last executing test programs: 1m38.820737321s ago: executing program 3 (id=3125): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x922000000001, 0x106) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x7f) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r0], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1m38.819561408s ago: executing program 3 (id=3126): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000040)=""/119, 0x77) 1m35.751633003s ago: executing program 3 (id=3148): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 1m35.701558507s ago: executing program 3 (id=3150): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 1m35.701287625s ago: executing program 3 (id=3151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000004180)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdfd45c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1m35.416986627s ago: executing program 3 (id=3157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xf, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1m35.341415652s ago: executing program 32 (id=3157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xf, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.869841397s ago: executing program 0 (id=4095): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x2, 0x10058, 0x1}, 0x50) 1.788203477s ago: executing program 1 (id=4097): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x1010108, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000035c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000000200)="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", 0x2000, &(0x7f0000005900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.707667328s ago: executing program 1 (id=4098): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x0, 0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="40100100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 1.660790767s ago: executing program 0 (id=4100): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x40, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x6, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xb000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcb, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0x10000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.660363694s ago: executing program 4 (id=4101): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.540961646s ago: executing program 0 (id=4102): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.390874969s ago: executing program 0 (id=4103): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r5 = fsopen(0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) openat$cgroup_int(r6, 0x0, 0x2, 0x0) 1.259171289s ago: executing program 0 (id=4105): mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x1f7) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) utimes(&(0x7f0000000080)='./my_configfs\x00', 0x0) 1.258403641s ago: executing program 0 (id=4107): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88000000100039040200"/20, @ANYRES32=0x0, @ANYBLOB="40100000000000000a000100977774604b7e00005c00128008000100677265005000028005000a0000000000060003000400000005001600020000000800", @ANYRES32=0x0, @ANYBLOB="060018000700f6ff08001400000000000500080005000000040012"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/35, 0x23) 1.111492498s ago: executing program 1 (id=4108): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) 1.00118886s ago: executing program 1 (id=4109): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x4f3, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x8, 0x3ff, 0x8, 0x0, "91b12b949d7950895eea22bced3dd6bfcdd10b7bdd41fabe4fa0b935ca76101ae3dc63d753695d30467e70a084e46bb668a0e330141d490f08078ea29f67b3169e5b436ed3a93b1b980aed36876a343c3e39ff0ea33380358c1d8f46b9cca39e70908e76d855b4a3884375b13bfe4f3e911c7e9e72c6852e3f5635bc2994f969"}) 970.305116ms ago: executing program 1 (id=4110): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000680)={@flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x100b}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/229, 0xe5}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 910.680919ms ago: executing program 1 (id=4111): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpeername$unix(r1, &(0x7f00000001c0), 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000240)=[{}, {}, {}, {}], 0x4, 0x404) socket(0x10, 0x803, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d0102030109021a00"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0xfffffffffffffda8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 671.167338ms ago: executing program 4 (id=4112): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xfc}}, 0x840) 291.036973ms ago: executing program 2 (id=4113): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000680), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 290.801111ms ago: executing program 2 (id=4114): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r5 = fsopen(0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) openat$cgroup_int(r6, 0x0, 0x2, 0x0) 200.977304ms ago: executing program 2 (id=4115): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x40, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x6, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xb000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcb, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0x10000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 200.697272ms ago: executing program 2 (id=4116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d"], 0x34}}, 0x14) 124.958553ms ago: executing program 2 (id=4117): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 124.59204ms ago: executing program 4 (id=4118): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) unlink(&(0x7f00000000c0)='./file0/file1\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000500)=""/149, 0x95) 60.799072ms ago: executing program 4 (id=4119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000680)={@flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x100b}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/229, 0xe5}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 60.400597ms ago: executing program 4 (id=4120): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000010401f007000000000000b0e64cc30506000640000000000a000200fffffffe080000000500010001"], 0x30}}, 0x24004000) 225.719µs ago: executing program 2 (id=4121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @private=0xa010100}], 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 0s ago: executing program 4 (id=4122): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 15] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 896.117950][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 896.268087][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 896.270432][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 896.271993][T17058] bridge4: entered promiscuous mode [ 896.274555][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 896.280116][ T9] usb 6-1: config 0 has no interface number 0 [ 896.282176][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 896.286247][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 896.290008][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 896.293436][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 896.296508][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 896.300536][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.305376][ T9] usb 6-1: config 0 descriptor?? [ 896.311573][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 896.513349][T17050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.518144][T15102] usb 6-1: USB disconnect, device number 28 [ 896.523311][T15102] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 897.740940][ T42] audit: type=1326 audit(1786305866.746:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.1.3043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 897.758330][ T42] audit: type=1326 audit(1786305866.746:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.1.3043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 897.765558][ T42] audit: type=1326 audit(1786305866.746:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.1.3043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 897.775072][ T42] audit: type=1326 audit(1786305866.746:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.1.3043" exe="/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 897.782439][ T42] audit: type=1326 audit(1786305866.746:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.1.3043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 897.789154][ T42] audit: type=1326 audit(1786305866.746:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.1.3043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 897.795923][ T42] audit: type=1326 audit(1786305866.746:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.1.3043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 897.802521][ T42] audit: type=1326 audit(1786305866.746:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.1.3043" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 897.810217][ T42] audit: type=1326 audit(1786305866.746:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.1.3043" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 897.821398][ T5815] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 897.827361][ T5815] asix 8-1:0.34: probe with driver asix failed with error -71 [ 897.841588][ T5815] usb 8-1: USB disconnect, device number 23 [ 897.861719][T17088] syzkaller0: entered promiscuous mode [ 897.863478][T17088] syzkaller0: entered allmulticast mode [ 897.901437][T17091] bridge5: entered promiscuous mode [ 898.041212][T17096] UDC core: g1: couldn't find an available UDC or it's busy [ 899.009256][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3062'. [ 899.387796][T15102] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 899.538728][T15102] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 899.543963][T15102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.546601][T15102] usb 6-1: Product: syz [ 899.547956][T15102] usb 6-1: Manufacturer: syz [ 899.549420][T15102] usb 6-1: SerialNumber: syz [ 899.555058][T15102] usb 6-1: config 0 descriptor?? [ 899.767075][T15102] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 900.080376][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3074'. [ 900.116754][T17149] netlink: 'syz.2.3076': attribute type 1 has an invalid length. [ 900.119076][T17149] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3076'. [ 900.121755][T17149] netlink: 'syz.2.3076': attribute type 2 has an invalid length. [ 900.124078][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3076'. [ 900.430403][T17160] netlink: 'syz.3.3081': attribute type 4 has an invalid length. [ 900.458106][ T998] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 900.484367][T17162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3082'. [ 900.585726][T17166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3084'. [ 900.639260][ T998] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 900.643703][ T998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.647582][ T998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.656332][ T998] usb 7-1: config 0 descriptor?? [ 900.686728][T17174] syzkaller0: entered promiscuous mode [ 900.688879][T17174] syzkaller0: entered allmulticast mode [ 900.863181][ T998] usbhid 7-1:0.0: can't add hid device: -71 [ 900.864975][ T998] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 900.875248][ T998] usb 7-1: USB disconnect, device number 35 [ 901.028477][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3091'. [ 901.183863][T15102] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 901.188106][T15102] usb 6-1: USB disconnect, device number 29 [ 901.197646][T17193] syzkaller0: entered promiscuous mode [ 901.199757][T17193] syzkaller0: entered allmulticast mode [ 901.325712][T17195] netlink: 'syz.0.3097': attribute type 2 has an invalid length. [ 901.328271][T17195] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3097'. [ 901.399629][T13697] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 901.408467][ T998] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 901.567755][ T998] usb 7-1: Using ep0 maxpacket: 32 [ 901.569867][ T998] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 901.573889][ T998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.577361][ T998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.582108][ T998] usb 7-1: config 0 descriptor?? [ 901.585547][ T998] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 901.590830][ T998] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 901.640221][T17206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3102'. [ 901.770612][T17217] netlink: 'syz.1.3107': attribute type 2 has an invalid length. [ 901.773740][T17217] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3107'. [ 901.807827][T15102] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 901.823195][T13697] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 901.988408][T15102] usb 5-1: Using ep0 maxpacket: 8 [ 901.990840][T15102] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 901.994826][T15102] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 901.999225][T15102] usb 5-1: config 0 has no interface number 0 [ 902.001998][T15102] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 902.005673][T15102] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 902.010130][T15102] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 902.013952][T15102] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 902.017144][T15102] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 902.022163][T15102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.027102][T15102] usb 5-1: config 0 descriptor?? [ 902.032914][T15102] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 902.238165][T17203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.244414][ T5829] usb 5-1: USB disconnect, device number 31 [ 902.255520][ T5829] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 902.537847][T15102] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 902.689195][T15102] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 902.693174][T15102] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.697533][T15102] usb 6-1: config 0 descriptor?? [ 902.702027][T15102] cp210x 6-1:0.0: cp210x converter detected [ 902.790642][T17237] netlink: 'syz.0.3116': attribute type 2 has an invalid length. [ 902.864757][T17240] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 903.104363][T15102] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 903.223729][ T9748] usb 7-1: USB disconnect, device number 36 [ 903.231715][ T9748] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 903.259055][T13697] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 903.308584][T15102] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 903.311084][T15102] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 903.315770][T15102] usb 6-1: cp210x converter now attached to ttyUSB0 [ 903.319274][T15102] usb 6-1: USB disconnect, device number 