1:2.88 failed with error -71 [ 672.322142][T21984] usb 3-1: USB disconnect, device number 69 [ 672.411064][T28588] __nla_validate_parse: 2 callbacks suppressed [ 672.411081][T28588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11291'. [ 672.411835][T28587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11290'. [ 672.572989][T28594] xt_hashlimit: max too large, truncated to 1048576 [ 672.901763][T28611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11303'. [ 672.967935][T28611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11303'. [ 673.009068][T28611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11303'. [ 673.345591][T28634] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 28634 comm: syz.1.11313) [ 673.445449][ T25] audit: type=1800 audit(1786091541.924:58): pid=28634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11313" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=110359 res=0 errno=0 [ 673.892440][T28662] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 673.948852][T28662] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 673.995207][T28662] overlayfs: missing 'lowerdir' [ 674.069079][T28673] ipt_ECN: cannot use operation on non-tcp rule [ 674.347832][T28689] kAFS: unable to lookup cell '' [ 674.815418][T28716] netlink: 'syz.4.11354': attribute type 1 has an invalid length. [ 675.493531][T28749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11371'. [ 676.394493][ T25] audit: type=1326 audit(1786091544.864:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.2.11394" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06c6f0f0d9 code=0x0 [ 676.455291][T28799] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 676.505196][T28802] ieee802154 phy0 wpan0: encryption failed: -22 [ 676.616038][T28807] ieee802154 phy0 wpan0: encryption failed: -22 [ 676.672658][T28812] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11402'. [ 676.791166][T28816] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.11403'. [ 677.175217][T21979] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 677.247320][ T25] audit: type=1400 audit(1786091545.724:60): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=28838 comm="syz.4.11415" [ 677.447155][T28847] netlink: 'syz.4.11419': attribute type 2 has an invalid length. [ 677.453775][ T6441] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 677.465361][T28847] netlink: 'syz.4.11419': attribute type 1 has an invalid length. [ 677.600610][T21979] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 677.635189][T21979] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 677.695963][T21979] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 677.740134][T28862] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 677.755146][T21979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.818315][T28862] FAT-fs (loop5): unable to read boot sector [ 677.964903][ T6441] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.991646][ T6441] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 678.061505][ T6441] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 678.065392][T21979] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 678.104184][ T6441] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 678.120555][T21979] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input45 [ 678.149631][T28881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11435'. [ 678.165148][ T6441] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 678.190961][T21979] input: failed to attach handler kbd to device input45, error: -5 [ 678.217319][ T6441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.265175][T21979] usb 2-1: USB disconnect, device number 75 [ 678.855649][ T6441] usb 4-1: USB disconnect, device number 61 [ 679.319930][T28938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11455'. [ 679.674992][T28956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11464'. [ 679.765338][T28956] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11464'. [ 679.822815][T21979] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 680.235536][T21979] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 680.264044][T21979] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 680.312862][T21979] usb 3-1: config 8 has no interface number 0 [ 680.342690][T21979] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 680.412662][T21979] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 680.468330][T21979] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 680.516905][T21979] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 680.581093][T21979] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 680.651435][T21979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.774080][T21979] usb 3-1: NFC: intf ffff888078bd2000 id ffffffff8cb63280 [ 680.980231][T21979] usb 3-1: USB disconnect, device number 70 [ 681.278785][ T26] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 681.500125][T29048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11510'. [ 681.786079][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 681.815138][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 40203, setting to 64 [ 681.855130][ T26] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 682.055586][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 682.105156][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 682.113186][ T26] usb 4-1: SerialNumber: syz [ 682.251217][T29020] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 682.295775][ T26] hub 4-1:1.0: bad descriptor, ignoring hub [ 682.301720][ T26] hub: probe of 4-1:1.0 failed with error -5 [ 682.374305][ T26] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 682.517426][T29096] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11534'. [ 682.526307][ T26] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 682.644759][ T26] usb 4-1: USB disconnect, device number 62 [ 683.581993][T29162] loop4: detected capacity change from 0 to 512 [ 683.896791][T29162] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #3: comm syz.4.11562: corrupted inode contents [ 683.903066][T29181] netlink: get zone limit has 4 unknown bytes [ 684.022697][T29162] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #3: comm syz.4.11562: mark_inode_dirty error [ 684.116384][T29162] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #3: comm syz.4.11562: corrupted inode contents [ 684.223076][T29162] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.11562: mark_inode_dirty error [ 684.299361][T29162] Quota error (device loop4): write_blk: dquota write failed [ 684.375230][T29162] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 684.475172][T29162] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.11562: Failed to acquire dquot type 0 [ 684.579666][T29162] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.11562: corrupted inode contents [ 684.625315][T29162] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #16: comm syz.4.11562: mark_inode_dirty error [ 684.665711][T29162] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.11562: corrupted inode contents [ 684.742327][T29162] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.11562: mark_inode_dirty error [ 684.824349][T29162] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.11562: corrupted inode contents [ 684.907246][T29162] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 685.037495][T29162] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.11562: corrupted inode contents [ 685.095132][T29162] EXT4-fs error (device loop4): ext4_truncate:4286: inode #16: comm syz.4.11562: mark_inode_dirty error [ 685.105277][T29234] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11599'. [ 685.174625][T29162] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 685.275074][T29162] EXT4-fs (loop4): 1 