last executing test programs: 3m56.393079585s ago: executing program 2 (id=13515): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) 3m56.29543924s ago: executing program 2 (id=13520): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000240)={0x0, 0x7, 0x5, 0x100, 0x9, 0xea, 0x232}) 3m56.16635946s ago: executing program 2 (id=13526): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x300, 0x300, 0x47425247}}) 3m56.063908202s ago: executing program 2 (id=13530): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47bfff7, 0x41e20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 3m55.97686761s ago: executing program 2 (id=13533): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0x40047459, 0x0) 3m55.887342716s ago: executing program 2 (id=13536): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000026000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x8040) 3m39.777444634s ago: executing program 32 (id=13536): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000026000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x8040) 2m37.171938065s ago: executing program 3 (id=15979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x80) 2m37.032059137s ago: executing program 3 (id=15982): r0 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000c40)={0xf, 0x1, 0x0, "7deb91d437e2dd6fc1432eea703c0bf501ac5a36ff3c7829c2779640450064eb", 0x38303553}) 2m36.985083187s ago: executing program 3 (id=15983): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m35.313078904s ago: executing program 3 (id=15993): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r0, 0x0, &(0x7f0000000140)) 2m35.258481808s ago: executing program 3 (id=15994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x8404) 2m35.209500399s ago: executing program 3 (id=15996): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m19.139923709s ago: executing program 33 (id=15996): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 3.792504859s ago: executing program 4 (id=19443): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf25130000000400138008000100dd"], 0x20}, 0x1, 0x0, 0x0, 0x60000090}, 0x0) 3.666335396s ago: executing program 4 (id=19450): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) 3.529311091s ago: executing program 4 (id=19455): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.328400253s ago: executing program 4 (id=19461): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x1a8, 0x8, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0xfffffffe, 0x0, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0xfffffffe, 0x2], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0xfffffffe], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x2000], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x40, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x34, 0x12c0a2) ioctl$LOOP_GET_STATUS(r0, 0xc0c0128e, &(0x7f0000000380)) 3.327207703s ago: executing program 4 (id=19462): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d042fc500000000000109022400010000000109040000010300030009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000107"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.553357606s ago: executing program 1 (id=19500): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) 1.22047187s ago: executing program 5 (id=19506): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x2400, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x62}, {0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x3}, {0x7e3}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 1.121156061s ago: executing program 5 (id=19508): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 1.09426409s ago: executing program 5 (id=19509): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x34d3542e, 0xfffffffe, 0x80000}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) 953.006167ms ago: executing program 5 (id=19512): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/35, 0x23}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x4, 0x2120, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 745.80541ms ago: executing program 5 (id=19523): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000001280)=0x8123) ioctl$USBDEVFS_RESET(r0, 0x5514) 674.818038ms ago: executing program 0 (id=19516): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 662.512926ms ago: executing program 5 (id=19517): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "7af07035"}]}}, 0x0}, 0x0) 594.041371ms ago: executing program 1 (id=19518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) 537.328507ms ago: executing program 0 (id=19519): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd800ff00000000000010000000040100"}) 478.724633ms ago: executing program 0 (id=19520): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x80, 0x4) 471.843642ms ago: executing program 1 (id=19521): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="a156c8973b36f0f98a5b48c3d4a39c3a16bdd3e500cdb9bb98794ff244ae8012787bd934d679f552583af3903ec30918042e9c4a556513e46a590220b95c526b41", 0x41) 414.67145ms ago: executing program 0 (id=19522): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000100)) 396.31851ms ago: executing program 1 (id=19524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) 304.182799ms ago: executing program 0 (id=19525): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) munmap(&(0x7f00001b5000/0x3000)=nil, 0x3000) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 284.592215ms ago: executing program 1 (id=19526): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) 177.089625ms ago: executing program 1 (id=19527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a2901010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 137.540036ms ago: executing program 0 (id=19528): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 0s ago: executing program 4 (id=19529): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x91) kernel console output (not intermixed with test programs): e [ 830.628284][ T6197] cdc_wdm 1-1:1.0: skipping garbage [ 830.633884][ T6197] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 830.761887][ T6235] usb 2-1: Using ep0 maxpacket: 8 [ 830.773585][ T6235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 830.784230][ T6235] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 830.798219][ T6235] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 830.808228][ T6235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.816860][ T6235] usb 2-1: Product: syz [ 830.821132][ T6235] usb 2-1: Manufacturer: syz [ 830.826638][ T6235] usb 2-1: SerialNumber: syz [ 830.835997][ T6235] usb 2-1: config 0 descriptor?? [ 830.934439][T10647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16180'. [ 830.974140][ T1592] usb 1-1: USB disconnect, device number 14 [ 831.253867][T10671] random: crng reseeded on system resumption [ 831.288129][ T47] usb 2-1: USB disconnect, device number 18 [ 831.612542][T10702] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16200'. [ 831.932514][T10726] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16211'. [ 832.104625][T10740] netlink: 592 bytes leftover after parsing attributes in process `syz.1.16218'. [ 832.114169][T10740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.172121][T10745] autofs4:pid:10745:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 832.188432][T10745] autofs4:pid:10745:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 832.437204][T10765] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16230'. [ 832.450288][T10765] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16230'. [ 832.918840][T10806] netlink: 'syz.0.16249': attribute type 21 has an invalid length. [ 832.952141][ T47] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 833.124128][ T47] usb 2-1: not running at top speed; connect to a high speed hub [ 833.133028][ T47] usb 2-1: config 11 has an invalid interface number: 95 but max is 0 [ 833.142426][ T47] usb 2-1: config 11 has no interface number 0 [ 833.152088][ T47] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 833.167122][ T47] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 10727, setting to 64 [ 833.178618][ T47] usb 2-1: config 11 interface 95 has no altsetting 0 [ 833.186630][ T47] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 833.196079][ T47] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 833.204282][ T47] usb 2-1: Manufacturer: syz [ 833.214952][T10786] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 833.227555][T10786] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 833.471850][ T47] usbtouchscreen 2-1:11.95: probe with driver usbtouchscreen failed with error -71 [ 833.495697][ T47] usb 2-1: USB disconnect, device number 19 [ 833.641922][T10858] netlink: 'syz.0.16270': attribute type 21 has an invalid length. [ 833.651026][T10858] __nla_validate_parse: 4 callbacks suppressed [ 833.651037][T10858] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16270'. [ 833.666906][T10858] netlink: 'syz.0.16270': attribute type 5 has an invalid length. [ 833.675620][T10858] netlink: 'syz.0.16270': attribute type 6 has an invalid length. [ 833.683844][T10858] netlink: 3 bytes leftover after parsing attributes in process `syz.0.16270'. [ 834.221347][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16290'. [ 834.961366][T10959] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 835.062455][T10967] netlink: 'syz.4.16321': attribute type 21 has an invalid length. [ 835.082207][T10967] netlink: 144 bytes leftover after parsing attributes in process `syz.4.16321'. [ 835.453212][T11002] netlink: zone id is out of range [ 835.501098][T11002] netlink: set zone limit has 4 unknown bytes [ 835.511072][T11005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.518013][ T6197] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 835.723171][ T6197] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 835.731541][ T6197] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 835.739752][ T6197] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 835.750256][ T6197] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 835.761365][ T6197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 835.771674][ T6197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 835.781883][ T6197] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 835.798152][ T6197] usb 2-1: string descriptor 0 read error: -22 [ 835.804876][ T6197] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 835.819111][ T6197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.831991][T11024] binder: 11023:11024 ioctl 4018620d 0 returned -22 [ 835.845183][ T6197] usb 2-1: config 0 descriptor?? [ 835.855653][ T6197] hub 2-1:0.0: bad descriptor, ignoring hub [ 835.863537][ T6197] hub 2-1:0.0: probe with driver hub failed with error -5 [ 835.874461][ T6197] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input140 [ 836.143740][ T47] usb 2-1: USB disconnect, device number 20 [ 836.519749][T11083] netlink: 'syz.0.16359': attribute type 15 has an invalid length. [ 836.531775][T11083] netlink: 'syz.0.16359': attribute type 7 has an invalid length. [ 836.761787][T11098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 836.882501][T11104] netlink: 'syz.1.16368': attribute type 4 has an invalid length. [ 836.897912][ T47] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 836.952077][T11108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16370'. [ 837.080330][ T47] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 837.089446][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.099367][ T47] usb 1-1: config 0 descriptor?? [ 837.107639][ T47] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 837.282230][ T6197] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 837.445908][ T6197] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 837.455116][ T6197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.463112][ T6197] usb 2-1: Product: syz [ 837.467396][ T6197] usb 2-1: Manufacturer: syz [ 837.471998][ T6197] usb 2-1: SerialNumber: syz [ 837.482934][ T6197] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 837.526332][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 837.538174][ T47] gp8psk: usb out operation failed. [ 837.544407][ T47] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 837.558700][ T47] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 837.570652][ T47] usb 1-1: USB disconnect, device number 15 [ 837.970377][ T47] usb 2-1: USB disconnect, device number 21 [ 838.619799][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 838.636249][ T10] ath9k_htc: Failed to initialize the device [ 838.652972][ T47] usb 2-1: ath9k_htc: USB layer deinitialized [ 838.936078][T11169] netlink: 'syz.4.16387': attribute type 39 has an invalid length. [ 839.704452][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16418'. [ 839.816413][ T1592] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 839.994177][ T1592] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 840.028770][ T1592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.039619][ T1592] usb 2-1: config 0 descriptor?? [ 840.055943][ T1592] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 840.281536][T11284] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 840.488415][ T1592] gspca_cpia1: usb_control_msg 03, error -71 [ 840.512415][ T1592] gspca_cpia1: usb_control_msg 01, error -71 [ 840.523659][ T1592] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 840.538818][ T1592] usb 2-1: USB disconnect, device number 22 [ 840.630763][T11315] binder: 11314:11315 ioctl c018620c 200000000380 returned -22 [ 841.011027][T11350] dlm: non-version read from control device 2 [ 841.153973][T11357] IPv6: NLM_F_CREATE should be specified when creating new route [ 841.228330][ T6164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 841.244378][ T6164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 841.254802][ T6164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 841.266756][ T6164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 841.278618][ T6164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 841.359438][T11360] C speed is unknown, defaulting to 1000 [ 841.368931][T11360] xfrm0 speed is unknown, defaulting to 1000 [ 841.511165][T11380] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16486'. [ 841.717161][T11360] chnl_net:caif_netlink_parms(): no params data found [ 841.783707][ T1592] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 841.812921][T11360] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.820748][T11360] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.828054][T11360] bridge_slave_0: entered allmulticast mode [ 841.835040][T11360] bridge_slave_0: entered promiscuous mode [ 841.843198][T11360] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.850464][T11360] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.857667][T11360] bridge_slave_1: entered allmulticast mode [ 841.865222][T11360] bridge_slave_1: entered promiscuous mode [ 841.897112][T11360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.909676][T11360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.942519][T11360] team0: Port device team_slave_0 added [ 841.950177][T11360] team0: Port device team_slave_1 added [ 841.967938][ T1592] usb 2-1: unable to get BOS descriptor or descriptor too short [ 841.981916][ T1592] usb 2-1: too many endpoints for config 1 interface 0 altsetting 29: 255, using maximum allowed: 30 [ 841.985520][T11360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.994781][ T1592] usb 2-1: config 1 interface 0 altsetting 29 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.999940][T11360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.999967][T11360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.001967][T11360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.014477][ T1592] usb 2-1: config 1 interface 0 altsetting 29 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.037347][T11360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.090576][ T1592] usb 2-1: config 1 interface 0 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 842.090608][ T1592] usb 2-1: config 1 interface 0 has no