30 [ 903.324362][ T5741] udevd[5741]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 903.324682][T15102] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 903.331038][T15102] cp210x 6-1:0.0: device disconnected [ 903.543953][T17259] netlink: 'syz.3.3125': attribute type 2 has an invalid length. [ 903.758416][T13697] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 903.798656][T14043] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 903.830113][ T5829] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 903.971971][T17276] Bluetooth: MGMT ver 1.23 [ 903.977934][T14043] usb 7-1: Using ep0 maxpacket: 8 [ 903.982372][T14043] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 903.989516][T14043] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 903.992038][T14043] usb 7-1: config 0 has no interface number 0 [ 903.994627][T14043] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 903.998107][T14043] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 903.998766][ T5829] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 904.001524][T14043] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 904.001546][T14043] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 904.001557][T14043] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 904.001584][T14043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.006602][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.010339][T14043] usb 7-1: config 0 descriptor?? [ 904.016594][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.021640][T14043] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 904.030569][ T5829] usb 8-1: config 0 descriptor?? [ 904.242312][ T5829] usbhid 8-1:0.0: can't add hid device: -71 [ 904.244253][ T5829] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 904.249332][ T5829] usb 8-1: USB disconnect, device number 24 [ 904.279973][T17282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.450934][T15102] usb 7-1: USB disconnect, device number 37 [ 904.457531][T15102] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 904.687859][ T9748] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 904.847956][ T9748] usb 8-1: Using ep0 maxpacket: 32 [ 904.850671][ T9748] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 904.854835][ T9748] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.859316][ T9748] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.866010][ T9748] usb 8-1: config 0 descriptor?? [ 904.870192][ T9748] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 904.875312][ T9748] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 904.956816][T17289] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 904.960754][T17289] block device autoloading is deprecated and will be removed. [ 904.965697][T17288] md: md2 stopped. [ 905.005960][T13697] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 905.175751][T17303] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 905.277816][ T9748] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 905.437818][ T9748] usb 6-1: Using ep0 maxpacket: 32 [ 905.440534][ T9748] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 905.445381][ T9748] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 905.448819][ T9748] usb 6-1: config 0 has no interface number 0 [ 905.453514][ T9748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.456983][ T9748] usb 6-1: Product: syz [ 905.458833][ T9748] usb 6-1: Manufacturer: syz [ 905.460724][ T9748] usb 6-1: SerialNumber: syz [ 905.465169][ T9748] usb 6-1: config 0 descriptor?? [ 905.879978][ T9748] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 905.883618][ T9748] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 906.289172][ T9748] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 906.302717][ T9748] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 906.309027][ T9748] usb 6-1: USB disconnect, device number 31 [ 906.597205][ T5822] usb 8-1: USB disconnect, device number 25 [ 906.604153][ T5822] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 906.877897][ T41] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 906.928215][T17329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 906.995984][T17333] netlink: 'syz.1.3156': attribute type 5 has an invalid length. [ 906.998605][T17333] netlink: 'syz.1.3156': attribute type 6 has an invalid length. [ 907.001279][T17333] __nla_validate_parse: 2 callbacks suppressed [ 907.001312][T17333] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3156'. [ 907.029219][ T41] usb 7-1: Using ep0 maxpacket: 8 [ 907.078330][ T41] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 907.102463][ T41] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 907.105967][ T41] usb 7-1: config 0 has no interface number 0 [ 907.108155][ T41] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 907.112510][ T41] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 907.116682][ T41] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 907.121154][ T41] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 907.124657][ T41] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 907.128933][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.177053][T13967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 907.192503][T13967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 907.200168][T13967] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 907.210932][T13967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 907.218937][T13967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 907.295221][ T41] usb 7-1: config 0 descriptor?? [ 907.394154][ T41] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 907.618623][T17316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.622809][ T9748] usb 7-1: USB disconnect, device number 38 [ 907.629540][ T9748] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 907.818191][T17351] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 907.845888][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'. [ 907.864582][T17356] netlink: 'syz.1.3159': attribute type 2 has an invalid length. [ 907.867484][T17356] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3159'. [ 907.879544][T17335] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.882485][T17335] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.885985][T17335] bridge_slave_0: entered allmulticast mode [ 907.894203][T17335] bridge_slave_0: entered promiscuous mode [ 907.899105][T17335] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.901927][T17335] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.904693][T17335] bridge_slave_1: entered allmulticast mode [ 907.908394][T17335] bridge_slave_1: entered promiscuous mode [ 907.931192][T17335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.935937][T17335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.952302][T17335] team0: Port device team_slave_0 added [ 907.955617][T17335] team0: Port device team_slave_1 added [ 907.971292][T17335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.973736][T17335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.981973][T17335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.986801][T17335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.988965][T17335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.996347][T17335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.021122][T17335] hsr_slave_0: entered promiscuous mode [ 908.023318][T17335] hsr_slave_1: entered promiscuous mode [ 908.124543][T17335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 908.129521][T17335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 908.132413][T17335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 908.136470][T17335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 908.141279][T17335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 908.147583][T17335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 908.151451][T17335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 908.157942][T17335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 908.158095][ T5822] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 908.173900][T17335] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.176359][T17335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.178709][T17335] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.180838][T17335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.212398][T17335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.220619][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.224224][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.233547][T17335] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.240442][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.242678][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.249160][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.251446][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.321015][ T5822] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 908.325735][ T5822] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.329764][ T5822] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 908.333034][ T5822] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 908.338941][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 908.342096][ T5822] usb 6-1: Product: syz [ 908.343450][ T5822] usb 6-1: Manufacturer: syz [ 908.351676][ T5822] sisusb 6-1:1.0: Invalid USB2VGA device [ 908.354234][ T5822] sisusb 6-1:1.0: probe with driver sisusb failed with error -22 [ 908.473413][T13967] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 908.555532][ T5822] usb 6-1: USB disconnect, device number 32 [ 908.573655][T17335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.663973][T17391] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 908.734614][T17335] veth0_vlan: entered promiscuous mode [ 908.740830][T17335] veth1_vlan: entered promiscuous mode [ 908.758317][T17335] veth0_macvtap: entered promiscuous mode [ 908.763183][T17335] veth1_macvtap: entered promiscuous mode [ 908.774769][T17335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.780823][T17335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.821320][T15278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.824268][T15278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.847346][ T9157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.850422][ T9157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.863319][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.865830][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.888515][T15278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.891662][T15278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.007118][T17400] netlink: 'syz.4.3168': attribute type 5 has an invalid length. [ 909.010026][T17400] netlink: 'syz.4.3168': attribute type 6 has an invalid length. [ 909.013961][T17400] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3168'. [ 909.044358][T17402] netlink: 'syz.2.3169': attribute type 2 has an invalid length. [ 909.046979][T17402] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3169'. [ 909.224237][T17404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 909.242386][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 909.273667][T13967] Bluetooth: hci1: command tx timeout [ 909.516975][T17405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.608770][T13967] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 909.901300][T17425] netlink: 'syz.1.3179': attribute type 2 has an invalid length. [ 909.904819][T17425] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3179'. [ 909.961096][T17429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3181'. [ 910.001346][T17428] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 910.062387][T17432] bridge_slave_0: left allmulticast mode [ 910.064708][T17432] bridge_slave_0: left promiscuous mode [ 910.067187][T17432] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.073302][T17432] bridge_slave_1: left allmulticast mode [ 910.075436][T17432] bridge_slave_1: left promiscuous mode [ 910.078026][T17432] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.086208][T17432] bond0: (slave bond_slave_0): Releasing backup interface [ 910.091246][ T5829] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 910.098859][T17432] bond0: (slave bond_slave_1): Releasing backup interface [ 910.105636][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3182'. [ 910.111610][T17432] team0: Port device team_slave_0 removed [ 910.116609][T17432] team0: Port device team_slave_1 removed [ 910.120293][T17432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.122774][T17432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.127258][T17432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.131599][T17432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.136448][T17432] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 910.238804][ T5829] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 910.242601][ T5829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.246316][ T5829] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 910.250305][ T5829] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 910.254066][ T5829] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 910.258041][ T5829] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 910.266648][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 910.269248][ T5829] usb 5-1: Product: syz [ 910.270859][ T5829] usb 5-1: Manufacturer: syz [ 910.277168][T17422] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 910.279737][T17422] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 910.282053][T17422] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 910.285782][ T5829] sisusb 5-1:1.0: Invalid USB2VGA device [ 910.290333][ T5829] sisusb 5-1:1.0: probe with driver sisusb failed with error -22 [ 910.490587][ T41] usb 5-1: USB disconnect, device number 32 [ 910.939824][T17445] netlink: 'syz.2.3186': attribute type 5 has an invalid length. [ 910.942174][T17445] netlink: 'syz.2.3186': attribute type 6 has an invalid length. [ 910.944420][T17445] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3186'. [ 911.052423][T17449] netlink: 'syz.0.3189': attribute type 2 has an invalid length. [ 911.177062][T17450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.347971][T13967] Bluetooth: hci1: command tx timeout [ 911.704772][T17466] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 911.997915][ T5815] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 912.168554][ T5815] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 912.173361][ T5815] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.176745][ T5815] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 912.179807][ T5815] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 912.182833][ T5815] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 912.186403][ T5815] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 912.192506][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 912.196071][ T5815] usb 9-1: Product: syz [ 912.197961][ T5815] usb 9-1: Manufacturer: syz [ 912.203189][T17473] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 912.206782][T17473] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 