truncate cleaned up [ 685.280913][T29162] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 685.297707][T29241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11602'. [ 685.325190][T29241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11602'. [ 685.334859][T29162] ext4 filesystem being mounted at /2196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.373874][T29241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11602'. [ 685.626607][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.632948][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.955845][T29259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11612'. [ 686.365589][T29276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11619'. [ 686.390945][T29277] x_tables: unsorted entry at hook 4 [ 686.797206][T29292] loop4: detected capacity change from 0 to 1764 [ 687.287539][T29317] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 687.520011][T29327] netlink: 80 bytes leftover after parsing attributes in process `syz.3.11646'. [ 687.576719][T29327] netlink: 80 bytes leftover after parsing attributes in process `syz.3.11646'. [ 688.325540][T29350] loop4: detected capacity change from 0 to 4096 [ 688.420799][T29350] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 689.485476][T13951] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 689.855255][T13951] usb 5-1: Using ep0 maxpacket: 32 [ 689.869326][T29445] x_tables: unsorted entry at hook 3 [ 689.965404][T29451] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 690.105707][T13951] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 690.113824][T13951] usb 5-1: config 2 has no interface number 0 [ 690.145164][T13951] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 690.165154][T13951] usb 5-1: config 2 interface 88 has no altsetting 0 [ 690.425654][T13951] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 690.434727][T13951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.485158][T13951] usb 5-1: Product: syz [ 690.489364][T13951] usb 5-1: Manufacturer: syz [ 690.493964][T13951] usb 5-1: SerialNumber: syz [ 690.585602][T29410] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 690.821327][T29410] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 691.113056][T13951] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 691.153732][T13951] asix: probe of 5-1:2.88 failed with error -71 [ 691.204176][T13951] usb 5-1: USB disconnect, device number 73 [ 691.478637][T29515] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 691.837078][T29525] nvme_fabrics: missing parameter 'host_traddr=%s' [ 692.374296][T29559] netlink: 'syz.0.11756': attribute type 3 has an invalid length. [ 692.518955][T21984] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 692.613666][T29568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11761'. [ 692.776851][T29574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11765'. [ 692.796508][T21984] usb 4-1: Using ep0 maxpacket: 32 [ 692.835280][T29574] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11765'. [ 693.024355][T21984] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 693.052568][T21984] usb 4-1: config 2 has no interface number 0 [ 693.078324][T21984] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 693.135145][T21984] usb 4-1: config 2 interface 88 has no altsetting 0 [ 693.153936][T29588] x_tables: duplicate entry at hook 2 [ 693.317498][T21984] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 693.346259][T21984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.365572][T29592] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 693.415147][T21984] usb 4-1: Product: syz [ 693.435154][T21984] usb 4-1: Manufacturer: syz [ 693.494879][T21984] usb 4-1: SerialNumber: syz [ 693.547323][T29548] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 693.657885][T29615] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.787807][T29548] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 693.917153][T21975] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 693.946050][T29621] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 694.051345][T21984] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 694.092564][T21984] asix: probe of 4-1:2.88 failed with error -71 [ 694.145244][T21984] usb 4-1: USB disconnect, device number 63 [ 694.669772][ T25] audit: type=1326 audit(1786091563.144:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29660 comm="syz.1.11805" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ad9e2a0d9 code=0x0 [ 694.840058][T29670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11810'. [ 694.897617][T29670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11810'. [ 695.010149][T29679] 9p: Unknown access argument Ø [ 695.125293][T29684] netlink: 'syz.1.11817': attribute type 2 has an invalid length. [ 695.167607][T29684] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11817'. [ 696.685901][T29758] tc_dump_action: action bad kind [ 696.960907][T29772] netlink: 'syz.2.11861': attribute type 3 has an invalid length. [ 697.015277][T29772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11861'. [ 697.415296][T29789] netlink: 'syz.2.11870': attribute type 21 has an invalid length. [ 697.423283][T29789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11870'. [ 697.666790][T29802] trusted_key: encrypted_key: master key parameter '' is invalid [ 698.244434][T29826] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 698.398145][T29826] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 698.801483][T29849] netlink: 'syz.1.11897': attribute type 1 has an invalid length. [ 698.875511][T29854] netlink: 'syz.4.11899': attribute type 3 has an invalid length. [ 698.999004][T29860] tmpfs: Bad value for 'mpol' [ 699.244644][T29872] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 699.470859][T29886] No such timeout policy "syz1" [ 700.275367][T21979] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 700.545438][T21979] usb 3-1: Using ep0 maxpacket: 16 [ 700.703565][T21979] usb 3-1: config 0 has no interfaces? [ 700.794550][T29946] syz.3.11945 uses old SIOCAX25GETINFO [ 700.937822][T21979] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 700.969343][T21979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.981787][T29956] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 701.017945][T21979] usb 3-1: Product: syz [ 701.038130][T21979] usb 3-1: Manufacturer: syz [ 701.042774][T21979] usb 3-1: SerialNumber: syz [ 701.097330][T21979] r8152-cfgselector 3-1: config 0 descriptor?? [ 701.349384][T21979] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 701.564679][T21979] usb 3-1: USB disconnect, device number 71 [ 701.647513][T29977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11960'. [ 701.822571][T29983] loop4: detected capacity change from 0 to 2048 [ 701.973135][T29989] device bridge9 entered promiscuous mode [ 702.116023][T29994] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 702.245341][T29999] netlink: 'syz.2.11970': attribute type 4 has an invalid length. [ 702.305276][T29999] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11970'. [ 702.345285][T29983] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 702.382288][T29999] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 702.422354][T29983] Remounting filesystem read-only [ 702.436949][T30006] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11974'. [ 702.496226][T30006] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11974'. [ 704.384319][T13951] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 704.615350][T21984] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 704.788140][T30113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12026'. [ 704.947690][T13951] usb 4-1: unable to get BOS descriptor or descriptor too short [ 705.004090][T13951] usb 