last executing test programs: 2.43445042s ago: executing program 4 (id=5112): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r1, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.111159013s ago: executing program 3 (id=5116): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000300)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000000000003001af56be600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b000000000000000000ee0000000021000000000000000000000300", [0x9, 0x8000000000000077]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1) 2.109463841s ago: executing program 1 (id=5117): r0 = fanotify_init(0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x1, 0x2a, r1, 0x0) fanotify_mark(r0, 0x2, 0x40001018, r1, 0x0) 2.083194871s ago: executing program 2 (id=5118): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) openat$cgroup_pressure(r1, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) 2.040454779s ago: executing program 0 (id=5119): socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.934262731s ago: executing program 2 (id=5120): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xffde) 1.897803469s ago: executing program 1 (id=5121): mkdir(&(0x7f0000000180)='./file0\x00', 0x118) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1c5) lseek(r0, 0x0, 0x0) 1.822872758s ago: executing program 3 (id=5122): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000004c0)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.749896052s ago: executing program 0 (id=5123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r1, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 1.699020009s ago: executing program 1 (id=5124): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006c40)="324d86ee", 0x4}], 0x1}}], 0x1, 0x0) 1.698231051s ago: executing program 2 (id=5125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x3000, 0x1000}) 1.538694009s ago: executing program 0 (id=5126): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) 1.534091273s ago: executing program 1 (id=5127): r0 = socket$packet(0x11, 0x2, 0x300) read$FUSE(r0, &(0x7f0000006180)={0x2020}, 0x2020) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x29a1, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@val, {0x8100, 0x0, 0x0, 0x3}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @empty, @loopback}}}}, 0x0) 1.504133519s ago: executing program 4 (id=5128): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x289e0cb5, 0x0) 1.295638315s ago: executing program 3 (id=5129): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.257803727s ago: executing program 2 (id=5130): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x107f) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 1.171918635s ago: executing program 0 (id=5131): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) semget$private(0x0, 0x4000000009, 0x0) 895.039284ms ago: executing program 3 (id=5132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x4c, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 807.558261ms ago: executing program 3 (id=5133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x5, 0x2, 0x47, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 698.903079ms ago: executing program 4 (id=5134): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60}]}) write$ppp(r0, &(0x7f0000000200)="3fa30c", 0x3) 686.522581ms ago: executing program 3 (id=5135): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) stat(0x0, 0x0) 558.444319ms ago: executing program 1 (id=5136): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 529.550659ms ago: executing program 4 (id=5137): unshare(0x22020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020300) 339.932523ms ago: executing program 4 (id=5138): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x11, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 322.770093ms ago: executing program 2 (id=5139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x6f, 0x5, 0x0, 0x80, 0x3, 0x3, 0x4, 0x2, 0x1, 0x0, 0x1, 0x0, 0x2, 0x7, 0x9, 0x20, 0x3, 0x7, '\x00', 0x0, 0x9}) 175.333071ms ago: executing program 0 (id=5140): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 147.6121ms ago: executing program 1 (id=5141): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) fadvise64(0xffffffffffffffff, 0x7fffffffffffffff, 0x8, 0x4) 137.203149ms ago: executing program 4 (id=5142): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000002010040"]) 80.846845ms ago: executing program 2 (id=5143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000ff0040"]) 0s ago: executing program 0 (id=5144): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x12) dup2(r0, r1) kernel console output (not intermixed with test programs): at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 282.934932][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2932'. [ 283.057135][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2934'. [ 283.225689][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 283.406460][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 283.423651][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 283.433261][T12344] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2941'. [ 283.456018][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.466751][T12344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2941'. [ 283.484833][ T24] usb 2-1: Product: syz [ 283.490683][ T24] usb 2-1: Manufacturer: syz [ 283.496772][ T24] usb 2-1: SerialNumber: syz [ 283.533424][ T24] usb 2-1: config 0 descriptor?? [ 283.562466][ T24] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 284.108687][T12369] netlink: 'syz.4.2953': attribute type 2 has an invalid length. [ 284.174190][ T24] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 284.196164][ T24] usb 2-1: USB disconnect, device number 21 [ 284.495433][T12383] netlink: 'syz.0.2960': attribute type 2 has an invalid length. [ 284.939328][T12295] syz.2.2918 (12295): drop_caches: 1 [ 285.190386][T12406] sp0: Synchronizing with TNC [ 285.221228][T12405] [U] [ 285.248668][T12408] mkiss: ax0: crc mode is auto. [ 285.737073][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2983'. [ 286.235877][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 286.343459][T12460] tipc: Started in network mode [ 286.369686][T12460] tipc: Node identity e0000001, cluster identity 4711 [ 286.396495][T12460] tipc: Enabling of bearer rejected, failed to enable media [ 286.423209][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 286.439864][ T24] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.461857][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.471731][ T24] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 286.491394][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.512678][ T24] usb 4-1: config 0 descriptor?? [ 286.758278][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 286.784763][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 286.814714][ T24] usb 4-1: USB disconnect, device number 26 [ 287.151745][T12487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3010'. [ 287.175383][T12485] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 287.194048][T12489] netlink: 'syz.1.3011': attribute type 30 has an invalid length. [ 287.426148][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3015'. [ 287.435206][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3015'. [ 287.563572][T12504] netlink: 'syz.2.3018': attribute type 2 has an invalid length. [ 287.614835][T12507] netlink: 'syz.2.3018': attribute type 2 has an invalid length. [ 287.627402][T12506] program syz.3.3019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.664806][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3020'. [ 