912.209170][T17473] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 912.215465][ T5815] sisusb 9-1:1.0: Invalid USB2VGA device [ 912.217960][ T5815] sisusb 9-1:1.0: probe with driver sisusb failed with error -22 [ 912.237794][T15102] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 912.388528][T15102] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 912.392771][T15102] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.396417][T15102] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.401188][T15102] usb 6-1: config 0 descriptor?? [ 912.452911][ T9748] usb 9-1: USB disconnect, device number 2 [ 912.512536][T17478] validate_nla: 2 callbacks suppressed [ 912.512550][T17478] netlink: 'syz.2.3201': attribute type 2 has an invalid length. [ 912.516732][T17478] __nla_validate_parse: 3 callbacks suppressed [ 912.516742][T17478] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3201'. [ 912.561880][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'. [ 912.610306][T15102] usbhid 6-1:0.0: can't add hid device: -71 [ 912.612278][T15102] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 912.621973][T15102] usb 6-1: USB disconnect, device number 33 [ 913.057858][T15102] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 913.207906][T15102] usb 6-1: Using ep0 maxpacket: 32 [ 913.214706][T15102] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 913.222878][T15102] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.227425][T15102] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.231181][T17487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.233534][T15102] usb 6-1: config 0 descriptor?? [ 913.240634][T15102] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 913.251075][T15102] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 913.438257][T13967] Bluetooth: hci1: command tx timeout [ 913.696244][ T5829] usb 6-1: USB disconnect, device number 34 [ 913.701061][ T5829] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 913.823173][T17500] netlink: 'syz.2.3209': attribute type 5 has an invalid length. [ 913.825895][T17500] netlink: 'syz.2.3209': attribute type 6 has an invalid length. [ 913.828788][T17500] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3209'. [ 914.319912][T17504] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 914.464285][T17509] netlink: 'syz.1.3212': attribute type 2 has an invalid length. [ 914.467444][T17509] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3212'. [ 914.687823][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 914.734237][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3215'. [ 914.838460][ T24] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 914.841938][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.844814][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 914.848786][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 914.852444][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 914.856102][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 914.860843][T17517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.866517][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 914.870595][ T24] usb 9-1: Product: syz [ 914.872307][ T24] usb 9-1: Manufacturer: syz [ 914.878287][T17507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 914.881264][T17507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 914.883998][T17507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 914.889671][ T24] sisusb 9-1:1.0: Invalid USB2VGA device [ 914.891928][ T24] sisusb 9-1:1.0: probe with driver sisusb failed with error -22 [ 915.092713][T15671] usb 9-1: USB disconnect, device number 3 [ 915.339866][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3219'. [ 915.412606][T17527] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 915.428909][T17532] netlink: 'syz.1.3222': attribute type 2 has an invalid length. [ 915.431715][T17532] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3222'. [ 915.517945][T13967] Bluetooth: hci1: command tx timeout [ 915.525435][T17535] netlink: 'syz.1.3223': attribute type 5 has an invalid length. [ 915.528333][T17535] netlink: 'syz.1.3223': attribute type 6 has an invalid length. [ 915.530989][T17535] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3223'. [ 915.639970][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3226'. [ 916.246941][T17549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3229'. [ 916.410326][T17550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.414418][T17556] netlink: 'syz.0.3231': attribute type 2 has an invalid length. [ 916.452659][T17555] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 916.667797][ T5815] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 916.818586][ T5815] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 916.823072][ T5815] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.826905][ T5815] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 916.831002][ T5815] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 916.834772][ T5815] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 916.839597][ T5815] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 916.843288][ T5815] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 916.846611][ T5815] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 916.853573][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 916.856843][ T5815] usb 7-1: Product: syz [ 916.858383][ T5815] usb 7-1: Manufacturer: syz [ 916.863948][T17558] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 916.867692][T17558] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 916.871074][T17558] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 916.873856][T17558] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 916.878622][ T5815] sisusb 7-1:1.0: Invalid USB2VGA device [ 916.880971][ T5815] sisusb 7-1:1.0: probe with driver sisusb failed with error -22 [ 917.081168][T15102] usb 7-1: USB disconnect, device number 39 [ 917.183796][T17584] netlink: 'syz.4.3241': attribute type 5 has an invalid length. [ 917.186357][T17584] netlink: 'syz.4.3241': attribute type 6 has an invalid length. [ 917.635876][T17587] netlink: 'syz.2.3243': attribute type 2 has an invalid length. [ 917.639627][T17587] __nla_validate_parse: 4 callbacks suppressed [ 917.639638][T17587] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3243'. [ 917.747116][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3245'. [ 918.288005][ T9748] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 918.388628][ T5815] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 918.417847][ T9748] usb 5-1: device descriptor read/64, error -71 [ 918.547876][ T5815] usb 9-1: Using ep0 maxpacket: 16 [ 918.550548][ T5815] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.554276][ T5815] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.557445][ T5815] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.562933][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.565945][ T5815] usb 9-1: Product: syz [ 918.567667][ T5815] usb 9-1: Manufacturer: syz [ 918.569464][ T5815] usb 9-1: SerialNumber: syz [ 918.576454][ T5815] usb 9-1: 0:2 : does not exist [ 918.667991][ T9748] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 918.782617][ T5815] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 918.797900][ T9748] usb 5-1: device descriptor read/64, error -71 [ 918.808404][ T5815] usb 9-1: USB disconnect, device number 4 [ 918.829522][ T5741] udevd[5741]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.908054][ T9748] usb usb5-port1: attempt power cycle [ 919.257981][ T9748] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 919.278574][ T9748] usb 5-1: device descriptor read/8, error -71 [ 919.463262][T17614] Console: switching to colour dummy device 80x25 [ 919.673861][ T9748] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 919.784038][T17625] netlink: 'syz.2.3257': attribute type 5 has an invalid length. [ 919.787296][T17625] netlink: 'syz.2.3257': attribute type 6 has an invalid length. [ 919.790308][T17625] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3257'. [ 920.178446][T17615] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 920.179915][ T9748] usb 5-1: device descriptor read/8, error -71 [ 920.206302][T17615] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 920.209373][T17615] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 920.213056][T17615] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 920.216495][T17615] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 920.234977][T17615] pci 0000:00:01.0: Adding to iommu group 1 [ 920.243830][T17615] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 920.245998][T17615] pci 0000:00:01.0: vgaarb: bridge control possible [ 920.247951][T17615] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 920.264190][T17615] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 920.277930][T17615] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 920.285792][T17615] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 920.290141][ T9748] usb usb5-port1: unable to enumerate USB device [ 920.307572][T17615] [drm] Found bochs VGA, ID 0xb0c5. [ 920.310121][T17615] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 920.364881][T17615] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 920.588926][T17615] Console: switching to colour frame buffer device 160x50 [ 920.629534][T17615] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 920.642917][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3261'. [ 921.080522][T17641] netlink: 'syz.0.3263': attribute type 2 has an invalid length. [ 921.084001][T17641] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3263'. [ 921.467810][T15671] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 921.637565][T15671] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 921.656823][T17657] netlink: 'syz.2.3269': attribute type 5 has an invalid length. [ 921.659485][T17657] netlink: 'syz.2.3269': attribute type 6 has an invalid length. [ 921.661877][T17657] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3269'. [ 921.666556][T15671] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.670078][T15671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 921.673175][T15671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 921.676525][T15671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 921.679726][T15671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 921.682976][T15671] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 921.687821][T15671] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 921.699912][T15671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 921.702504][T15671] usb 5-1: Product: syz [ 921.703902][T15671] usb 5-1: Manufacturer: syz [ 921.736184][T17643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 921.741976][T17643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 921.747075][T17643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 921.751019][T17643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 921.766328][T15671] sisusb 5-1:1.0: Invalid USB2VGA device [ 921.768252][T15671] sisusb 5-1:1.0: probe with driver sisusb failed with error -22 [ 921.958671][ T5815] usb 5-1: USB disconnect, device number 37 [ 921.998078][ T9748] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 922.138292][ T9748] usb 9-1: device descriptor read/64, error -71 [ 922.295460][T17665] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 922.311233][T17661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.314550][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3273'. [ 922.352659][T17667] netlink: 'syz.1.3274': attribute type 2 has an invalid length. [ 922.355064][T17667] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3274'. [ 922.377816][ T9748] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 922.508090][ T9748] usb 9-1: device descriptor read/64, error -71 [ 922.628246][ T9748] usb usb9-port1: attempt power cycle [ 922.977900][ T9748] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 922.998845][ T9748] usb 9-1: device descriptor read/8, error -71 [ 923.247786][ T9748] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 923.328421][T17689] netlink: 'syz.1.3282': attribute type 5 has an invalid length. [ 923.330898][T17689] netlink: 'syz.1.3282': attribute type 6 has an invalid length. [ 923.333525][T17689] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3282'. [ 923.439201][ T9748] usb 9-1: device descriptor read/8, error -71 [ 923.741219][T17693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 923.760757][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'. [ 923.864558][ T9748] usb usb9-port1: unable to enumerate USB device [ 924.047878][T15671] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 924.102038][T17699] netlink: 'syz.2.3284': attribute type 2 has an invalid length. [ 924.107387][T17699] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3284'. [ 924.218271][T15671] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 924.222132][T15671] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 924.225415][T15671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 924.229578][T15671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 924.234158][T15671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 924.237401][T15671] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 924.241126][T15671] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 924.244290][T15671] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 924.249972][T15671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 924.252569][T15671] usb 5-1: Product: syz [ 924.253896][T15671] usb 5-1: Manufacturer: syz [ 924.260186][T17696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 924.262713][T17696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 924.265040][T17696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 924.267484][T17696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 924.273794][T15671] sisusb 5-1:1.0: Invalid USB2VGA device [ 924.275704][T15671] sisusb 5-1:1.0: probe with driver sisusb failed with error -22 [ 924.475198][ T24] usb 5-1: USB disconnect, device number 38 [ 924.859937][T17716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.079750][T17723] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 925.085524][T17725] netlink: 'syz.2.3295': attribute type 2 has an invalid length. [ 925.089058][T17725] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3295'. [ 925.092259][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 925.289803][T17736] netlink: 'syz.1.3299': attribute type 5 has an invalid length. [ 925.292881][T17736] netlink: 'syz.1.3299': attribute type 6 has an invalid length. [ 925.295511][T17736] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3299'. [ 925.627946][ T24] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 925.757765][ T24] usb 7-1: device descriptor read/64, error -71 [ 925.998012][ T24] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 926.137866][ T24] usb 7-1: device descriptor read/64, error -71 [ 926.248074][ T24] usb usb7-port1: attempt power cycle [ 926.317828][ T5829] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 926.471175][ T5829] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 926.476531][ T5829] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 926.480983][ T5829] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 926.484891][ T5829] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 926.488826][ T5829] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 926.491967][ T5829] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 926.495118][ T5829] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 926.501828][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 926.501890][T17751] netlink: 'syz.4.3305': attribute type 2 has an invalid length. [ 926.504609][ T5829] usb 5-1: Product: syz [ 926.507395][T17751] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3305'. [ 926.511922][ T5829] usb 5-1: Manufacturer: syz [ 926.512145][T17751] : entered promiscuous mode [ 926.516891][T17746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 926.520411][T17746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 926.523992][T17746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 926.526508][T17746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 926.530016][T17746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 926.540247][ T5829] sisusb 5-1:1.0: Invalid USB2VGA device [ 926.541931][ T5829] sisusb 5-1:1.0: probe with driver sisusb failed with error -22 [ 926.588122][ T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 926.608661][ T24] usb 7-1: device descriptor read/8, error -71 [ 926.739793][T14043] usb 5-1: USB disconnect, device number 39 [ 926.750992][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3310'. [ 926.847900][ T24] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 926.868287][ T24] usb 7-1: device descriptor read/8, error -71 [ 926.978219][ T24] usb usb7-port1: unable to enumerate USB device [ 927.055115][T17763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.368920][T17771] netlink: 'syz.4.3313': attribute type 5 has an invalid length. [ 927.372392][T17771] netlink: 'syz.4.3313': attribute type 6 has an invalid length. [ 927.375646][T17771] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3313'. [ 928.158516][T17777] netlink: 'syz.0.3315': attribute type 2 has an invalid length. [ 928.161591][T17777] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3315'. [ 928.528087][ T5815] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 928.531708][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3322'. [ 928.678252][ T5815] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 928.681938][ T5815] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 928.684997][ T5815] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 928.688460][ T5815] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 928.691554][ T5815] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 928.694503][ T5815] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 928.697544][ T5815] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 928.703718][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 928.706510][ T5815] usb 9-1: Product: syz [ 928.707993][ T5815] usb 9-1: Manufacturer: syz [ 928.711792][T17787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 928.714033][T17787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 928.716428][T17787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 928.719180][T17787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 928.721542][T17787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 928.726327][ T5815] sisusb 9-1:1.0: Invalid USB2VGA device [ 928.728431][ T5815] sisusb 9-1:1.0: probe with driver sisusb failed with error -22 [ 928.754084][T17794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.926884][T15671] usb 9-1: USB disconnect, device number 9 [ 929.131823][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3324'. [ 929.188782][T15671] page_pool_release_retry() stalled pool shutdown: id 54, 1 inflight 60 sec [ 929.216001][T17806] netlink: 'syz.0.3325': attribute type 5 has an invalid length. [ 929.219255][T17806] netlink: 'syz.0.3325': attribute type 6 has an invalid length. [ 929.222265][T17806] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3325'. [ 929.239444][T17805] netlink: 'syz.2.3326': attribute type 2 has an invalid length. [ 929.242795][T17805] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3326'. [ 929.535244][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3332'. [ 929.667923][ T9748] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 929.807895][ T9748] usb 6-1: device descriptor read/64, error -71 [ 930.069163][ T9748] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 930.177064][T17826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.227830][ T9748] usb 6-1: device descriptor read/64, error -71 [ 930.338645][ T9748] usb usb6-port1: attempt power cycle [ 930.418982][T17829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3336'. [ 930.687863][ T9748] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 930.708549][ T9748] usb 6-1: device descriptor read/8, error -71 [ 930.788860][T14043] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 930.803625][T17842] netlink: 'syz.0.3341': attribute type 5 has an invalid length. [ 930.806923][T17842] netlink: 'syz.0.3341': attribute type 6 has an invalid length. [ 930.810378][T17842] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3341'. [ 930.941325][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'. [ 930.958711][T14043] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 930.959032][ T9748] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 930.962966][T14043] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 930.969349][T14043] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 930.972794][T14043] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 930.973856][T17846] netlink: 'syz.4.3343': attribute type 2 has an invalid length. [ 930.975856][T14043] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 930.975872][T14043] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 930.975884][T14043] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 930.978731][T17846] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3343'. [ 930.982969][T14043] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 930.984716][ T9748] usb 6-1: device descriptor read/8, error -71 [ 930.988950][T14043] usb 7-1: Product: syz [ 930.997610][T14043] usb 7-1: Manufacturer: syz [ 931.003710][T17837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 931.006092][T17837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 931.008824][T17837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 931.011580][T17837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 931.014331][T17837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 931.019145][T14043] sisusb 7-1:1.0: Invalid USB2VGA device [ 931.020879][T14043] sisusb 7-1:1.0: probe with driver sisusb failed with error -22 [ 931.098033][ T9748] usb usb6-port1: unable to enumerate USB device [ 931.109887][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.112729][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.224695][ T24] usb 7-1: USB disconnect, device number 44 [ 931.765953][T17861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.825679][T17863] netlink: 'syz.2.3350': attribute type 5 has an invalid length. [ 931.829535][T17863] netlink: 'syz.2.3350': attribute type 6 has an invalid length. [ 931.832873][T17863] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3350'. [ 932.445356][T17872] netlink: 'syz.1.3354': attribute type 2 has an invalid length. [ 932.836308][T17887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.957997][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 933.097776][T14043] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 933.108298][ T24] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 933.112239][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 933.115417][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 933.118987][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 933.122644][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 933.126694][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 933.130814][ T24] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 933.137072][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 933.140323][ T24] usb 6-1: Product: syz [ 933.141996][ T24] usb 6-1: Manufacturer: syz [ 933.147467][T17885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 933.150741][T17885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 933.153856][T17885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 933.157182][T17885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 933.160394][T17885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 933.166641][ T24] sisusb 6-1:1.0: Invalid USB2VGA device [ 933.169235][ T24] sisusb 6-1:1.0: probe with driver sisusb failed with error -22 [ 933.237820][T14043] usb 9-1: device descriptor read/64, error -71 [ 933.367878][ T24] usb 6-1: USB disconnect, device number 39 [ 933.440705][T17896] netlink: 'syz.0.3364': attribute type 2 has an invalid length. [ 933.477891][T14043] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 933.538806][T17899] __nla_validate_parse: 5 callbacks suppressed [ 933.538822][T17899] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3365'. [ 933.619011][T14043] usb 9-1: device descriptor read/64, error -71 [ 933.728877][T14043] usb usb9-port1: attempt power cycle [ 934.005317][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3370'. [ 934.067983][T14043] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 934.088847][T14043] usb 9-1: device descriptor read/8, error -71 [ 934.327887][T14043] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 934.348592][T14043] usb 9-1: device descriptor read/8, error -71 [ 934.363861][T17914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.468058][T14043] usb usb9-port1: unable to enumerate USB device [ 934.586782][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3373'. [ 934.903912][T17924] validate_nla: 2 callbacks suppressed [ 934.903926][T17924] netlink: 'syz.0.3375': attribute type 2 has an invalid length. [ 934.908514][T17924] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3375'. [ 935.175778][T17935] netlink: 'syz.2.3380': attribute type 5 has an invalid length. [ 935.177842][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 935.178370][T17935] netlink: 'syz.2.3380': attribute type 6 has an invalid length. [ 935.184176][T17935] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3380'. [ 935.339121][ T24] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 935.344104][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 935.348971][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 935.353117][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 935.357272][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 935.361907][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 935.366140][ T24] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 935.372809][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 935.376416][ T24] usb 5-1: Product: syz [ 935.378631][ T24] usb 5-1: Manufacturer: syz [ 935.387117][T17926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 935.392195][T17926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 935.396584][T17926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 935.400245][T17926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 935.403527][T17926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 935.410465][ T24] sisusb 5-1:1.0: Invalid USB2VGA device [ 935.412912][ T24] sisusb 5-1:1.0: probe with driver sisusb failed with error -22 [ 935.503291][T17937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3381'. [ 935.614172][T14043] usb 5-1: USB disconnect, device number 40 [ 936.052843][T17941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.107046][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3384'. [ 936.151868][T17950] netlink: 'syz.4.3386': attribute type 2 has an invalid length. [ 936.154454][T17950] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3386'. [ 936.220651][T17962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3392'. [ 936.447828][ T5815] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 936.577866][ T5815] usb 9-1: device descriptor read/64, error -71 [ 936.642155][T17966] netlink: 'syz.1.3393': attribute type 5 has an invalid length. [ 936.645016][T17966] netlink: 'syz.1.3393': attribute type 6 has an invalid length. [ 936.647809][T17966] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3393'. [ 936.817800][ T5815] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 936.947856][ T5815] usb 9-1: device descriptor read/64, error -71 [ 936.953450][T17981] netlink: 'syz.1.3399': attribute type 2 has an invalid length. [ 937.058216][ T5815] usb usb9-port1: attempt power cycle [ 937.065894][T17988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.127955][ T149] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 937.278499][ T149] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 937.282388][ T149] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 937.285536][ T149] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 937.288811][ T149] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 937.291869][ T149] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 937.294926][ T149] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 937.298087][ T149] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 937.302640][ T149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 937.305256][ T149] usb 5-1: Product: syz [ 937.306596][ T149] usb 5-1: Manufacturer: syz [ 937.310839][T17977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 937.314161][T17977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 937.317442][T17977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 937.320816][T17977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 937.323973][T17977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 937.329347][ T149] sisusb 5-1:1.0: Invalid USB2VGA device [ 937.331249][ T149] sisusb 5-1:1.0: probe with driver sisusb failed with error -22 [ 937.407849][ T5815] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 937.438691][ T5815] usb 9-1: device descriptor read/8, error -71 [ 937.532448][ T9748] usb 5-1: USB disconnect, device number 41 [ 937.652726][T17997] netlink: 'syz.1.3404': attribute type 5 has an invalid length. [ 937.656212][T17997] netlink: 'syz.1.3404': attribute type 6 has an invalid length. [ 937.687881][ T5815] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 937.720586][ T5815] usb 9-1: device descriptor read/8, error -71 [ 937.838774][ T5815] usb usb9-port1: unable to enumerate USB device [ 938.487872][T18018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.957800][T14043] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 939.108347][T14043] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 939.112146][T14043] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 939.115135][T14043] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 939.118750][T14043] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 