4-1: not running at top speed; connect to a high speed hub [ 705.025415][T21984] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 705.053837][T21984] usb 3-1: config 0 has no interface number 0 [ 705.084242][T21984] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10 [ 705.136759][T21984] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024 [ 705.163662][T13951] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 705.177628][T13951] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 705.215750][T13951] usb 4-1: config 5 has no interface number 0 [ 705.225381][T13951] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 705.269260][T13951] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.312847][T13951] usb 4-1: config 5 interface 246 has no altsetting 0 [ 705.345410][T21984] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 705.384826][T21984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.415140][T21984] usb 3-1: Product: syz [ 705.419340][T21984] usb 3-1: Manufacturer: syz [ 705.445147][T21984] usb 3-1: SerialNumber: syz [ 705.455657][T30131] ip6t_rpfilter: unknown options [ 705.471671][T21984] usb 3-1: config 0 descriptor?? [ 705.505475][T30097] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 705.512382][ T26] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 705.541953][T21984] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 705.547408][T13951] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 705.595142][T13951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.643812][T13951] usb 4-1: Product: syz [ 705.664020][T13951] usb 4-1: Manufacturer: syz [ 705.674811][T13951] usb 4-1: SerialNumber: syz [ 705.786730][T21984] usb 3-1: USB disconnect, device number 72 [ 705.824695][T21984] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 705.939071][T30140] xt_ecn: cannot match TCP bits for non-tcp packets [ 705.965365][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.016935][ T26] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 706.121694][T13951] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 706.150408][ T9] usb 4-1: Failed to submit usb control message: -71 [ 706.165676][T13951] usb 4-1: USB disconnect, device number 64 [ 706.173540][ T9] usb 4-1: unable to send the bmi data to the device: -71 [ 706.245465][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 706.255150][ T9] usb 4-1: unable to get target info from device [ 706.261508][ T9] usb 4-1: could not get target info (-71) [ 706.264717][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.285139][ T26] usb 5-1: Product: syz [ 706.285252][T30152] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 706.299518][ T26] usb 5-1: Manufacturer: syz [ 706.311773][ T26] usb 5-1: SerialNumber: syz [ 706.383831][ T26] cdc_ncm 5-1:1.0: skipping garbage [ 706.385203][ T9] usb 4-1: could not probe fw (-71) [ 706.402078][ T26] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 706.453870][ T26] cdc_ncm 5-1:1.0: bind() failure [ 706.495609][ T26] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 706.531099][ T26] cdc_ncm 5-1:1.1: bind() failure [ 706.766543][ T6442] usb 5-1: USB disconnect, device number 74 [ 706.882801][T30179] netlink: 'syz.2.12055': attribute type 6 has an invalid length. [ 707.018698][T30185] netlink: 'syz.0.12059': attribute type 3 has an invalid length. [ 707.075341][T30185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12059'. [ 707.084594][T30190] netlink: 284 bytes leftover after parsing attributes in process `syz.1.12062'. [ 707.315282][T21975] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 707.800650][T21975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 707.873756][T30224] loop4: detected capacity change from 0 to 512 [ 707.916726][T21975] usb 3-1: config 114 has an invalid interface number: 127 but max is 0 [ 707.943456][T21975] usb 3-1: config 114 has no interface number 0 [ 707.970305][T21975] usb 3-1: config 114 interface 127 altsetting 232 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 708.025879][T21975] usb 3-1: config 114 interface 127 has no altsetting 0 [ 708.130707][T30239] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 708.202683][T30224] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.12081: bg 0: block 5: invalid block bitmap [ 708.217606][T21975] usb 3-1: New USB device found, idVendor=2001, idProduct=3a05, bcdDevice=c2.02 [ 708.235139][T21975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.273533][T21975] usb 3-1: Product: syz [ 708.291919][T30224] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 708.295920][T30245] ipt_CLUSTERIP: Please specify destination IP [ 708.306886][T21975] usb 3-1: Manufacturer: syz [ 708.311508][T21975] usb 3-1: SerialNumber: syz [ 708.315298][ T6442] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 708.344313][T30224] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.12081: invalid indirect mapped block 3 (level 2) [ 708.385254][T30224] EXT4-fs (loop4): 1 orphan inode deleted [ 708.405290][T30224] EXT4-fs (loop4): 1 truncate cleaned up [ 708.453013][T30224] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 708.605325][ T6442] usb 4-1: Using ep0 maxpacket: 8 [ 708.691921][T21975] usb 3-1: Could not find all expected endpoints [ 708.735158][T21975] usb 3-1: USB disconnect, device number 73 [ 708.824484][ T6442] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.858981][ T6442] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.878602][T30263] usb usb8: usbfs: process 30263 (syz.4.12096) did not claim interface 0 before use [ 708.911599][ T6442] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 708.995144][ T6442] usb 4-1: config 0 interface 0 has no altsetting 0 [ 709.001803][ T6442] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 3.00 [ 709.045134][ T6442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.086407][ T6442] usb 4-1: config 0 descriptor?? [ 709.148324][ T6442] usbhid 4-1:0.0: can't add hid device: -22 [ 709.154335][ T6442] usbhid: probe of 4-1:0.0 failed with error -22 [ 709.373169][ T6441] usb 4-1: USB disconnect, device number 65 [ 709.966123][T30308] x_tables: unsorted entry at hook 3 [ 710.023620][T30312] netlink: 'syz.2.12120': attribute type 46 has an invalid length. [ 710.101875][T30314] netlink: 'syz.4.12122': attribute type 1 has an invalid length. [ 710.220358][T21975] kernel write not supported for file /input/mice (pid: 21975 comm: kworker/0:10) [ 710.567153][T30336] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 711.375907][T30374] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12152'. [ 711.405651][T30376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12153'. [ 712.215323][T30402] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12166'. [ 712.230263][T30402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12166'. [ 712.517517][T30418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12173'. [ 712.575859][T21975] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 712.990855][T30439] netlink: 260 bytes leftover after parsing attributes in process `syz.1.12184'. [ 713.055363][T21975] usb 4-1: unable to get BOS descriptor or descriptor too short [ 713.091651][T21984] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 713.196960][T21975] usb 4-1: config 8 has an invalid interface number: 92 but max is 0 [ 713.216780][T21975] usb 4-1: config 8 has no interface number 0 [ 713.247451][T21975] usb 4-1: config 8 interface 92 altsetting 65 endpoint 0x6 has invalid wMaxPacketSize 0 [ 713.295140][T21975] usb 4-1: config 8 interface 92 has no altsetting 0 [ 713.518644][T30459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12194'. [ 713.565621][T21984] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 713.595709][T21984] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 