altsetting 0 [ 842.110826][T11360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.111740][ T1592] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 842.139938][ T1592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.151846][ T1592] usb 2-1: Product: syz [ 842.158136][ T1592] usb 2-1: Manufacturer: syz [ 842.162996][ T1592] usb 2-1: SerialNumber: syz [ 842.188442][T11360] hsr_slave_0: entered promiscuous mode [ 842.199575][T11360] hsr_slave_1: entered promiscuous mode [ 842.206159][T11360] debugfs: 'hsr0' already exists in 'hsr' [ 842.212301][T11360] Cannot create hsr debugfs directory [ 842.412826][ T1592] usbhid 2-1:1.0: can't add hid device: -22 [ 842.425684][ T1592] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 842.444522][ T1592] usb 2-1: USB disconnect, device number 23 [ 842.522375][T11360] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 842.542037][T11360] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 842.559624][T11360] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 842.571289][T11360] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 842.595943][T11360] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.603231][T11360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.610735][T11360] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.617917][T11360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.669808][T11360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.686016][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.694539][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.711318][T11360] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.725059][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.732224][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.748757][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.755936][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.907895][T11360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.063187][T11672] netlink: 'syz.0.16489': attribute type 11 has an invalid length. [ 843.164835][T11360] veth0_vlan: entered promiscuous mode [ 843.197204][T11360] veth1_vlan: entered promiscuous mode [ 843.253115][T11360] veth0_macvtap: entered promiscuous mode [ 843.263552][T11360] veth1_macvtap: entered promiscuous mode [ 843.293094][T11360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.318427][T11360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.353486][T16670] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.384309][T16670] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.411095][T16670] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.429400][T16670] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.494729][ T6152] Bluetooth: hci5: command tx timeout [ 843.599175][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.623808][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.662670][T11708] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 843.716035][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.725081][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.114549][T11695] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 844.203526][T11755] netlink: 'syz.1.16514': attribute type 1 has an invalid length. [ 844.285511][T11695] usb 6-1: Using ep0 maxpacket: 8 [ 844.295808][T11695] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 844.312749][T11695] usb 6-1: config 0 has no interface number 0 [ 844.327131][T11695] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 844.344257][T11695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.361194][T11765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16519'. [ 844.362065][T11695] usb 6-1: Product: syz [ 844.388711][T11695] usb 6-1: Manufacturer: syz [ 844.408917][T11695] usb 6-1: SerialNumber: syz [ 844.421564][T11695] usb 6-1: config 0 descriptor?? [ 844.530423][T11777] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 844.648841][T11783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.655888][T11695] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 844.676924][T11695] uvcvideo 6-1:0.31: Failed to initialize entity for entity 32774 [ 844.695593][T11695] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 844.911139][T11695] usb 6-1: USB disconnect, device number 2 [ 845.025499][T11821] netlink: 'syz.0.16540': attribute type 11 has an invalid length. [ 845.039377][T11821] netlink: 'syz.0.16540': attribute type 11 has an invalid length. [ 845.048433][T11821] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16540'. [ 845.112315][T11827] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.16543'. [ 845.547453][ T1592] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 845.632700][ T6236] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 845.718203][ T6152] Bluetooth: hci5: command tx timeout [ 845.731032][ T1592] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 845.769801][ T1592] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 845.779972][ T1592] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 845.789436][ T1592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.801578][T11841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 845.815905][ T6236] usb 1-1: Using ep0 maxpacket: 32 [ 845.822949][ T6236] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 845.832196][ T6236] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 845.843636][ T6236] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 845.855141][ T6236] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 845.866202][ T6236] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 845.892289][ T6236] usb 1-1: config 0 interface 0 has no altsetting 0 [ 845.911299][ T6236] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 845.924106][ T6236] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 845.937233][ T6236] usb 1-1: Product: syz [ 845.941557][ T6236] usb 1-1: Manufacturer: syz [ 845.946754][ T6236] usb 1-1: SerialNumber: syz [ 845.955339][ T6236] usb 1-1: config 0 descriptor?? [ 845.977744][ T6236] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 846.010390][ T6236] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 846.034074][ T1592] usb 2-1: string descriptor 0 read error: -71 [ 846.051095][ T1592] hub 2-1:32.0: bad descriptor, ignoring hub [ 846.057655][ T1592] hub 2-1:32.0: probe with driver hub failed with error -5 [ 846.192755][ T1592] usb 2-1: USB disconnect, device number 24 [ 846.222779][T11852] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 846.240282][ T47] usb 1-1: USB disconnect, device number 16 [ 846.262566][ T47] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 846.780231][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16589'. [ 847.243966][T12016] kAFS: unable to lookup cell '(,c' [ 847.398910][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16611'. [ 847.453947][T12033] netlink: 'syz.0.16613': attribute type 39 has an invalid length. [ 847.461921][ T808] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 847.626443][ T808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 847.650594][ T808] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 847.662344][ T808] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 847.679248][ T808] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 847.697400][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 847.705903][ T808] usb 2-1: SerialNumber: syz [ 847.733906][ T808] cdc_acm 2-1:1.0: skipping garbage [ 847.902123][T12067] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16623'. [ 847.940111][T12069] tmpfs: User quota block hardlimit too large. [ 847.952862][ T6152] Bluetooth: hci5: command tx timeout [ 847.964682][ T808] usb 2-1: USB disconnect, device number 25 [ 848.237399][T12097] openvswitch: netlink: IP tunnel dst address not specified [ 848.529147][ T29] audit: type=1326 audit(6291927141.678:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.16641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x50000 [ 848.588312][ T29] audit: type=1326 audit(6291927141.706:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.16641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x50000 [ 848.611590][ T29] audit: type=1326 audit(6291927141.706:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.16641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x50000 [ 848.653121][ T29] audit: type=1326 audit(6291927141.706:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.16641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x50000 [ 848.681007][ T29] audit: type=1326 audit(6291927141.706:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.16641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x50000 [ 848.704280][ T29] audit: type=1326 audit(6291927141.706:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.16641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x50000 [ 848.727600][ T29] audit: type=1326 audit(6291927141.706:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.16641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x50000 [ 848.766575][ T29] audit: type=1326 audit(6291927141.706:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.16641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x50000 [ 848.789061][ T29] audit: type=1326 audit(6291927141.706:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.16641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x50000 [ 848.813132][ T29] audit: type=1326 audit(6291927141.706:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.16641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x50000 [ 849.395586][T12179] netlink: 'syz.0.16666': attribute type 4 has an invalid length. [ 849.511121][T12186] bond0: Error: Cannot enslave bond to itself. [ 849.846124][T12215] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 850.162212][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16691'. [ 850.177842][ T6152] Bluetooth: hci5: command tx timeout [ 850.901065][T12305] kAFS: unable to lookup cell '/yz1' [ 851.033993][T12317] netlink: 'syz.0.16725': attribute type 39 has an invalid length. [ 851.937846][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16763'. [ 852.211569][T12415] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 852.383791][T12427] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.16770'. [ 853.374908][T12516] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.16809'. [ 853.446998][T12523] netlink: 'syz.0.16812': attribute type 3 has an invalid length. [ 853.563166][T12532] netlink: 'syz.1.16817': attribute type 27 has an invalid length. [ 853.581525][T12532] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16817'. [ 853.625967][T12537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16819'. [ 854.004164][T12569] netlink: 56 bytes leftover after parsing attributes in process `syz.5.16832'. [ 854.037966][T12572] openvswitch: netlink: IP tunnel dst address not specified [ 854.302672][T12594] netlink: 'syz.1.16843': attribute type 11 has an invalid length. [ 854.527227][T12614] netlink: 'syz.0.16858': attribute type 27 has an invalid length. [ 854.551752][T12614] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16858'. [ 854.680621][T12627] netlink: 4432 bytes leftover after parsing attributes in process `syz.1.16855'. [ 854.725557][T12629] netlink: 'syz.5.16856': attribute type 3 has an invalid length. [ 854.962370][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 855.004184][T12652] netlink: 'syz.0.16875': attribute type 13 has an invalid length. [ 855.507201][T12695] netlink: 'syz.5.16883': attribute type 13 has an invalid length. [ 855.669686][T12709] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 855.744287][T12714] netlink: 666 bytes leftover after parsing attributes in process `syz.1.16891'. [ 856.464010][ T47] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 856.635043][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 856.649635][ T47] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 856.667105][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.676253][ T47] usb 1-1: Product: syz [ 856.688316][ T47] usb 1-1: Manufacturer: syz [ 856.692985][ T47] usb 1-1: SerialNumber: syz [ 856.703092][ T47] usb 1-1: config 0 descriptor?? [ 856.717390][ T47] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 856.737136][ T47] dvb-usb: bulk message failed: -22 (2/0) [ 856.756540][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 856.777470][ T47] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 856.796859][ T47] usb 1-1: media controller created [ 856.823987][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 856.937377][ T47] cxusb: set interface failed [ 856.951368][ T47] dvb-usb: bulk message failed: -22 (1/0) [ 857.029985][ T47] DVB: Unable to find symbol mt352_attach() [ 857.053865][ T47] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 857.190753][ T47] rc_core: IR keymap rc-dvico-portable not found [ 857.197151][ T47] Registered IR keymap rc-empty [ 857.206535][ T47] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 857.236087][ T47] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input141 [ 857.253181][ T47] dvb-usb: schedule remote query interval to 100 msecs. [ 857.268170][ T47] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 857.290950][ T47] usb 1-1: USB disconnect, device number 17 [ 857.404616][ T47] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 858.008979][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 858.008996][ T29] audit: type=1326 audit(6291927150.544:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.5.16952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119019c799 code=0x7ff00000 [ 858.065090][ T29] audit: type=1326 audit(6291927150.582:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.5.16952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119019c799 code=0x7ff00000 [ 858.088726][ T29] audit: type=1326 audit(6291927150.582:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.5.16952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119019c799 code=0x7ff00000 [ 858.144963][ T29] audit: type=1326 audit(6291927150.582:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.5.16952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119019c799 code=0x7ff00000 [ 858.195310][ T29] audit: type=1326 audit(6291927150.582:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.5.16952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119019c799 code=0x7ff00000 [ 858.238028][ T29] audit: type=1326 audit(6291927150.582:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.5.16952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119019c799 code=0x7ff00000 [ 858.278777][ T29] audit: type=1326 audit(6291927150.582:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.5.16952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119019c799 code=0x7ff00000 [ 858.331231][ T29] audit: type=1326 audit(6291927150.582:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.5.16952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119019c799 code=0x7ff00000 [ 858.356750][ T29] audit: type=1326 audit(6291927150.582:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.5.16952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119019c799 code=0x7ff00000 [ 858.386551][ T29] audit: type=1326 audit(6291927150.582:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.5.16952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119019c799 code=0x7ff00000 [ 858.460021][T12928] netlink: 'syz.5.16967': attribute type 39 has an invalid length. [ 858.570001][ T808] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 858.742561][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 858.750369][ T808] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 858.760501][ T808] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 858.772806][ T808] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 858.795729][ T808] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 858.812015][ T808] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 858.833759][ T808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 858.843032][T12959] netlink: 'syz.4.16978': attribute type 39 has an invalid length. [ 858.853584][ T808] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 858.863077][ T808] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 858.880163][ T808] usb 2-1: Product: syz [ 858.884382][ T808] usb 2-1: Manufacturer: syz [ 858.892358][ T808] usb 2-1: SerialNumber: syz [ 858.916568][ T808] usb 2-1: config 0 descriptor?? [ 858.940373][ T808] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 858.969448][ T808] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 859.184238][T12919] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 859.185508][ T808] usb 2-1: USB disconnect, device number 26 [ 859.188381][ T808] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 859.247515][T12997] tmpfs: User quota block hardlimit too large. [ 859.664271][T13029] ieee802154 phy1 wpan1: encryption failed: -22 [ 859.731317][T13036] openvswitch: netlink: IP tunnel dst address not specified [ 859.906514][ T47] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 860.090681][ T47] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 860.109701][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 860.127878][ T47] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 860.156108][ T47] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 860.172046][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.181231][ T47] usb 1-1: Product: syz [ 860.187423][ T47] usb 1-1: Manufacturer: syz [ 860.198077][ T47] usb 1-1: SerialNumber: syz [ 860.218408][ T47] usb 1-1: config 0 descriptor?? [ 860.227261][ T6236] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 860.237547][T13026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 860.247855][T13026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 860.263524][ T47] usb 1-1: ucan: probing device on interface #0 [ 860.412784][ T6236] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 860.423042][ T6236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.431700][ T6236] usb 2-1: Product: syz [ 860.435981][ T6236] usb 2-1: Manufacturer: syz [ 860.440593][ T6236] usb 2-1: SerialNumber: syz [ 860.452363][ T6236] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 860.470266][ T1592] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 860.498286][ T47] usb 1-1: ucan: device protocol version 0 is not supported [ 860.506012][ T47] usb 1-1: ucan: probe failed; try to update the device firmware [ 860.731896][ T6197] usb 1-1: USB disconnect, device number 18 [ 860.912150][ T47] usb 2-1: USB disconnect, device number 27 [ 861.345037][T13109] Invalid logical block size (2) [ 861.803200][ T1592] usb 2-1: Service connection timeout for: 256 [ 861.825865][ T1592] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 861.848436][ T1592] ath9k_htc: Failed to initialize the device [ 861.867536][ T47] usb 2-1: ath9k_htc: USB layer deinitialized [ 862.309054][T13192] Invalid logical block size (2) [ 862.385759][T13197] bond0: Error: Cannot enslave bond to itself. [ 862.547025][T13209] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 864.244984][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 864.245002][ T29] audit: type=1326 audit(6291927156.381:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.1.17091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c8f9c799 code=0x7fc00000 [ 865.115962][ T6197] kernel read not supported for file /vcs (pid: 6197 comm: kworker/0:4) [ 865.251448][T13427] netlink: 'syz.0.17149': attribute type 4 has an invalid length. [ 865.555261][T13451] netlink: 'syz.4.17160': attribute type 4 has an invalid length. [ 866.073825][T13488] netlink: 108 bytes leftover after parsing attributes in process `syz.4.17173'. [ 866.089386][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17173'. [ 866.715540][T13534] netlink: 'syz.1.17193': attribute type 21 has an invalid length. [ 866.723791][T13534] netlink: 'syz.1.17193': attribute type 1 has an invalid length. [ 866.933564][T13552] tipc: Enabling not permitted [ 866.954518][T13552] tipc: Enabling of bearer rejected, failed to enable media [ 867.300330][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17211'. [ 867.411269][T13584] lo: MTU too low for tipc bearer [ 867.431056][T13584] tipc: Enabling of bearer rejected, failed to enable media [ 867.559502][T13596] netlink: 'syz.0.17219': attribute type 4 has an invalid length. [ 867.956099][T13623] program syz.5.17228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.354599][T13650] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 0, id = 0 [ 868.574867][T11695] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 868.582958][T11695] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 868.591161][T11695] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 868.598997][T11695] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 868.606857][T11695] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 868.615170][T11695] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 868.622986][T11695] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 868.630988][T11695] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 868.639197][T11695] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 868.647091][T11695] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 868.659573][T11695] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 868.733522][T13671] fido_id[13671]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 868.919625][T13685] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17252'. [ 869.043484][T13697] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17256'. [ 870.092766][T13773] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 0, id = 0 [ 870.471676][T13799] netlink: 44 bytes leftover after parsing attributes in process `syz.5.17293'. [ 870.748511][ T808] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 870.792670][T13819] can0: slcan on ptm0. [ 870.869466][T13826] fido_id[13826]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 870.988192][T13818] can0 (unregistered): slcan off ptm0. [ 871.270162][T13860] Zero length message leads to an empty skb [ 871.436794][T13868] mkiss: ax0: crc mode is auto. [ 871.746162][T13899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 872.222279][ T29] audit: type=1326 audit(6291927163.835:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.5.17317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119019c799 code=0x7fc00000 [ 872.256478][T13929] can0: slcan on ptm0. [ 872.400898][T13928] can0 (unregistered): slcan off ptm0. [ 873.259889][ T29] audit: type=1326 audit(6291927164.807:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14001 comm="syz.0.17357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x0 [ 873.516726][T14034] netlink: 256 bytes leftover after parsing attributes in process `syz.5.17367'. [ 873.528813][T14034] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17367'. [ 873.667526][ T29] audit: type=1326 audit(6291927165.191:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.1.17370" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c8f9c799 code=0x0 [ 874.070726][T14081] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 874.495918][T14109] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 874.948889][T14129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 875.040681][ T29] audit: type=1326 audit(6291927166.482:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14132 comm="syz.0.17400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb73c79c799 code=0x0 [ 875.411087][T14144] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17406'. [ 875.422896][T14144] netlink: 43 bytes leftover after parsing attributes in process `syz.1.17406'. [ 875.432985][T14144] netlink: 'syz.1.17406': attribute type 5 has an invalid length. [ 875.440962][T14144] netlink: 43 bytes leftover after parsing attributes in process `syz.1.17406'. [ 877.184809][T14166] sp0: Synchronizing with TNC [ 878.515276][T14260] rdma_op ffff888033f909f0 conn xmit_rdma 0000000000000000 [ 878.633121][T14268] netlink: 'syz.5.17449': attribute type 29 has an invalid length. [ 879.487881][T14322] netlink: 'syz.1.17463': attribute type 49 has an invalid length. [ 879.569195][T11695] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 879.734465][T11695] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 879.747020][T11695] usb 1-1: config 2 has no interface number 0 [ 879.756599][T11695] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 879.774072][T11695] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 879.802058][T11695] usb 1-1: config 2 interface 88 has no altsetting 0 [ 879.811948][T11695] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 879.822138][T11695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.830297][T11695] usb 1-1: Product: syz [ 879.835369][T11695] usb 1-1: Manufacturer: syz [ 879.840142][ T808] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 879.850529][T11695] usb 1-1: SerialNumber: syz [ 879.877738][T14311] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 879.886493][T14311] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 880.008326][ T808] usb 2-1: Using ep0 maxpacket: 16 [ 880.015137][ T808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 880.028514][ T808] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 880.037724][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.048652][ T808] usb 2-1: config 0 descriptor?? [ 880.115783][T14311] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 880.123250][T14311] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 880.178638][ T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 880.342758][ T10] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 880.352053][ T10] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 880.364319][ T10] usb 6-1: Product: syz [ 880.368502][ T10] usb 6-1: Manufacturer: syz [ 880.373198][ T10] usb 6-1: SerialNumber: syz [ 880.380626][ T10] usb 6-1: config 0 descriptor?? [ 880.496255][ T808] hid_parser_main: 76 callbacks suppressed [ 880.496335][ T808] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 880.509572][ T808] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 880.516649][ T808] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 880.523653][ T808] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 880.530514][ T808] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 880.537691][ T808] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 880.544916][ T808] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 880.551875][ T808] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 880.558908][ T808] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 880.566216][ T808] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 880.573225][T11695] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 880.593581][T11695] asix 1-1:2.88: probe with driver asix failed with error -71 [ 880.610620][ T10] peak_usb 6-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 880.624373][ T808] kone 0003:1E7D:2CED.0004: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 880.637205][T11695] usb 1-1: USB disconnect, device number 19 [ 880.732497][ T808] usb 2-1: USB disconnect, device number 28 [ 880.824939][ T10] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 880.832249][ T10] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 880.839208][ T10] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 880.917035][ T10] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 881.051593][ T808] usb 6-1: USB disconnect, device number 3 [ 881.181965][T14395] netlink: 'syz.0.17472': attribute type 49 has an invalid length. [ 882.517380][T14508] xt_bpf: check failed: parse error [ 882.549022][T14511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17514'. [ 882.760107][T14520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17519'. [ 883.432844][T14574] netlink: 'syz.5.17540': attribute type 3 has an invalid length. [ 883.601548][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17544'. [ 883.926540][T14611] netlink: 'syz.0.17552': attribute type 3 has an invalid length. [ 883.975662][ T808] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 884.160769][ T808] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 884.169060][ T808] usb 2-1: config 2 has no interface number 0 [ 884.175196][ T808] usb 2-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 884.186183][ T808] usb 2-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 884.199592][ T808] usb 2-1: config 2 interface 88 has no altsetting 0 [ 884.208517][ T808] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 884.218546][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.226704][ T808] usb 2-1: Product: syz [ 884.231136][ T808] usb 2-1: Manufacturer: syz [ 884.235832][ T808] usb 2-1: SerialNumber: syz [ 884.247210][T14600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 884.254956][T14600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 884.487125][T14600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 884.497554][T14600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 884.941981][ T808] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 884.966883][ T808] asix 2-1:2.88: probe with driver asix failed with error -71 [ 884.994442][ T808] usb 2-1: USB disconnect, device number 29 [ 885.185533][T14663] program syz.0.17571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 885.221339][T14665] netlink: 80 bytes leftover after parsing attributes in process `syz.5.17572'. [ 885.231855][T14665] netlink: 'syz.5.17572': attribute type 3 has an invalid length. [ 885.866954][ T1592] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 885.989787][T14722] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 886.073117][ T1592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.085479][ T1592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.096096][ T1592] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 886.105540][ T1592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.118167][ T1592] usb 2-1: config 0 descriptor?? [ 886.566756][ T1592] hid_parser_main: 31 callbacks suppressed [ 886.566779][ T1592] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x7 [ 886.580532][ T1592] arvo 0003:1E7D:30D4.0005: item fetching failed at offset 4/7 [ 886.588975][ T1592] arvo 0003:1E7D:30D4.0005: parse failed [ 886.597828][ T1592] arvo 0003:1E7D:30D4.0005: probe with driver arvo failed with error -22 [ 886.793687][ T1592] usb 2-1: USB disconnect, device number 30 [ 887.110060][ T29] audit: type=1326 audit(6291927177.770:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14741 comm="syz.0.17611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x7fc00000 [ 887.202310][T14795] IPVS: ip_vs_add_dest(): server weight less than zero [ 887.261306][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17624'. [ 887.405433][T14814] fuse: Bad value for 'user_id' [ 887.412179][T14814] fuse: Bad value for 'user_id' [ 887.470169][T14818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.600176][ T1592] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 887.780745][ T1592] usb 1-1: Using ep0 maxpacket: 8 [ 887.790892][ T1592] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 887.806008][ T1592] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 887.834581][ T1592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.845805][ T1592] usb 1-1: config 0 descriptor?? [ 887.914518][T14845] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17650'. [ 887.925915][T14845] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17650'. [ 888.302735][ T1592] lenovo 0003:17EF:6047.0006: unknown main item tag 0x4 [ 888.316167][ T1592] lenovo 0003:17EF:6047.0006: unknown global tag 0xd [ 888.322991][ T1592] lenovo 0003:17EF:6047.0006: item 0 4 1 13 parsing failed [ 888.334632][ T1592] lenovo 0003:17EF:6047.0006: hid_parse failed [ 888.341566][ T1592] lenovo 0003:17EF:6047.0006: probe with driver lenovo failed with error -22 [ 888.522224][ T808] usb 1-1: USB disconnect, device number 20 [ 889.163431][T14876] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 889.163431][T14876] program syz.5.17651 not setting count and/or reply_len properly [ 889.241034][T14880] netlink: 60 bytes leftover after parsing attributes in