last executing test programs: 962.847727ms ago: executing program 0 (id=18164): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, r1, 0x34fa7eb3d806ed63, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x10008010) 953.37341ms ago: executing program 2 (id=18165): ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x10000}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl(r0, 0xfffff000, &(0x7f0000000000)) 846.645666ms ago: executing program 3 (id=18166): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4210, r0) 800.52563ms ago: executing program 2 (id=18167): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xe9) 741.312744ms ago: executing program 0 (id=18169): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x35]}}]}) 694.43898ms ago: executing program 3 (id=18170): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) 620.44638ms ago: executing program 1 (id=18171): fsopen(&(0x7f0000000280)='configfs\x00', 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000000c0)=0x5) 606.886045ms ago: executing program 0 (id=18172): sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44002080}, 0xc, 0x0}, 0x24000000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000080)=ANY=[], 0x0, 0x400) 576.791751ms ago: executing program 1 (id=18173): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) sendto(r0, 0x0, 0x0, 0x2404c016, &(0x7f0000000280)=@qipcrtr={0x2a, 0x1, 0x1}, 0x80) 499.807441ms ago: executing program 2 (id=18174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 473.068604ms ago: executing program 1 (id=18175): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf, 0x1, 0x405}}}, 0x7) 449.389403ms ago: executing program 0 (id=18176): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x2a, {0x2, 0x0, @empty}, 'lo\x00'}) 380.569692ms ago: executing program 2 (id=18177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000c33000/0x4000)=nil}) 380.428961ms ago: executing program 3 (id=18178): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 380.371094ms ago: executing program 1 (id=18179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010600000000000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) 308.134015ms ago: executing program 1 (id=18180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a"], 0x1c}], 0x1}, 0x4000080) 286.8877ms ago: executing program 3 (id=18181): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) 164.064282ms ago: executing program 2 (id=18182): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000a00)={0xf9a0, 0x2, [{0x1, 0x1}, {0x9, 0x1}]}) 163.916963ms ago: executing program 0 (id=18183): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24008801}, 0xe00c850) 163.846089ms ago: executing program 3 (id=18184): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000001c0)) 137.74849ms ago: executing program 1 (id=18185): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x2a, 0x4, 0x0, {0x1, 0x7fff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 91.693552ms ago: executing program 3 (id=18186): setresgid(0x0, 0x0, 0xee01) r0 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0x9, 0x0, 0x0) 146.62µs ago: executing program 2 (id=18187): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x28, r1, 0x607, 0xfffffffc, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 0s ago: executing program 0 (id=18188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="016f082101030000ffff1400"], 0x31) kernel console output (not intermixed with test programs): ssed [ 889.323343][ T30] audit: type=1107 audit(855.966:197): pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 890.129935][ T6050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 890.234492][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 890.458316][ T5243] syz.2.14301 (5243): drop_caches: 4 [ 890.476614][ T5247] netlink: 88 bytes leftover after parsing attributes in process `syz.1.14303'. [ 890.925430][ T5286] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 891.398199][ T5320] netlink: 'syz.1.14336': attribute type 21 has an invalid length. [ 891.410437][ T5320] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14336'. [ 891.472323][ T5322] autofs4:pid:5322:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 891.891641][ T30] audit: type=1326 audit(858.361:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.3.14352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372619c799 code=0x7ffc0000 [ 891.893769][ T30] audit: type=1326 audit(858.361:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.3.14352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372619c799 code=0x7ffc0000 [ 891.900946][ T30] audit: type=1326 audit(858.370:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.3.14352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f372615cfce code=0x7ffc0000 [ 891.901515][ T30] audit: type=1326 audit(858.370:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.3.14352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372619c42b code=0x7ffc0000 [ 891.903231][ T30] audit: type=1326 audit(858.370:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.3.14352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372619c42b code=0x7ffc0000 [ 891.938503][ T30] audit: type=1326 audit(858.379:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.3.14352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372619c42b code=0x7ffc0000 [ 891.938557][ T30] audit: type=1326 audit(858.379:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.3.14352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372619c42b code=0x7ffc0000 [ 892.061210][ T30] audit: type=1326 audit(858.501:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.3.14352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372619c42b code=0x7ffc0000 [ 892.110690][ T30] audit: type=1326 audit(858.576:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.3.14352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372619c42b code=0x7ffc0000 [ 892.111811][ T5363] delete_channel: no stack [ 892.171524][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 892.253081][ T5370] netlink: 'syz.1.14357': attribute type 10 has an invalid length. [ 892.353254][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 892.362979][ T9] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 892.382679][ T9] usb 4-1: config 251 has no interface number 0 [ 892.390230][ T9] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 892.401909][ T9] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 892.412498][ T9] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 892.423999][ T9] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 892.436840][ T9] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 892.450849][ T9] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.461951][ T9] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 892.490499][ T9] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 892.515359][ T9] usb 4-1: config 251 interface 202 has no altsetting 0 [ 892.531984][ T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 892.551053][ T9] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 892.559549][ T9] usb 4-1: Product: syz [ 892.563804][ T9] usb 4-1: SerialNumber: syz [ 892.813369][ T9] cxacru 4-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 892.821006][ T9] cxacru 4-1:251.202: probe with driver cxacru failed with error -22 [ 892.836917][ T9] usb 4-1: USB disconnect, device number 2 [ 892.910611][ T6050] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 893.083072][ T6050] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 893.094727][ T6050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.106340][ T6050] usb 2-1: config 0 descriptor?? [ 893.133096][ T6050] cp210x 2-1:0.0: cp210x converter detected [ 893.355117][ T5431] netlink: 'syz.2.14380': attribute type 4 has an invalid length. [ 893.363739][ T5431] netlink: 'syz.2.14380': attribute type 2 has an invalid length. [ 893.437166][ T5435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14382'. [ 893.553418][ T6050] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 893.575172][ T6050] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 893.583790][ T6050] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 893.599608][ T6050] usb 2-1: cp210x converter now attached to ttyUSB0 [ 893.627680][ T6050] usb 2-1: USB disconnect, device number 16 [ 893.648435][ T6050] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 893.669380][ T6050] cp210x 2-1:0.0: device disconnected [ 893.906461][ T5473] netlink: 'syz.2.14393': attribute type 21 has an invalid length. [ 893.914626][ T5473] netlink: 'syz.2.14393': attribute type 30 has an invalid length. [ 894.477465][ T5524] binder: 5521:5524 unknown command 576 [ 894.483763][ T5524] binder: 5521:5524 ioctl c0306201 200000000480 returned -22 [ 894.491096][ T5522] netlink: 'syz.3.14408': attribute type 27 has an invalid length. [ 894.548529][ T5522] gretap0: left allmulticast mode [ 894.656650][ T5522] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.664132][ T5522] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.087535][ T5522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.127724][ T5522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.178984][ T5522] veth1_macvtap: left allmulticast mode [ 895.201779][ T5522] veth0_macvtap: left allmulticast mode [ 895.231516][ T5522] .30XD: left allmulticast mode [ 895.271797][ T6075] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 895.402317][ T633] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.427034][ T633] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.452717][ T633] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.462953][ T633] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.474901][ T6075] usb 2-1: Using ep0 maxpacket: 32 [ 895.498037][ T6075] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.541320][ T6075] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 895.553049][ T6075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.562812][ T6075] usb 2-1: Product: syz [ 895.567512][ T6075] usb 2-1: Manufacturer: syz [ 895.573576][ T6075] usb 2-1: SerialNumber: syz [ 895.607385][ T6075] usb 2-1: config 0 descriptor?? [ 895.638779][ T6075] usb 2-1: bad CDC descriptors [ 895.644498][ T5584] 9pnet: Found fid 0 not clunked [ 895.654848][ T6075] usb 2-1: unsupported MDLM descriptors [ 895.853617][ T10] usb 2-1: USB disconnect, device number 17 [ 896.741280][ T5668] x_tables: duplicate underflow at hook 4 [ 897.080364][ T5691] openvswitch: netlink: Multiple metadata blocks provided [ 897.721917][ T5739] netlink: 'syz.2.14486': attribute type 11 has an invalid length. [ 898.365710][ T5789] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.14510'. [ 898.384431][ T5789] netlink: 280 bytes leftover after parsing attributes in process `syz.1.14510'. [ 899.233000][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14533'. [ 899.377481][ T5858] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14539'. [ 899.742871][ T5884] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14552'. [ 899.755542][ T5883] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14551'. [ 900.210290][ T5918] netlink: 'syz.0.14564': attribute type 27 has an invalid length. [ 900.285053][ T5918] sit0: left promiscuous mode [ 900.346971][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.354428][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.395129][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 900.668712][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.687617][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.730220][ T5918] batman_adv: batadv0: Interface deactivated: vlan1 [ 900.735189][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 900.761615][ T5918] veth1_vlan: left allmulticast mode [ 900.788126][ T5918] macvlan0: left promiscuous mode [ 900.793386][ T5918] macvlan0: left allmulticast mode [ 900.826803][ T5918] veth1_macvtap: left allmulticast mode [ 900.912595][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 900.928370][ T10] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 900.940810][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.958065][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.979841][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.993366][ T10] usb 2-1: Product: syz [ 901.002882][ T10] usb 2-1: Manufacturer: syz [ 901.007525][ T10] usb 2-1: SerialNumber: syz [ 901.015495][ T10] usb 2-1: config 0 descriptor?? [ 901.020568][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.041434][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.115860][ T5960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14580'. [ 901.262312][ T10] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 018 [ 901.378318][ T5978] netlink: 'syz.0.14587': attribute type 4 has an invalid length. [ 901.478945][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 901.491281][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 901.500552][ T6076] usb 2-1: USB disconnect, device number 18 [ 901.521939][ T5996] openvswitch: netlink: Missing valid actions attribute. [ 901.548337][ T5996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 901.942460][ T6080] dlm: no locking on control device [ 902.335969][ T6109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14617'. [ 902.726666][ T6134] bridge_slave_0 (unregistering): left allmulticast mode [ 902.739236][ T6142] netlink: 'syz.2.14632': attribute type 27 has an invalid length. [ 902.748189][ T6134] bridge_slave_0 (unregistering): left promiscuous mode [ 902.758257][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.774990][ T6144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.900242][ T6142] bridge0: port 3(veth0) entered disabled state [ 902.906843][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.914242][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.273511][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.298635][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.346526][ T6142] veth0_vlan: left allmulticast mode [ 903.450005][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 903.565456][T10001] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.576004][T10001] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.585457][T10001] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.610377][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 903.620300][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.645364][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.664847][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 903.679732][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.697669][ T10] usb 4-1: Product: syz [ 903.705271][ T10] usb 4-1: Manufacturer: syz [ 903.714481][ T10] usb 4-1: SerialNumber: syz [ 904.186622][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 904.196661][ T6222] netlink: 'syz.1.14666': attribute type 21 has an invalid length. [ 904.207423][ T10] usb 4-1: cannot find UAC_HEADER [ 904.213755][ T6222] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14666'. [ 904.228239][ T6222] netlink: 'syz.1.14666': attribute type 5 has an invalid length. [ 904.257096][ T6222] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14666'. [ 904.301569][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 904.321689][ T10] usb 4-1: USB disconnect, device number 3 [ 904.370513][ T4305] udevd[4305]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.438264][ T6243] netlink: 'syz.2.14670': attribute type 1 has an invalid length. [ 904.566193][ T6249] netlink: 'syz.2.14673': attribute type 11 has an invalid length. [ 904.692176][ T6263] openvswitch: netlink: IP tunnel dst address not specified [ 904.731875][ T6264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 904.859290][ T6272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14681'. [ 905.089843][ T6287] netlink: 'syz.3.14689': attribute type 1 has an invalid length. [ 905.799270][ T6345] netlink: 'syz.2.14716': attribute type 1 has an invalid length. [ 905.898767][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 905.955539][ T6355] overlayfs: cannot append lower layer [ 906.069169][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 906.081572][ T10] usb 2-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 906.097605][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 906.105704][ T10] usb 2-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 906.134491][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 906.149560][ T10] usb 2-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 906.171355][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 906.183996][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 906.193745][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.220506][ T10] usb 2-1: Product: syz [ 906.232343][ T10] usb 2-1: Manufacturer: syz [ 906.242210][ T10] usb 2-1: SerialNumber: syz [ 906.259276][ T10] usb 2-1: config 0 descriptor?? [ 906.274760][ T10] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 906.490687][ T10] pwc: Warning: more than 1 configuration available. [ 906.508458][ T10] pwc: Failed to set LED on/off time (-71) [ 906.530014][ T10] pwc: send_video_command error -71 [ 906.544389][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 906.561179][ T10] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 906.593912][ T10] usb 2-1: USB disconnect, device number 19 [ 906.687752][ T6400] netlink: 'syz.0.14739': attribute type 4 has an invalid length. [ 906.695801][ T6400] netlink: 'syz.0.14739': attribute type 1 has an invalid length. [ 906.704278][ T6400] netlink: 228 bytes leftover after parsing attributes in process `syz.0.14739'. [ 907.277614][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 907.341401][ T6076] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 907.430079][ T6458] netlink: 'syz.3.14764': attribute type 13 has an invalid length. [ 907.503812][ T6076] usb 3-1: Using ep0 maxpacket: 32 [ 907.526143][ T6076] usb 3-1: unable to get BOS descriptor or descriptor too short [ 907.550803][ T6076] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 907.589172][ T6076] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 907.607805][ T6076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.616226][ T6076] usb 3-1: Product: syz [ 907.620839][ T6076] usb 3-1: Manufacturer: syz [ 907.628000][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14767'. [ 907.637415][ T6076] usb 3-1: SerialNumber: syz [ 907.881405][ T6076] usb 3-1: Not enough endpoints found in device, aborting! [ 908.002954][ T6493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14774'. [ 908.086810][ T6075] usb 3-1: USB disconnect, device number 6 [ 908.094499][ T6076] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 908.282962][ T6076] usb 4-1: Using ep0 maxpacket: 32 [ 908.301658][ T6076] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 908.324857][ T6076] usb 4-1: config 0 has no interface number 0 [ 908.340792][ T6076] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 908.358469][ T6076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.373764][ T6076] usb 4-1: Product: syz [ 908.382921][ T6076] usb 4-1: Manufacturer: syz [ 908.391158][ T6076] usb 4-1: SerialNumber: syz [ 908.405866][ T6076] usb 4-1: config 0 descriptor?? [ 908.426693][ T6076] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 908.445360][ T6076] usb 4-1: selecting invalid altsetting 1 [ 908.462123][ T6076] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 908.480666][ T6076] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 908.495351][ T6076] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 908.504005][ T6076] usb 4-1: media controller created [ 908.539928][ T6076] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 908.605797][ T6531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14783'. [ 908.648279][ T6076] usb 4-1: DVB: registering adapter 3 frontend 0 (Zarlink ZL10353 DVB-T)... [ 908.678069][ T6076] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 908.806673][ T6076] DVB: Unable to find symbol mxl5005s_attach() [ 908.864452][ T6076] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 908.982168][ T6076] usb 4-1: USB disconnect, device number 4 [ 909.073751][ T6569] netlink: 'syz.1.14795': attribute type 21 has an invalid length. [ 909.091621][ T6569] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14795'. [ 909.310928][ T6585] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14803'. [ 909.332447][ T6585] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 909.342185][ T6585] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 909.717641][ T6611] netlink: 'syz.2.14816': attribute type 1 has an invalid length. [ 910.545304][ T6670] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 910.565086][ T6672] netlink: 'syz.1.14844': attribute type 10 has an invalid length. [ 910.593004][ T6672] netlink: 228 bytes leftover after parsing attributes in process `syz.1.14844'. [ 910.881949][ T6699] netlink: 'syz.0.14852': attribute type 15 has an invalid length. [ 910.899630][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14852'. [ 911.103253][ T6717] binder: 6716:6717 ioctl 4018620d 0 returned -22 [ 911.622301][ T6751] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 912.366523][ T6800] tc_dump_action: action bad kind [ 912.391593][ T6788] lo speed is unknown, defaulting to 1000 [ 912.756787][ T6821] ceph: No source [ 912.818298][ T6823] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 913.166895][ T6839] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14906'. [ 913.215174][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14907'. [ 913.260733][ T6788] wg0 speed is unknown, defaulting to 1000 [ 913.761223][ T6892] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 914.129353][ T6928] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 914.461981][ T6945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14937'. [ 914.915735][ T6968] dvmrp12: entered allmulticast mode [ 915.007623][ T6975] pimreg: entered allmulticast mode [ 915.096636][ T6983] usb usb8: usbfs: process 6983 (syz.1.14952) did not claim interface 0 before use [ 915.164787][ T6987] dummy0: entered allmulticast mode [ 915.803903][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14977'. [ 915.930973][ T7044] pim6reg: left allmulticast mode [ 916.433117][ T7080] bond0: entered promiscuous mode [ 916.438833][ T7080] bond0: entered allmulticast mode [ 916.818753][ T7108] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.15013'. [ 916.965789][ T7120] tipc: Can't bind to reserved service type 0 [ 917.086584][ T7129] netlink: 'syz.2.15022': attribute type 27 has an invalid length. [ 917.159868][ T7129] 8021q: adding VLAN 0 to HW filter on device @ [ 917.172378][ T7129] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.219579][ T7129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 917.247157][T10001] syz_tun: tun_net_xmit 90 [ 917.273243][ T10] syz_tun: tun_net_xmit 110 [ 917.519064][ T10] syz_tun: tun_net_xmit 110 [ 917.677520][ T7161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15035'. [ 917.817288][ T7165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15038'. [ 917.831198][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15039'. [ 917.903381][ T6076] IPVS: starting estimator thread 0... [ 917.955218][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15042'. [ 917.969575][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15042'. [ 918.021323][ T7170] IPVS: using max 36 ests per chain, 86400 per kthread [ 918.070308][ T7180] netlink: 'syz.1.15044': attribute type 11 has an invalid length. [ 918.168792][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15049'. [ 918.353881][ T10] syz_tun: tun_net_xmit 90 [ 918.477774][ T7209] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 918.478390][ T7208] overlay: Bad value for 'workdir' [ 919.090340][ T10] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 919.267070][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.291407][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 919.311074][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 919.323254][ T10] usb 2-1: string descriptor 0 read error: -71 [ 919.334608][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 919.346378][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.367933][ T10] usb 2-1: can't set config #1, error -71 [ 919.391561][ T10] usb 2-1: USB disconnect, device number 20 [ 919.529729][ T7288] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 920.341120][ T6075] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 920.378302][ T7345] binder: 7344:7345 ioctl c0306201 200000000180 returned -14 [ 920.389927][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 920.389944][ T30] audit: type=1400 audit(885.019:233): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 8 bytes leftover after parsing attributes in process `syz.2.15121'. [ 920.571349][ T6075] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 920.582122][ T6075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.590574][ T6075] usb 4-1: Product: syz [ 920.594914][ T6075] usb 4-1: Manufacturer: syz [ 920.599614][ T6075] usb 4-1: SerialNumber: syz [ 920.611404][ T6076] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 920.619660][ T6075] usb 4-1: config 0 descriptor?? [ 920.636760][ T6075] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 920.781204][ T6076] usb 2-1: config index 0 descriptor too short (expected 133, got 72) [ 920.800286][ T6076] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 920.809894][ T6076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.818020][ T6076] usb 2-1: Product: syz [ 920.822266][ T6076] usb 2-1: Manufacturer: syz [ 920.826926][ T6076] usb 2-1: SerialNumber: syz [ 920.846679][ T6076] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 920.866898][ T7374] netlink: 'syz.2.15127': attribute type 10 has an invalid length. [ 920.868451][ T6075] gspca_stk1135: reg_w 0x2 err -71 [ 920.892060][ T6075] gspca_stk1135: serial bus timeout: status=0x00 [ 920.902038][ T7374] team0 (unregistering): Port device team_slave_0 removed [ 920.905322][ T6075] gspca_stk1135: Sensor write failed [ 920.915220][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 920.925668][ T6075] gspca_stk1135: serial bus timeout: status=0x00 [ 920.944576][ T6075] gspca_stk1135: Sensor write failed [ 920.952618][ T7374] team0 (unregistering): Port device team_slave_1 removed [ 920.960892][ T6075] gspca_stk1135: serial bus timeout: status=0x00 [ 920.967799][ T6075] gspca_stk1135: Sensor read failed [ 920.973741][ T6075] gspca_stk1135: serial bus timeout: status=0x00 [ 920.981592][ T6075] gspca_stk1135: Sensor read failed [ 920.993744][ T6075] gspca_stk1135: Detected sensor type unknown (0x0) [ 921.003232][ T6075] gspca_stk1135: serial bus timeout: status=0x00 [ 921.011506][ T6075] gspca_stk1135: Sensor read failed [ 921.017087][ T6075] gspca_stk1135: serial bus timeout: status=0x00 [ 921.023638][ T6075] gspca_stk1135: Sensor read failed [ 921.030514][ T6075] gspca_stk1135: serial bus timeout: status=0x00 [ 921.037337][ T6075] gspca_stk1135: Sensor write failed [ 921.042766][ T6075] gspca_stk1135: serial bus timeout: status=0x00 [ 921.052600][ T6075] gspca_stk1135: Sensor write failed [ 921.061313][ T6075] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 921.090065][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 921.099332][ T6075] usb 4-1: USB disconnect, device number 5 [ 921.364255][ T6075] usb 2-1: USB disconnect, device number 21 [ 921.520744][ T7401] Device name cannot be null; rc = [-22] [ 921.701302][ T7413] netlink: 'syz.2.15141': attribute type 46 has an invalid length. [ 922.033062][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 922.053653][ T24] ath9k_htc: Failed to initialize the device [ 922.084082][ T6075] usb 2-1: ath9k_htc: USB layer deinitialized [ 922.115437][ T7439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15152'. [ 922.713837][ T7484] netlink: 'syz.2.15172': attribute type 21 has an invalid length. [ 922.722901][ T7484] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15172'. [ 923.264402][ T7524] netlink: 'syz.2.15191': attribute type 11 has an invalid length. [ 923.276395][ T7524] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15191'. [ 923.456380][ T7538] /dev/sg0: Can't lookup blockdev [ 923.517010][ T7540] netlink: 'syz.1.15198': attribute type 5 has an invalid length. [ 923.541335][ T7540] netlink: 'syz.1.15198': attribute type 9 has an invalid length. [ 923.712768][ T7555] netlink: 220 bytes leftover after parsing attributes in process `syz.1.15204'. [ 923.746952][ T7557] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.15205'. [ 923.878060][ T7567] cgroup2: Unknown parameter 'obj_user' [ 923.939539][ T7570] : entered promiscuous mode [ 924.140651][ T7588] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 924.268091][ T7597] bond0: (slave sit0): refused to change device type [ 924.476288][ T7614] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 924.488562][ T7613] bridge_slave_1: left allmulticast mode [ 924.510622][ T7613] bridge_slave_1: left promiscuous mode [ 924.526640][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.577286][ T7613] bridge_slave_0: left allmulticast mode [ 924.586942][ T7613] bridge_slave_0: left promiscuous mode [ 924.607513][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.656029][ T7613] bond0: (slave bridge0): Releasing backup interface [ 924.664782][ T7627] netlink: get zone limit has 8 unknown bytes [ 924.881508][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 924.972033][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 925.005817][ T7644] netlink: 'syz.2.15241': attribute type 1 has an invalid length. [ 925.013865][ T7644] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15241'. [ 925.022995][ T7644] netlink: 658 bytes leftover after parsing attributes in process `syz.2.15241'. [ 925.032697][ T7644] netlink: 1 