713.644998][T21984] usb 3-1: config 0 interface 0 has no altsetting 0 [ 713.655327][T21975] usb 4-1: string descriptor 0 read error: -22 [ 713.672565][T21975] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0181, bcdDevice= b.f6 [ 713.702735][T21975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.731220][T30467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12198'. [ 713.786813][T21975] ftdi_sio 4-1:8.92: FTDI USB Serial Device converter detected [ 713.811021][T21975] usb 4-1: Detected FT232H [ 713.846247][T21975] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 713.895737][T21984] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 713.925146][T21984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.970892][T21984] usb 3-1: Product: syz [ 713.975435][T21984] usb 3-1: Manufacturer: syz [ 713.980128][T21984] usb 3-1: SerialNumber: syz [ 714.005816][T21975] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 714.025463][T21975] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 714.044645][T21984] usb 3-1: config 0 descriptor?? [ 714.085680][T21975] ftdi_sio 4-1:8.92: GPIO initialisation failed: -71 [ 714.106329][T21975] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 714.155058][T21975] usb 4-1: USB disconnect, device number 66 [ 714.172987][ T6442] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 714.215466][T21975] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 714.268740][T21975] ftdi_sio 4-1:8.92: device disconnected [ 714.455391][ T6442] usb 5-1: Using ep0 maxpacket: 16 [ 714.578108][T21975] usb 3-1: USB disconnect, device number 74 [ 714.634294][T30496] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 714.673698][T30496] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 714.687493][T30499] netlink: 'syz.1.12214': attribute type 1 has an invalid length. [ 714.735190][T30499] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.12214'. [ 714.758559][T30499] netlink: 'syz.1.12214': attribute type 1 has an invalid length. [ 714.826987][ T6442] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 714.886668][ T6442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.894690][ T6442] usb 5-1: Product: syz [ 714.949533][ T6442] usb 5-1: Manufacturer: syz [ 714.954175][ T6442] usb 5-1: SerialNumber: syz [ 714.967920][T30510] overlayfs: './file0' not a directory [ 715.018090][ T6442] usb 5-1: config 0 descriptor?? [ 715.103406][T30514] netlink: 'syz.3.12221': attribute type 1 has an invalid length. [ 715.117145][ T6442] gspca_main: spca508-2.14.0 probing 041e:4018 [ 715.204330][T30514] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.12221'. [ 715.263994][T30514] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12221'. [ 715.299272][T30525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12225'. [ 715.562107][ T6442] gspca_spca508: reg_read err -71 [ 715.595660][ T6442] gspca_spca508: reg_read err -71 [ 715.636417][ T6442] gspca_spca508: reg_read err -71 [ 715.695458][ T6442] gspca_spca508: reg_read err -71 [ 715.721696][ T6442] gspca_spca508: reg write: error -71 [ 715.735162][ T6442] spca508: probe of 5-1:0.0 failed with error -71 [ 715.807788][ T6442] usb 5-1: USB disconnect, device number 75 [ 716.185270][T30574] netlink: 'syz.4.12246': attribute type 3 has an invalid length. [ 716.829134][T30608] netlink: zone id is out of range [ 716.853730][T30608] netlink: zone id is out of range [ 716.885304][T30608] netlink: zone id is out of range [ 716.937355][T30608] netlink: zone id is out of range [ 716.976062][T30608] netlink: zone id is out of range [ 716.981213][T30608] netlink: zone id is out of range [ 717.010960][T30608] netlink: zone id is out of range [ 717.016468][T30608] netlink: zone id is out of range [ 717.052000][T30608] netlink: zone id is out of range [ 717.062096][T30608] netlink: zone id is out of range [ 717.314224][T30625] device geneve1 entered promiscuous mode [ 717.993627][T30662] netlink: 'syz.2.12281': attribute type 1 has an invalid length. [ 718.815246][T30712] __nla_validate_parse: 2 callbacks suppressed [ 718.815263][T30712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12300'. [ 718.954067][T30717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 719.460971][T30747] netlink: 'syz.4.12315': attribute type 6 has an invalid length. [ 719.554302][T30747] netlink: 'syz.4.12315': attribute type 7 has an invalid length. [ 719.592934][T30747] netlink: 'syz.4.12315': attribute type 8 has an invalid length. [ 719.905419][T30771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12325'. [ 720.216666][T30788] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12332'. [ 720.240396][T30773] loop4: detected capacity change from 0 to 8192 [ 720.365659][T30773] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 720.375706][T30773] REISERFS (device loop4): using ordered data mode [ 720.382395][T30773] reiserfs: using flush barriers [ 720.561374][T30773] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 720.618945][T30773] REISERFS (device loop4): checking transaction log (loop4) [ 720.754358][T30773] REISERFS (device loop4): Using r5 hash to sort names [ 720.781689][T30773] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 721.339263][T30838] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12356'. [ 721.396218][T30838] device team_slave_0 left promiscuous mode [ 721.528563][T30838] team0: Port device team_slave_0 removed [ 721.845181][T30861] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 721.868239][T30864] netlink: 'syz.4.12368': attribute type 3 has an invalid length. [ 721.935374][T30864] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12368'. [ 723.105249][T21975] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 723.315302][T21984] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 723.505444][T21975] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 723.523789][T21975] usb 5-1: config 0 has no interface number 0 [ 723.543982][T21975] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 723.564217][T21975] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 723.765621][T21979] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 723.796706][T21975] usb 5-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 723.825141][T21975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.850739][T30943] 8021q: VLANs not supported on lo [ 723.856748][T21975] usb 5-1: Product: syz [ 723.860919][T21975] usb 5-1: Manufacturer: syz [ 723.886969][T21975] usb 5-1: SerialNumber: syz [ 723.896736][T21975] usb 5-1: config 0 descriptor?? [ 723.925689][T21984] usb 2-1: New USB device found, idVendor=04b4, idProduct=9321, bcdDevice= 0.40 [ 723.947457][T21984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.960162][T21975] vmk80xx 5-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 723.975145][T21984] usb 2-1: Product: syz [ 723.987050][T21975] vmk80xx: probe of 5-1:0.255 failed with error -22 [ 723.995332][T21984] usb 2-1: Manufacturer: syz [ 723.999937][T21984] usb 2-1: SerialNumber: syz [ 724.027368][T21979] usb 3-1: Using ep0 maxpacket: 8 [ 724.172831][T21975] usb 5-1: USB disconnect, device number 76 [ 724.185462][T21979] usb 3-1: unable to get BOS descriptor or descriptor too short [ 724.314575][T21979] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 724.343085][T21979] usb 3-1: config 0 has no interface number 0 [ 724.363361][T21979] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 724.404812][T21979] usb 3-1: config 0 interface 88 has no altsetting 0 [ 724.522899][T21984] usb 2-1: unit 5 not found! [ 724.556942][T21984] usb 2-1: can't set first interface for hiFace device. [ 724.581910][T21984] snd-usb-hiface: probe of 2-1:1.1 failed with error -5 [ 724.615432][T21984] usb 2-1: can't set first interface for hiFace device. [ 724.645152][T21984] snd-usb-hiface: probe of 2-1:1.2 failed with error -5 [ 724.673556][T21984] usb 2-1: USB disconnect, device number 76 [ 724.679788][T21979] usb 3-1: string descriptor 0 read error: -22 [ 724.695196][T21979] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 724.763151][T21979] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 724.806096][T21979] usb 3-1: config 0 descriptor?? [ 724.877554][T21979] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input50 [ 725.250681][T21979] usb 3-1: USB disconnect, device number 75 [ 725.513334][T30997] netlink: 'syz.0.12433': attribute type 3 has an invalid length. [ 726.155995][T31029] netlink: 'syz.2.12450': attribute type 4 has an invalid length. [ 726.197224][T31029] netlink: 'syz.2.12450': attribute type 3 has an invalid length. [ 726.197663][ T6442] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 726.239005][T31029] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12450'. [ 726.503233][T31047] tmpfs: Bad value for 'mpol' [ 726.599511][ T6442] usb 4-1: Using ep0 maxpacket: 32 [ 727.165288][ T6442] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 727.174370][ T6442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.197402][T31078] netlink: 'syz.0.12474': attribute type 41 has an invalid length. [ 727.240953][ T6442] usb 4-1: Product: syz [ 727.260983][ T6442] usb 4-1: Manufacturer: syz [ 727.305184][ T6442] usb 4-1: SerialNumber: syz [ 727.340843][ T6442] usb 4-1: config 0 descriptor?? [ 727.475583][T31081] device macsec0 left promiscuous mode [ 727.505473][T21979] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 727.623949][T31081] device bond5 left promiscuous mode [ 727.655145][T31083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12476'. [ 727.775194][T21979] usb 5-1: Using ep0 maxpacket: 16 [ 727.955377][T21979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 728.015799][ T6442] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 728.035253][ T6442] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 728.067946][T21979] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 255 [ 728.098291][T21979] usb 5-1: config 1 interface 0 has no altsetting 0 [ 728.126359][T31103] netlink: 'syz.1.12486': attribute type 1 has an invalid length. [ 728.172280][T31103] netlink: 212908 bytes leftover after parsing attributes in process `syz.1.12486'. [ 728.226917][ T6442] peak_usb: probe of 4-1:0.0 failed with error -71 [ 728.295962][ T6442] usb 4-1: USB disconnect, device number 67 [ 728.355374][T21979] usb 5-1: string descriptor 0 read error: -22 [ 728.361637][T21979] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 728.375260][T21977] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 728.423304][T21979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.504540][T31079] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 728.537042][T21979] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 728.603021][T31116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.651105][T31116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.702112][T31116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.725916][T31116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.750456][ T6442] usb 5-1: USB disconnect, device number 77 [ 728.784138][T21977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.805253][T21977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 728.846425][T21977] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 728.880333][T21977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.920163][T21977] usb 3-1: config 0 descriptor?? [ 728.945528][T31102] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 728.998229][T21977] usbhid 3-1:0.0: can't add hid device: -22 [ 729.015590][T21977] usbhid: probe of 3-1:0.0 failed with error -22 [ 729.267431][T21977] usb 3-1: USB disconnect, device number 76 [ 730.050485][T31162] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12514'. [ 730.273373][T31162] team0: Port device team_slave_0 removed [ 730.297522][T31162] net_ratelimit: 335 callbacks suppressed [ 730.297540][T31162] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 730.405326][T31167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12516'. [ 730.622537][T31180] dlm: no locking on control device [ 731.183967][T31209] netlink: 'syz.3.12537': attribute type 29 has an invalid length. [ 731.263247][T31213] loop4: detected capacity change from 0 to 1764 [ 731.489623][T31225] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12545'. [ 731.515267][T31213] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 731.589767][T31229] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12548'. [ 731.787593][T31236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 731.794832][T31236] IPv6: NLM_F_CREATE should be set when creating new route [ 731.802123][T31236] IPv6: NLM_F_CREATE should be set when creating new route [ 732.035559][T21979] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 732.366388][T21979] usb 3-1: Using ep0 maxpacket: 16 [ 732.527341][T21979] usb 3-1: unable to get BOS descriptor or descriptor too short [ 732.695502][T21979] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.718742][T21979] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 732.768943][T21979] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 732.820962][ T6442] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 732.945280][T31284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12573'. [ 732.954368][T31284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12573'. [ 733.044449][T31284] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12573'. [ 733.209776][T21979] usb 3-1: string descriptor 0 read error: -22 [ 733.225214][T21979] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 733.234278][T21979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.565455][ T6442] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 733.587530][T31311] netlink: 'syz.1.12587': attribute type 3 has an invalid length. [ 733.594854][ T6442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.603633][ T6442] usb 4-1: Product: syz [ 733.615590][ T6442] usb 4-1: Manufacturer: syz [ 733.635163][ T6442] usb 4-1: SerialNumber: syz [ 733.683956][ T6442] usb 4-1: config 0 descriptor?? [ 733.756377][ T6442] ch341 4-1:0.0: ch341-uart converter detected [ 733.965448][ T6442] usb 4-1: failed to receive control message: -71 [ 733.971941][ T6442] ch341-uart: probe of ttyUSB0 failed with error -71 [ 734.021026][ T6442] usb 4-1: USB disconnect, device number 68 [ 734.033731][T21977] usb 3-1: USB disconnect, device number 77 [ 734.041324][ T6442] ch341 4-1:0.0: device disconnected [ 734.116326][T31331] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.12596'. [ 734.295247][T21979] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 734.327953][T31337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12599'. [ 734.565287][T21979] usb 5-1: Using ep0 maxpacket: 16 [ 734.643351][T31345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.683742][T31345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.731438][T31345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.758600][T31345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.792380][T21979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 734.918281][T21979] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 734.945170][T21979] usb 5-1: config 0 has no interface number 0 [ 734.965351][T21979] usb 5-1: config 0 interface 237 altsetting 93 endpoint 0x83 has invalid wMaxPacketSize 0 [ 735.008922][T21979] usb 5-1: config 0 interface 237 altsetting 93 bulk endpoint 0x83 has invalid maxpacket 0 [ 735.060044][T21979] usb 5-1: config 0 interface 237 has no altsetting 0 [ 735.253600][T31369] netlink: 'syz.0.12614': attribute type 1 has an invalid length. [ 735.296523][T21979] usb 