process `syz.5.17654'. [ 889.297710][T14880] netlink: 60 bytes leftover after parsing attributes in process `syz.5.17654'. [ 890.163298][T14952] sctp: [Deprecated]: syz.1.17684 (pid 14952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 890.163298][T14952] Use struct sctp_sack_info instead [ 890.183316][T14952] sctp: [Deprecated]: syz.1.17684 (pid 14952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 890.183316][T14952] Use struct sctp_sack_info instead [ 890.518617][ T808] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 890.604864][T14980] input input144: cannot allocate more than FF_MAX_EFFECTS effects [ 890.691051][ T808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.717849][ T808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 890.741481][ T808] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 890.757875][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 890.766863][ T808] usb 2-1: SerialNumber: syz [ 890.771543][T14990] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 890.771543][T14990] program syz.0.17699 not setting count and/or reply_len properly [ 891.034366][ T808] usb 2-1: 0:2 : does not exist [ 891.062681][T15013] input input145: cannot allocate more than FF_MAX_EFFECTS effects [ 891.115703][ T808] usb 2-1: USB disconnect, device number 31 [ 891.176457][ T8945] udevd[8945]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 891.304732][T15034] comedi comedi3: dt2817: I/O port conflict (0x10,5) [ 891.645697][T15060] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 891.703185][T15063] comedi comedi3: dt2817: I/O port conflict (0x10,5) [ 891.971916][ T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 892.003985][T11695] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 892.065016][T15098] sctp: [Deprecated]: syz.4.17735 (pid 15098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 892.065016][T15098] Use struct sctp_sack_info instead [ 892.088746][T15098] sctp: [Deprecated]: syz.4.17735 (pid 15098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 892.088746][T15098] Use struct sctp_sack_info instead [ 892.155058][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 892.166500][ T47] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 892.178711][T11695] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.183649][ T47] usb 6-1: config 0 has no interface number 0 [ 892.197634][T11695] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.209030][ T47] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 892.231832][T11695] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 892.235682][ T47] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 892.246687][T11695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 892.262635][T11695] usb 1-1: SerialNumber: syz [ 892.273844][ T47] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 892.283984][ T47] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 892.296260][ T47] usb 6-1: Product: syz [ 892.308443][ T47] usb 6-1: SerialNumber: syz [ 892.318634][ T47] usb 6-1: config 0 descriptor?? [ 892.329075][ T47] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 892.338638][ T47] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input146 [ 892.519465][T11695] usb 1-1: 0:2 : does not exist [ 892.566591][T11695] usb 1-1: USB disconnect, device number 21 [ 892.640284][ T8945] udevd[8945]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.678036][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.680767][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.680983][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.681191][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.681394][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.681597][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.681797][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.683397][ T808] usb 6-1: USB disconnect, device number 4 [ 892.688994][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.689020][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 892.798002][ T808] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 893.328663][T15154] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 893.413727][T15160] tipc: Started in network mode [ 893.427585][T15160] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 893.445976][T15160] tipc: Enabled bearer , priority 10 [ 893.847644][T15185] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 893.943191][T15186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.275192][T15222] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 894.521157][ T47] tipc: Node number set to 15444650 [ 894.633279][T15254] raw_sendmsg: syz.5.17792 forgot to set AF_INET. Fix it! [ 895.500370][ T6152] Bluetooth: hci4: command 0x0406 tx timeout [ 895.649985][ T808] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 895.812892][ T808] usb 6-1: unable to get BOS descriptor or descriptor too short [ 895.814079][ T808] usb 6-1: config index 0 descriptor too short (expected 198, got 134) [ 895.833883][ T808] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.844749][ T6164] Bluetooth: hci5: command tx timeout [ 895.844842][ T808] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 895.847111][ T808] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 895.869989][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.879854][ T808] usb 6-1: Product: syz [ 895.879874][ T808] usb 6-1: Manufacturer: syz [ 895.879887][ T808] usb 6-1: SerialNumber: syz [ 895.889131][ T808] usb 6-1: 0:1 : does not exist [ 895.889208][ T808] usb 6-1: unit 0 not found! [ 896.141526][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17810'. [ 896.148632][ T808] usb 6-1: USB disconnect, device number 5 [ 896.162404][T15308] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 896.590886][ T6236] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 896.753391][ T6236] usb 2-1: Using ep0 maxpacket: 8 [ 896.765358][ T6236] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 896.785676][ T6236] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 896.797805][ T6236] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 896.807219][ T6236] usb 2-1: Product: syz [ 896.811908][ T6236] usb 2-1: Manufacturer: syz [ 896.821364][ T6236] usb 2-1: SerialNumber: syz [ 897.012167][T15363] mkiss: ax0: crc mode is auto. [ 897.051865][ T6236] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 897.061424][ T6236] usb 2-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 897.069599][ T6236] usb 2-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 897.072219][ T808] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 897.079878][ T6236] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 897.247589][ T808] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 897.269765][ T6236] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 897.273078][ T808] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 897.291174][ T808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 897.293157][ T6236] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 897.298018][ T808] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 897.321823][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.327541][ T6236] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 897.333646][ T808] usb 1-1: config 0 descriptor?? [ 897.344750][T15351] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 897.517972][ T6236] usb 2-1: USB disconnect, device number 32 [ 897.531146][ T6236] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 897.554295][ T6236] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 897.579022][ T6236] visor 2-1:1.0: device disconnected [ 897.803956][ T808] microsoft 0003:045E:009D.0007: unknown main item tag 0x6 [ 897.820441][ T808] microsoft 0003:045E:009D.0007: invalid report_size 26545 [ 897.836179][ T808] microsoft 0003:045E:009D.0007: item 0 2 1 7 parsing failed [ 897.860581][ T808] microsoft 0003:045E:009D.0007: parse failed [ 897.867294][ T808] microsoft 0003:045E:009D.0007: probe with driver microsoft failed with error -22 [ 898.028558][ T808] usb 1-1: USB disconnect, device number 22 [ 898.838446][T15510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17861'. [ 898.860309][T15513] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.17862'. [ 898.960468][ T808] IPVS: starting estimator thread 0... [ 899.071412][T15520] IPVS: using max 34 ests per chain, 81600 per kthread [ 899.323182][T15555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17873'. [ 899.733091][T15575] mkiss: ax0: crc mode is auto. [ 900.304608][ T808] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 900.484923][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 900.496039][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.506185][ T808] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 900.519131][ T808] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 900.528873][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.543131][ T808] usb 6-1: config 0 descriptor?? [ 900.993068][ T808] cypress 0003:04B4:0001.0008: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.5-1/input0 [ 901.205380][ T47] usb 6-1: USB disconnect, device number 6 [ 901.823240][T15668] netlink: 'syz.1.17906': attribute type 2 has an invalid length. [ 901.999650][T15689] netlink: 7060 bytes leftover after parsing attributes in process `syz.5.17912'. [ 902.068813][ T47] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 902.205174][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17922'. [ 902.242809][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 902.258828][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.283565][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.316955][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 902.344241][ T47] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 902.367756][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.383266][ T47] usb 1-1: config 0 descriptor?? [ 902.831085][ T47] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 902.848237][ T47] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 902.863865][ T47] microsoft 0003:045E:07DA.0009: usage index exceeded [ 902.876973][ T47] microsoft 0003:045E:07DA.0009: item 0 2 2 2 parsing failed [ 902.886290][ T47] microsoft 0003:045E:07DA.0009: parse failed [ 902.892847][ T47] microsoft 0003:045E:07DA.0009: probe with driver microsoft failed with error -22 [ 903.071513][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17948'. [ 903.075581][ T47] usb 1-1: USB disconnect, device number 23 [ 903.571693][T15815] xt_l2tp: v2 tid > 0xffff: 2031748 [ 903.931275][ T29] audit: type=1326 audit(6291927193.502:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15844 comm="syz.5.17976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f119019c799 code=0x0 [ 904.006840][T15854] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 904.114285][T15862] netdevsim netdevsim1: Firmware load for '../file0' refused, path contains '..' component [ 904.253815][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17987'. [ 904.425549][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17993'. [ 904.761883][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18001'. [ 905.041383][T15923] netlink: 'syz.5.18010': attribute type 2 has an invalid length. [ 905.135524][ T1592] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 905.169658][T15934] netlink: 'syz.1.18015': attribute type 1 has an invalid length. [ 905.232408][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18017'. [ 905.317426][ T1592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 905.328763][ T1592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.339086][ T1592] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 905.352411][ T1592] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 905.361539][ T1592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.372301][ T1592] usb 1-1: config 0 descriptor?? [ 905.838249][ T1592] cypress 0003:04B4:0001.000A: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.0-1/input0 [ 906.053634][ T1592] usb 1-1: USB disconnect, device number 24 [ 906.568142][T15972] xt_l2tp: v2 tid > 0xffff: 2031748 [ 906.613895][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18024'. [ 906.672968][T15980] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 907.091323][T16014] new mount options do not match the existing superblock, will be ignored [ 907.108605][T16014] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 907.341093][T16033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18050'. [ 907.460088][T16041] netlink: 'syz.1.18062': attribute type 1 has an invalid length. [ 907.471079][T16041] netlink: 96 bytes leftover after parsing attributes in process `syz.1.18062'. [ 907.485688][T16041] netlink: 'syz.1.18062': attribute type 1 has an invalid length. [ 907.496396][T16041] netlink: 638 bytes leftover after parsing attributes in process `syz.1.18062'. [ 907.506961][T16041] netlink: 1 bytes leftover after parsing attributes in process `syz.1.18062'. [ 907.516932][T16043] netdevsim netdevsim0: Firmware load for '../file0' refused, path contains '..' component [ 907.536987][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18055'. [ 907.911757][T11695] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 907.948193][T11695] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 908.015809][T16078] fido_id[16078]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 908.791439][ T1592] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 908.965621][ T1592] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 908.974913][ T1592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.984262][ T1592] usb 2-1: Product: syz [ 908.988531][ T1592] usb 2-1: Manufacturer: syz [ 908.993135][ T1592] usb 2-1: SerialNumber: syz [ 909.005347][ T1592] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 909.031185][ T47] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 909.281967][ T1592] usb 2-1: USB disconnect, device number 33 [ 909.322324][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18090'. [ 909.447288][ T29] audit: type=1326 audit(6291927198.655:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16140 comm="syz.0.18091" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb73c79c799 code=0x0 [ 910.052152][ T1601] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 910.127066][ T47] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 910.134475][ T47] ath9k_htc: Failed to initialize the device [ 910.141133][ T1592] usb 2-1: ath9k_htc: USB layer deinitialized [ 910.214131][ T1601] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 910.225824][ T1601] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 910.238969][ T1601] usb 6-1: config 0 interface 0 has no altsetting 0 [ 910.245694][ T1601] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 910.254758][ T1601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.264983][ T1601] usb 6-1: config 0 descriptor?? [ 910.270948][T16158] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 910.366504][T16170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18098'. [ 910.458642][ T1592] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 910.618738][ T1592] usb 2-1: Using ep0 maxpacket: 8 [ 910.627418][ T1592] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 910.636554][ T1592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 910.645042][ T1592] usb 2-1: Product: syz [ 910.649232][ T1592] usb 2-1: Manufacturer: syz [ 910.653984][ T1592] usb 2-1: SerialNumber: syz [ 910.661006][ T1592] usb 2-1: config 0 descriptor?? [ 910.730992][ T1601] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.000C/input/input147 [ 910.831266][ T1601] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.000C/input/input148 [ 910.888215][ T1592] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 910.903125][ T1601] kye 0003:0458:5012.000C: input,hiddev0,hidraw0: USB HID v80.01 Device [HID 0458:5012] on usb-dummy_hcd.5-1/input0 [ 910.928062][ T1592] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 910.942795][ T1601] usb 6-1: USB disconnect, device number 7 [ 910.985614][ T1592] usb 2-1: USB disconnect, device