939.121611][T14043] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 939.124439][T14043] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 939.127290][T14043] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 939.130913][T14043] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 939.135082][T14043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 939.137819][T14043] usb 5-1: Product: syz [ 939.139181][T14043] usb 5-1: Manufacturer: syz [ 939.142448][T18026] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 939.145007][T18026] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 939.148894][T18026] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 939.151587][T18026] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 939.154208][T18026] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 939.158821][T14043] usb 5-1: USB2VGA dongle found at address 42 [ 939.162477][T14043] usb 5-1: Allocated 8 output buffers [ 939.690954][T18040] __nla_validate_parse: 6 callbacks suppressed [ 939.690974][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'. [ 939.969286][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3426'. [ 940.056814][T18049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 940.357866][ T9748] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 940.509216][ T9748] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 940.512901][ T9748] usb 9-1: no configurations [ 940.514773][ T9748] usb 9-1: can't read configurations, error -22 [ 940.658021][ T9748] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 940.819447][ T9748] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 940.822474][ T9748] usb 9-1: no configurations [ 940.824082][ T9748] usb 9-1: can't read configurations, error -22 [ 940.826753][ T9748] usb usb9-port1: attempt power cycle [ 941.177804][ T9748] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 941.209156][ T9748] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 941.217163][ T9748] usb 9-1: no configurations [ 941.219183][ T9748] usb 9-1: can't read configurations, error -22 [ 941.223264][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3439'. [ 941.266017][T18079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3441'. [ 941.378170][ T9748] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 941.438325][ T9748] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 941.441314][ T9748] usb 9-1: no configurations [ 941.444838][ T9748] usb 9-1: can't read configurations, error -22 [ 941.454429][ T9748] usb usb9-port1: unable to enumerate USB device [ 941.860357][T18085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.013937][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3450'. [ 943.179544][T18103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3451'. [ 943.481457][T18113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.957029][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3461'. [ 944.021533][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3464'. [ 944.037832][ T29] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 944.188673][ T29] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 944.192736][ T29] usb 9-1: no configurations [ 944.194326][ T29] usb 9-1: can't read configurations, error -22 [ 944.317782][ T29] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 944.468365][ T29] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 944.477485][ T29] usb 9-1: no configurations [ 944.479093][ T29] usb 9-1: can't read configurations, error -22 [ 944.481507][ T29] usb usb9-port1: attempt power cycle [ 944.606786][T18144] netlink: 'syz.2.3466': attribute type 5 has an invalid length. [ 944.609438][T18144] netlink: 'syz.2.3466': attribute type 6 has an invalid length. [ 944.612009][T18144] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3466'. [ 944.818073][ T29] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 944.838949][ T29] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 944.841945][ T29] usb 9-1: no configurations [ 944.843547][ T29] usb 9-1: can't read configurations, error -22 [ 944.970467][ T29] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 944.993621][ T29] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 944.996719][ T29] usb 9-1: no configurations [ 944.998284][ T29] usb 9-1: can't read configurations, error -22 [ 945.026750][ T29] usb usb9-port1: unable to enumerate USB device [ 945.160443][T18157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.183937][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3471'. [ 945.695599][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3475'. [ 946.352630][T18175] netlink: 'syz.2.3479': attribute type 5 has an invalid length. [ 946.355227][T18175] netlink: 'syz.2.3479': attribute type 6 has an invalid length. [ 946.357826][T18175] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3479'. [ 947.305104][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3482'. [ 947.355144][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 947.437499][T18192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 948.057763][T18210] netlink: 'syz.2.3493': attribute type 5 has an invalid length. [ 948.060434][T18210] netlink: 'syz.2.3493': attribute type 6 has an invalid length. [ 948.063140][T18210] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3493'. [ 948.471804][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3496'. [ 948.838489][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3499'. [ 949.413326][T18242] netlink: 'syz.1.3508': attribute type 5 has an invalid length. [ 949.415864][T18242] netlink: 'syz.1.3508': attribute type 6 has an invalid length. [ 949.418736][T18242] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3508'. [ 949.459807][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3507'. [ 950.483617][T18269] netlink: 'syz.4.3518': attribute type 5 has an invalid length. [ 950.486143][T18269] netlink: 'syz.4.3518': attribute type 6 has an invalid length. [ 950.488715][T18269] __nla_validate_parse: 1 callbacks suppressed [ 950.488724][T18269] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3518'. [ 950.563674][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3520'. [ 950.597083][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3523'. [ 951.050926][T18299] netlink: 'syz.0.3531': attribute type 5 has an invalid length. [ 951.054117][T18299] netlink: 'syz.0.3531': attribute type 6 has an invalid length. [ 951.056779][T18299] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3531'. [ 951.173912][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3533'. [ 951.696007][T18321] netlink: 'syz.4.3540': attribute type 5 has an invalid length. [ 951.699355][T18321] netlink: 'syz.4.3540': attribute type 6 has an invalid length. [ 951.702489][T18321] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3540'. [ 951.759650][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'. [ 952.080747][T18325] netlink: 'syz.2.3542': attribute type 2 has an invalid length. [ 952.083967][T18325] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3542'. [ 952.338593][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3544'. [ 952.542593][T18345] netlink: 'syz.4.3550': attribute type 5 has an invalid length. [ 952.545197][T18345] netlink: 'syz.4.3550': attribute type 6 has an invalid length. [ 952.547667][T18345] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3550'. [ 952.593042][T18349] netlink: 'syz.1.3553': attribute type 2 has an invalid length. [ 953.667862][T13967] Bluetooth: hci4: command 0x0406 tx timeout [ 954.597900][ T998] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 954.748730][ T998] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 954.752414][ T998] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.755664][ T998] usb 9-1: config 0 has no interfaces? [ 954.758015][ T998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.762303][ T998] usb 9-1: config 0 descriptor?? [ 954.968734][ T24] usb 9-1: USB disconnect, device number 26 [ 955.501150][T18461] __nla_validate_parse: 15 callbacks suppressed [ 955.501164][T18461] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3595'. [ 955.566174][T18467] validate_nla: 7 callbacks suppressed [ 955.566195][T18467] netlink: 'syz.0.3596': attribute type 5 has an invalid length. [ 955.572797][T18467] netlink: 'syz.0.3596': attribute type 6 has an invalid length. [ 955.575994][T18467] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3596'. [ 955.820331][T18486] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3605'. [ 955.997787][ T5744] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 956.139887][T18499] netlink: 'syz.1.3610': attribute type 5 has an invalid length. [ 956.143006][T18499] netlink: 'syz.1.3610': attribute type 6 has an invalid length. [ 956.146079][T18499] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3610'. [ 956.148519][ T5744] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 956.157472][ T5744] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.163284][ T5744] usb 9-1: config 0 has no interfaces? [ 956.165137][ T5744] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.167798][ T149] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 956.171452][ T5744] usb 9-1: config 0 descriptor?? [ 956.317975][ T149] usb 7-1: Using ep0 maxpacket: 32 [ 956.321140][ T149] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 956.324927][ T149] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 956.327527][ T149] usb 7-1: config 0 has no interface number 0 [ 956.331158][ T149] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.333784][ T149] usb 7-1: Product: syz [ 956.335177][ T149] usb 7-1: Manufacturer: syz [ 956.336691][ T149] usb 7-1: SerialNumber: syz [ 956.342305][ T149] usb 7-1: config 0 descriptor?? [ 956.379507][T15102] usb 9-1: USB disconnect, device number 27 [ 956.562482][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3614'. [ 956.749123][ T149] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 956.752622][ T149] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 957.096163][T18515] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3616'. [ 957.158374][ T149] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 957.162582][ T149] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 957.170631][ T149] usb 7-1: USB disconnect, device number 45 [ 957.310082][T18532] netlink: 'syz.4.3619': attribute type 5 has an invalid length. [ 957.313231][T18532] netlink: 'syz.4.3619': attribute type 6 has an invalid length. [ 957.316536][T18532] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3619'. [ 957.657870][ T24] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 957.818420][ T24] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 957.823538][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.828801][ T24] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 957.832210][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.051777][ T41] usb 9-1: USB disconnect, device number 28 [ 958.221581][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3626'. [ 958.262819][T18546] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3628'. [ 958.557817][ T998] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 958.707820][ T998] usb 7-1: Using ep0 maxpacket: 32 [ 958.710772][ T998] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 958.715958][ T998] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 958.719415][ T998] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 958.722855][ T998] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 958.726580][ T998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 958.730497][ T998] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 958.734334][ T998] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 958.739887][ T998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.745456][ T998] usb 7-1: config 0 descriptor?? [ 958.765447][T18554] netlink: 'syz.4.3631': attribute type 5 has an invalid length. [ 958.768484][T18554] netlink: 'syz.4.3631': attribute type 6 has an invalid length. [ 958.770880][T18554] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3631'. [ 958.965976][ T998] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 958.979962][T18567] netlink: 'syz.4.3637': attribute type 2 has an invalid length. [ 959.162920][ T998] usb 7-1: USB disconnect, device number 46 [ 959.167390][ T998] usblp1: removed [ 959.377803][ T5815] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 959.548307][ T5815] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 959.551841][ T5815] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 959.554926][ T5815] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 959.557620][ T5815] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.761422][T18584] netlink: 'syz.2.3642': attribute type 5 has an invalid length. [ 959.769933][ T998] usb 9-1: USB disconnect, device number 29 [ 960.532870][T18593] __nla_validate_parse: 3 callbacks suppressed [ 960.532910][T18593] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3646'. [ 960.893490][T18606] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3652'. [ 961.060907][T18617] validate_nla: 2 callbacks suppressed [ 961.060926][T18617] netlink: 'syz.2.3656': attribute type 5 has an invalid length. [ 961.066187][T18617] netlink: 'syz.2.3656': attribute type 6 has an invalid length. [ 961.068770][T18617] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3656'. [ 961.305856][T18621] netlink: 'syz.4.3658': attribute type 2 has an invalid length. [ 961.309379][T18621] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3658'. [ 961.353169][ T42] audit: type=1800 audit(1786305930.356:47): pid=18623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3659" name="file0" dev="overlay" ino=613 res=0 errno=0 [ 962.136846][T18639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3665'. [ 962.203867][T18647] netlink: 'syz.4.3668': attribute type 2 has an invalid length. [ 962.206307][T18647] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3668'. [ 962.309311][T18653] netlink: 'syz.4.3670': attribute type 5 has an invalid length. [ 962.311780][T18653] netlink: 'syz.4.3670': attribute type 6 has an invalid length. [ 962.314118][T18653] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3670'. [ 963.265458][T18664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3675'. [ 963.822161][T18679] netlink: 'syz.1.3679': attribute type 2 has an invalid length. [ 963.825376][T18679] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3679'. [ 963.878736][T18683] binder: 18682:18683 unknown command 0 [ 963.880581][T18683] binder: 18682:18683 ioctl c0306201 800001c0 returned -22 [ 964.296564][T18706] netlink: 'syz.0.3690': attribute type 2 has an invalid length. [ 964.300173][T18706] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3690'. [ 964.577832][ T29] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 964.728687][ T29] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 964.733701][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.737390][ T29] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 964.740117][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.950623][ T29] usb 7-1: USB disconnect, device number 47 [ 