5-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 735.315438][T21979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.385156][T21979] usb 5-1: Product: syz [ 735.389352][T21979] usb 5-1: Manufacturer: syz [ 735.429983][T21979] usb 5-1: SerialNumber: syz [ 735.466378][T21979] usb 5-1: config 0 descriptor?? [ 735.805295][T31391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.817743][T21979] ipaq 5-1:0.237: PocketPC PDA converter detected [ 735.824335][T21979] usb 5-1: active config #0 != 1 ?? [ 735.864219][T31391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.895476][T21979] usb 5-1: USB disconnect, device number 78 [ 736.253043][T31405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12632'. [ 736.947931][T31391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.997511][T31391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.168768][T31425] bond0: (slave bond_slave_1): Releasing backup interface [ 737.215978][T31425] device bond_slave_1 left promiscuous mode [ 737.475471][T31441] ip6t_srh: unknown srh invflags 4000 [ 737.572242][T31448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12651'. [ 737.875220][T31453] device bond6 entered promiscuous mode [ 737.948714][T31453] 8021q: adding VLAN 0 to HW filter on device bond6 [ 738.213612][T31472] loop4: detected capacity change from 0 to 4096 [ 738.246177][T31479] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.12667'. [ 738.290105][T31481] netlink: 'syz.0.12669': attribute type 1 has an invalid length. [ 738.325475][T31472] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 738.333208][T31481] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12669'. [ 738.385768][T31472] NILFS (loop4): mounting unchecked fs [ 738.391358][T31472] NILFS (loop4): recovery required for readonly filesystem [ 738.445153][T31472] NILFS (loop4): write access will be enabled during recovery [ 738.493264][ T4181] udevd[4181]: incorrect nilfs2 checksum on /dev/loop4 [ 738.615128][T31472] NILFS (loop4): recovery complete [ 739.184022][T31513] tipc: Can't bind to reserved service type 1 [ 739.372269][ T6634] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 739.458070][T31525] tmpfs: Bad value for 'mpol' [ 739.845458][ T6634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 80, setting to 64 [ 739.875204][ T6634] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 739.951202][ T6634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.022330][ T6634] usb 4-1: config 0 descriptor?? [ 740.080221][T31509] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 740.114519][ T6634] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input51 [ 740.269667][T31563] openvswitch: netlink: Missing key (keys=48, expected=10000000) [ 740.279439][T21977] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 740.345403][ T3544] bcm5974 4-1:0.0: could not read from device [ 740.382385][ T6634] usb 4-1: USB disconnect, device number 69 [ 740.397535][ T3544] bcm5974 4-1:0.0: could not read from device [ 740.419487][ T3544] bcm5974 4-1:0.0: could not read from device [ 740.636868][T31571] loop4: detected capacity change from 0 to 1024 [ 740.669322][T21977] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.699757][T21977] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.820016][T21977] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 740.837812][T21977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 740.874163][T21977] usb 3-1: SerialNumber: syz [ 741.157670][T21977] usb 3-1: 0:2 : does not exist [ 741.162644][T21977] usb 3-1: unit 5: unexpected type 0x03 [ 741.262563][T21977] usb 3-1: USB disconnect, device number 78 [ 741.496737][T31592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12724'. [ 741.695256][T21975] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 741.719350][T31599] netlink: 'syz.3.12728': attribute type 21 has an invalid length. [ 741.755204][T31599] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12728'. [ 741.795033][T31599] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12728'. [ 741.875436][T21977] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 742.125395][T21975] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 742.153984][T21975] usb 5-1: config 0 has no interface number 0 [ 742.161181][T21977] usb 2-1: Using ep0 maxpacket: 32 [ 742.176904][T21975] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 742.285351][T21977] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 742.313670][T21977] usb 2-1: config 0 has no interface number 0 [ 742.375908][T21975] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 742.405146][T21975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.426998][T21975] usb 5-1: Product: syz [ 742.431224][T21975] usb 5-1: Manufacturer: syz [ 742.474640][T21975] usb 5-1: SerialNumber: syz [ 742.494735][T21975] usb 5-1: config 0 descriptor?? [ 742.505455][T21977] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 742.524756][T21977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.553051][T21977] usb 2-1: Product: syz [ 742.567232][T21975] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 742.584717][T21977] usb 2-1: Manufacturer: syz [ 742.595038][T21977] usb 2-1: SerialNumber: syz [ 742.627399][T21977] usb 2-1: config 0 descriptor?? [ 742.677317][T21977] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 742.695225][T21977] usb 2-1: selecting invalid altsetting 1 [ 742.721396][T21977] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 742.747871][T21977] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 742.798967][T21977] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 742.829051][T21977] usb 2-1: media controller created [ 742.894146][T21977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 742.985309][T21977] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 742.996304][T21977] zl10353_read_register: readreg error (reg=127, ret==-71) [ 743.000204][ T6634] usb 5-1: USB disconnect, device number 79 [ 743.023753][ T6634] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 743.035246][T21977] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 743.105241][T21977] usb 2-1: USB disconnect, device number 77 [ 743.703261][T31625] nfs: Deprecated parameter 'nointr' [ 743.755298][T21977] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 744.155448][T21977] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 744.169624][T31646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12749'. [ 744.191374][T21977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.235141][T21977] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 744.254375][T31646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12749'. [ 744.285201][T21977] usb 2-1: config 1 has no interface number 1 [ 744.292220][T21977] usb 2-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.313339][T31646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12749'. [ 744.355200][T21977] usb 2-1: config 1 interface 2 has no altsetting 1 [ 744.545526][T21977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 744.579621][T21977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.615143][T21977] usb 2-1: Product: syz [ 744.629470][T21977] usb 2-1: Manufacturer: syz [ 744.644326][T21977] usb 2-1: SerialNumber: syz [ 744.696858][T21975] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 744.789990][T31671] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 744.809721][T31671] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 744.962635][T21975] usb 3-1: Using ep0 maxpacket: 32 [ 745.036136][T21977] usb 2-1: 2:2 : no or invalid class specific endpoint descriptor [ 745.149965][T21977] usb 2-1: USB disconnect, device number 78 [ 745.213309][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 745.295388][T21975] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 