number 34 [ 911.013546][T16185] fido_id[16185]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 911.353742][ T1592] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 911.371959][ T1592] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 911.435794][T16219] fido_id[16219]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 911.998120][ T1592] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 912.185113][ T1592] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 912.200903][ T1592] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.222892][ T1592] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.238896][ T1592] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.255201][ T1592] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.266064][ T1592] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.277977][ T1592] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.286928][ T1592] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.296155][ T1592] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.308893][ T1592] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.318507][ T1592] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.328510][ T1592] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.339793][ T1592] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.348192][ T1592] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.357831][ T1592] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.370004][ T1592] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.384575][ T1592] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.395723][ T1592] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.407415][ T1592] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.415535][ T1592] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.424730][ T1592] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.457484][ T1592] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.465981][ T1592] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 912.486917][ T1592] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 912.503514][ T1592] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.513635][ T1592] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 912.522997][ T1592] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 912.531419][ T1592] usb 1-1: Product: syz [ 912.536680][ T1592] usb 1-1: Manufacturer: syz [ 912.541331][ T1592] usb 1-1: SerialNumber: syz [ 912.549581][ T1592] usb 1-1: config 0 descriptor?? [ 912.562546][ T1592] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 912.685028][T16314] netlink: 'syz.5.18137': attribute type 2 has an invalid length. [ 912.694487][T16314] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18137'. [ 912.737708][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18138'. [ 912.795102][T16318] sg_write: data in/out 397789/272 bytes for SCSI command 0x0-- guessing data in; [ 912.795102][T16318] program syz.4.18139 not setting count and/or reply_len properly [ 912.841587][ T1592] usb 1-1: USB disconnect, device number 25 [ 912.859258][ T1592] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 913.103698][T16346] netlink: 'syz.1.18148': attribute type 2 has an invalid length. [ 913.113103][T16346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18148'. [ 913.131087][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18149'. [ 913.527006][ T1592] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 913.698091][ T1592] usb 2-1: Using ep0 maxpacket: 32 [ 913.709118][ T47] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 913.733716][ T1592] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 913.743817][ T1592] usb 2-1: config 0 has no interface number 0 [ 913.749976][ T1592] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 913.764604][ T1592] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 913.776898][ T1592] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 913.788511][ T1592] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 913.799084][ T1592] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 913.811258][ T1592] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 913.822193][ T1592] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 913.832245][ T1592] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 115 [ 913.842290][ T1592] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 913.857440][ T1592] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 913.866569][ T1592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.875017][ T1592] usb 2-1: Product: syz [ 913.879185][ T1592] usb 2-1: Manufacturer: syz [ 913.884100][ T1592] usb 2-1: SerialNumber: syz [ 913.894193][ T1592] usb 2-1: config 0 descriptor?? [ 913.899822][T16354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 913.907531][T16354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 913.911982][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 913.921317][ T1592] usb 2-1: will this work? Response EP is not usually 3 [ 913.928633][ T1592] usb 2-1: will this work? Image data EP is not usually 2 [ 913.936843][ T47] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 913.945603][ T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.956061][ T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 913.966837][ T1592] scsi host1: microtekX6 [ 913.985786][ T47] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 913.997493][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.006333][ T47] usb 1-1: Product: syz [ 914.010816][ T47] usb 1-1: Manufacturer: syz [ 914.011444][T11695] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 914.015446][ T47] usb 1-1: SerialNumber: syz [ 914.024330][ T47] usb 1-1: 0:2 : does not exist [ 914.144273][ T5442] usb 2-1: USB disconnect, device number 35 [ 914.235415][T11695] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.245725][T11695] usb 6-1: config 0 interface 0 has no altsetting 0 [ 914.256203][T11695] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 914.265681][T11695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.273937][T11695] usb 6-1: Product: syz [ 914.278684][T11695] usb 6-1: Manufacturer: syz [ 914.284570][T11695] usb 6-1: SerialNumber: syz [ 914.305603][T11695] usb 6-1: config 0 descriptor?? [ 914.361524][T11695] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 914.372474][T11695] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 914.404785][T11695] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 914.417761][T11695] usb 6-1: media controller created [ 914.444550][T11695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 914.505683][T11695] DVB: Unable to find symbol tda10046_attach() [ 914.512537][T11695] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 914.521449][T11695] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 914.679668][ T47] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 914.735859][ T47] usb 1-1: USB disconnect, device number 26 [ 915.013752][T11695] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 915.031737][T11695] usb 6-1: USB disconnect, device number 8 [ 915.598891][T16505] program syz.0.18193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 915.964933][T11695] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 916.114863][ T47] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 916.126592][T11695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.137740][T11695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.147880][T11695] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 916.160830][T11695] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 916.169996][T11695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.180139][T11695] usb 1-1: config 0 descriptor?? [ 916.276646][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.287123][ T47] usb 2-1: config 0 interface 0 has no altsetting 0 [ 916.295943][ T47] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 916.305134][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.313357][ T47] usb 2-1: Product: syz [ 916.317565][ T47] usb 2-1: Manufacturer: syz [ 916.322488][ T47] usb 2-1: SerialNumber: syz [ 916.329928][ T47] usb 2-1: config 0 descriptor?? [ 916.338406][ T47] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 916.351471][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 916.361539][ T47] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 916.370312][ T47] usb 2-1: media controller created [ 916.385860][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 916.433628][ T47] DVB: Unable to find symbol tda10046_attach() [ 916.439986][ T47] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 916.449015][ T47] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 916.627245][T11695] acrux 0003:1A34:0802.000E: unbalanced delimiter at end of report description [ 916.637605][T11695] acrux 0003:1A34:0802.000E: parse failed [ 916.643793][T11695] acrux 0003:1A34:0802.000E: probe with driver acrux failed with error -22 [ 916.850645][ T5442] usb 1-1: USB disconnect, device number 27 [ 916.985748][ T47] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 916.998527][ T47] usb 2-1: USB disconnect, device number 36 [ 917.682552][T16584] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 917.887446][T16599] netlink: 'syz.0.18220': attribute type 2 has an invalid length. [ 917.895499][T16599] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.18220'. [ 918.014774][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18225'. [ 918.023945][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18225'. [ 918.032985][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18225'. [ 918.217831][T16621] netlink: 1 bytes leftover after parsing attributes in process `syz.1.18230'. [ 918.227256][T16621] xt_policy: neither incoming nor outgoing policy selected [ 918.335661][T16627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18234'. [ 918.510653][ T6245] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz1 [ 918.568503][T16647] fido_id[16647]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 918.676480][T16656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 918.741024][T16662] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18247'. [ 919.039511][T16688] loop5: detected capacity change from 0 to 7 [ 919.061368][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 919.070886][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 919.083137][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 919.092498][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 919.100598][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 919.109914][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 919.121010][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 919.130231][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 919.144035][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 919.153278][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 919.165867][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 919.175099][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 919.185073][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 919.194284][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 919.202161][T16192] ldm_validate_partition_table(): Disk read failed. [ 919.212799][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 919.222175][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 919.230476][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 919.239642][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 919.249666][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 919.258916][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 919.270456][T16192] Dev loop5: unable to read RDB block 0 [ 919.278739][T16192] loop5: unable to read partition table [ 919.290115][T16192] loop5: partition table beyond EOD, truncated [ 919.308526][T16688] ldm_validate_partition_table(): Disk read failed. [ 919.319339][T16688] Dev loop5: unable to read RDB block 0 [ 919.330584][T16688] loop5: unable to read partition table [ 919.338104][T16688] loop5: partition table beyond EOD, truncated [ 919.344587][T16688] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 919.415629][T16701] vimc link validate: Sensor B:src:256x16 (0x33424752, 6, 0, 2, 0) Raw Capture 1:snk:4096x2160 (0x30314742, 8, 0, 0, 0) [ 919.895516][T16737] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18274'. [ 919.906816][T16737] netlink: 43 bytes leftover after parsing attributes in process `syz.0.18274'. [ 919.918909][T16737] netlink: 'syz.0.18274': attribute type 5 has an invalid length. [ 919.926947][T16737] netlink: 43 bytes leftover after parsing attributes in process `syz.0.18274'. [ 920.250098][T16755] netlink: 312 bytes leftover after parsing attributes in process `syz.0.18282'. [ 920.598132][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18290'. [ 920.609083][ T6245] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 920.612484][T16773] nbd: illegal input index -1900544 [ 920.790326][ T6245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.804254][T16785] netlink: 'syz.5.18295': attribute type 16 has an invalid length. [ 920.814596][ T6245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.832661][ T6245] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 920.852265][ T6245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.870530][T16787] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 920.881065][ T6245] usb 2-1: config 0 descriptor?? [ 921.360765][ T6245] playstation 0003:054C:0DF2.0010: unknown main item tag 0x2 [ 921.375516][ T6245] playstation 0003:054C:0DF2.0010: item fetching failed at offset 4/5 [ 921.385574][ T6245] playstation 0003:054C:0DF2.0010: Parse failed [ 921.392364][ T6245] playstation 0003:054C:0DF2.0010: probe with driver playstation failed with error -22 [ 921.394142][T16822] netlink: 256 bytes leftover after parsing attributes in process `syz.5.18305'. [ 921.590070][ T6245] usb 2-1: USB disconnect, device number 37 [ 921.687081][T16836] [U] ```````` [ 921.767508][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18315'. [ 922.044913][T16879] netlink: 'syz.0.18332': attribute type 16 has an invalid length. [ 922.294520][T16893] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 922.551110][ T6245] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 922.651937][T16928] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 922.723616][ T6245] usb 1-1: Using ep0 maxpacket: 16 [ 922.734616][ T6245] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 922.742996][ T6245] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.756531][ T6245] usb 1-1: config 0 has no interface number 0 [ 922.770936][ T6245] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 922.780349][ T6245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.793484][ T6245] usb 1-1: Product: syz [ 922.800023][ T6245] usb 1-1: Manufacturer: syz [ 922.804994][ T6245] usb 1-1: SerialNumber: syz [ 922.814237][ T6245] usb 1-1: config 0 descriptor?? [ 923.031820][T16950] netlink: 256 bytes leftover after parsing attributes in process `syz.1.18350'. [ 923.048667][ T6245] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 923.065844][ T6245] uvcvideo 1-1:0.105: No valid video chain found. [ 923.268939][ T6245] usb 1-1: USB disconnect, device number 28 [ 923.737317][T16993] tmpfs: Cannot enable quota on remount [ 924.044971][T17018] netlink: 'syz.5.18373': attribute type 2 has an invalid length. [ 924.472395][T17049] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 924.483354][T17049] overlayfs: missing 'lowerdir' [ 924.674159][T17068] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 925.018469][T17095] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 925.028565][T17098] tmpfs: Cannot enable quota on remount [ 925.698478][T17149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 925.758667][ T6245] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 925.851794][T17165] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 925.912132][T17173] netlink: 'syz.1.18433': attribute type 4 has an invalid length. [ 925.912154][T17173] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18433'. [ 925.965555][ T6245] usb 6-1: Using ep0 