bytes leftover after parsing attributes in process `syz.2.15241'. [ 925.077434][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 925.095862][ T10] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 925.106837][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 925.130575][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 925.138845][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 925.150885][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 925.159957][ T10] usb 2-1: config 0 has no interface number 0 [ 925.166416][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 925.177692][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 925.190122][ T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 925.200168][ T10] usb 2-1: config 0 interface 125 has no altsetting 1 [ 925.218329][ T10] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 925.235413][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.243615][ T10] usb 2-1: Product: syz [ 925.247893][ T10] usb 2-1: Manufacturer: syz [ 925.252956][ T10] usb 2-1: SerialNumber: syz [ 925.267650][ T10] usb 2-1: config 0 descriptor?? [ 925.721644][ T10] usb 2-1: USB disconnect, device number 22 [ 926.387048][ T7737] bridge_slave_1: left allmulticast mode [ 926.395381][ T7737] bridge_slave_1: left promiscuous mode [ 926.401732][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.552464][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 926.575110][ T7752] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 926.714841][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 926.730393][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.742137][ T9] usb 3-1: config 0 has no interface number 0 [ 926.752048][ T9] usb 3-1: config 0 interface 2 has no altsetting 0 [ 926.761923][ T9] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 926.785336][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.794924][ T9] usb 3-1: Product: syz [ 926.803551][ T9] usb 3-1: Manufacturer: syz [ 926.808245][ T9] usb 3-1: SerialNumber: syz [ 926.817106][ T9] usb 3-1: config 0 descriptor?? [ 927.023246][ T7783] netlink: 200 bytes leftover after parsing attributes in process `syz.1.15299'. [ 927.041178][ T7783] tc_dump_action: action bad kind [ 927.052319][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 927.144976][ T9] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 927.188925][ T4305] udevd[4305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 927.270873][ T9] usb 3-1: USB disconnect, device number 7 [ 927.550326][ T7825] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 927.854076][ T7847] netlink: 'syz.3.15324': attribute type 1 has an invalid length. [ 928.186099][ T7872] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15335'. [ 928.478862][ T7894] (syz.3.15346,7894,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 928.486800][ T7894] (syz.3.15346,7894,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 928.494731][ T7894] (syz.3.15346,7894,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 928.503848][ T7894] (syz.3.15346,7894,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 928.610110][ T7901] netlink: 'syz.2.15348': attribute type 1 has an invalid length. [ 928.879182][ T7921] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15359'. [ 929.075507][ T7937] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 929.075507][ T7937] The task syz.2.15364 (7937) triggered the difference, watch for misbehavior. [ 929.113001][ T7940] kAFS: No cell specified [ 929.459406][ T7964] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 929.522422][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15381'. [ 929.533125][ T7969] tmpfs: Bad value for 'mpol' [ 929.718151][ T7981] netlink: 'syz.1.15388': attribute type 6 has an invalid length. [ 929.729115][ T7981] netlink: 76 bytes leftover after parsing attributes in process `syz.1.15388'. [ 931.497650][ T8103] AppArmor: change_hat: Invalid input '9' [ 931.959534][ T8137] netlink: 'syz.2.15454': attribute type 10 has an invalid length. [ 931.998401][ T8142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15455'. [ 932.431255][ T8171] netlink: 'syz.3.15470': attribute type 21 has an invalid length. [ 932.441434][ T8173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.454801][ T8171] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15470'. [ 932.468353][ T8171] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15470'. [ 932.691553][ T8187] netlink: 'syz.0.15477': attribute type 1 has an invalid length. [ 932.714683][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15477'. [ 932.825456][ T8198] nftables ruleset with unbound chain [ 934.125791][ T8293] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 934.395401][ T8312] netlink: 'syz.3.15533': attribute type 1 has an invalid length. [ 934.415461][ T8312] netlink: 228 bytes leftover after parsing attributes in process `syz.3.15533'. [ 935.007021][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15551'. [ 935.019453][ T6075] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 935.197439][ T6075] usb 2-1: config 0 has an invalid interface number: 32 but max is 2 [ 935.219604][ T6075] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.240473][ T6075] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 935.265559][ T6075] usb 2-1: config 0 has no interface number 0 [ 935.271860][ T6075] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 935.271895][ T6075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.296088][ T6075] usb 2-1: config 0 descriptor?? [ 935.536173][ T6075] usb 2-1: USB disconnect, device number 23 [ 935.769745][ T8417] netlink: 'syz.2.15573': attribute type 10 has an invalid length. [ 935.889870][ T8425] netlink: zone id is out of range [ 935.925583][ T8425] netlink: set zone limit has 4 unknown bytes [ 936.174332][ T8440] dvmrp0: entered allmulticast mode [ 936.366715][ T8456] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 937.289540][ T8522] netlink: 'syz.3.15625': attribute type 33 has an invalid length. [ 937.299613][ T8522] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15625'. [ 937.431688][ T8532] netlink: 'syz.1.15630': attribute type 1 has an invalid length. [ 937.826532][ T8558] 9p: Bad value for 'port' [ 938.401322][ T8595] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15660'. [ 938.582330][ T8609] libceph: secret too big 289 [ 938.807912][ T8623] (syz.0.15669,8623,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 938.835966][ T8623] (syz.0.15669,8623,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 938.856613][ T8623] (syz.0.15669,8623,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 938.889517][ T8623] (syz.0.15669,8623,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 938.903523][ T8628] usb usb8: usbfs: process 8628 (syz.3.15672) did not claim interface 0 before use [ 939.524935][ T8663] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15688'. [ 939.591181][ T8671] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15690'. [ 940.438246][ T8722] binder: 8720:8722 ioctl c0306201 2000000001c0 returned -22 [ 941.171677][ T8762] netlink: 'syz.3.15735': attribute type 2 has an invalid length. [ 941.467944][ T8779] netlink: 'syz.2.15743': attribute type 1 has an invalid length. [ 941.478830][ T8780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 941.510940][ T8782] netlink: 'syz.1.15745': attribute type 63 has an invalid length. [ 941.523847][ T8782] netlink: 5 bytes leftover after parsing attributes in process `syz.1.15745'. [ 941.822504][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15754'. [ 942.101280][ T8818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.322693][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 942.483618][ T8840] QAT: failed to copy from user cfg_data. [ 942.492080][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 942.502218][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 942.526712][ T9] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 942.545495][ T9] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 942.561435][ T9] usb 2-1: Product: syz [ 942.576618][ T9] usb 2-1: Manufacturer: syz [ 942.583703][ T9] usb 2-1: SerialNumber: syz [ 942.642653][ T8851] netlink: 'syz.3.15776': attribute type 2 has an invalid length. [ 942.681777][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15777'. [ 942.822487][ T8865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15781'. [ 942.840740][ T9] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 942.866221][ T9] usb 2-1: Handspring Visor / Palm OS: port 76, is for unknown use [ 942.883890][ T9] usb 2-1: Handspring Visor / Palm OS: port 111, is for HotSync use [ 942.902958][ T9] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 943.055704][ T9] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 943.077179][ T9] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 943.101717][ T9] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 943.117365][ T9] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 943.131047][ T9] usb 2-1: USB disconnect, device number 24 [ 943.145521][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 943.180633][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 943.201680][ T9] visor 2-1:1.0: device disconnected [ 943.366713][ T8913] netlink: 'syz.3.15793': attribute type 11 has an invalid length. [ 943.775527][ T6075] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 943.811904][ T8946] netlink: 'syz.1.15808': attribute type 16 has an invalid length. [ 943.820582][ T8946] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.15808'. [ 943.956692][ T6075] usb 4-1: Using ep0 maxpacket: 16 [ 943.975603][ T6075] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 944.002145][ T6075] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 944.043554][ T6075] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 944.067928][ T6075] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 944.090596][ T6075] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 944.103532][ T6075] usb 4-1: config 1 interface 0 has no altsetting 0 [ 944.110544][ T6075] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 944.120471][ T6075] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.142090][ T6075] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 944.279309][ T8975] netlink: 'syz.2.15819': attribute type 64 has an invalid length. [ 944.313605][ T8975] netlink: 'syz.2.15819': attribute type 4 has an invalid length. [ 944.327963][ T8975] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15819'. [ 944.368111][ T6075] scsi host1: usb-storage 4-1:1.0 [ 944.415171][ T8989] program syz.0.15822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 944.589086][ T9] usb 4-1: USB disconnect, device number 6 [ 944.673562][ T9006] netlink: 'syz.2.15827': attribute type 25 has an invalid length. [ 945.171019][ T9052] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.15843'. [ 945.325922][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 945.407030][ T9069] netlink: 'syz.0.15850': attribute type 27 has an invalid length. [ 945.492006][ T9076] netlink: 'syz.0.15852': attribute type 46 has an invalid length. [ 945.508857][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 945.528247][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 945.552188][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.600553][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 945.680675][ T9087] random: crng reseeded on system resumption [ 945.955142][ T30] audit: type=1400 audit(908.928:234): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=9105 comm="syz.0.15864" [ 946.079024][ T9113] openvswitch: netlink: Key type 31 is not supported [ 946.390128][ T9135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15876'. [ 946.584700][ T9145] XFS (nbd3): SB validate failed with error -5. [ 946.749056][ T9] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 946.860299][ T9165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 946.966349][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 946.979957][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 946.998458][ T9] stv0680 2-1:4.0: last error: 86, command = 0x0 [ 947.023230][ T9] usb 2-1: USB disconnect, device number 25 [ 947.111586][ T9184] binder: 9182:9184 ioctl c018620c 200000000280 returned -1 [ 947.203990][ T9191] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15894'. [ 947.277856][ T9194] netlink: 'syz.3.15897': attribute type 64 has an invalid length. [ 947.286369][ T9194] netlink: 'syz.3.15897': attribute type 4 has an invalid length. [ 947.295125][ T9194] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15897'. [ 947.497686][ T9211] kAFS: unable to lookup cell '.,cL' [ 947.650616][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15905'. [ 947.676489][ T9220] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 947.706618][ T9226] netlink: 'syz.1.15909': attribute type 4 has an invalid length. [ 947.762806][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15909'. [ 948.096464][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15920'. [ 948.169199][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 948.240179][ T9265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15924'. [ 948.351236][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 948.365642][ T9] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 948.384593][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.414746][ T9] usb 3-1: Product: syz [ 948.419054][ T9] usb 3-1: Manufacturer: syz [ 948.426822][ T9] usb 3-1: SerialNumber: syz [ 948.643349][ T9293] netlink: 830 bytes leftover after parsing attributes in process `syz.3.15934'. [ 948.668032][ T9] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 948.722199][ T9] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 948.759820][ T9] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 948.883561][ T6075] usb 3-1: USB disconnect, device number 8 [ 948.919450][ T6075] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 948.955169][ T6075] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 948.968405][ T6075] visor 3-1:1.0: device disconnected [ 948.978132][ T9323] netlink: 204 bytes leftover after parsing attributes in process `syz.1.15942'. [ 949.174386][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 949.245253][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.257477][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.266670][ T9345] batman_adv: batadv0: Removing interface: vlan1 [ 949.306426][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15949'. [ 949.356588][ T9354] netlink: 'syz.1.15950': attribute type 6 has an invalid length. [ 949.489943][ T9360] sctp: [Deprecated]: syz.1.15952 (pid 9360) Use of int in maxseg socket option. [ 949.489943][ T9360] Use struct sctp_assoc_value instead [ 949.626390][ T9298] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 949.652782][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15957'. [ 950.352485][ T9425] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 950.780867][ T9454] tmpfs: Bad value for 'mpol' [ 951.039647][ T9471] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 951.100426][ T9474] netlink: 'syz.3.16000': attribute type 10 has an invalid length. [ 951.128592][ T9474] team0: Port device geneve0 added [ 951.134512][ T5908] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 951.151872][ T5908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.181038][ T5908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.207640][ T5908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.861772][ T9530] netlink: 'syz.2.16025': attribute type 28 has an invalid length. [ 951.972537][ T9539] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 952.551039][ T9580] netlink: 'syz.0.16045': attribute type 1 has an invalid length. [ 952.559140][ T9580] __nla_validate_parse: 3 callbacks suppressed [ 952.559159][ T9580] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16045'. [ 952.892205][ T9604] netlink: 'syz.3.16057': attribute type 1 has an invalid length. [ 953.037149][ T9611] netlink: 393 bytes leftover after parsing attributes in process `syz.1.16060'. [ 953.071224][ T9615] netlink: 'syz.3.16061': attribute type 1 has an invalid length. [ 953.316799][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16071'. [ 953.320433][ T9633] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16069'. [ 953.533258][ T9650] x_tables: unsorted entry at hook 2 [ 953.705808][ T9661] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 953.865980][ T9673] AppArmor: change_hat: Invalid input '' [ 954.904216][ T6075] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 955.101221][ T6075] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 955.125775][ T6075] usb 3-1: config 0 has no interface number 0 [ 955.135775][ T6075] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 955.153614][ T6075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.173715][ T6075] usb 3-1: Product: syz [ 955.178069][ T6075] usb 3-1: Manufacturer: syz [ 955.183089][ T6075] usb 3-1: SerialNumber: syz [ 955.191148][ T9767] netlink: 'syz.1.16124': attribute type 21 has an invalid length. [ 955.202287][ T6075] usb 3-1: config 0 descriptor?? [ 955.214917][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16124'. [ 955.437608][ T6075] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 955.473744][ T6075] usb 3-1: USB disconnect, device number 9 [ 955.714989][ T9805] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 955.799042][ T9811] IPv6: NLM_F_CREATE should be specified when creating new route [ 955.808104][ T9811] IPv6: NLM_F_REPLACE set, but no existing node found! [ 955.928254][ T9819] sg_write: data in/out 393439/136 bytes for SCSI command 0xc7-- guessing data in; [ 955.928254][ T9819] program syz.0.16141 not setting count and/or reply_len properly [ 956.052867][ T9826] netlink: 592 bytes leftover after parsing attributes in process `syz.3.16144'. [ 956.349312][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 956.518153][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 956.532747][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 956.545624][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 956.560285][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 956.571849][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 956.590172][ T9] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 956.602075][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.610223][ T9] usb 2-1: Product: syz [ 956.614567][ T9] usb 2-1: Manufacturer: syz [ 956.619223][ T9] usb 2-1: SerialNumber: syz [ 956.627812][ T9] usb 2-1: config 0 descriptor?? [ 956.644376][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input145 [ 956.684557][ T9875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.939602][ T9] usb 2-1: USB disconnect, device number 26 [ 957.155690][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16177'. [ 957.353731][ T9930] netlink: 'syz.3.16184': attribute type 2 has an invalid length. [ 957.361846][ T9930] netlink: 'syz.3.16184': attribute type 1 has an invalid length. [ 957.434733][ T9936] netlink: 260 bytes leftover after parsing attributes in process `syz.2.16187'. [ 957.719280][ T9954] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 957.738060][ T9954] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 957.748348][ T9954] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 957.760504][ T9954] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 957.804973][ T9959] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 957.807797][ T9960] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 1 [ 957.825316][ T9961] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 2 [ 957.841238][ T9962] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 3 [ 958.199201][ T9987] openvswitch: netlink: Duplicate key (type 21). [ 958.371742][T10000] netlink: 'syz.3.16216': attribute type 1 has an invalid length. [ 958.440156][T10005] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16218'. [ 958.546336][T10014] No source specified [ 958.589419][T10016] netlink: 'syz.2.16223': attribute type 1 has an invalid length. [ 958.964859][T10040] tmpfs: Unknown parameter 'func' [ 959.276458][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 959.448382][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 959.464629][ T9] usb 4-1: config 251 has an invalid interface number: 16 but max is 0 [ 959.483552][ T9] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 959.494234][T10081] tmpfs: Bad value for 'mpol' [ 959.524418][ T9] usb 4-1: config 251 has no interface number 0 [ 959.541669][ T9] usb 4-1: config 251 interface 16 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 959.557724][ T9] usb 4-1: config 251 interface 16 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 959.568268][ T9] usb 4-1: config 251 interface 16 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 959.581982][ T9] usb 4-1: config 251 interface 16 has no altsetting 0 [ 959.582847][T10084] netlink: 'syz.1.16253': attribute type 1 has an invalid length. [ 959.595780][ T9] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 959.617830][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.632453][ T9] usb 4-1: Product: syz [ 959.641419][ T9] usb 4-1: Manufacturer: syz [ 959.644737][T10084] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16253'. [ 959.656409][ T9] usb 4-1: SerialNumber: syz [ 959.938055][ T9] usb 4-1: USB disconnect, device number 7 [ 959.984191][T10115] exFAT-fs (nbd0): unable to read boot sector [ 960.003452][T10115] exFAT-fs (nbd0): failed to read boot sector [ 960.009721][T10115] exFAT-fs (nbd0): failed to recognize exfat type [ 960.236422][T10131] netlink: 872 bytes leftover after parsing attributes in process `syz.0.16269'. [ 960.265302][T10131] netlink: 872 bytes leftover after parsing attributes in process `syz.0.16269'. [ 960.678301][T10158] binder: 10157:10158 ioctl c00c620f 0 returned -14 [ 960.851775][T10174] netlink: zone id is out of range [ 960.857405][T10174] netlink: set zone limit has 8 unknown bytes [ 961.275492][T10202] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 961.590174][T10228] tmpfs: Bad value for 'mpol' [ 961.634767][T10233] netlink: 'syz.0.16312': attribute type 3 has an invalid length. [ 961.735612][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 961.906547][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 961.916629][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 961.935788][ T9] usb 2-1: config 179 has no interface number 0 [ 961.946864][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 961.975568][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 962.000833][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 962.021849][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 962.050416][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 962.084560][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.100129][T10259] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.16323'. [ 962.113509][T10216] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 962.124238][T10259] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 962.354631][ T6075] usb 2-1: USB disconnect, device number 27 [ 962.517846][T10297] netlink: 'syz.2.16335': attribute type 40 has an invalid length. [ 962.689589][T10309] netlink: 'syz.2.16340': attribute type 1 has an invalid length. [ 962.697874][T10309] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16340'. [ 962.922219][T10323] netlink: 'syz.0.16346': attribute type 2 has an invalid length. [ 962.948576][T10323] netlink: 228 bytes leftover after parsing attributes in process `syz.0.16346'. [ 963.737492][T10386] netlink: 'syz.1.16372': attribute type 15 has an invalid length. [ 964.128012][T10416] affs: No valid root block on device nbd2 [ 964.374792][ T30] audit: type=1400 audit(926.158:235): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=10432 comm="syz.0.16393" [ 964.469955][T10439] CIFS: VFS: Malformed UNC in devname [ 964.670711][T10455] netlink: 'syz.0.16402': attribute type 2 has an invalid length. [ 964.699651][T10455] netlink: 'syz.0.16402': attribute type 1 has an invalid length. [ 965.207514][T10495] befs: (nbd0): No write support. Marking filesystem read-only [ 966.186052][T10574] overlayfs: unescaped trailing colons in lowerdir mount option. [ 966.257584][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 966.314378][T10582] overlayfs: conflicting options: userxattr,redirect_dir=on [ 966.332378][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 966.506712][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 966.518404][ T24] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 966.534339][ T24] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 966.555273][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 966.575872][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 966.591485][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 966.605912][ T24] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 966.626007][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.642109][ T24] usb 3-1: Product: syz [ 966.647588][ T24] usb 3-1: Manufacturer: syz [ 966.658347][ T24] usb 3-1: SerialNumber: syz [ 966.673389][ T24] usb 3-1: config 0 descriptor?? [ 966.698098][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 966.709250][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 966.721607][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input146 [ 966.974792][ T24] usb 3-1: USB disconnect, device number 10 [ 967.207404][T10649] netlink: 'syz.3.16482': attribute type 21 has an invalid length. [ 967.218259][T10649] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16482'. [ 967.282173][T10653] befs: (nbd3): No write support. Marking filesystem read-only [ 967.328768][T10655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 967.426933][T10661] cgroup: Invalid name [ 968.378631][T10729] netlink: 180 bytes leftover after parsing attributes in process `syz.2.16523'. [ 969.420396][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16556'. [ 969.430580][T10804] netlink: 480 bytes leftover after parsing attributes in process `syz.2.16556'. [ 969.442125][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16556'. [ 969.916661][T10845] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 969.927985][T10845] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 969.992259][T10850] netlink: 'syz.2.16576': attribute type 6 has an invalid length. [ 970.057933][T10853] netlink: 9 bytes leftover after parsing attributes in process `syz.3.16577'. [ 970.072624][T10853] 0: renamed from hsr_slave_1 [ 970.083654][T10853] 0: entered allmulticast mode [ 970.095060][T10853] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 970.254672][T10865] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 970.672549][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 970.834534][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 970.843849][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 970.862833][ T9] usb 3-1: config 0 has no interface number 0 [ 970.875994][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 970.899353][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 970.923562][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 970.941581][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 970.958201][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 970.971475][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 970.980982][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.993101][ T9] usb 3-1: config 0 descriptor?? [ 971.019147][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 971.231189][T10879] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 971.243734][ T24] usb 3-1: USB disconnect, device number 11 [ 971.255293][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 971.420862][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 971.442478][ T6075] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 971.581224][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 971.588381][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 971.597263][ T9] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 971.607410][ T9] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 971.617749][ T6075] usb 2-1: unable to get BOS descriptor or descriptor too short [ 971.622332][ T9] usb 4-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=71.88 [ 971.627535][ T6075] usb 2-1: not running at top speed; connect to a high speed hub [ 971.634910][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.646841][ T6075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 971.651442][ T9] usb 4-1: Product: syz [ 971.665730][ T6075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 971.666399][ T9] usb 4-1: Manufacturer: syz [ 971.677606][ T6075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 971.682448][ T9] usb 4-1: SerialNumber: syz [ 971.693780][ T6075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 971.707185][ T6075] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x14, changing to 0x4 [ 971.723088][ T6075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 971.735111][ T6075] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 971.744453][ T6075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.752580][ T6075] usb 2-1: Product: syz [ 971.756898][ T6075] usb 2-1: Manufacturer: syz [ 971.761564][ T6075] usb 2-1: SerialNumber: syz [ 971.769355][ T6075] usb 2-1: config 0 descriptor?? [ 971.776280][T10937] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 971.791961][ T6075] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 971.908038][ T6075] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 971.940282][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 971.949676][ T9] usb 4-1: USB disconnect, device number 8 [ 972.014214][ T6075] usb 2-1: USB disconnect, device number 28 [ 