965.093438][T18731] netlink: 'syz.1.3702': attribute type 2 has an invalid length. [ 966.110346][T18756] netlink: 'syz.2.3712': attribute type 2 has an invalid length. [ 966.113345][T18756] __nla_validate_parse: 2 callbacks suppressed [ 966.113355][T18756] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3712'. [ 966.159858][T18760] netlink: 'syz.2.3714': attribute type 5 has an invalid length. [ 966.162768][T18760] netlink: 'syz.2.3714': attribute type 6 has an invalid length. [ 966.165614][T18760] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3714'. [ 966.186499][T18763] syzkaller0: entered promiscuous mode [ 966.190222][T18763] syzkaller0: entered allmulticast mode [ 966.293441][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3718'. [ 966.413398][T18767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 967.028992][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.031818][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.035308][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.039526][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.074044][T18796] netlink: 'syz.1.3725': attribute type 5 has an invalid length. [ 967.077184][T18796] netlink: 'syz.1.3725': attribute type 6 has an invalid length. [ 967.080819][T18796] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3725'. [ 967.352684][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3730'. [ 967.556213][T18823] netlink: 'syz.0.3735': attribute type 5 has an invalid length. [ 967.559811][T18823] netlink: 'syz.0.3735': attribute type 6 has an invalid length. [ 967.563032][T18823] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3735'. [ 968.011259][T18853] netlink: 'syz.1.3745': attribute type 5 has an invalid length. [ 968.013806][T18853] netlink: 'syz.1.3745': attribute type 6 has an invalid length. [ 968.018506][T18853] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3745'. [ 968.159868][T18858] gadgetfs: bound to dummy_udc driver [ 968.421998][T18870] ip6gre1: entered promiscuous mode [ 968.424291][T18870] ip6gre1: entered allmulticast mode [ 968.470757][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 968.995188][T18884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3759'. [ 969.028606][T13967] Bluetooth: hci0: command 0x0406 tx timeout [ 969.215039][T18897] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 969.342650][T18897] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input28 [ 969.474828][T18902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3766'. [ 969.638259][T18909] netlink: 'syz.2.3768': attribute type 5 has an invalid length. [ 969.705493][T18911] overlayfs: unescaped trailing colons in lowerdir mount option. [ 970.988409][T18957] can0: slcan on ptm0. [ 971.092945][T18957] can0 (unregistered): slcan off ptm0. [ 971.276524][T18967] __nla_validate_parse: 4 callbacks suppressed [ 971.276546][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 971.297926][ T24] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 971.567905][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 971.580523][T18991] validate_nla: 4 callbacks suppressed [ 971.580561][T18991] netlink: 'syz.0.3800': attribute type 5 has an invalid length. [ 971.584824][T18991] netlink: 'syz.0.3800': attribute type 6 has an invalid length. [ 971.587593][T18991] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3800'. [ 972.021171][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 972.237772][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.242478][ T24] usb 7-1: Product: syz [ 972.244725][ T24] usb 7-1: Manufacturer: syz [ 972.246263][ T24] usb 7-1: SerialNumber: syz [ 972.257121][ T24] usb 7-1: config 0 descriptor?? [ 972.464655][ T24] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 972.565694][T19016] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 972.740190][T19028] netlink: 'syz.4.3814': attribute type 5 has an invalid length. [ 972.743662][T19028] netlink: 'syz.4.3814': attribute type 6 has an invalid length. [ 972.746943][T19028] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3814'. [ 973.274382][ T24] usb write operation failed. (-71) [ 973.518944][ T24] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 973.523945][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 973.526745][ T24] usb 7-1: media controller created [ 973.533923][ T24] usb read operation failed. (-71) [ 973.536608][ T24] usb write operation failed. (-71) [ 973.544625][ T24] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 973.553482][ T24] usb 7-1: USB disconnect, device number 48 [ 973.662017][T19039] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3819'. [ 973.799621][T19047] SQUASHFS error: Failed to read block 0x0: -5 [ 973.803797][T19047] unable to read squashfs_super_block [ 974.015862][T19063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3826'. [ 974.157876][T13967] Bluetooth: hci3: command 0x0406 tx timeout [ 974.298130][T19084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3834'. [ 975.214036][T19112] netlink: 'syz.1.3846': attribute type 2 has an invalid length. [ 975.382759][T19126] nvme_fcloop: unknown parameter or missing value 'ww' [ 975.402087][T19128] can0: slcan on ptm0. [ 975.479333][T19128] can0 (unregistered): slcan off ptm0. [ 975.577837][ T5815] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 975.728489][ T5815] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 975.732274][ T5815] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.735598][ T5815] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.744188][ T5815] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 975.749336][ T5815] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 975.751757][ T5815] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 975.756546][ T5815] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 975.759415][ T5815] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 975.765803][ T5815] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 975.771569][ T5815] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 975.778963][ T5815] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 975.785067][ T5815] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 975.952011][ T149] usb 9-1: USB disconnect, device number 30 [ 975.968485][ T149] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 975.975889][ T149] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 975.989423][ T149] keyspan 9-1:1.0: device disconnected [ 976.559812][T19167] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3865'. [ 976.707652][T19174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3868'. [ 977.645881][T19194] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3874'. [ 978.663897][T19216] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3885'. [ 978.739864][T19220] syzkaller0: entered promiscuous mode [ 978.741783][T19220] syzkaller0: entered allmulticast mode [ 978.947320][T19227] netlink: 'syz.1.3889': attribute type 5 has an invalid length. [ 978.950294][T19227] netlink: 'syz.1.3889': attribute type 6 has an invalid length. [ 978.953231][T19227] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3889'. [ 979.127928][ T9748] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 979.278680][ T9748] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 979.282865][ T9748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.286491][ T9748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.290857][ T9748] usb 7-1: config 0 descriptor?? [ 979.497512][T19226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.502181][T19226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.715651][ T9748] usbhid 7-1:0.0: can't add hid device: -71 [ 979.720419][ T9748] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 979.731223][ T9748] usb 7-1: USB disconnect, device number 49 [ 979.924714][T19244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3898'. [ 980.362734][T19267] netlink: 'syz.4.3904': attribute type 2 has an invalid length. [ 980.528003][ T9748] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 980.689101][ T9748] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 980.693202][ T9748] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.696478][ T9748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.704016][ T9748] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 980.709101][ T9748] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 980.713766][ T9748] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 980.719024][ T9748] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 980.723368][ T9748] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 980.732443][ T9748] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 980.742439][ T9748] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 980.749207][ T9748] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 980.756556][ T9748] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 980.910091][ T149] usb 7-1: USB disconnect, device number 50 [ 980.916612][ T149] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 980.923409][ T149] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 980.926773][ T149] keyspan 7-1:1.0: device disconnected [ 981.375274][T19307] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3912'. [ 981.653637][T19337] netlink: 'syz.2.3921': attribute type 2 has an invalid length. [ 981.782859][T12738] IPVS: starting estimator thread 0... [ 981.808235][ T24] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 981.877787][T19341] IPVS: using max 44 ests per chain, 105600 per kthread [ 981.957805][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 981.960800][ T24] usb 9-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 981.966926][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.970506][ T24] usb 9-1: Product: syz [ 981.972308][ T24] usb 9-1: Manufacturer: syz [ 981.974168][ T24] usb 9-1: SerialNumber: syz [ 981.978092][ T24] usb 9-1: config 0 descriptor?? [ 981.982872][ T24] radio-usb-si4713 9-1:0.0: Si4713 development board discovered: (10C4:8244) [ 982.606894][ T24] radio-usb-si4713 9-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 982.610363][ T24] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 982.615952][ T24] usb 9-1: USB disconnect, device number 31 [ 982.725152][T19380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3928'. [ 982.837306][T19388] netlink: 'syz.1.3929': attribute type 5 has an invalid length. [ 982.840032][T19388] netlink: 'syz.1.3929': attribute type 6 has an invalid length. [ 982.842686][T19388] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3929'. [ 982.928100][ T149] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 983.077858][ T149] usb 7-1: Using ep0 maxpacket: 32 [ 983.082985][ T149] usb 7-1: unable to get BOS descriptor or descriptor too short [ 983.086784][ T149] usb 7-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 983.092645][ T149] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1112, setting to 1024 [ 983.100106][ T149] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.103920][ T149] usb 7-1: Product: syz [ 983.105798][ T149] usb 7-1: Manufacturer: syz [ 983.108239][ T149] usb 7-1: SerialNumber: syz [ 983.322254][T13697] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 983.351533][ T149] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 983.366254][ T149] usb 7-1: USB disconnect, device number 51 [ 983.726205][T19395] netlink: 'syz.1.3931': attribute type 2 has an invalid length. [ 983.912092][T19402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3932'. [ 983.946702][T19406] binder: BINDER_SET_CONTEXT_MGR already set [ 983.950478][T19406] binder: 19404:19406 ioctl 4018620d 80004a80 returned -16 [ 984.059904][T19415] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3936'. [ 984.248590][T19429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3941'. [ 984.283915][T19434] netlink: 'syz.0.3942': attribute type 2 has an invalid length. [ 984.515054][T19448] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3947'. [ 984.832677][T19486] Mass Storage Function, version: 2009/09/11 [ 984.836282][T19486] LUN: removable file: (no medium) [ 984.884481][T19486] syz.1.3959 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 984.889927][T19486] CPU: 1 UID: 0 PID: 19486 Comm: syz.1.3959 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.889964][T19486] Tainted: [L]=SOFTLOCKUP [ 984.889971][T19486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 984.889995][T19486] Call Trace: [ 984.890005][T19486] [ 984.890014][T19486] dump_stack_lvl+0x100/0x190 [ 984.890173][T19486] dump_header+0xfb/0x606 [ 984.890212][T19486] oom_kill_process.cold+0xd/0x330 [ 984.890237][T19486] out_of_memory+0x340/0x14f0 [ 984.890289][T19486] ? __pfx_out_of_memory+0x10/0x10 [ 984.890317][T19486] mem_cgroup_out_of_memory+0xc6/0x130 [ 984.890351][T19486] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 984.890371][T19486] ? find_held_lock+0x2b/0x80 [ 984.890417][T19486] ? do_raw_spin_unlock+0x145/0x1e0 [ 984.890440][T19486] ? _raw_spin_unlock+0x28/0x50 [ 984.890553][T19486] try_charge_memcg+0x6e5/0xdf0 [ 984.890590][T19486] ? __pfx_try_charge_memcg+0x10/0x10 [ 984.890634][T19486] ? find_held_lock+0x2b/0x80 [ 984.890659][T19486] ? rcu_read_unlock+0x17/0x60 [ 984.890698][T19486] ? rcu_read_unlock+0x17/0x60 [ 984.890734][T19486] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 984.890772][T19486] ? kasan_save_track+0x14/0x30 [ 984.890799][T19486] kmem_cache_alloc_noprof+0x587/0x6a0 [ 984.890833][T19486] ? stack_trace_save+0x8e/0xc0 [ 984.890871][T19486] ? alloc_empty_file+0x5b/0x1c0 [ 984.890904][T19486] alloc_empty_file+0x5b/0x1c0 [ 984.890927][T19486] path_openat+0xe7/0x4280 [ 984.890957][T19486] ? kasan_save_track+0x14/0x30 [ 984.890980][T19486] ? __kasan_slab_alloc+0x89/0x90 [ 984.891004][T19486] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 984.891026][T19486] ? do_getname+0x35/0x390 [ 984.891048][T19486] ? do_sys_openat2+0xc7/0x1e0 [ 984.891072][T19486] ? __ia32_compat_sys_openat+0x12d/0x210 [ 984.891098][T19486] ? __do_fast_syscall_32+0xe7/0x970 [ 984.891134][T19486] ? __pfx_path_openat+0x10/0x10 [ 984.891164][T19486] do_file_open+0x20e/0x430 [ 984.891184][T19486] ? __lock_acquire+0x49f/0x1a40 [ 984.891205][T19486] ? __pfx_do_file_open+0x10/0x10 [ 984.891244][T19486] ? _raw_spin_unlock+0x28/0x50 [ 984.891274][T19486] ? alloc_fd+0x471/0x7a0 [ 984.891305][T19486] do_sys_openat2+0x10f/0x1e0 [ 984.891331][T19486] ? __pfx_do_sys_openat2+0x10/0x10 [ 984.891359][T19486] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 984.891397][T19486] __ia32_compat_sys_openat+0x12d/0x210 [ 984.891426][T19486] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 984.891455][T19486] ? ksys_write+0x1ac/0x250 [ 984.891482][T19486] __do_fast_syscall_32+0xe7/0x970 [ 984.891514][T19486] do_fast_syscall_32+0x32/0x70 [ 984.891541][T19486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 984.891568][T19486] RIP: 0023:0xf6fcefec [ 984.891592][T19486] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 984.891600][T19486] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 984.891619][T19486] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 984.891631][T19486] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 