maxpacket: 32 [ 925.967344][ T6245] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 925.980056][ T6245] usb 6-1: config 0 has no interface number 0 [ 925.982193][ T6245] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 925.996666][ T6245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.996690][ T6245] usb 6-1: Product: syz [ 925.996704][ T6245] usb 6-1: Manufacturer: syz [ 926.014221][ T6245] usb 6-1: SerialNumber: syz [ 926.017871][ T6245] usb 6-1: config 0 descriptor?? [ 926.028245][ T6245] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 926.154459][T11695] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 926.326485][T11695] usb 1-1: Using ep0 maxpacket: 16 [ 926.334102][T11695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.345228][T11695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.355055][T11695] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 926.368541][T11695] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 926.377640][T11695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.388195][T11695] usb 1-1: config 0 descriptor?? [ 926.624992][ T6245] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 926.641009][ T6245] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 926.839333][T11695] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 926.849269][T11695] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 926.856574][T11695] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 926.863992][T11695] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 926.871688][T11695] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 926.878975][T11695] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 926.885968][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 926.893953][T11695] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 926.895220][ T6245] usb 6-1: USB disconnect, device number 9 [ 926.912494][T11695] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 926.920498][T11695] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 926.928032][T11695] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 926.931597][ T6245] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 926.944521][T11695] megaworld 0003:07B5:0312.0011: hidraw0: USB HID v1.00 Device [HID 07b5:0312] on usb-dummy_hcd.0-1/input0 [ 926.968063][T11695] megaworld 0003:07B5:0312.0011: no inputs found [ 926.971023][ T6245] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 926.993465][ T6245] quatech2 6-1:0.51: device disconnected [ 927.069072][T11695] usb 1-1: USB disconnect, device number 29 [ 927.848616][T17249] xt_l2tp: unknown flags: ed [ 928.679422][T17309] fuse: Bad value for 'group_id' [ 928.684999][T17309] fuse: Bad value for 'group_id' [ 928.890015][T17327] netlink: 212 bytes leftover after parsing attributes in process `syz.5.18481'. [ 928.900144][T17325] autofs: Bad value for 'fd' [ 929.245146][T17353] autofs: Bad value for 'fd' [ 929.255471][ T29] audit: type=1326 audit(6291927217.192:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17355 comm="syz.4.18500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e95d9c799 code=0x0 [ 929.353856][T17364] netlink: 212 bytes leftover after parsing attributes in process `syz.1.18494'. [ 930.703221][T17463] netlink: 'syz.4.18536': attribute type 4 has an invalid length. [ 930.713258][T17463] netlink: 17 bytes leftover after parsing attributes in process `syz.4.18536'. [ 930.880221][T17474] fuse: Bad value for 'group_id' [ 930.885645][T17474] fuse: Bad value for 'group_id' [ 931.247959][T17511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.704110][T17548] netlink: 'syz.1.18575': attribute type 4 has an invalid length. [ 931.720959][T17548] netlink: 17 bytes leftover after parsing attributes in process `syz.1.18575'. [ 932.071078][T17573] can0: slcan on ttyprintk. [ 932.121885][T17570] can0 (unregistered): slcan off ttyprintk. [ 932.227057][T17586] netlink: 'syz.5.18578': attribute type 4 has an invalid length. [ 932.235998][T17586] netlink: 17 bytes leftover after parsing attributes in process `syz.5.18578'. [ 932.473563][ T6245] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 932.644342][ T6245] usb 2-1: Using ep0 maxpacket: 16 [ 932.651475][ T6245] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 932.660437][ T6245] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.670786][ T6245] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.681794][ T6245] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 932.691128][ T6245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.699233][ T6245] usb 2-1: Product: syz [ 932.703409][ T6245] usb 2-1: Manufacturer: syz [ 932.708005][ T6245] usb 2-1: SerialNumber: syz [ 932.720342][ T6245] usb 2-1: 0:2 : does not exist [ 933.374042][ T6245] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 933.425171][ T6245] usb 2-1: USB disconnect, device number 38 [ 933.490745][T16192] udevd[16192]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 933.809703][ T1592] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 933.982035][ T1592] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 933.990874][ T1592] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.001095][ T1592] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.013924][ T1592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 934.021639][ T1592] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.031668][ T1592] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.043108][ T1592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 934.050931][ T1592] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.060043][ T1592] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.071075][ T1592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 934.078982][ T1592] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.088187][ T1592] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.099196][ T1592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 934.107429][ T1592] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.118417][ T1592] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.129517][ T1592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 934.139839][ T1592] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.149882][ T1592] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.161101][ T1592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 934.172080][ T1592] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.181296][ T1592] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.192677][ T1592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 934.201074][ T1592] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 934.210325][ T1592] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 934.221599][ T1592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 934.240131][ T1592] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 934.251105][ T1592] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 934.259609][ T1592] usb 6-1: Product: syz [ 934.263784][ T1592] usb 6-1: Manufacturer: syz [ 934.268394][ T1592] usb 6-1: SerialNumber: syz [ 934.287821][ T1592] usb 6-1: config 0 descriptor?? [ 934.309899][ T1592] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 934.382193][T17660] program syz.1.18596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 934.504087][T17670] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18599'. [ 934.529432][T17670] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18599'. [ 934.530865][ T1592] usb 6-1: USB disconnect, device number 10 [ 934.553911][ T1592] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 934.659403][T17685] sp0: Synchronizing with TNC [ 934.681033][T17684] [U] [ 934.785062][T17698] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.18606'. [ 934.795732][T17698] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.18606'. [ 935.041356][T17716] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 935.145755][T17723] netlink: 'syz.1.18618': attribute type 2 has an invalid length. [ 935.156038][T17723] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.18618'. [ 935.258370][T17730] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 935.549897][T17753] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 935.729791][T17766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18636'. [ 935.926731][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18644'. [ 935.951482][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18644'. [ 936.701937][T17836] vimc link validate: Sensor B:src:256x16 (0x33424752, 6, 0, 2, 0) Raw Capture 1:snk:4096x2160 (0x30314742, 8, 0, 0, 0) [ 937.320945][T17877] sp0: Synchronizing with TNC [ 937.329642][T17874] [U] [ 937.404413][T17888] __nla_validate_parse: 1 callbacks suppressed [ 937.404431][T17888] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.18679'. [ 937.437464][T17888] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.18679'. [ 937.720926][T17912] loop5: detected capacity change from 0 to 7 [ 937.738951][ C0] blk_print_req_error: 25 callbacks suppressed [ 937.738969][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.754505][ C0] buffer_io_error: 25 callbacks suppressed [ 937.754521][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.772021][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.781253][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.789345][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.798511][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.809979][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.819186][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.828966][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.838189][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.850520][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.859692][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.867982][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.877153][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.885015][T17912] ldm_validate_partition_table(): Disk read failed. [ 937.892083][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.901268][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.910290][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.919552][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.927681][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 937.936859][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 937.948214][T17912] Dev loop5: unable to read RDB block 0 [ 937.954651][T17912] loop5: unable to read partition table [ 937.960739][T17912] loop5: partition table beyond EOD, truncated [ 937.966930][T17912] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 938.217431][T17933] program syz.5.18695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 938.726431][ T1601] IPVS: starting estimator thread 0... [ 938.808115][T17976] random: crng reseeded on system resumption [ 938.823051][T17976] Unrecognized hibernate image header format! [ 938.832288][T17973] IPVS: using max 44 ests per chain, 105600 per kthread [ 938.840038][T17976] PM: hibernation: Image mismatch: architecture specific data [ 939.094754][T17995] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 939.609944][T18029] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 939.618753][T18029] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 939.626886][T18029] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 939.633343][T18029] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 939.640615][T18029] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 939.647250][T18029] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 939.658789][T18029] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 939.665381][T18029] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 939.691032][T18029] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 939.697525][T18029] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 940.008605][T18051] max out of range [ 940.556430][T11695] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 940.716749][T11695] usb 6-1: Using ep0 maxpacket: 32 [ 940.729225][T11695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.752872][T11695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.763617][T11695] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 940.772850][T11695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.784548][T11695] usb 6-1: config 0 descriptor?? [ 940.801343][T11695] hub 6-1:0.0: USB hub found [ 941.019354][T11695] hub 6-1:0.0: 1 port detected [ 941.093508][T18120] random: crng reseeded on system resumption [ 941.234090][T11695] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 941.246026][T11695] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 941.266955][T11695] usbhid 6-1:0.0: can't add hid device: -71 [ 941.276513][T11695] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 941.288586][T18132] Unrecognized hibernate image header format! [ 941.300898][T18132] PM: hibernation: Image mismatch: architecture specific data [ 941.318126][T11695] usb 6-1: USB disconnect, device number 11 [ 941.628324][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18779'. [ 941.913739][T18190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18785'. [ 941.927584][T18190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18785'. [ 942.019713][T18196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18788'. [ 942.587875][ T1601] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 942.748229][ T1601] usb 2-1: Using ep0 maxpacket: 16 [ 942.754862][ T1601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.765914][ T1601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.775686][ T1601] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 942.788719][ T1601] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 942.797828][ T1601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.809437][ T1601] usb 2-1: config 0 descriptor?? [ 943.254930][ T1601] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 943.276208][ T1601] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 943.285945][ T1601] microsoft 0003:045E:07DA.0012: usage index exceeded [ 943.292918][ T1601] microsoft 0003:045E:07DA.0012: item 0 2 2 2 parsing failed [ 943.304781][ T1601] microsoft 0003:045E:07DA.0012: parse failed [ 943.310989][ T1601] microsoft 0003:045E:07DA.0012: probe with driver microsoft failed with error -22 [ 943.406878][T18248] netlink: 165 bytes leftover after parsing attributes in process `syz.0.18815'. [ 943.489277][T18254] devpts: Bad value for 'max' [ 943.506160][T11695] usb 2-1: USB disconnect, device number 39 [ 943.662336][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18812'. [ 943.902010][T18297] max out of range [ 944.113401][T18309] devtmpfs: Too few inodes for current use [ 944.223444][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18827'. [ 944.330410][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18831'. [ 944.525916][T18349] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.18838'. [ 944.658630][T18359] Bluetooth: MGMT ver 1.23 [ 944.722875][T18363] tipc: Enabling of bearer rejected, media not registered [ 944.920307][T18383] netlink: 'syz.0.18851': attribute type 1 has an invalid length. [ 944.928316][T18383] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.18851'. [ 945.165608][ T1592] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 945.346386][ T1592] usb 6-1: Using ep0 maxpacket: 16 [ 945.353388][ T1592] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.389166][ T1592] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.408925][ T1592] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 945.423326][ T1592] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 945.432828][ T1592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.446557][ T1592] usb 6-1: config 0 descriptor?? [ 945.907673][ T1592] hid_parser_main: 28 callbacks suppressed [ 945.907697][ T1592] megaworld 0003:07B5:0312.0013: unknown main item tag 0x0 [ 945.930466][ T1592] megaworld 0003:07B5:0312.0013: unknown main item tag 0x0 [ 945.938056][ T1592] megaworld 0003:07B5:0312.0013: unknown main item tag 0x0 [ 945.945850][ T1592] megaworld 0003:07B5:0312.0013: unknown main