972.045488][T10979] udevd[10979]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.175373][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16618'. [ 972.498370][T11010] netlink: 'syz.2.16627': attribute type 4 has an invalid length. [ 973.281325][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 973.456140][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 973.480637][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 973.524833][ T9] usb 4-1: config 220 has no interface number 2 [ 973.532110][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 973.558159][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 973.577888][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 973.586771][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 973.605370][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 973.620029][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.639521][ T9] usb 4-1: Product: syz [ 973.654544][ T9] usb 4-1: Manufacturer: syz [ 973.660883][ T9] usb 4-1: SerialNumber: syz [ 973.878502][T11103] program syz.0.16663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 973.909923][ T9] usb 4-1: selecting invalid altsetting 0 [ 973.934358][ T9] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 973.950180][ T9] uvcvideo 4-1:220.0: No valid video chain found. [ 973.971141][ T9] usb 4-1: selecting invalid altsetting 0 [ 973.989310][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 974.027051][ T9] usb 4-1: USB disconnect, device number 9 [ 974.158538][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16668'. [ 974.342330][ T30] audit: type=1326 audit(935.494:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.1.16673" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2b0f9c799 code=0x0 [ 974.397923][T11139] netlink: 'syz.2.16674': attribute type 2 has an invalid length. [ 974.406079][T11139] netlink: 244 bytes leftover after parsing attributes in process `syz.2.16674'. [ 974.729694][T11154] netlink: 'syz.0.16680': attribute type 16 has an invalid length. [ 974.739222][T11154] netlink: 'syz.0.16680': attribute type 25 has an invalid length. [ 974.750123][T11154] netlink: 64094 bytes leftover after parsing attributes in process `syz.0.16680'. [ 974.865993][T11165] netlink: 'syz.0.16684': attribute type 2 has an invalid length. [ 974.875102][T11165] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16684'. [ 975.150992][T11184] vivid-001: disconnect [ 975.195358][T11183] vivid-001: reconnect [ 975.208445][T11186] tipc: Enabling of bearer rejected, failed to enable media [ 975.678929][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16708'. [ 976.628392][T11274] sp0: Synchronizing with TNC [ 977.193088][ T6075] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 977.207739][ T6075] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 977.216202][ T6075] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 977.225426][ T6075] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 977.235163][ T6075] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 977.248835][ T6075] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 977.260828][ T6075] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 977.269289][ T6075] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 977.277149][ T6075] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 977.285507][ T6075] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 977.304125][ T6075] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 977.539010][T11331] fido_id[11331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 978.031988][T11366] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16760'. [ 978.052516][T11366] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16760'. [ 978.310289][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16769'. [ 978.615936][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 978.786709][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 978.794961][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 978.806634][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.817282][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 978.829121][ T9] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 978.839048][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.847604][ T9] usb 3-1: Product: syz [ 978.852150][ T9] usb 3-1: Manufacturer: syz [ 978.857235][ T9] usb 3-1: SerialNumber: syz [ 979.311578][ T9] usb 3-1: cannot find UAC_HEADER [ 979.350922][T11449] netlink: 'syz.0.16792': attribute type 1 has an invalid length. [ 979.359606][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16792'. [ 979.370501][T11449] netlink: 658 bytes leftover after parsing attributes in process `syz.0.16792'. [ 979.383630][T11449] netlink: 'syz.0.16792': attribute type 1 has an invalid length. [ 979.425849][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 979.445478][ T9] usb 3-1: USB disconnect, device number 12 [ 979.514902][ T4305] udevd[4305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.530933][ T6075] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 979.547043][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 979.572977][T11464] option changes via remount are deprecated (pid=11463 comm=syz.0.16795) [ 979.645357][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 979.658303][T11472] sp0: Synchronizing with TNC [ 979.716771][ T6075] usb 2-1: Using ep0 maxpacket: 8 [ 979.723572][ T6075] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 979.740029][ T6075] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 979.749336][ T6075] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 979.757477][ T6075] usb 2-1: Product: syz [ 979.762220][ T6075] usb 2-1: Manufacturer: syz [ 979.766959][ T6075] usb 2-1: SerialNumber: syz [ 979.834356][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 979.998726][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 979.999491][ T6075] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 980.014546][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.030886][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.041179][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 980.042988][ T6075] usb 2-1: Handspring Visor / Palm OS: port 138, is for unknown use [ 980.054375][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 980.071574][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.083545][ T6075] usb 2-1: Handspring Visor / Palm OS: port 172, is for unknown use [ 980.092112][ T6075] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 980.116283][ T9] usb 4-1: config 0 descriptor?? [ 980.125235][T11495] random: crng reseeded on system resumption [ 980.218448][ T6075] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 980.233545][ T6075] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 980.250181][ T6075] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 980.437622][ T6075] usb 2-1: USB disconnect, device number 29 [ 980.461138][ T6075] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 980.490462][ T6075] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 980.508865][ T6075] visor 2-1:1.0: device disconnected [ 980.605012][ T9] elecom 0003:056E:00FE.0003: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 980.784907][ T6075] usb 4-1: USB disconnect, device number 10 [ 981.819317][T11593] vivid-007: disconnect [ 981.830650][T11592] vivid-007: reconnect [ 982.187360][T11607] ALSA: mixer_oss: invalid OSS volume '' [ 982.582518][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16842'. [ 983.017115][T11657] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16853'. [ 983.034248][T11657] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16853'. [ 983.303090][T11675] hub 9-0:1.0: USB hub found [ 983.310619][T11675] hub 9-0:1.0: 1 port detected [ 983.396921][T11682] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16863'. [ 983.415879][T11682] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16863'. [ 983.454638][T11684] netlink: 'syz.1.16862': attribute type 10 has an invalid length. [ 983.485035][T11684] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16862'. [ 983.858003][T11713] nbd: must specify a device to reconfigure [ 983.867929][ T6075] kernel write not supported for file /input/event2 (pid: 6075 comm: kworker/1:6) [ 983.898851][T11717] IPVS: Error connecting to the multicast addr [ 984.362085][T11747] mkiss: ax0: crc mode is auto. [ 985.536065][T11843] mkiss: ax0: crc mode is auto. [ 985.684383][T11859] tipc: Enabling of bearer rejected, failed to enable media [ 985.800008][T11866] netlink: 'syz.2.16930': attribute type 4 has an invalid length. [ 985.815359][T11866] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16930'. [ 985.987156][T11877] netlink: 'syz.0.16934': attribute type 10 has an invalid length. [ 986.024702][T11877] team0: Port device dummy0 added [ 986.052481][T11877] netlink: 'syz.0.16934': attribute type 10 has an invalid length. [ 986.123524][T11877] team0: Port device dummy0 removed [ 986.190579][T11877] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 986.288360][T11890] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 986.641117][ T30] audit: type=1326 audit(946.990:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11910 comm="syz.0.16944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0999c799 code=0x0 [ 987.529814][T11952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16955'. [ 987.903740][T11972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16962'. [ 987.915089][T11972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16962'. [ 988.494633][T12008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16976'. [ 988.747128][T12025] netlink: 216 bytes leftover after parsing attributes in process `syz.3.16980'. [ 988.798714][T12025] netlink: 'syz.3.16980': attribute type 2 has an invalid length. [ 988.820250][T12027] pim6reg: entered allmulticast mode [ 988.849987][T12037] pim6reg: left allmulticast mode [ 989.563710][T12083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16997'. [ 990.309649][T12132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17010'. [ 990.346279][T12132] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17010'. [ 990.367769][T12132] netlink: 'syz.0.17010': attribute type 5 has an invalid length. [ 990.392382][T12132] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17010'. [ 990.447773][T12138] tmpfs: Bad value for 'nr_inodes' [ 990.644964][T12148] netlink: 184 bytes leftover after parsing attributes in process `syz.1.17015'. [ 990.692727][T12148] xt_socket: unknown flags 0xd0 [ 990.942030][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17020'. [ 991.023704][T12171] Invalid source name [ 991.868731][T12231] vimc link validate: Sensor B:src:256x16 (0x33424752, 6, 0, 2, 0) Raw Capture 1:snk:4096x2160 (0x30314742, 8, 0, 0, 0) [ 992.042747][T12239] netlink: 256 bytes leftover after parsing attributes in process `syz.3.17043'. [ 992.078829][T12239] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17043'. [ 993.942049][T12350] Bluetooth: MGMT ver 1.23 [ 994.115199][T12361] __nla_validate_parse: 5 callbacks suppressed [ 994.115222][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17091'. [ 994.726153][ T6050] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 994.900463][ T6050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.920166][ T6050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.930120][ T6050] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 994.939284][ T6050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.952172][ T6050] usb 4-1: config 0 descriptor?? [ 995.397703][ T6050] hkems 0003:2006:0118.0004: item fetching failed at offset 5/7 [ 995.409553][ T6050] hkems 0003:2006:0118.0004: parse failed [ 995.417262][ T6050] hkems 0003:2006:0118.0004: probe with driver hkems failed with error -22 [ 995.614800][ T6050] usb 4-1: USB disconnect, device number 11 [ 995.898251][T12467] Bluetooth: MGMT ver 1.23 [ 995.989692][T12474] block nbd0: NBD_DISCONNECT [ 997.089434][ T30] audit: type=1326 audit(956.777:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.3.17161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f372619c799 code=0x0 [ 998.125936][T12607] netlink: 'syz.0.17181': attribute type 1 has an invalid length. [ 998.130871][T12609] fuse: Bad value for 'group_id' [ 998.139826][T12607] nbd: error processing sock list [ 998.146721][T12609] fuse: Bad value for 'group_id' [ 998.459992][T12629] netlink: 252 bytes leftover after parsing attributes in process `syz.0.17188'. [ 998.510086][ T6050] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 998.681058][ T6050] usb 2-1: Using ep0 maxpacket: 8 [ 998.691159][ T6050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.714709][ T6050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.730801][ T6050] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 998.753241][ T6050] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 998.763071][ T6050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.784950][ T6050] usb 2-1: config 0 descriptor?? [ 998.895662][T12652] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 999.036107][T12660] support for the xor transformation has been removed. [ 999.246532][ T6050] hid_parser_main: 92 callbacks suppressed [ 999.246574][ T6050] kye 0003:0458:4018.0005: unknown main item tag 0x0 [ 999.272103][ T6050] kye 0003:0458:4018.0005: unknown main item tag 0x0 [ 999.291929][ T6050] kye 0003:0458:4018.0005: unknown main item tag 0x0 [ 999.303956][ T6050] kye 0003:0458:4018.0005: unknown main item tag 0x0 [ 999.319506][ T6050] kye 0003:0458:4018.0005: unknown main item tag 0x0 [ 999.349110][ T6050] kye 0003:0458:4018.0005: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.1-1/input0 [ 999.445473][T12689] autofs: Bad value for 'fd' [ 999.452831][ T6050] usb 2-1: USB disconnect, device number 30 [ 999.632419][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1000.188113][ T6050] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1000.274916][T12737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17221'. [ 1000.348476][ T6050] usb 3-1: Using ep0 maxpacket: 16 [ 1000.358305][ T6050] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1000.359631][ T6075] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1000.373066][ T6050] usb 3-1: config 1 has no interface number 0 [ 1000.382586][ T6050] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1000.396346][ T6050] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1000.406898][ T6050] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1000.417180][ T6050] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1000.434185][ T6050] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1000.450885][ T6050] usb 3-1: Product: syz [ 1000.455149][ T6050] usb 3-1: Manufacturer: syz [ 1000.460992][ T6050] usb 3-1: SerialNumber: syz [ 1000.472562][T12717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1000.487607][T12717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1000.553362][ T6075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.567587][ T6075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.578776][ T6075] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1000.588168][ T6075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.599648][ T6075] usb 2-1: config 0 descriptor?? [ 1000.620869][T12750] program syz.3.17226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1000.933705][T12717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1000.943351][T12717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1001.065368][ T6075] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 1001.072904][ T6075] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 1001.080451][ T6075] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 1001.087934][ T6075] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 1001.095371][ T6075] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 1001.111204][ T6075] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 1001.167162][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1001.181587][ T6050] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1001.194859][ T6050] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 1001.226830][ T6050] usb 3-1: USB disconnect, device number 13 [ 1001.272878][ T6075] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 9: -71 [ 1001.284839][ T6075] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -71 [ 1001.294870][ T6075] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 1001.304912][ T6075] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 1001.330307][ T6075] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71 [ 1001.355279][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1001.364526][ T6075] usb 2-1: USB disconnect, device number 31 [ 1001.872044][ T30] audit: type=1326 audit(961.240:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12791 comm="syz.2.17236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feeef19c799 code=0x0 [ 1002.303475][T12817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.364849][T12821] /dev/nullb0: Can't open blockdev [ 1002.540112][T12832] program syz.1.17255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1002.906895][T12863] netlink: 'syz.3.17265': attribute type 1 has an invalid length. [ 1002.915246][T12863] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.17265'. [ 1003.063234][T12875] netlink: 84 bytes leftover after parsing attributes in process `syz.1.17269'. [ 1003.219689][ T30] audit: type=1326 audit(962.503:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.0.17272" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd0999c799 code=0x0 [ 1003.880998][T12930] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.17285'. [ 1004.305267][T12956] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1005.073134][ T6050] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1005.276995][T13028] program syz.0.17316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1005.279212][ T6050] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1005.300317][ T6050] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1005.309691][ T6050] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.321288][ T6050] usb 3-1: config 220 has no interface number 2 [ 1005.328253][ T6050] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1005.342711][ T6050] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1005.349637][ T6050] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1005.370872][ T6050] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1005.383636][ T6050] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1005.406266][ T6050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.415188][ T6075] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1005.436070][ T6050] usb 3-1: Product: syz [ 1005.442947][ T6050] usb 3-1: Manufacturer: syz [ 1005.447711][ T6050] usb 3-1: SerialNumber: syz [ 1005.587681][ T6075] usb 2-1: Using ep0 maxpacket: 16 [ 1005.595546][ T6075] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 1005.618330][ T6075] usb 2-1: config 127 has no interface number 0 [ 1005.624755][ T6075] usb 2-1: config 127 interface 124 has no altsetting 0 [ 1005.642174][ T6075] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1005.652429][ T6075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.662547][ T6075] usb 2-1: Product: syz [ 1005.666784][ T6075] usb 2-1: Manufacturer: syz [ 1005.671495][ T6075] usb 2-1: SerialNumber: syz [ 1005.704275][ T6050] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1005.712373][ T6050] uvcvideo 3-1:220.0: No valid video chain found. [ 1005.720410][ T6050] usb 3-1: selecting invalid altsetting 0 [ 1005.751509][ T6050] usb 3-1: selecting invalid altsetting 0 [ 1005.763326][ T6050] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1005.775702][ T6050] usb 3-1: USB disconnect, device number 14 [ 1005.976121][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17327'. [ 1006.398568][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1006.560485][ T24] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1006.568858][ T24] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1006.580430][ T24] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.590880][ T6075] usb 2-1: reset high-speed USB device number 32 using dummy_hcd [ 1006.600397][ T24] usb 4-1: config 220 has no interface number 2 [ 1006.613111][ T24] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1006.626691][ T24] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1006.633528][ T24] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1006.640470][ T24] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1006.650208][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1006.659301][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.667404][ T24] usb 4-1: Product: syz [ 1006.671586][ T24] usb 4-1: Manufacturer: syz [ 1006.676186][ T24] usb 4-1: SerialNumber: syz [ 1006.697958][ T6050] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1006.790039][ T6075] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1006.798053][ T6075] usb 2-1: device firmware changed [ 1006.814667][ T6075] usb 2-1: USB disconnect, device number 32 [ 1006.858199][ T6050] usb 3-1: Using ep0 maxpacket: 16 [ 1006.865313][ T6050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.878023][ T6050] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1006.891129][ T6050] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1006.900228][ T6050] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.911271][ T6050] usb 3-1: config 0 descriptor?? [ 1006.931835][ T24] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1006.939476][ T24] uvcvideo 4-1:220.0: No valid video chain found. [ 1006.946379][ T24] usb 4-1: selecting invalid altsetting 0 [ 1006.960775][ T24] usb 4-1: selecting invalid altsetting 0 [ 1006.966750][ T24] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1006.979870][ T24] usb 4-1: USB disconnect, device number 12 [ 1007.363460][ T6050] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0 [ 1007.372440][ T6050] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0 [ 1007.379938][ T6050] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0 [ 1007.388170][ T6050] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0 [ 1007.395764][ T6050] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0 [ 1007.403269][ T6050] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0 [ 1007.410731][ T6050] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0 [ 1007.420870][ T6050] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0 [ 1007.430187][ T6050] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0 [ 1007.437715][ T6050] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0 [ 1007.459720][ T6050] pantherlord 0003:0810:0002.0007: hidraw0: USB HID v0.08 Device [HID 0810:0002] on usb-dummy_hcd.2-1/input0 [ 1007.475475][ T6050] pantherlord 0003:0810:0002.0007: no output reports found [ 1007.578422][ T6050] usb 3-1: USB disconnect, device number 15 [ 1007.881691][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17343'. [ 1007.895209][T13157] netlink: 'syz.3.17343': attribute type 2 has an invalid length. [ 1007.904964][T13157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17343'. [ 1008.554252][T13203] ALSA: seq fatal error: cannot create timer (-22) [ 1008.972489][T13232] netlink: zone id is out of range [ 1008.985596][T13232] netlink: zone id is out of range [ 1009.001110][T13232] netlink: zone id is out of range [ 1009.008947][T13232] netlink: zone id is out of range [ 1009.016081][T13232] netlink: zone id is out of range [ 1009.029672][T13232] netlink: zone id is out of range [ 1009.045817][T13232] netlink: zone id is out of range [ 1009.058927][T13232] netlink: zone id is out of range [ 1009.064862][T13232] netlink: zone id is out of range [ 1009.070409][T13232] netlink: zone id is out of range [ 1009.379208][T13262] program syz.3.17385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1009.397595][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17386'. [ 1009.876632][T13294] tipc: Started in network mode [ 1009.885566][T13294] tipc: Node identity , cluster identity 4711 [ 1010.101601][T13308] netlink: 'syz.3.17407': attribute type 3 has an invalid length. [ 1010.374024][T13328] program syz.3.17417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1010.650304][T13350] netlink: 'syz.2.17427': attribute type 4 has an invalid length. [ 1011.112795][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1011.251489][ T6075] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1011.422435][ T6075] usb 2-1: Using ep0 maxpacket: 8 [ 1011.438289][ T6075] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1011.449965][ T6075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.458535][ T6075] usb 2-1: Product: syz [ 1011.462807][ T6075] usb 2-1: Manufacturer: syz [ 1011.467731][ T6075] usb 2-1: SerialNumber: syz [ 1011.475709][ T6075] usb 2-1: config 0 descriptor?? [ 1011.675592][T13412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17452'. [ 1011.705434][ T6075] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1012.070128][T13431] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.17460'. [ 1012.137544][ T6075] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1012.155170][ T6075] usb 2-1: USB disconnect, device number 33 [ 1012.267022][ T6050] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1012.301141][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1012.367005][T13450] fido_id[13450]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1012.428161][ T6050] usb 4-1: Using ep0 maxpacket: 16 [ 1012.440231][ T6050] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1012.452607][ T6050] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1012.466517][ T6050] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1012.476165][ T6050] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.484527][ T6050] usb 4-1: Product: syz [ 1012.488796][ T6050] usb 4-1: Manufacturer: syz [ 1012.493743][ T6050] usb 4-1: SerialNumber: syz [ 1012.733919][ T6050] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1012.747463][ T6050] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1012.941846][ T6050] usb 4-1: 2:1 : can't get High Capability descriptor [ 1013.168365][ T6050] usb 4-1: USB disconnect, device number 13 [ 1013.392563][T13525] netlink: 'syz.1.17487': attribute type 4 has an invalid length. [ 1013.402867][T13525] netlink: 240 bytes leftover after parsing attributes in process `syz.1.17487'. [ 1013.524016][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17490'. [ 1013.816085][ T30] audit: type=1326 audit(972.410:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.3.17497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f372619c799 code=0x0 [ 1013.841553][T13550] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.17498'. [ 1014.917939][ T6050] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1015.014062][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1015.079949][ T6050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1015.091052][ T6050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.099661][ T6075] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1015.105291][ T6050] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1015.121433][ T6050] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1015.130470][ T6050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.142470][ T6050] usb 2-1: config 0 descriptor?? [ 1015.186829][ T9] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1015.194978][ T9] usb 4-1: config 0 has no interface number 0 [ 1015.201730][ T9] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1015.211879][ T9] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1015.225233][ T9] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1015.234452][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.242614][ T9] usb 4-1: Product: syz [ 1015.246794][ T9] usb 4-1: Manufacturer: syz [ 1015.251520][ T9] usb 4-1: SerialNumber: syz [ 1015.258937][ T9] usb 4-1: config 0 descriptor?? [ 1015.265763][T13616] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1015.275762][ T9] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1015.285062][ T6075] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1015.294420][ T6075] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.305648][ T9] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1015.315193][ T6075] usb 3-1: config 220 has no interface number 2 [ 1015.322378][ T6075] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1015.343719][ T6075] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1015.351140][ T6075] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1015.358435][ T6075] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1015.372257][ T6075] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1015.382154][ T6075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.390899][ T6075] usb 3-1: Product: syz [ 1015.395303][ T6075] usb 3-1: Manufacturer: syz [ 1015.400369][ T6075] usb 3-1: SerialNumber: syz [ 1015.598434][ T6050] sunplus 0003:04FC:05D8.0009: hidraw0: USB HID v0.07 Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 1015.638308][ T6075] usb 3-1: selecting invalid altsetting 0 [ 1015.658412][ T6075] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1015.666809][ T6075] uvcvideo 3-1:220.0: No valid video chain found. [ 1015.681653][ T6075] usb 3-1: selecting invalid altsetting 0 [ 1015.688682][ T6075] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1015.703684][ T6075] usb 3-1: USB disconnect, device number 16 [ 1015.725929][ T6076] usb 4-1: USB disconnect, device number 14 [ 1015.761980][ T6076] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1015.784151][ T6076] cyberjack 4-1:0.69: device disconnected [ 1015.814013][ T24] usb 2-1: USB disconnect, device number 34 [ 1016.517419][T13701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17537'. [ 1016.681772][ T6050] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1016.875471][ T6050] usb 2-1: Using ep0 maxpacket: 16 [ 1016.886490][ T6050] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1016.901336][ T6050] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.911722][ T6050] usb 2-1: Product: syz [ 1016.918414][ T6050] usb 2-1: Manufacturer: syz [ 1016.923282][ T6050] usb 2-1: SerialNumber: syz [ 1016.932887][ T6050] usb 2-1: config 0 descriptor?? [ 1016.945856][ T6050] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 1017.379017][ T6050] usb 2-1: clie_3_5_startup: get interface number bad return length: 0 [ 1017.409796][ T6050] visor 2-1:0.0: probe with driver visor failed with error -5 [ 1017.604970][ T6050] usb 2-1: USB disconnect, device number 35 [ 1017.924876][T13796] netlink: 332 bytes leftover after parsing attributes in process `syz.2.17570'. [ 1018.237335][T13811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17577'. [ 1018.433660][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17584'. [ 1018.659743][T13842] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.17591'. [ 1018.676848][T13842] bridge: RTM_NEWNEIGH with invalid ether address [ 1018.713029][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17592'. [ 1018.883493][ T24] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1019.055439][T13869] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.17602'. [ 1019.066943][ T24] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1019.078991][ T24] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1019.090674][ T24] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1019.112064][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1019.128152][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.147251][T13836] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1019.459940][T13891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17611'. [ 1019.473312][T13891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17611'. [ 1019.567159][T13897] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1019.809008][T13918] netlink: 763 bytes leftover after parsing attributes in process `syz.3.17624'. [ 1019.874243][T13923] netlink: 'syz.3.17625': attribute type 1 has an invalid length. [ 1020.038433][ T24] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1020.049453][ T24] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input148 [ 1020.097913][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1020.111079][ T24] usb 2-1: USB disconnect, device number 36 [ 1020.117075][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1020.230744][ T6050] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1020.394542][ T6050] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1020.408071][ T6050] usb 3-1: not running at top speed; connect to a high speed hub [ 1020.417396][ T6050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1020.429587][ T6050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 1020.440947][ T6050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 1020.452141][ T6050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1020.462286][ T6050] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1020.474065][ T6050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65535, setting to 64 [ 1020.489387][ T6050] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1020.498669][ T6050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.506738][ T6050] usb 3-1: Product: syz [ 1020.511117][ T6050] usb 3-1: Manufacturer: syz [ 1020.515769][ T6050] usb 3-1: SerialNumber: syz [ 1020.522986][ T6050] usb 3-1: config 0 descriptor?? [ 1020.529085][T13930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1020.536789][T13930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1020.548282][ T6050] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1020.628042][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1020.762636][ T6076] usb 3-1: USB disconnect, device number 17 [ 1020.810195][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1020.818828][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.832768][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.844971][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1020.857991][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1020.867317][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.873068][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1020.885583][ T10] usb 4-1: config 0 descriptor?? [ 1021.042779][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1021.049717][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.060759][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.070621][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1021.083639][ T24] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1021.092758][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.103874][ T24] usb 2-1: config 0 descriptor?? [ 1021.338858][ T10] hid_parser_main: 29 callbacks suppressed [ 1021.338881][ T10] magicmouse 0003:05AC:0323.000A: unknown main item tag 0x4 [ 1021.353265][ T10] magicmouse 0003:05AC:0323.000A: unknown main item tag 0x3 [ 1021.360867][ T10] magicmouse 0003:05AC:0323.000A: item fetching failed at offset 35/41 [ 1021.370535][ T10] magicmouse 0003:05AC:0323.000A: magicmouse hid parse failed [ 1021.379104][ T10] magicmouse 0003:05AC:0323.000A: probe with driver magicmouse failed with error -22 [ 1021.562150][ T6076] usb 4-1: USB disconnect, device number 15 [ 1021.596804][ T24] elecom 0003:056E:00FE.000B: unknown main item tag 0x4 [ 1021.611592][ T24] elecom 0003:056E:00FE.000B: unknown main item tag 0x6 [ 1021.618788][ T24] elecom 0003:056E:00FE.000B: unknown main item tag 0x5 [ 1021.631542][ T24] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 1021.638609][ T24] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 1021.647236][ T24] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 1021.654304][ T24] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 1021.661488][ T24] elecom 0003:056E:00FE.000B: unknown main item tag 0x0 [ 1021.673853][ T24] elecom 0003:056E:00FE.000B: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.1-1/input0 [ 1021.809774][ T6076] usb 2-1: USB disconnect, device number 37 [ 1022.529488][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1022.590635][T14057] trusted_key: encrypted_key: key user:syz not found [ 1022.689072][ T6076] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1022.864965][ T6076] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1022.879905][ T6076] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.890033][ T6076] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1022.903405][ T6076] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1022.910044][ T6076] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1022.919213][ T6076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.930394][ T6076] usb 3-1: config 0 descriptor?? [ 1023.144946][T14089] netlink: 80 bytes leftover after parsing attributes in process `syz.0.17661'. [ 1023.154222][T14089] netlink: 'syz.0.17661': attribute type 3 has an invalid length. [ 1023.383048][T14105] overlayfs: conflicting options: nfs_export=on,index=off [ 1023.407070][ T6076] aureal 0003:0755:2626.000C: hidraw0: USB HID v0.0d Device [HID 0755:2626] on usb-dummy_hcd.2-1/input0 [ 1023.632713][ T6076] usb 3-1: USB disconnect, device number 18 [ 1023.701776][ T30] audit: type=1326 audit(981.662:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.3.17654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372619c799 code=0x7fc00000 [ 1023.823159][T14139] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17671'. [ 1024.217274][T14162] overlayfs: failed to resolve '//file0': -2 [ 1024.871192][T14202] sp0: Synchronizing with TNC [ 1025.083720][T14218] ucma_write: process 9175 (syz.3.17698) changed security contexts after opening file descriptor, this is not allowed. [ 1025.369105][T14231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17703'. [ 1026.029878][T14281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17725'. [ 1026.088133][ T6076] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1026.232421][T14291] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1026.259202][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1026.269569][T14293] Invalid source name [ 1026.269936][ T6076] usb 3-1: Using ep0 maxpacket: 8 [ 1026.294481][ T6076] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1026.303153][ T6076] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1026.313318][ T6076] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1026.325853][ T6076] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1026.336419][ T6076] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1026.350292][ T6076] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1026.359448][ T6076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.374042][ T6076] usbtmc 3-1:16.0: bulk endpoints not found [ 1026.419399][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1026.431027][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.452182][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.475041][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1026.485307][ T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1026.504908][ T10] usb 4-1: Product: syz [ 1026.510830][ T10] usb 4-1: Manufacturer: syz [ 1026.549601][ T10] hub 4-1:4.0: USB hub found [ 1026.593951][ T6050] usb 3-1: USB disconnect, device number 19 [ 1026.759937][ T10] hub 4-1:4.0: 5 ports detected [ 1026.766664][ T10] hub 4-1:4.0: insufficient power available to use all downstream ports [ 1026.804436][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1026.814009][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1026.984268][ T10] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1026.991307][ T10] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1027.018662][ T10] usb 4-1: USB disconnect, device number 16 [ 1027.082236][ T6076] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 1027.244072][ T6076] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1027.252519][ T6076] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1027.262538][ T6076] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1027.272461][ T6076] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1027.282370][ T6076] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1027.295439][ T6076] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=61.23 [ 1027.304536][ T6076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.318901][ T6076] usbtmc 3-1:16.0: bulk endpoints not found [ 1027.331126][ T6076] ati_remote 3-1:16.0: ati_remote_probe: Unexpected endpoint_in [ 1027.533398][ T10] usb 3-1: USB disconnect, device number 20 [ 1027.724382][ T30] audit: type=1326 audit(985.432:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.1.17741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b0f9c799 code=0x7fc00000 [ 1027.831740][ T6076] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1028.012181][ T6076] usb 4-1: Using ep0 maxpacket: 16 [ 1028.019383][ T6076] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.031086][ T6076] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.042267][ T6076] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1028.051591][ T6076] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1028.062444][ T6076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.074580][ T6076] usb 4-1: config 0 descriptor?? [ 1028.149429][T14379] tmpfs: Invalid uid '0x00000000ffffffff' [ 1028.389528][T14390] Bluetooth: MGMT ver 1.23 [ 1028.533061][ T6076] hid_parser_main: 87 callbacks suppressed [ 1028.533087][ T6076] hid-corsair-void 0003:1B1C:1B25.000D: unknown main item tag 0x0 [ 1028.556810][ T6076] hid-corsair-void 0003:1B1C:1B25.000D: unknown main item tag 0x0 [ 1028.565402][ T6076] hid-corsair-void 0003:1B1C:1B25.000D: unknown main item tag 0x0 [ 1028.574503][ T6076] hid-corsair-void 0003:1B1C:1B25.000D: unknown main item tag 0x0 [ 1028.582603][ T6076] hid-corsair-void 0003:1B1C:1B25.000D: unknown main item tag 0x0 [ 1028.617311][ T6076] hid-corsair-void 0003:1B1C:1B25.000D: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.3-1/input0 [ 1028.714891][T14404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17758'. [ 1028.740932][ T24] usb 4-1: USB disconnect, device number 17 [ 1028.774500][ T6075] hid-corsair-void 0003:1B1C:1B25.000D: failed to request firmware (reason: -19) [ 1028.958651][T14427] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 1029.064917][T14435] overlayfs: failed to resolve './file1': -2 [ 1029.708966][T14483] program syz.3.17786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1029.784769][T14487] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1029.869212][T14493] IPVS: Error connecting to the multicast addr [ 1029.941685][T14497] xt_l2tp: invalid flags combination: 0 [ 1030.831568][T14559] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1031.391852][T14599] can0: slcan on pty22. [ 1031.468023][T14597] can0 (unregistered): slcan off pty22. [ 1031.601864][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17841'. [ 1031.927976][T14636] xt_bpf: check failed: parse error [ 1032.044619][T14642] comedi comedi1: das16m1: I/O port conflict (0x4e27,16) [ 1032.317323][T14663] sp0: Synchronizing with TNC [ 1032.388351][T14663] can0: slcan on ptm0. [ 1032.394892][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1032.448704][T14660] can0 (unregistered): slcan off ptm0. [ 1032.568689][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.595747][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1032.621954][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1032.631699][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.643886][ T10] usb 3-1: config 0 descriptor?? [ 1033.094904][ T10] hid (null): unknown global tag 0xd [ 1033.108637][ T10] kye 0003:0458:5019.