984.891642][T19486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 984.891653][T19486] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 984.891665][T19486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 984.891691][T19486] [ 984.893545][T19486] memory: usage 0kB, limit 0kB, failcnt 19 [ 984.962910][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 984.964391][T19486] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 984.997062][T19499] netlink: 'syz.2.3963': attribute type 2 has an invalid length. [ 984.998087][T19486] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 985.009609][T19486] Memory cgroup stats for /syz1/test: [ 985.009946][T19486] cache 0 [ 985.012652][T19486] rss 0 [ 985.013572][T19486] rss_huge 0 [ 985.014619][T19486] shmem 0 [ 985.015599][T19486] mapped_file 0 [ 985.016736][T19486] dirty 0 [ 985.017852][T19486] writeback 0 [ 985.018956][T19486] workingset_refault_anon 0 [ 985.020543][T19486] workingset_refault_file 0 [ 985.022006][T19486] swap 0 [ 985.022924][T19486] swapcached 0 [ 985.024042][T19486] pgpgin 0 [ 985.025062][T19486] pgpgout 0 [ 985.026103][T19486] pgfault 0 [ 985.027100][T19486] pgmajfault 0 [ 985.028294][T19486] inactive_anon 0 [ 985.029474][T19486] active_anon 0 [ 985.030626][T19486] inactive_file 0 [ 985.031816][T19486] active_file 0 [ 985.032953][T19486] unevictable 0 [ 985.034076][T19486] hierarchical_memory_limit 0 [ 985.035592][T19486] hierarchical_memsw_limit 9223372036854771712 [ 985.037523][T19486] total_cache 0 [ 985.038752][T19486] total_rss 0 [ 985.039841][T19486] total_rss_huge 0 [ 985.041033][T19486] total_shmem 0 [ 985.042169][T19486] total_mapped_file 0 [ 985.043450][T19486] total_dirty 0 [ 985.044580][T19486] total_writeback 0 [ 985.045740][T19486] total_workingset_refault_anon 0 [ 985.047279][T19486] total_workingset_refault_file 0 [ 985.048843][T19486] total_swap 0 [ 985.049914][T19486] total_swapcached 0 [ 985.051074][T19486] total_pgpgin 0 [ 985.052158][T19486] total_pgpgout 0 [ 985.053259][T19486] total_pgfault 0 [ 985.054415][T19486] total_pgmajfault 0 [ 985.055654][T19486] total_inactive_anon 0 [ 985.056973][T19486] total_active_anon 0 [ 985.058343][T19486] total_inactive_file 0 [ 985.059682][T19486] total_active_file 0 [ 985.060970][T19486] total_unevictable 0 [ 985.062246][T19486] anon_cost 0 [ 985.063333][T19486] file_cost 0 [ 985.064396][T19486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.3959,pid=19484,uid=0 [ 985.069663][T19486] Memory cgroup out of memory: Killed process 19484 (syz.1.3959) total-vm:102156kB, anon-rss:1292kB, file-rss:22888kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 985.457770][ T29] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 985.608327][ T29] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 985.614733][ T29] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 985.619286][ T29] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 985.623774][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 985.628810][ T29] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 985.632095][ T29] usb 6-1: Product: syz [ 985.633560][ T29] usb 6-1: Manufacturer: syz [ 985.635083][ T29] usb 6-1: SerialNumber: syz [ 985.638009][ T29] usb 6-1: config 0 descriptor?? [ 985.643459][ T29] usb 6-1: selecting invalid altsetting 0 [ 985.835971][T19536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3971'. [ 985.892247][T19503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.898150][T19503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.910486][ T41] usb 6-1: USB disconnect, device number 40 [ 985.973747][T19546] netlink: 'syz.4.3972': attribute type 5 has an invalid length. [ 985.982666][T19546] netlink: 'syz.4.3972': attribute type 6 has an invalid length. [ 985.987342][T19546] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3972'. [ 986.068636][T19556] netlink: 'syz.2.3974': attribute type 2 has an invalid length. [ 986.727786][T15102] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 986.887755][T15102] usb 9-1: Using ep0 maxpacket: 8 [ 986.890071][T15102] usb 9-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 986.896263][T15102] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.899015][T15102] usb 9-1: Product: syz [ 986.900372][T15102] usb 9-1: Manufacturer: syz [ 986.901906][T15102] usb 9-1: SerialNumber: syz [ 986.905392][T15102] usb 9-1: config 0 descriptor?? [ 986.911755][T15102] radio-usb-si4713 9-1:0.0: Si4713 development board discovered: (10C4:8244) [ 987.063162][T19598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3980'. [ 987.584569][T15102] radio-usb-si4713 9-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 987.588140][T15102] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 987.592898][T15102] usb 9-1: USB disconnect, device number 32 [ 988.096597][T19634] netlink: 'syz.0.3988': attribute type 2 has an invalid length. [ 988.167446][T19636] __nla_validate_parse: 1 callbacks suppressed [ 988.167467][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3989'. [ 988.195640][T19644] binder: BINDER_SET_CONTEXT_MGR already set [ 988.197538][T19644] binder: 19643:19644 ioctl 4018620d 80004a80 returned -16 [ 988.243091][T19649] syz.1.3993 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 988.246374][T19649] CPU: 2 UID: 0 PID: 19649 Comm: syz.1.3993 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.246395][T19649] Tainted: [L]=SOFTLOCKUP [ 988.246399][T19649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 988.246407][T19649] Call Trace: [ 988.246413][T19649] [ 988.246419][T19649] dump_stack_lvl+0x100/0x190 [ 988.246437][T19649] dump_header+0xfb/0x606 [ 988.246453][T19649] oom_kill_process.cold+0xd/0x330 [ 988.246467][T19649] out_of_memory+0x340/0x14f0 [ 988.246483][T19649] ? __pfx_out_of_memory+0x10/0x10 [ 988.246498][T19649] mem_cgroup_out_of_memory+0xc6/0x130 [ 988.246511][T19649] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 988.246523][T19649] ? find_held_lock+0x2b/0x80 [ 988.246539][T19649] ? do_raw_spin_unlock+0x145/0x1e0 [ 988.246552][T19649] ? _raw_spin_unlock+0x28/0x50 [ 988.246568][T19649] try_charge_memcg+0x6e5/0xdf0 [ 988.246586][T19649] ? __pfx_try_charge_memcg+0x10/0x10 [ 988.246603][T19649] ? find_held_lock+0x2b/0x80 [ 988.246616][T19649] ? rcu_read_unlock+0x17/0x60 [ 988.246631][T19649] ? rcu_read_unlock+0x17/0x60 [ 988.246652][T19649] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 988.246673][T19649] ? kasan_save_track+0x14/0x30 [ 988.246689][T19649] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 988.246704][T19649] ? sock_alloc_inode+0x26/0x2c0 [ 988.246765][T19649] ? __pfx_sock_alloc_inode+0x10/0x10 [ 988.246777][T19649] sock_alloc_inode+0x26/0x2c0 [ 988.246789][T19649] ? __pfx_sock_alloc_inode+0x10/0x10 [ 988.246800][T19649] alloc_inode+0x68/0x250 [ 988.246818][T19649] sock_alloc+0x44/0x280 [ 988.246834][T19649] ? security_socket_create+0x7f/0x250 [ 988.246894][T19649] __sock_create+0xc2/0x860 [ 988.246909][T19649] __sys_socket+0x14d/0x260 [ 988.246923][T19649] ? __pfx___sys_socket+0x10/0x10 [ 988.246935][T19649] ? kmem_cache_free+0x127/0x6b0 [ 988.246947][T19649] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 988.246968][T19649] __ia32_sys_socket+0x72/0xb0 [ 988.246980][T19649] ? lockdep_hardirqs_on+0x78/0x100 [ 988.246997][T19649] __do_fast_syscall_32+0xe7/0x970 [ 988.247016][T19649] do_fast_syscall_32+0x32/0x70 [ 988.247032][T19649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 988.247047][T19649] RIP: 0023:0xf6fcefec [ 988.247062][T19649] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 988.247067][T19649] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 988.247079][T19649] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 988.247085][T19649] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 988.247096][T19649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 988.247103][T19649] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 988.247110][T19649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 988.247124][T19649] [ 988.247202][T19649] memory: usage 8kB, limit 8kB, failcnt 93 [ 988.336112][T19649] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 988.338689][T19649] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 988.340914][T19649] Memory cgroup stats for /syz1/test: [ 988.340998][T19649] cache 0 [ 988.343752][T19649] rss 0 [ 988.344654][T19649] rss_huge 0 [ 988.345807][T19649] shmem 0 [ 988.346856][T19649] mapped_file 0 [ 988.349054][T19649] dirty 0 [ 988.350541][T19649] writeback 0 [ 988.352137][T19649] workingset_refault_anon 0 [ 988.354169][T19649] workingset_refault_file 0 [ 988.356210][T19649] swap 0 [ 988.357542][T19649] swapcached 0 [ 988.359328][T19649] pgpgin 0 [ 988.360770][T19649] pgpgout 0 [ 988.362291][T19649] pgfault 0 [ 988.363756][T19649] pgmajfault 0 [ 988.365324][T19649] inactive_anon 0 [ 988.366989][T19649] active_anon 0 [ 988.368599][T19649] inactive_file 0 [ 988.370604][T19649] active_file 0 [ 988.372202][T19649] unevictable 0 [ 988.373776][T19649] hierarchical_memory_limit 8192 [ 988.375895][T19649] hierarchical_memsw_limit 9223372036854771712 [ 988.378811][T19649] total_cache 0 [ 988.380345][T19649] total_rss 0 [ 988.381785][T19649] total_rss_huge 0 [ 988.383475][T19649] total_shmem 0 [ 988.385004][T19649] total_mapped_file 0 [ 988.386732][T19649] total_dirty 0 [ 988.390968][T19649] total_writeback 0 [ 988.393597][T19649] total_workingset_refault_anon 0 [ 988.395914][T19649] total_workingset_refault_file 0 [ 988.398222][T19649] total_swap 0 [ 988.399686][T19649] total_swapcached 0 [ 988.401442][T19649] total_pgpgin 0 [ 988.403589][T19649] total_pgpgout 0 [ 988.413041][T19649] total_pgfault 0 [ 988.414683][T19649] total_pgmajfault 0 [ 988.416438][T19649] total_inactive_anon 0 [ 988.418508][T19649] total_active_anon 0 [ 988.420272][T19649] total_inactive_file 0 [ 988.422076][T19649] total_active_file 0 [ 988.423850][T19649] total_unevictable 0 [ 988.425626][T19649] anon_cost 0 [ 988.427109][T19649] file_cost 0 [ 988.428686][T19649] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.3993,pid=19648,uid=0 [ 988.436808][T19649] Memory cgroup out of memory: Killed process 19648 (syz.1.3993) total-vm:102156kB, anon-rss:1292kB, file-rss:22632kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 988.453286][T19649] socket: no more sockets [ 988.549290][T19661] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3995'. [ 988.593429][T19666] netlink: 'syz.4.3999': attribute type 2 has an invalid length. [ 988.817838][ T5744] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 988.901486][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4001'. [ 988.978578][ T5744] usb 7-1: Using ep0 maxpacket: 8 [ 988.981473][ T5744] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 988.989026][ T5744] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.994646][ T5744] usb 7-1: Product: syz [ 988.998069][ T5744] usb 7-1: Manufacturer: syz [ 989.000016][ T5744] usb 7-1: SerialNumber: syz [ 989.003901][ T5744] usb 7-1: config 0 descriptor?? [ 989.010342][ T5744] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 989.153707][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4006'. [ 989.160827][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4006'. [ 989.534562][T19691] netlink: 'syz.1.4008': attribute type 2 has an invalid length. [ 989.631608][ T5744] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 989.634744][ T5744] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 989.638502][ T5744] usb 7-1: USB disconnect, device number 52 [ 989.648019][ T9] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 989.827764][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 989.830151][ T9] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 989.837478][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.840407][ T9] usb 9-1: Product: syz [ 989.841832][ T9] usb 9-1: Manufacturer: syz [ 989.843451][ T9] usb 9-1: SerialNumber: syz [ 989.846593][ T9] usb 9-1: config 0 descriptor?? [ 990.053357][ T9] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 990.195632][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4010'. [ 990.257137][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4006'. [ 990.263925][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4006'. [ 990.271776][ T9] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 990.275948][ T9] usb 9-1: USB disconnect, device number 33 [ 990.627868][ T41] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 990.790619][ T41] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 990.800191][ T41] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.805576][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.816800][ T41] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 990.822739][ T41] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 990.825149][ T41] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 990.828881][ T41] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 990.831277][ T41] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 990.834340][ T41] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 990.840398][ T41] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 990.842868][ T41] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 990.847390][ T41] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 991.024522][ T9] usb 7-1: USB disconnect, device number 53 [ 991.034100][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 991.043297][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 991.058196][ T9] keyspan 7-1:1.0: device disconnected [ 991.170219][T19747] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4018'. [ 991.845301][T19762] netlink: 'syz.0.4024': attribute type 2 has an invalid length. [ 992.550959][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.553306][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.722781][T19769] evm: overlay not supported [ 993.615621][T19782] netlink: 'syz.4.4030': attribute type 5 has an invalid length. [ 993.619392][T19782] netlink: 'syz.4.4030': attribute type 6 has an invalid length. [ 993.624066][T19782] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4030'. [ 994.331627][T19792] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 994.963226][T19797] netlink: 'syz.0.4035': attribute type 2 has an invalid length. [ 995.742728][T19789] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4032'. [ 995.796255][T19802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4037'. [ 995.968802][T19813] netlink: 'syz.4.4040': attribute type 5 has an invalid length. [ 995.971373][T19813] netlink: 'syz.4.4040': attribute type 6 has an invalid length. [ 995.973811][T19813] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4040'. [ 996.019086][T19819] Bluetooth: ISO socket layer initialized [ 996.397781][ T41] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 996.548311][ T41] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 996.552471][ T41] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 996.555940][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.568257][ T41] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 996.573337][ T41] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 996.581204][ T41] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 