item tag 0x0 [ 945.953135][ T1592] megaworld 0003:07B5:0312.0013: unknown main item tag 0x0 [ 945.965040][ T1592] megaworld 0003:07B5:0312.0013: unknown main item tag 0x0 [ 945.975650][ T1592] megaworld 0003:07B5:0312.0013: unknown main item tag 0x0 [ 945.983812][ T1592] megaworld 0003:07B5:0312.0013: unknown main item tag 0x0 [ 945.998734][ T1592] megaworld 0003:07B5:0312.0013: unknown main item tag 0x0 [ 946.017625][ T1592] megaworld 0003:07B5:0312.0013: unknown main item tag 0x0 [ 946.070387][T18446] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.18876'. [ 946.072703][ T1592] megaworld 0003:07B5:0312.0013: hidraw0: USB HID v1.00 Device [HID 07b5:0312] on usb-dummy_hcd.5-1/input0 [ 946.131818][ T1592] megaworld 0003:07B5:0312.0013: no inputs found [ 946.157574][ T1592] usb 6-1: USB disconnect, device number 12 [ 946.312278][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18881'. [ 946.647662][T18493] x_tables: ip_tables: udp match: only valid for protocol 17 [ 947.125378][T18526] tipc: Started in network mode [ 947.130537][T18526] tipc: Node identity 010000000000008009, cluster identity 4711 [ 947.132102][T18530] xt_l2tp: missing protocol rule (udp|l2tpip) [ 947.901875][T11695] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 947.980680][ T29] audit: type=1326 audit(6291927234.701:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.5.18926" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f119019c799 code=0x0 [ 948.063285][T11695] usb 2-1: Using ep0 maxpacket: 16 [ 948.070843][T11695] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 948.079937][T11695] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.090300][T11695] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 948.101551][T11695] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 948.110883][T11695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.119012][T11695] usb 2-1: Product: syz [ 948.123189][T11695] usb 2-1: Manufacturer: syz [ 948.127946][T11695] usb 2-1: SerialNumber: syz [ 948.143528][T11695] usb 2-1: 0:2 : does not exist [ 948.798323][T11695] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 948.835920][T11695] usb 2-1: USB disconnect, device number 40 [ 950.778056][ T1601] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 950.961769][ T1601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 950.973225][ T1601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 950.984668][ T1601] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 951.000068][ T1601] usb 2-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 951.012475][ T1601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.026283][ T1601] usb 2-1: config 0 descriptor?? [ 951.031880][T18670] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 951.130837][T11695] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 951.291130][T11695] usb 6-1: Using ep0 maxpacket: 32 [ 951.298622][T11695] usb 6-1: unable to get BOS descriptor or descriptor too short [ 951.307522][T11695] usb 6-1: config 8 has an invalid interface number: 68 but max is 0 [ 951.316706][T11695] usb 6-1: config 8 has no interface number 0 [ 951.322949][T11695] usb 6-1: config 8 interface 68 has no altsetting 0 [ 951.332547][T11695] usb 6-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=46.37 [ 951.341915][T11695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.350080][T11695] usb 6-1: Product: syz [ 951.354311][T11695] usb 6-1: Manufacturer: syz [ 951.359378][T11695] usb 6-1: SerialNumber: syz [ 951.478897][ T1601] logitech-hidpp-device 0003:046D:C081.0014: ignoring exceeding usage max [ 951.491388][ T1601] logitech-hidpp-device 0003:046D:C081.0014: item fetching failed at offset 24/40 [ 951.502367][ T1601] logitech-hidpp-device 0003:046D:C081.0014: hidpp_probe:parse failed [ 951.510821][ T1601] logitech-hidpp-device 0003:046D:C081.0014: probe with driver logitech-hidpp-device failed with error -22 [ 951.587545][T11695] ums-freecom 6-1:8.68: USB Mass Storage device detected [ 951.649654][T11695] usb 6-1: USB disconnect, device number 13 [ 951.692046][ T1601] usb 2-1: USB disconnect, device number 41 [ 952.234033][T18745] vivid-001: disconnect [ 952.241609][T18744] vivid-001: reconnect [ 952.526997][T18768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18979'. [ 952.553096][T18768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18979'. [ 953.060751][T18807] devtmpfs: Too few inodes for current use [ 953.405365][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19005'. [ 953.544398][T18847] program syz.4.19011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 953.737053][T18862] vivid-001: disconnect [ 953.742160][T18861] vivid-001: reconnect [ 954.009384][T18884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19024'. [ 954.021518][T18884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19024'. [ 954.474392][T18922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19041'. [ 954.485197][T18922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19041'. [ 954.732487][T18945] netlink: 56 bytes leftover after parsing attributes in process `syz.0.19049'. [ 954.772381][T18942] ALSA: seq fatal error: cannot create timer (-19) [ 954.883779][ T47] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 954.924778][T18957] netlink: 100 bytes leftover after parsing attributes in process `syz.0.19054'. [ 955.067376][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 955.079896][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.092038][T18967] tipc: Enabling of bearer rejected, media not registered [ 955.093743][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.127913][ T47] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 955.148138][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.178672][ T47] usb 2-1: config 0 descriptor?? [ 955.249460][T18976] net_ratelimit: 2038 callbacks suppressed [ 955.249479][T18976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 955.271023][T18979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19069'. [ 955.657647][ T47] koneplus 0003:1E7D:2D51.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 955.845715][ T47] koneplus 0003:1E7D:2D51.0015: couldn't init struct koneplus_device [ 955.855599][ T47] koneplus 0003:1E7D:2D51.0015: couldn't install mouse [ 955.870421][ T47] koneplus 0003:1E7D:2D51.0015: probe with driver koneplus failed with error -71 [ 955.885553][ T47] usb 2-1: USB disconnect, device number 42 [ 956.164001][ T5442] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz1 [ 956.214602][T19047] fido_id[19047]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 957.523503][T19140] loop5: detected capacity change from 0 to 7 [ 957.531664][ C0] blk_print_req_error: 10 callbacks suppressed [ 957.531681][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.547140][ C0] buffer_io_error: 10 callbacks suppressed [ 957.547158][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 957.561331][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.570906][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 957.579486][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.579517][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 957.579732][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.579757][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 957.580062][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.580087][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 957.632005][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.641541][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 957.650367][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.659607][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 957.667689][T19140] ldm_validate_partition_table(): Disk read failed. [ 957.675134][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.684407][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 957.692823][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.702164][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 957.711195][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 957.720634][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 957.729452][T19140] Dev loop5: unable to read RDB block 0 [ 957.735897][T19140] loop5: unable to read partition table [ 957.742446][T19140] loop5: partition table beyond EOD, truncated [ 957.748790][T19140] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 958.507873][T19156] tipc: Enabling of bearer rejected, media not registered [ 960.475229][T19195] program syz.0.19121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 960.722870][T19221] __nla_validate_parse: 1 callbacks suppressed [ 960.722889][T19221] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19135'. [ 960.739923][T19221] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19135'. [ 961.019436][T19247] sg_write: data in/out 434652/160 bytes for SCSI command 0x0-- guessing data in; [ 961.019436][T19247] program syz.0.19144 not setting count and/or reply_len properly [ 961.537645][T19288] comedi comedi3: no devices specified [ 961.621949][T19295] tmpfs: Bad value for 'nr_inodes' [ 961.929694][ T47] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 962.100785][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 962.109598][ T47] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 962.119049][ T47] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 962.127347][ T47] usb 6-1: Product: syz [ 962.131536][ T47] usb 6-1: Manufacturer: syz [ 962.136400][ T47] usb 6-1: SerialNumber: syz [ 962.143730][ T47] usb 6-1: config 0 descriptor?? [ 962.368648][T11695] usb 6-1: USB disconnect, device number 14 [ 962.604934][ T29] audit: type=1326 audit(6291927248.375:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19304 comm="syz.0.19167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73c79c799 code=0x7fc00000 [ 962.656585][T19329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19169'. [ 962.731856][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19170'. [ 963.090879][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19175'. [ 963.799433][T19391] No buffer was provided with the request [ 964.134922][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19201'. [ 964.263481][T19423] netlink: 165 bytes leftover after parsing attributes in process `syz.4.19207'. [ 964.316988][T19429] netlink: 'syz.1.19209': attribute type 10 has an invalid length. [ 964.325257][T19429] netlink: 152 bytes leftover after parsing attributes in process `syz.1.19209'. [ 964.605769][T19448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 966.665836][T19576] netlink: 'syz.1.19259': attribute type 1 has an invalid length. [ 966.688635][T19576] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.19259'. [ 966.858028][T19588] genirq: Flags mismatch irq 3. 00200000 (das16m1) vs. 00200000 (pcl812) [ 967.653447][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19276'. [ 967.666233][T19625] ALSA: mixer_oss: invalid index 100000 [ 968.059980][T19637] netlink: 'syz.0.19282': attribute type 29 has an invalid length. [ 968.089199][T19637] netlink: 'syz.0.19282': attribute type 29 has an invalid length. [ 968.445118][T19653] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19289'. [ 969.824793][T19517] Set syz1 is full, maxelem 65536 reached [ 969.995047][T19708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19312'. [ 970.062036][T19712] ALSA: mixer_oss: invalid index 100000 [ 970.228252][T19723] netlink: 'syz.5.19316': attribute type 29 has an invalid length. [ 970.244323][T19723] netlink: 'syz.5.19316': attribute type 29 has an invalid length. [ 970.303413][T19728] xt_l2tp: missing protocol rule (udp|l2tpip) [ 971.554845][T19825] program syz.1.19356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 971.628494][T19830] netlink: 'syz.5.19358': attribute type 1 has an invalid length. [ 971.636520][T19830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19358'. [ 971.646399][T19830] netlink: 'syz.5.19358': attribute type 1 has an invalid length. [ 971.823926][T19842] netlink: 'syz.5.19362': attribute type 1 has an invalid length. [ 971.834513][T19842] nbd: error processing sock list [ 972.635122][T19867] sock: sock_timestamping_bind_phc: sock not bind to device [ 973.135183][ T1601] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 973.316713][ T1601] usb 2-1: Using ep0 maxpacket: 16 [ 973.327588][ T1601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 973.341654][ T1601] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 973.357339][ T1601] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 973.367270][ T1601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.392075][ T1601] usb 2-1: config 0 descriptor?? [ 973.733674][T19946] program syz.4.19398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 973.883492][ T1601] uclogic 0003:28BD:0055.0017: interface is invalid, ignoring [ 974.054463][T19970] Bluetooth: MGMT ver 1.23 [ 974.083012][ T5442] usb 2-1: USB disconnect, device number 43 [ 974.139275][T19988] CIFS: Unable to determine destination address [ 974.295973][T20000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19415'. [ 974.305444][T20000] block nbd0: Unsupported socket: should be TCP or UNIX. [ 974.343144][ T47] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 974.547996][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.558991][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.568907][ T47] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 974.577974][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.590016][ T47] usb 6-1: config 0 descriptor?? [ 975.040334][ T47] arvo 0003:1E7D:30D4.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 975.249148][ T47] arvo 0003:1E7D:30D4.0018: couldn't init struct arvo_device [ 975.260603][ T47] arvo 0003:1E7D:30D4.0018: couldn't install keyboard [ 975.309668][ T47] arvo 0003:1E7D:30D4.0018: probe with driver arvo failed with error -71 [ 975.341941][ T47] usb 6-1: USB disconnect, device number 15 [ 975.434698][T20031] x_tables: ip_tables: DNAT.0 target: invalid size 24 (kernel) != (user) 32 [ 975.694283][T20042] xt_l2tp: v2 sid > 0xffff: 1114112 [ 976.141775][T20062] netlink: 100 bytes leftover after parsing attributes in process `syz.4.19435'. [ 976.556839][T20092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19449'. [ 976.930742][T11695] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 976.980204][T20132] CIFS: Unable to determine destination address [ 977.114481][T11695] usb 6-1: Using ep0 maxpacket: 16 [ 977.124387][T11695] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 977.147718][T11695] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 977.162607][T11695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.178530][T11695] usb 6-1: config 0 descriptor?? [ 977.372861][T20157] binder: 20156:20157 ioctl c0306201 0 returned -14 [ 977.385109][T20157] binder: 20156:20157 ioctl c0306201 2000000000c0 returned -11 [ 977.642477][T11695] hid_parser_main: 28 callbacks suppressed [ 977.642498][T11695] logitech 0003:046D:C294.0019: unknown main item tag 0x0 [ 977.668285][T11695] logitech 0003:046D:C294.0019: unknown main item tag 0x0 [ 977.676883][T11695] logitech 0003:046D:C294.0019: unknown main item tag 0x0 [ 977.687922][T11695] logitech 0003:046D:C294.0019: unknown main item tag 0x0 [ 977.699325][T11695] logitech 0003:046D:C294.0019: unknown main item tag 0x0 [ 977.707405][T11695] logitech 0003:046D:C294.0019: unknown main item tag 0x0 [ 977.726187][T11695] logitech 0003:046D:C294.0019: unknown main item tag 0x0 [ 977.734008][T11695] logitech 0003:046D:C294.0019: unknown main item tag 0x0 [ 977.741218][T11695] logitech 0003:046D:C294.0019: unknown main item tag 0x0 [ 977.760692][T11695] logitech 0003:046D:C294.0019: unknown main item tag 0x0 [ 977.774465][T11695] logitech 0003:046D:C294.0019: hidraw0: USB HID v0.09 Device [HID 046d:c294] on usb-dummy_hcd.5-1/input0 [ 977.796565][T11695] logitech 0003:046D:C294.0019: no inputs found [ 977.880719][T11695] usb 6-1: USB disconnect, device number 16 [ 977.994426][T20206] tipc: Started in network mode [ 977.999843][T20206] tipc: Node identity 2, cluster identity 3142 [ 978.006126][T20206] tipc: Node number set to 2 [ 