745.333584][T21975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.362025][T21975] usb 3-1: Product: syz [ 745.382036][T21975] usb 3-1: Manufacturer: syz [ 745.401327][T21975] usb 3-1: SerialNumber: syz [ 745.445962][T21975] usb 3-1: config 0 descriptor?? [ 745.535517][T31699] user_cmd nlpid 5208 [ 745.649603][T31701] netlink: 'syz.4.12776': attribute type 1 has an invalid length. [ 745.669954][T31701] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12776'. [ 745.700181][T31701] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12776'. [ 745.768272][T31707] overlayfs: missing 'lowerdir' [ 745.855244][T31709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12780'. [ 745.915249][T31709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12780'. [ 745.964913][T21975] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 745.985071][T21975] airspy 3-1:0.0: Could not detect board [ 745.991107][T21975] airspy: probe of 3-1:0.0 failed with error -71 [ 746.059348][T21975] usb 3-1: USB disconnect, device number 79 [ 746.252842][T31724] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 746.805408][T31742] xt_bpf: check failed: parse error [ 746.864026][T31744] netlink: 288 bytes leftover after parsing attributes in process `syz.3.12797'. [ 746.955281][ T25] audit: type=1400 audit(1786091615.434:62): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=31747 comm="syz.4.12799" [ 747.066461][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.072782][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.365561][T31764] netlink: 300 bytes leftover after parsing attributes in process `syz.0.12806'. [ 747.400407][T31769] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12807'. [ 748.186006][T31818] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 749.377939][T31872] netlink: 'syz.4.12859': attribute type 21 has an invalid length. [ 749.435276][T31872] __nla_validate_parse: 4 callbacks suppressed [ 749.435292][T31872] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12859'. [ 749.473159][T31876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12860'. [ 749.516305][T31872] netlink: 'syz.4.12859': attribute type 5 has an invalid length. [ 749.567182][T31872] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12859'. [ 749.777501][T31888] netlink: 'syz.4.12866': attribute type 5 has an invalid length. [ 750.105350][T21975] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 750.524610][T21975] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 750.554261][T21975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.587395][T21975] usb 3-1: config 0 descriptor?? [ 751.096722][T21975] ath6kl: Failed to submit usb control message: -71 [ 751.103371][T21975] ath6kl: unable to send the bmi data to the device: -71 [ 751.132419][T21975] ath6kl: Unable to send get target info: -71 [ 751.166403][T21975] ath6kl: Failed to init ath6kl core: -71 [ 751.249110][T21975] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 751.285630][T21975] usb 3-1: USB disconnect, device number 80 [ 751.461055][T31957] loop4: detected capacity change from 0 to 4096 [ 751.630173][T31957] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 751.659399][T31957] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 751.707674][T31957] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 751.749493][T31957] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 751.833464][T31957] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 751.938617][T31957] ntfs: volume version 3.1. [ 751.975598][T31957] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 752.018786][T31957] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 752.091347][T31957] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 752.152994][T31957] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 752.219735][T31957] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 752.361209][T31957] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 752.400470][T31957] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 752.492794][T31957] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index. [ 752.553663][T31957] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 752.650728][T31957] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 752.679622][T32016] netlink: 292 bytes leftover after parsing attributes in process `syz.2.12925'. [ 752.747484][T32018] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12927'. [ 753.227404][T32038] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12938'. [ 753.321133][T32038] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12938'. [ 753.385217][T32038] netlink: 81 bytes leftover after parsing attributes in process `syz.3.12938'. [ 753.424913][T32042] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 754.007925][T32087] netlink: 'syz.2.12961': attribute type 1 has an invalid length. [ 754.065291][T32087] netlink: 'syz.2.12961': attribute type 2 has an invalid length. [ 754.102441][T32087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12961'. [ 754.123825][T32093] netlink: 'syz.3.12963': attribute type 1 has an invalid length. [ 754.513961][T32114] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12975'. [ 754.995950][T21977] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 755.089747][T32146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12990'. [ 755.305284][T21975] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 755.513887][T32126] loop4: detected capacity change from 0 to 32768 [ 755.533101][T32164] program syz.0.12999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 755.562348][T21977] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 755.571695][T32126] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.12981 (32126) [ 755.594345][T21977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.619540][T32126] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 755.619999][T21977] usb 3-1: Product: syz [ 755.655152][T21977] usb 3-1: Manufacturer: syz [ 755.659357][T32126] BTRFS info (device loop4): using free space tree [ 755.659799][T21977] usb 3-1: SerialNumber: syz [ 755.676145][T32126] BTRFS info (device loop4): has skinny extents [ 755.712009][T21977] usb 3-1: config 0 descriptor?? [ 755.755384][T21975] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 755.775624][T21977] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 755.793132][T21975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.845053][T21975] usb 2-1: config 0 descriptor?? [ 755.896983][T21984] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 755.923332][T32126] BTRFS info (device loop4): enabling ssd optimizations [ 756.195831][T21977] usb 3-1: USB disconnect, device number 81 [ 756.316131][T21975] ath6kl: Failed to submit usb control message: -71 [ 756.323053][T21975] ath6kl: unable to send the bmi data to the device: -71 [ 756.370694][T21975] ath6kl: Unable to send get target info: -71 [ 756.445379][T21984] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 756.485370][T21984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.493426][T21984] usb 4-1: Product: syz [ 756.548444][T32219] tmpfs: Bad value for 'mpol' [ 756.553343][T21984] usb 4-1: Manufacturer: syz [ 756.573407][T21984] usb 4-1: SerialNumber: syz [ 756.596519][T21975] ath6kl: Failed to init ath6kl core: -71 [ 756.665204][T21984] ums-karma 4-1:1.0: USB Mass Storage device detected [ 756.693216][T21975] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 756.723018][T21984] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 756.723018][T21984] Please send a copy of this message to and [ 756.749170][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.795261][T21975] usb 2-1: USB disconnect, device number 79 [ 757.123718][T21984] ums-karma: probe of 4-1:1.0 failed with error -5 [ 