996.587525][ T41] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 996.590109][ T41] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 996.594105][ T41] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 996.598495][ T41] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 996.601136][ T41] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 996.605117][ T41] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 996.781584][T19833] netlink: 'syz.1.4050': attribute type 2 has an invalid length. [ 996.872625][ T9] usb 9-1: USB disconnect, device number 34 [ 996.884059][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 996.899266][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 996.906364][ T9] keyspan 9-1:1.0: device disconnected [ 997.033443][T19840] netlink: 'syz.0.4052': attribute type 5 has an invalid length. [ 997.038213][T19840] netlink: 'syz.0.4052': attribute type 6 has an invalid length. [ 997.042593][T19840] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4052'. [ 997.307898][ T41] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 997.477821][ T41] usb 7-1: Using ep0 maxpacket: 8 [ 997.480879][ T41] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 997.487237][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.489931][ T41] usb 7-1: Product: syz [ 997.491426][ T41] usb 7-1: Manufacturer: syz [ 997.493030][ T41] usb 7-1: SerialNumber: syz [ 997.496041][ T41] usb 7-1: config 0 descriptor?? [ 997.500348][ T41] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 998.067793][T12738] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 998.228406][T12738] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 998.233239][T12738] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.237819][T12738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.247796][T12738] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 998.251162][T12738] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 998.254393][T12738] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 998.259006][T12738] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 998.262252][T12738] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 998.266729][T12738] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 998.271919][T12738] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 998.275187][T12738] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 998.279848][T12738] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 998.532419][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4067'. [ 998.553918][T12738] usb 6-1: USB disconnect, device number 41 [ 998.560454][T12738] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 998.566957][T12738] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 998.573426][T12738] keyspan 6-1:1.0: device disconnected [ 998.603848][T19903] WARNING! power/level is deprecated; use power/control instead [ 998.943610][T19914] netlink: 'syz.4.4073': attribute type 5 has an invalid length. [ 998.946481][T19914] netlink: 'syz.4.4073': attribute type 6 has an invalid length. [ 998.949582][T19914] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4073'. [ 999.101101][T19922] netlink: Unknown conntrack attr (type=1293, max=9) [ 999.103432][T19922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 999.144770][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4077'. [ 999.180228][ T29] IPVS: starting estimator thread 0... [ 999.245200][T19934] netlink: 'syz.1.4082': attribute type 5 has an invalid length. [ 999.248672][T19934] netlink: 'syz.1.4082': attribute type 6 has an invalid length. [ 999.251981][T19934] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4082'. [ 999.291163][T19929] IPVS: using max 30 ests per chain, 72000 per kthread [ 999.527477][ T41] gspca_sonixj: reg_w1 err -71 [ 999.557870][T12738] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 999.577852][ T41] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 999.592202][ T41] usb 7-1: USB disconnect, device number 54 [ 999.738281][T12738] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 999.742091][T12738] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.746829][T12738] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.756147][T12738] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 999.758906][T12738] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 999.761293][T12738] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 999.767920][T12738] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 999.772605][T12738] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 999.775847][T12738] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 999.786355][T12738] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 999.792575][T12738] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 999.799729][T12738] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1000.139578][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4090'. [ 1000.151766][T12738] usb 9-1: USB disconnect, device number 35 [ 1000.164725][T12738] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1000.173639][T12738] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1000.184345][T12738] keyspan 9-1:1.0: device disconnected [ 1000.339987][T19960] overlayfs: failed to resolve './bus': -2 [ 1000.388866][T19963] netlink: 'syz.0.4092': attribute type 5 has an invalid length. [ 1000.391413][T19963] netlink: 'syz.0.4092': attribute type 6 has an invalid length. [ 1000.393850][T19963] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4092'. [ 1000.668260][T19973] netlink: 'syz.1.4098': attribute type 3 has an invalid length. [ 1000.671762][T19973] netlink: 'syz.1.4098': attribute type 3 has an invalid length. [ 1000.675107][T19973] netlink: 'syz.1.4098': attribute type 3 has an invalid length. [ 1000.682776][T19973] netlink: 'syz.1.4098': attribute type 3 has an invalid length. [ 1000.686337][T19973] netlink: 'syz.1.4098': attribute type 3 has an invalid length. [ 1000.690612][T19973] netlink: 'syz.1.4098': attribute type 3 has an invalid length. [ 1000.694088][T19973] netlink: 'syz.1.4098': attribute type 3 has an invalid length. [ 1000.697529][T19973] netlink: 'syz.1.4098': attribute type 3 has an invalid length. [ 1000.991206][T19984] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4103'. [ 1001.304589][T20001] jffs2: notice: (20001) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1001.877843][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1002.037807][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1002.040461][ T9] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1002.046100][ T9] usb 6-1: config index 0 descriptor too short (expected 26, got 18) [ 1002.048645][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.052571][ T9] usb 6-1: config 0 has no interfaces? [ 1002.062058][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.064441][ T9] usb 6-1: Product: syz [ 1002.065710][ T9] usb 6-1: Manufacturer: syz [ 1002.067144][ T9] usb 6-1: SerialNumber: syz [ 1002.073116][ T9] usb 6-1: config 0 descriptor?? [ 1002.120467][T20032] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4114'. [ 1002.200607][T20039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1002.272590][T20047] overlayfs: failed to resolve './bus': -2 [ 1002.617950][T12738] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1002.651981][T20017] ------------[ cut here ]------------ [ 1002.653808][T20017] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x8d/0x720 [ 1002.657492][T20017] WARNING: kernel/sched/core.c:9120 at __might_sleep+0x94/0xc0, CPU#1: syz.1.4111/20017 [ 1002.660540][T20017] Modules linked in: [ 1002.662005][T20017] CPU: 1 UID: 0 PID: 20017 Comm: syz.1.4111 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.665393][T20017] Tainted: [L]=SOFTLOCKUP [ 1002.666761][T20017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1002.669949][T20017] RIP: 0010:__might_sleep+0x97/0xc0 [ 1002.671591][T20017] Code: 8b 94 24 70 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c d2 4f 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 cd 26 a4 00 eb 9f 89 74 24 04 e8 f2 26 a4 [ 1002.677510][T20017] RSP: 0018:ffffc90020fffb68 EFLAGS: 00010282 [ 1002.679498][T20017] RAX: dffffc0000000000 RBX: ffffffff8bcfc6a0 RCX: ffffffff81e1d79d [ 1002.681987][T20017] RDX: ffffffff81e1d79d RSI: 0000000000000002 RDI: ffffffff91250f00 [ 1002.684461][T20017] RBP: 000000000000026f R08: ffffffff81fbd2c2 R09: 0000000000000000 [ 1002.686958][T20017] R10: ffffc90020fffd20 R11: 0000000000000000 R12: ffff888024be8000 [ 1002.689462][T20017] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8e80cff0 [ 1002.691970][T20017] FS: 0000000000000000(0000) GS:ffff888096cf3000(0063) knlGS:00000000f537bb40 [ 1002.694635][T20017] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1002.696721][T20017] CR2: 00000000f71e8b50 CR3: 00000000737e7000 CR4: 0000000000352ef0 [ 1002.699340][T20017] Call Trace: [ 1002.700480][T20017] [ 1002.701437][T20017] ? __lock_acquire+0x49f/0x1a40 SYZFAIL: failed to recv rpc [ 1002.703032][T20017] __mutex_lock+0x10e/0x1bd0 [ 1002.704643][T20017] ? futex_hash_allocate+0xd22/0x1120 [ 1002.706362][T20017] ? futex_hash_allocate+0x6fc/0x1120 [ 1002.708187][T20017] ? __pfx___mutex_lock+0x10/0x10 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1002.709776][T20017] ? do_raw_spin_lock+0x128/0x260 [ 1002.711455][T20017] ? find_held_lock+0x2b/0x80 [ 1002.712923][T20017] ? prepare_to_wait_event+0x8d/0x720 [ 1002.714631][T20017] ? lockdep_hardirqs_on+0x78/0x100 [ 1002.716240][T20017] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1002.718075][T20017] ? prepare_to_wait_event+0xbe/0x720 [ 1002.719691][T20017] ? futex_hash_allocate+0xd22/0x1120 [ 1002.721285][T20017] futex_hash_allocate+0xd22/0x1120 [ 1002.722881][T20017] ? __pfx_futex_hash_allocate+0x10/0x10 [ 1002.724626][T20017] ? __pfx_var_wake_function+0x10/0x10 [ 1002.726305][T20017] ? static_key_count+0x5a/0x70 [ 1002.727841][T20017] futex_hash_prctl+0x1b8/0x390 [ 1002.729358][T20017] __do_sys_prctl+0x16dd/0x2270 [ 1002.730966][T20017] ? __pfx___do_sys_prctl+0x10/0x10 [ 1002.732618][T20017] __do_fast_syscall_32+0xe7/0x970 [ 1002.734258][T20017] do_fast_syscall_32+0x32/0x70 [ 1002.735820][T20017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1002.737899][T20017] RIP: 0023:0xf6fcefec [ 1002.739207][T20017] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 1002.741270][T20017] RSP: 002b:00000000f537b50c EFLAGS: 00000292 ORIG_RAX: 00000000000000ac [ 1002.744044][T20017] RAX: ffffffffffffffda RBX: 000000000000004e RCX: 0000000000000001 [ 1002.746608][T20017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1002.749111][T20017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1002.751482][T20017] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1002.753791][T20017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1002.756148][T20017] [ 1002.757088][T20017] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1002.759271][T20017] CPU: 1 UID: 0 PID: 20017 Comm: syz.1.4111 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.762478][T20017] Tainted: [L]=SOFTLOCKUP [ 1002.763803][T20017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1002.766762][T20017] Call Trace: [ 1002.767783][T20017] [ 1002.768693][T20017] dump_stack_lvl+0x100/0x190 [ 1002.770148][T20017] vpanic+0x552/0x970 [ 1002.771396][T20017] ? __pfx_vpanic+0x10/0x10 [ 1002.772793][T20017] panic+0xd1/0xe0 [ 1002.773973][T20017] ? __pfx_panic+0x10/0x10 [ 1002.775364][T20017] check_panic_on_warn.cold+0x19/0x34 [ 1002.776937][T20017] ? __might_sleep+0x94/0xc0 [ 1002.778353][T20017] __warn.cold+0x191/0x318 [ 1002.779742][T20017] __report_bug+0x30f/0x440 [ 1002.781152][T20017] ? __might_sleep+0x94/0xc0 [ 1002.782605][T20017] ? __pfx___report_bug+0x10/0x10 [ 1002.784132][T20017] ? lock_acquire+0x1b9/0x370 [ 1002.785583][T20017] ? prepare_to_wait_event+0x8d/0x720 [ 1002.787288][T20017] ? prepare_to_wait_event+0x8d/0x720 [ 1002.788928][T20017] ? futex_hash_allocate+0xd22/0x1120 [ 1002.790610][T20017] ? mark_held_locks+0x40/0x70 [ 1002.792124][T20017] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1002.793939][T20017] report_bug_entry+0xe1/0x290 [ 1002.795439][T20017] ? __might_sleep+0x97/0xc0 [ 1002.796838][T20017] handle_bug+0x1cd/0x2a0 [ 1002.798208][T20017] exc_invalid_op+0x17/0x50 [ 1002.799615][T20017] asm_exc_invalid_op+0x1a/0x20 [ 1002.801110][T20017] RIP: 0010:__might_sleep+0x97/0xc0 [ 1002.802748][T20017] Code: 8b 94 24 70 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c d2 4f 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 cd 26 a4 00 eb 9f 89 74 24 04 e8 f2 26 a4 [ 1002.808559][T20017] RSP: 0018:ffffc90020fffb68 EFLAGS: 00010282 [ 1002.810389][T20017] RAX: dffffc0000000000 RBX: ffffffff8bcfc6a0 RCX: ffffffff81e1d79d [ 1002.812773][T20017] RDX: ffffffff81e1d79d RSI: 0000000000000002 RDI: ffffffff91250f00 [ 1002.815216][T20017] RBP: 000000000000026f R08: ffffffff81fbd2c2 R09: 0000000000000000 [ 1002.817580][T20017] R10: ffffc90020fffd20 R11: 0000000000000000 R12: ffff888024be8000 [ 1002.820002][T20017] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8e80cff0 [ 1002.822391][T20017] ? futex_hash_allocate+0xd22/0x1120 [ 1002.823987][T20017] ? prepare_to_wait_event+0x8d/0x720 [ 1002.825625][T20017] ? prepare_to_wait_event+0x8d/0x720 [ 1002.827287][T20017] ? __lock_acquire+0x49f/0x1a40 [ 1002.828802][T20017] __mutex_lock+0x10e/0x1bd0 [ 1002.830246][T20017] ? futex_hash_allocate+0xd22/0x1120 [ 1002.831986][T20017] ? futex_hash_allocate+0x6fc/0x1120 [ 1002.833606][T20017] ? __pfx___mutex_lock+0x10/0x10 [ 1002.835221][T20017] ? do_raw_spin_lock+0x128/0x260 [ 1002.836803][T20017] ? find_held_lock+0x2b/0x80 [ 1002.838255][T20017] ? prepare_to_wait_event+0x8d/0x720 [ 1002.839871][T20017] ? lockdep_hardirqs_on+0x78/0x100 [ 1002.841536][T20017] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1002.843340][T20017] ? prepare_to_wait_event+0xbe/0x720 [ 1002.844978][T20017] ? futex_hash_allocate+0xd22/0x1120 [ 1002.846645][T20017] futex_hash_allocate+0xd22/0x1120 [ 1002.848248][T20017] ? __pfx_futex_hash_allocate+0x10/0x10 [ 1002.849985][T20017] ? __pfx_var_wake_function+0x10/0x10 [ 1002.851645][T20017] ? static_key_count+0x5a/0x70 [ 1002.853171][T20017] futex_hash_prctl+0x1b8/0x390 [ 1002.854640][T20017] __do_sys_prctl+0x16dd/0x2270 [ 1002.856088][T20017] ? __pfx___do_sys_prctl+0x10/0x10 [ 1002.857688][T20017] __do_fast_syscall_32+0xe7/0x970 [ 1002.859253][T20017] do_fast_syscall_32+0x32/0x70 [ 1002.860728][T20017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1002.862594][T20017] RIP: 0023:0xf6fcefec [ 1002.863806][T20017] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 1002.865805][T20017] RSP: 002b:00000000f537b50c EFLAGS: 00000292 ORIG_RAX: 00000000000000ac [ 1002.868290][T20017] RAX: ffffffffffffffda RBX: 000000000000004e RCX: 0000000000000001 [ 1002.870691][T20017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1002.873048][T20017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1002.875413][T20017] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1002.877725][T20017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1002.880075][T20017] [ 1002.881700][T20017] Kernel Offset: disabled [ 1002.883020][T20017] Rebooting in 86400 seconds..