978.521590][T20238] IPVS: ip_vs_edit_dest(): server weight less than zero [ 978.981202][T20271] netlink: 277 bytes leftover after parsing attributes in process `syz.5.19506'. [ 979.838916][T11695] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 980.011244][T11695] usb 6-1: Using ep0 maxpacket: 32 [ 980.024805][T11695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.057514][T11695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.093061][T11695] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 980.093092][T11695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.104456][T11695] usb 6-1: config 0 descriptor?? [ 980.199317][ T30] INFO: task syz.3.15996:10213 blocked for more than 143 seconds. [ 980.199367][ T30] Tainted: G L syzkaller #0 [ 980.199379][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 980.199388][ T30] task:syz.3.15996 state:D stack:27104 pid:10213 tgid:10212 ppid:6160 task_flags:0x400140 flags:0x00080002 [ 980.199437][ T30] Call Trace: [ 980.199446][ T30] [ 980.199458][ T30] __schedule+0x165c/0x5520 [ 980.199536][ T30] ? __pfx___schedule+0x10/0x10 [ 980.199567][ T30] ? schedule+0x90/0x360 [ 980.199592][ T30] schedule+0x164/0x360 [ 980.199613][ T30] schedule_preempt_disabled+0x13/0x30 [ 980.199653][ T30] __mutex_lock+0x856/0x1420 [ 980.199679][ T30] ? __mutex_lock+0x5fc/0x1420 [ 980.199701][ T30] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 980.199726][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 980.199762][ T30] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 980.199811][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 980.199838][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 980.199856][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 980.199879][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 980.199896][ T30] ? __asan_memcpy+0x40/0x70 [ 980.199947][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 980.199973][ T30] ? bpf_lsm_capable+0x9/0x20 [ 980.199992][ T30] ? security_capable+0x7e/0x2c0 [ 980.200067][ T30] genl_rcv_msg+0x61c/0x7a0 [ 980.200119][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 980.200137][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 980.200161][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 980.200181][ T30] ? __skb_clone+0x63/0x7a0 [ 980.200211][ T30] netlink_rcv_skb+0x232/0x4b0 [ 980.200255][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 980.200272][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 980.200291][ T30] ? genl_rcv+0x19/0x40 [ 980.200323][ T30] ? down_read+0x270/0x2e0 [ 980.200339][ T30] ? genl_rcv+0xd/0x40 [ 980.200356][ T30] genl_rcv+0x28/0x40 [ 980.402198][ T30] netlink_unicast+0x80f/0x9b0 [ 980.402243][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 980.402266][ T30] ? netlink_sendmsg+0x650/0xb40 [ 980.402287][ T30] ? skb_put+0x11b/0x210 [ 980.402337][ T30] netlink_sendmsg+0x813/0xb40 [ 980.402368][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 980.402394][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 980.402413][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 980.511877][ T30] ____sys_sendmsg+0x972/0x9f0 [ 980.517296][ T30] ? __might_fault+0xaf/0x130 [ 980.522104][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 980.528131][ T30] ? import_iovec+0x73/0xa0 [ 980.532800][ T30] ___sys_sendmsg+0x2a5/0x360 [ 980.574584][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 980.587156][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 980.594102][ T30] ? futex_wait+0x2a2/0x390 [ 980.603651][ T30] ? __fget_files+0x2a/0x420 [ 980.611944][ T30] ? __fget_files+0x3a0/0x420 [ 980.618885][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 980.633650][T11695] koneplus 0003:1E7D:2D51.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 980.656453][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 980.669964][ T30] ? rcu_is_watching+0x15/0xb0 [ 980.694228][ T30] do_syscall_64+0x14d/0xf80 [ 980.699047][ T30] ? trace_irq_disable+0x3b/0x140 [ 980.707683][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.725906][ T30] ? clear_bhb_loop+0x40/0x90 [ 980.739210][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.758696][ T30] RIP: 0033:0x7f3a13d9c799 [ 980.763215][ T30] RSP: 002b:00007f3a14d03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 980.794182][ T30] RAX: ffffffffffffffda RBX: 00007f3a14015fa0 RCX: 00007f3a13d9c799 [ 980.807934][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 980.821307][ T30] RBP: 00007f3a13e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 980.831084][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.843987][T11695] koneplus 0003:1E7D:2D51.001A: couldn't init struct koneplus_device [ 980.852891][T11695] koneplus 0003:1E7D:2D51.001A: couldn't install mouse [ 980.860072][ T30] R13: 00007f3a14016038 R14: 00007f3a14015fa0 R15: 00007ffff6d62f68 [ 980.871522][ T30] [ 980.879817][T11695] koneplus 0003:1E7D:2D51.001A: probe with driver koneplus failed with error -71 [ 980.905817][ T30] [ 980.905817][ T30] Showing all locks held in the system: [ 980.928557][ T30] 1 lock held by khungtaskd/30: [ 980.933885][T11695] usb 6-1: USB disconnect, device number 17 [ 980.946192][ T30] #0: ffffffff8eb5d420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 980.971373][ T30] 2 locks held by getty/5593: [ 981.003981][ T30] #0: ffff888036fe80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 981.015843][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 981.038345][ T30] 2 locks held by syz-executor/5824: [ 981.046945][ T30] #0: ffff8880b873ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 981.068350][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 981.089703][ T30] 2 locks held by syz.2.13536/3604: [ 981.094985][ T30] #0: ffffffff90064f08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 981.111272][ T30] #1: ffffffff8ee87660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 981.135040][ T30] 2 locks held by syz.3.15996/10213: [ 981.141988][ T30] #0: ffffffff90064f08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 981.165133][ T30] #1: ffffffff8ee87660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 981.178614][ T30] 1 lock held by syz.1.19527/20345: [ 981.196604][ T30] 1 lock held by dhcpcd-run-hook/20386: [ 981.202246][ T30] [ 981.204584][ T30] ============================================= [ 981.204584][ T30] [ 981.309232][ T30] NMI backtrace for cpu 0 [ 981.309251][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 981.309271][ T30] Tainted: [L]=SOFTLOCKUP [ 981.309278][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.309287][ T30] Call Trace: [ 981.309295][ T30] [ 981.309302][ T30] dump_stack_lvl+0xe8/0x150 [ 981.309329][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 981.309349][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 981.309372][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 981.309392][ T30] sys_info+0x135/0x170 [ 981.309408][ T30] watchdog+0xfd3/0x1030 [ 981.309433][ T30] ? watchdog+0x1c9/0x1030 [ 981.309456][ T30] kthread+0x388/0x470 [ 981.309474][ T30] ? __pfx_watchdog+0x10/0x10 [ 981.309490][ T30] ? __pfx_kthread+0x10/0x10 [ 981.309509][ T30] ret_from_fork+0x51e/0xb90 [ 981.309531][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 981.309550][ T30] ? __switch_to+0xc7d/0x1420 [ 981.309572][ T30] ? __pfx_kthread+0x10/0x10 [ 981.309589][ T30] ret_from_fork_asm+0x1a/0x30 [ 981.309617][ T30] [ 981.309623][ T30] Sending NMI from CPU 0 to CPUs 1: [ 981.426502][ C1] NMI backtrace for cpu 1 [ 981.426531][ C1] CPU: 1 UID: 0 PID: 20345 Comm: syz.1.19527 Tainted: G L syzkaller #0 PREEMPT(full) [ 981.426554][ C1] Tainted: [L]=SOFTLOCKUP [ 981.426560][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.426570][ C1] RIP: 0010:__lock_acquire+0x35e/0x2cf0 [ 981.426598][ C1] Code: 09 d4 41 09 cc 41 09 dc 45 89 64 c7 20 41 89 7c c7 24 4c 89 7c 24 20 4d 8d 2c c7 41 81 e4 ff 1f 00 00 4c 0f a3 25 82 07 c8 12 <73> 15 49 69 c4 c8 00 00 00 48 8d 80 70 b3 0b 94 4c 8b 74 24 08 eb [ 981.426612][ C1] RSP: 0018:ffffc9000655e310 EFLAGS: 00000003 [ 981.426627][ C1] RAX: 000000000000000a RBX: 0000000000020000 RCX: 0000000000000007 [ 981.426638][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 981.426647][ C1] RBP: 0000000000000002 R08: ffffffff81776696 R09: ffffffff8eb5d420 [ 981.426658][ C1] R10: ffffc9000655e618 R11: ffffffff81b1d0f0 R12: 0000000000000007 [ 981.426668][ C1] R13: ffff88803c79c8a0 R14: ffff88803c79bd00 R15: ffff88803c79c850 [ 981.426680][ C1] FS: 00007f25c9f046c0(0000) GS:ffff8881250f2000(0000) knlGS:0000000000000000 [ 981.426693][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 981.426704][ C1] CR2: 00007fa62cfd090f CR3: 000000004b20e000 CR4: 00000000003526f0 [ 981.426718][ C1] Call Trace: [ 981.426724][ C1] [ 981.426731][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 981.426756][ C1] ? unwind_next_frame+0xa6/0x2550 [ 981.426771][ C1] ? lock_acquire+0x106/0x350 [ 981.426798][ C1] ? unwind_next_frame+0xa6/0x2550 [ 981.426811][ C1] lock_acquire+0x106/0x350 [ 981.426832][ C1] ? unwind_next_frame+0xa6/0x2550 [ 981.426849][ C1] ? unwind_next_frame+0xa6/0x2550 [ 981.426863][ C1] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 981.426886][ C1] ? unwind_next_frame+0xa6/0x2550 [ 981.426900][ C1] unwind_next_frame+0xc3/0x2550 [ 981.426913][ C1] ? unwind_next_frame+0xa6/0x2550 [ 981.426930][ C1] ? unwind_next_frame+0xa6/0x2550 [ 981.426944][ C1] ? ___sys_sendmsg+0x2a5/0x360 [ 981.426965][ C1] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 981.426988][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 981.427007][ C1] arch_stack_walk+0x11b/0x150 [ 981.427024][ C1] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 981.427048][ C1] stack_trace_save+0xa9/0x100 [ 981.427066][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 981.427084][ C1] ? stack_depot_save_flags+0x33/0x810 [ 981.427107][ C1] kasan_save_track+0x3e/0x80 [ 981.427120][ C1] ? kasan_save_track+0x3e/0x80 [ 981.427133][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 981.427147][ C1] ? __kmalloc_noprof+0x35c/0x760 [ 981.427161][ C1] ? hash_ipportip4_resize+0xa58/0x1ae0 [ 981.427182][ C1] ? call_ad+0x463/0xb60 [ 981.427196][ C1] ? ip_set_ad+0x824/0x9d0 [ 981.427210][ C1] ? nfnetlink_rcv_msg+0xc03/0x12c0 [ 981.427228][ C1] ? netlink_rcv_skb+0x232/0x4b0 [ 981.427245][ C1] ? nfnetlink_rcv+0x2c0/0x27b0 [ 981.427261][ C1] ? netlink_unicast+0x80f/0x9b0 [ 981.427276][ C1] ? netlink_sendmsg+0x813/0xb40 [ 981.427299][ C1] ? ____sys_sendmsg+0x972/0x9f0 [ 981.427320][ C1] ? ___sys_sendmsg+0x2a5/0x360 [ 981.427341][ C1] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 981.427378][ C1] __kasan_kmalloc+0x93/0xb0 [ 981.427392][ C1] __kmalloc_noprof+0x35c/0x760 [ 981.427407][ C1] ? hash_ipportip4_resize+0xa58/0x1ae0 [ 981.427426][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 981.427442][ C1] hash_ipportip4_resize+0xa58/0x1ae0 [ 981.427464][ C1] ? hash_ipportip4_resize+0x5a8/0x1ae0 [ 981.427494][ C1] call_ad+0x463/0xb60 [ 981.427512][ C1] ? __pfx_call_ad+0x10/0x10 [ 981.427526][ C1] ? ip_set_pernet+0x23/0x240 [ 981.427544][ C1] ? __nla_parse+0x40/0x60 [ 981.427567][ C1] ip_set_ad+0x824/0x9d0 [ 981.427584][ C1] ? __pfx_ip_set_ad+0x10/0x10 [ 981.427613][ C1] nfnetlink_rcv_msg+0xc03/0x12c0 [ 981.427630][ C1] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 981.427654][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 981.427680][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 981.427704][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 981.427727][ C1] netlink_rcv_skb+0x232/0x4b0 [ 981.427746][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 981.427764][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 981.427786][ C1] ? bpf_lsm_capable+0x9/0x20 [ 981.427808][ C1] ? security_capable+0x7e/0x2c0 [ 981.427833][ C1] nfnetlink_rcv+0x2c0/0x27b0 [ 981.427850][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 981.427871][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 981.427891][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 981.427912][ C1] ? kernel_text_address+0xa5/0xe0 [ 981.427931][ C1] ? __kernel_text_address+0xd/0x30 [ 981.427949][ C1] ? unwind_get_return_address+0x4d/0x90 [ 981.427967][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 981.427985][ C1] ? arch_stack_walk+0xfb/0x150 [ 981.428001][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 981.428022][ C1] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 981.428039][ C1] ? stack_trace_save+0xa9/0x100 [ 981.428056][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 981.428075][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 981.428099][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 981.428123][ C1] ? __netlink_lookup+0xc6/0x8b0 [ 981.428147][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.428166][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.428187][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.428208][ C1] netlink_unicast+0x80f/0x9b0 [ 981.428228][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 981.428245][ C1] ? netlink_sendmsg+0x650/0xb40 [ 981.428264][ C1] ? skb_put+0x11b/0x210 [ 981.428285][ C1] netlink_sendmsg+0x813/0xb40 [ 981.428308][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.428328][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 981.428343][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 981.428366][ C1] ____sys_sendmsg+0x972/0x9f0 [ 981.428388][ C1] ? __might_fault+0xaf/0x130 [ 981.428412][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.428437][ C1] ? import_iovec+0x73/0xa0 [ 981.428460][ C1] ___sys_sendmsg+0x2a5/0x360 [ 981.428481][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 981.428504][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.428528][ C1] ? futex_wait+0x2a2/0x390 [ 981.428554][ C1] ? __fget_files+0x2a/0x420 [ 981.428574][ C1] ? __fget_files+0x3a0/0x420 [ 981.428597][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 981.428620][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 981.428646][ C1] ? rcu_is_watching+0x15/0xb0 [ 981.428664][ C1] do_syscall_64+0x14d/0xf80 [ 981.428685][ C1] ? trace_irq_disable+0x3b/0x140 [ 981.428702][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.428718][ C1] ? clear_bhb_loop+0x40/0x90 [ 981.428734][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.428749][ C1] RIP: 0033:0x7f25c8f9c799 [ 981.428763][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.428775][ C1] RSP: 002b:00007f25c9f04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.428797][ C1] RAX: ffffffffffffffda RBX: 00007f25c9215fa0 RCX: 00007f25c8f9c799 [ 981.428808][ C1] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 981.428819][ C1] RBP: 00007f25c9032c99 R08: 0000000000000000 R09: 0000000000000000 [ 981.428829][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.428838][ C1] R13: 00007f25c9216038 R14: 00007f25c9215fa0 R15: 00007ffedaefe828 [ 981.428856][ C1] [ 982.160690][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 982.167570][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 982.178232][ T30] Tainted: [L]=SOFTLOCKUP [ 982.182824][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 982.193061][ T30] Call Trace: [ 982.196338][ T30] [ 982.199260][ T30] vpanic+0x56c/0xa60 [ 982.203242][ T30] ? __pfx___schedule+0x10/0x10 [ 982.208099][ T30] ? __pfx_vpanic+0x10/0x10 [ 982.212699][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 982.218866][ T30] panic+0xc5/0xd0 [ 982.222585][ T30] ? __pfx_panic+0x10/0x10 [ 982.226988][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 982.232360][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 982.238509][ T30] watchdog+0x102c/0x1030 [ 982.242845][ T30] ? watchdog+0x1c9/0x1030 [ 982.247337][ T30] kthread+0x388/0x470 [ 982.251489][ T30] ? __pfx_watchdog+0x10/0x10 [ 982.256152][ T30] ? __pfx_kthread+0x10/0x10 [ 982.260728][ T30] ret_from_fork+0x51e/0xb90 [ 982.265666][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 982.270860][ T30] ? __switch_to+0xc7d/0x1420 [ 982.275544][ T30] ? __pfx_kthread+0x10/0x10 [ 982.280129][ T30] ret_from_fork_asm+0x1a/0x30 [ 982.284894][ T30] [ 982.288612][ T30] Kernel Offset: disabled [ 982.292932][ T30] Rebooting in 86400 seconds..