757.164103][T21984] usb 4-1: USB disconnect, device number 70 [ 757.573606][T32261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13031'. [ 757.679418][ T26] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 758.142713][T32281] nvme_rdma: malformed address passed: malformed:4420 [ 758.151431][ T26] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 758.185058][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.237016][ T26] usb 5-1: config 0 descriptor?? [ 758.432643][T32302] netlink: 'syz.2.13049': attribute type 1 has an invalid length. [ 758.525301][T32302] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13049'. [ 758.771704][ T26] ath6kl: Failed to submit usb control message: -71 [ 758.782689][ T26] ath6kl: unable to send the bmi data to the device: -71 [ 758.815865][T32316] autofs4:pid:32316:autofs_fill_super: called with bogus options [ 758.830944][ T26] ath6kl: Unable to send get target info: -71 [ 758.875799][ T26] ath6kl: Failed to init ath6kl core: -71 [ 758.965152][ T26] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 759.019681][ T26] usb 5-1: USB disconnect, device number 80 [ 759.327144][T32341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 759.387985][T32341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 759.455430][T32341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 759.837738][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 760.220532][T32390] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 760.589358][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 760.894983][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 760.894997][ T25] audit: type=1326 audit(1786091629.364:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32428 comm="syz.1.13111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ad9e2a0d9 code=0x0 [ 761.016210][T32436] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 761.056725][T32439] netlink: 'syz.4.13116': attribute type 21 has an invalid length. [ 761.064715][T32439] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13116'. [ 761.605457][T32466] ceph: No source [ 761.745249][T32479] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13137'. [ 761.935260][T32488] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 762.368973][T32515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13154'. [ 762.444911][T32515] netlink: 112 bytes leftover after parsing attributes in process `syz.1.13154'. [ 762.485504][T32522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13157'. [ 762.935344][T32548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13169'. [ 763.615149][ T26] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 763.716264][T32594] netlink: 'syz.3.13191': attribute type 20 has an invalid length. [ 763.774970][T32594] IPv6: NLM_F_CREATE should be specified when creating new route [ 763.811722][T32595] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13193'. [ 763.845227][T32595] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13193'. [ 763.919950][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 764.374129][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 764.394063][ T26] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 764.451660][ T26] usb 5-1: Product: syz [ 764.490207][ T26] usb 5-1: Manufacturer: syz [ 764.494838][ T26] usb 5-1: SerialNumber: syz [ 764.548478][ T26] usb 5-1: config 0 descriptor?? [ 764.621766][ T26] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 764.967493][T32637] openvswitch: netlink: Actions may not be safe on all matching packets [ 808.565482][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.571799][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 825.226308][ T3559] udevd[3559]: worker [4181] /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0 is taking a long time [ 869.947148][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.953459][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.115109][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 870.121754][ C1] rcu: 1-....: (1 GPs behind) idle=1d9/1/0x4000000000000000 softirq=92592/92593 fqs=5227 [ 870.133862][ C1] (t=10501 jiffies g=109581 q=1843) [ 870.139159][ C1] NMI backtrace for cpu 1 [ 870.143480][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 870.150757][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 870.160805][ C1] Call Trace: [ 870.164065][ C1] [ 870.166887][ C1] dump_stack_lvl+0x188/0x250 [ 870.171580][ C1] ? show_regs_print_info+0x20/0x20 [ 870.176752][ C1] ? load_image+0x410/0x410 [ 870.181289][ C1] ? vprintk_emit+0x150/0x150 [ 870.185975][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 870.190901][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 870.197027][ C1] ? vprintk_emit+0xf9/0x150 [ 870.201612][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 870.207059][ C1] ? _raw_spin_lock+0x40/0x40 [ 870.211723][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 870.217769][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 870.223726][ C1] rcu_dump_cpu_stacks+0x22d/0x380 [ 870.228873][ C1] print_cpu_stall+0x31f/0x5f0 [ 870.233609][ C1] rcu_sched_clock_irq+0x6ec/0x1120 [ 870.238781][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 870.243605][ C1] ? hrtimer_run_queues+0x162/0x400 [ 870.248778][ C1] ? account_process_tick+0x22a/0x3a0 [ 870.254170][ C1] update_process_times+0x193/0x200 [ 870.259345][ C1] tick_sched_timer+0x37d/0x560 [ 870.264170][ C1] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 870.269686][ C1] __hrtimer_run_queues+0x4b0/0xb60 [ 870.274859][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 870.280821][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 870.285905][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 870.291948][ C1] hrtimer_interrupt+0x397/0x8b0 [ 870.296869][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 870.302911][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 870.308524][ C1] [ 870.311432][ C1] [ 870.314342][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 870.320296][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 870.326769][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 1f c1 88 f7 65 8b 05 90 e8 38 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 870.346350][ C1] RSP: 0018:ffffc90000da7a80 EFLAGS: 00000206 [ 870.352394][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 1f675d4c40821d00 [ 870.360341][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 870.368287][ C1] RBP: ffffc90000da7b10 R08: ffff8880b912a243 R09: 1ffff11017225448 [ 870.376232][ C1] R10: dffffc0000000000 R11: ffffed1017225449 R12: dffffc0000000000 [ 870.384179][ C1] R13: ffff888023187d70 R14: ffff8880b912a240 R15: 1ffff920001b4f50 [ 870.392134][ C1] ? _raw_spin_unlock+0x40/0x40 [ 870.396975][ C1] ? timerqueue_del+0xaa/0x100 [ 870.401714][ C1] ? gate_get_start_time+0x130/0x130 [ 870.406983][ C1] __hrtimer_run_queues+0x402/0xb60 [ 870.412164][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 870.417279][ C1] hrtimer_run_softirq+0x176/0x240 [ 870.422367][ C1] handle_softirqs+0x336/0x830 [ 870.427170][ C1] ? run_ksoftirqd+0xa4/0x100 [ 870.431832][ C1] ? do_softirq+0x210/0x210 [ 870.436307][ C1] ? run_ksoftirqd+0x81/0x100 [ 870.440958][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 870.446125][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 870.451390][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 870.456560][ C1] run_ksoftirqd+0xa4/0x100 [ 870.461040][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 870.466214][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 870.471586][ C1] smpboot_thread_fn+0x520/0x990 [ 870.476574][ C1] kthread+0x42e/0x520 [ 870.480616][ C1] ? cpu_report_death+0x180/0x180 [ 870.485618][ C1] ? kthread_blkcg+0xd0/0xd0 [ 870.490184][ C1] ret_from_fork+0x1f/0x30 [ 870.494583][ C1]