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1033.119694][ T10] kye 0003:0458:5019.000E: unknown main item tag 0x0 [ 1033.127107][ T10] kye 0003:0458:5019.000E: unknown main item tag 0x0 [ 1033.134054][ T10] kye 0003:0458:5019.000E: unknown main item tag 0x0 [ 1033.140847][ T10] kye 0003:0458:5019.000E: unknown main item tag 0x0 [ 1033.147954][ T10] kye 0003:0458:5019.000E: unknown global tag 0xd [ 1033.156201][ T10] kye 0003:0458:5019.000E: item 0 1 1 13 parsing failed [ 1033.164016][ T10] kye 0003:0458:5019.000E: parse failed [ 1033.169761][ T10] kye 0003:0458:5019.000E: probe with driver kye failed with error -22 [ 1033.325455][ T6075] usb 3-1: USB disconnect, device number 21 [ 1033.626572][ T30] audit: type=1326 audit(990.952:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14693 comm="syz.1.17866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b0f9c799 code=0x7fc00000 [ 1033.689962][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1033.794296][ T30] audit: type=1326 audit(991.101:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14704 comm="syz.0.17871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0999c799 code=0x7fc00000 [ 1033.863866][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1033.883297][ T10] usb 4-1: config 0 has no interface number 0 [ 1033.893977][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.924895][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.944615][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1033.958143][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.972044][ T10] usb 4-1: config 0 descriptor?? [ 1034.177405][T14768] Cannot find set identified by id 99 to match [ 1034.333023][T14777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17896'. [ 1034.428274][ T10] prodikeys 0003:041E:2801.000F: item fetching failed at offset 5/7 [ 1034.439324][ T10] prodikeys 0003:041E:2801.000F: hid parse failed [ 1034.446002][ T10] prodikeys 0003:041E:2801.000F: probe with driver prodikeys failed with error -22 [ 1034.641247][ T6075] usb 4-1: USB disconnect, device number 18 [ 1034.909845][T14807] fuse: Invalid rootmode [ 1034.952517][T14809] devtmpfs: Too few inodes for current use [ 1035.328776][T14836] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17917'. [ 1035.558852][ T6075] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1035.676474][ T24] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1035.719150][ T6075] usb 4-1: Using ep0 maxpacket: 16 [ 1035.726090][ T6075] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1035.734454][ T6075] usb 4-1: config 0 has no interface number 0 [ 1035.740808][ T6075] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.751914][ T6075] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.762259][ T6075] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1035.771324][ T6075] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.781772][ T6075] usb 4-1: config 0 descriptor?? [ 1035.865987][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1035.877242][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.887128][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1035.896254][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.918927][ T24] hub 2-1:4.0: USB hub found [ 1036.109160][T14858] No buffer was provided with the request [ 1036.133212][ T24] hub 2-1:4.0: 2 ports detected [ 1036.146747][ T24] usb 2-1: selecting invalid altsetting 1 [ 1036.154346][ T24] hub 2-1:4.0: Using single TT (err -22) [ 1036.436845][ T6075] uclogic 0003:28BD:0071.0010: failed retrieving string descriptor #100: -71 [ 1036.452293][ T6075] uclogic 0003:28BD:0071.0010: failed retrieving pen parameters: -71 [ 1036.461768][ T6075] uclogic 0003:28BD:0071.0010: pen probing failed: -71 [ 1036.469535][ T6075] uclogic 0003:28BD:0071.0010: failed probing parameters: -71 [ 1036.477219][ T6075] uclogic 0003:28BD:0071.0010: probe with driver uclogic failed with error -71 [ 1036.502624][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1036.518452][ T6075] usb 4-1: USB disconnect, device number 19 [ 1036.579941][ T24] usb 2-1: USB disconnect, device number 38 [ 1036.658001][T14896] Zero length message leads to an empty skb [ 1036.810764][T14900] vivid-000: disconnect [ 1036.815743][T14899] vivid-000: reconnect [ 1037.168930][T14918] [U] [ 1037.334916][T14928] mkiss: ax0: crc mode is auto. [ 1038.085968][T14979] binder: 14978:14979 ioctl 4018620d 0 returned -22 [ 1038.277142][T14987] siw: device registration error -23 [ 1038.522904][T14997] netlink: 'syz.3.17975': attribute type 11 has an invalid length. [ 1039.175911][T15031] netlink: 64 bytes leftover after parsing attributes in process `syz.2.17989'. [ 1039.232963][T15032] net_ratelimit: 30 callbacks suppressed [ 1039.232985][T15032] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1040.018450][T15078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18007'. [ 1040.530866][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18022'. [ 1040.608389][T15117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18024'. [ 1041.136878][T15152] netlink: 128 bytes leftover after parsing attributes in process `syz.0.18042'. [ 1041.219714][T15158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18045'. [ 1041.953601][T15196] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18062'. [ 1042.183194][T15208] ptrace attach of "./syz-executor exec"[5993] was attempted by ""[15208] [ 1042.499951][T15235] fuse: Bad value for 'user_id' [ 1042.505020][T15235] fuse: Bad value for 'user_id' [ 1042.804430][T15257] comedi comedi3: mpc624: I/O port conflict (0x101,16) [ 1042.885807][T15263] binder: 15260:15263 ioctl c018620b 0 returned -14 [ 1042.994519][T15271] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1043.111387][T15276] support for cryptoloop has been removed. Use dm-crypt instead. [ 1043.814939][T15326] netlink: zone id is out of range [ 1043.836310][T15326] netlink: zone id is out of range [ 1043.844890][T15326] netlink: zone id is out of range [ 1043.883388][T15326] netlink: zone id is out of range [ 1043.909017][T15326] netlink: zone id is out of range [ 1043.938375][T15326] netlink: zone id is out of range [ 1043.956977][T15326] netlink: zone id is out of range [ 1043.981934][T15326] netlink: zone id is out of range [ 1044.012677][T15326] netlink: zone id is out of range [ 1044.482946][T15363] sp0: Synchronizing with TNC [ 1045.301802][T15419] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18159'. [ 1045.475774][T15425] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.18162'. [ 1045.647327][T15437] sp0: Synchronizing with TNC [ 1045.674852][T15437] sp0: Found TNC [ 1045.696869][T15434] [U] ` [ 1046.388411][T15489] ================================================================== [ 1046.396603][T15489] BUG: KASAN: use-after-free in fuse_copy_do+0x193/0x380 [ 1046.403702][T15489] Write of size 2 at addr ffff8880645f2fff by task syz.1.18185/15489 [ 1046.411793][T15489] [ 1046.414162][T15489] CPU: 0 UID: 0 PID: 15489 Comm: syz.1.18185 Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.414198][T15489] Tainted: [L]=SOFTLOCKUP [ 1046.414207][T15489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1046.414222][T15489] Call Trace: [ 1046.414232][T15489] [ 1046.414242][T15489] dump_stack_lvl+0xe8/0x150 [ 1046.414278][T15489] print_report+0xba/0x230 [ 1046.414325][T15489] ? fuse_copy_do+0x193/0x380 [ 1046.414353][T15489] kasan_report+0x117/0x150 [ 1046.414385][T15489] ? fuse_copy_do+0x193/0x380 [ 1046.414416][T15489] kasan_check_range+0x264/0x2c0 [ 1046.414445][T15489] ? fuse_copy_do+0x193/0x380 [ 1046.414472][T15489] __asan_memcpy+0x40/0x70 [ 1046.414496][T15489] fuse_copy_do+0x193/0x380 [ 1046.414527][T15489] fuse_copy_folio+0xefc/0x1b00 [ 1046.414555][T15489] ? __folio_batch_add_and_move+0x78b/0xc50 [ 1046.414597][T15489] ? filemap_add_folio+0x356/0x530 [ 1046.414629][T15489] fuse_dev_do_write+0x2b9d/0x4060 [ 1046.414672][T15489] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 1046.414707][T15489] ? aa_file_perm+0x192/0x15e0 [ 1046.414742][T15489] ? aa_file_perm+0x50e/0x15e0 [ 1046.414771][T15489] ? aa_file_perm+0x192/0x15e0 [ 1046.414805][T15489] ? __pfx___futex_wait+0x10/0x10 [ 1046.414828][T15489] ? __pfx_aa_file_perm+0x10/0x10 [ 1046.414856][T15489] ? __pfx_futex_wake_mark+0x10/0x10 [ 1046.414883][T15489] fuse_dev_write+0x177/0x220 [ 1046.414910][T15489] ? __pfx_fuse_dev_write+0x10/0x10 [ 1046.414941][T15489] ? bpf_lsm_file_permission+0x9/0x20 [ 1046.414969][T15489] ? security_file_permission+0x75/0x260 [ 1046.415054][T15489] vfs_write+0x61d/0xb90 [ 1046.415086][T15489] ? __pfx_vfs_write+0x10/0x10 [ 1046.415118][T15489] ? __fget_files+0x2a/0x420 [ 1046.415146][T15489] ksys_write+0x150/0x270 [ 1046.415174][T15489] ? __pfx_ksys_write+0x10/0x10 [ 1046.415206][T15489] do_syscall_64+0x14d/0xf80 [ 1046.415235][T15489] ? trace_irq_disable+0x3b/0x150 [ 1046.415257][T15489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.415279][T15489] ? clear_bhb_loop+0x40/0x90 [ 1046.415303][T15489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.415326][T15489] RIP: 0033:0x7fc2b0f9c799 [ 1046.415346][T15489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.415366][T15489] RSP: 002b:00007fc2b1f0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1046.415389][T15489] RAX: ffffffffffffffda RBX: 00007fc2b1215fa0 RCX: 00007fc2b0f9c799 [ 1046.415406][T15489] RDX: 000000000000002a RSI: 0000200000000080 RDI: 0000000000000003 [ 1046.415420][T15489] RBP: 00007fc2b1032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1046.415434][T15489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.415448][T15489] R13: 00007fc2b1216038 R14: 00007fc2b1215fa0 R15: 00007ffc548311b8 [ 1046.415473][T15489] [ 1046.415481][T15489] [ 1046.692520][T15489] The buggy address belongs to the physical page: [ 1046.698957][T15489] page: refcount:3 mapcount:0 mapping:ffff88807a7f4820 index:0x7 pfn:0x645f2 [ 1046.707751][T15489] memcg:ffff888034346600 [ 1046.712010][T15489] aops:empty_aops ino:1 dentry name(?):"/" [ 1046.717939][T15489] flags: 0xfff00000000005(locked|referenced|node=0|zone=1|lastcpupid=0x7ff) [ 1046.726647][T15489] raw: 00fff00000000005 0000000000000000 dead000000000122 ffff88807a7f4820 [ 1046.735248][T15489] raw: 0000000000000007 0000000000000000 00000003ffffffff ffff888034346600 [ 1046.743842][T15489] page dumped because: kasan: bad access detected [ 1046.750267][T15489] page_owner tracks the page as allocated [ 1046.755990][T15489] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 15489, tgid 15488 (syz.1.18185), ts 1046388051807, free_ts 993882178068 [ 1046.774075][T15489] post_alloc_hook+0x231/0x280 [ 1046.778867][T15489] get_page_from_freelist+0x23a1/0x2440 [ 1046.784448][T15489] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1046.790278][T15489] alloc_pages_mpol+0x232/0x4a0 [ 1046.795149][T15489] alloc_pages_noprof+0xa8/0x190 [ 1046.800112][T15489] folio_alloc_noprof+0x1e/0x30 [ 1046.804981][T15489] filemap_alloc_folio_noprof+0x111/0x470 [ 1046.810717][T15489] __filemap_get_folio_mpol+0x3fc/0xb00 [ 1046.816278][T15489] fuse_dev_do_write+0x298b/0x4060 [ 1046.821417][T15489] fuse_dev_write+0x177/0x220 [ 1046.826108][T15489] vfs_write+0x61d/0xb90 [ 1046.830368][T15489] ksys_write+0x150/0x270 [ 1046.834715][T15489] do_syscall_64+0x14d/0xf80 [ 1046.839333][T15489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.845242][T15489] page last free pid 12118 tgid 12118 stack trace: [ 1046.851752][T15489] free_unref_folios+0xd71/0x1530 [ 1046.856794][T15489] folios_put_refs+0x9ff/0xb40 [ 1046.861605][T15489] shmem_undo_range+0x52c/0x1660 [ 1046.866556][T15489] shmem_evict_inode+0x289/0xae0 [ 1046.871510][T15489] evict+0x61e/0xb10 [ 1046.875432][T15489] __dentry_kill+0x1a2/0x5e0 [ 1046.880046][T15489] finish_dput+0xc9/0x480 [ 1046.884389][T15489] __fput+0x691/0xa70 [ 1046.888382][T15489] task_work_run+0x1d9/0x270 [ 1046.892980][T15489] do_exit+0x926/0x2580 [ 1046.897165][T15489] do_group_exit+0x21b/0x2d0 [ 1046.901770][T15489] get_signal+0x1284/0x1330 [ 1046.906288][T15489] arch_do_signal_or_restart+0xbc/0x830 [ 1046.911847][T15489] irqentry_exit+0x188/0x700 [ 1046.916453][T15489] asm_exc_page_fault+0x26/0x30 [ 1046.921321][T15489] [ 1046.923656][T15489] Memory state around the buggy address: [ 1046.929296][T15489] ffff8880645f2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.937371][T15489] ffff8880645f2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.945462][T15489] >ffff8880645f3000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1046.953530][T15489] ^ [ 1046.957610][T15489] ffff8880645f3080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1046.965688][T15489] ffff8880645f3100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1046.973762][T15489] ================================================================== [ 1047.048923][T15489] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1047.056272][T15489] CPU: 0 UID: 0 PID: 15489 Comm: syz.1.18185 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.067329][T15489] Tainted: [L]=SOFTLOCKUP [ 1047.071679][T15489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1047.081770][T15489] Call Trace: [ 1047.085092][T15489] [ 1047.088049][T15489] vpanic+0x56c/0xa60 [ 1047.092091][T15489] ? __pfx_vpanic+0x10/0x10 [ 1047.096636][T15489] ? __pfx___schedule+0x10/0x10 [ 1047.101538][T15489] panic+0xc5/0xd0 [ 1047.105308][T15489] ? __pfx_panic+0x10/0x10 [ 1047.109763][T15489] ? preempt_schedule_thunk+0x16/0x30 [ 1047.115176][T15489] ? fuse_copy_do+0x193/0x380 [ 1047.119920][T15489] check_panic_on_warn+0x89/0xb0 [ 1047.124892][T15489] ? fuse_copy_do+0x193/0x380 [ 1047.129613][T15489] end_report+0x73/0x180 [ 1047.133936][T15489] ? fuse_copy_do+0x193/0x380 [ 1047.138664][T15489] kasan_report+0x128/0x150 [ 1047.143218][T15489] ? fuse_copy_do+0x193/0x380 [ 1047.147952][T15489] kasan_check_range+0x264/0x2c0 [ 1047.152938][T15489] ? fuse_copy_do+0x193/0x380 [ 1047.157672][T15489] __asan_memcpy+0x40/0x70 [ 1047.162136][T15489] fuse_copy_do+0x193/0x380 [ 1047.166690][T15489] fuse_copy_folio+0xefc/0x1b00 [ 1047.171584][T15489] ? __folio_batch_add_and_move+0x78b/0xc50 [ 1047.177525][T15489] ? filemap_add_folio+0x356/0x530 [ 1047.182688][T15489] fuse_dev_do_write+0x2b9d/0x4060 [ 1047.187856][T15489] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 1047.193369][T15489] ? aa_file_perm+0x192/0x15e0 [ 1047.198183][T15489] ? aa_file_perm+0x50e/0x15e0 [ 1047.202986][T15489] ? aa_file_perm+0x192/0x15e0 [ 1047.207802][T15489] ? __pfx___futex_wait+0x10/0x10 [ 1047.212864][T15489] ? __pfx_aa_file_perm+0x10/0x10 [ 1047.217930][T15489] ? __pfx_futex_wake_mark+0x10/0x10 [ 1047.223259][T15489] fuse_dev_write+0x177/0x220 [ 1047.227995][T15489] ? __pfx_fuse_dev_write+0x10/0x10 [ 1047.233249][T15489] ? bpf_lsm_file_permission+0x9/0x20 [ 1047.238755][T15489] ? security_file_permission+0x75/0x260 [ 1047.244430][T15489] vfs_write+0x61d/0xb90 [ 1047.248724][T15489] ? __pfx_vfs_write+0x10/0x10 [ 1047.253528][T15489] ? __fget_files+0x2a/0x420 [ 1047.258167][T15489] ksys_write+0x150/0x270 [ 1047.262544][T15489] ? __pfx_ksys_write+0x10/0x10 [ 1047.267442][T15489] do_syscall_64+0x14d/0xf80 [ 1047.272073][T15489] ? trace_irq_disable+0x3b/0x150 [ 1047.277132][T15489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.283239][T15489] ? clear_bhb_loop+0x40/0x90 [ 1047.287960][T15489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.293896][T15489] RIP: 0033:0x7fc2b0f9c799 [ 1047.298345][T15489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.318002][T15489] RSP: 002b:00007fc2b1f0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1047.326470][T15489] RAX: ffffffffffffffda RBX: 00007fc2b1215fa0 RCX: 00007fc2b0f9c799 [ 1047.334488][T15489] RDX: 000000000000002a RSI: 0000200000000080 RDI: 0000000000000003 [ 1047.342501][T15489] RBP: 00007fc2b1032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1047.350530][T15489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.358549][T15489] R13: 00007fc2b1216038 R14: 00007fc2b1215fa0 R15: 00007ffc548311b8 [ 1047.366566][T15489] [ 1047.370221][T15489] Kernel Offset: disabled [ 1047.374607][T15489] Rebooting in 86400 seconds..