287.691287][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3020'. [ 288.365911][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 288.542750][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.581958][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.606481][ T24] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 288.631107][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.655415][ T24] usb 2-1: config 0 descriptor?? [ 288.827305][ T30] audit: type=1326 audit(1754329616.825:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12564 comm="syz.4.3046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc5d8eb69 code=0x0 [ 289.112573][ T24] dragonrise 0003:0079:0006.0032: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 289.126206][ T5912] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 289.147400][ T24] dragonrise 0003:0079:0006.0032: no inputs found [ 289.155150][ T24] dragonrise 0003:0079:0006.0032: force feedback init failed [ 289.310893][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 289.335336][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.335646][ T24] usb 2-1: USB disconnect, device number 22 [ 289.365754][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.395084][ T5912] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 289.425724][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.450110][ T5912] usb 4-1: config 0 descriptor?? [ 289.897147][ T5912] gt683r_led 0003:1770:FF00.0033: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 290.110826][ T5912] usb 4-1: USB disconnect, device number 27 [ 290.159688][ T9] gt683r_led 0003:1770:FF00.0033: failed to send set report request: -19 [ 290.191100][T12611] fido_id[12611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 290.557989][ T30] audit: type=1326 audit(1754329618.555:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12633 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 290.632723][ T30] audit: type=1326 audit(1754329618.585:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12633 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 290.686141][ T30] audit: type=1326 audit(1754329618.595:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12633 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 290.775665][ T30] audit: type=1326 audit(1754329618.595:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12633 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 290.827283][ T30] audit: type=1326 audit(1754329618.595:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12633 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 290.857833][T12644] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 290.857833][T12644] [ 290.896457][ T30] audit: type=1326 audit(1754329618.595:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12633 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 290.949088][ T30] audit: type=1326 audit(1754329618.595:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12633 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 290.971299][ T30] audit: type=1326 audit(1754329618.595:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12633 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 291.229009][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3094'. [ 292.346984][T12703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3110'. [ 292.388222][T12700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3110'. [ 293.260269][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3127'. [ 294.072703][T12773] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3145'. [ 294.697308][ T24] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 294.880493][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 294.906025][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 294.936455][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 294.951733][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 294.987940][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c70a, bcdDevice= 0.00 [ 295.012684][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.032685][ T24] usb 2-1: config 0 descriptor?? [ 295.043741][T12795] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.452178][T12844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3179'. [ 295.526067][ T24] logitech-djreceiver 0003:046D:C70A.0034: hidraw0: USB HID v0.00 Device [HID 046d:c70a] on usb-dummy_hcd.1-1/input0 [ 295.644561][T12852] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3182'. [ 295.675220][T12852] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3182'. [ 295.696533][ T24] usb 2-1: USB disconnect, device number 23 [ 296.397646][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 296.746112][T12900] tipc: MTU too low for tipc bearer [ 296.901230][T12907] sp0: Synchronizing with TNC [ 296.939069][T12905] [U] [ 296.955739][ T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 297.143980][ T43] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 297.173470][ T43] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.194688][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 297.213497][ T43] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 297.235353][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.257090][ T43] usb 2-1: config 0 descriptor?? [ 297.394000][T12934] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 297.475499][T12936] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 297.475796][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 297.506131][T12936] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 297.512728][T12936] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 297.526661][T12936] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 297.533283][T12936] comedi comedi3: 8255: I/O port conflict (0x5c952397,4) [ 297.540936][T12936] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 297.563567][T12936] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 297.571065][T12936] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 297.658746][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 297.666481][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 297.686084][ T43] pantherlord 0003:0810:0002.0035: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.1-1/input0 [ 297.699092][ T24] usb 3-1: config 0 has no interface number 0 [ 297.705270][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.716551][ T43] pantherlord 0003:0810:0002.0035: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 297.745688][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 297.788169][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 297.795883][ T5912] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 297.805516][ T24] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 297.824236][ T24] usb 3-1: Product: syz [ 297.844489][ T24] usb 3-1: SerialNumber: syz [ 297.863283][ T24] usb 3-1: config 0 descriptor?? [ 297.881842][ T24] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 297.901602][ T43] usb 2-1: USB disconnect, device number 24 [ 297.923440][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input17 [ 297.967153][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 297.981687][ T5912] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 297.992666][ T5912] usb 5-1: config 0 has no interface number 0 [ 298.003642][ T5912] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 298.018544][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.029115][ T5912] usb 5-1: Product: syz [ 298.033441][ T5912] usb 5-1: Manufacturer: syz [ 298.041845][ T5912] usb 5-1: SerialNumber: syz [ 298.055497][ T5912] usb 5-1: config 0 descriptor?? [ 298.074008][ T5912] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 298.084847][ T5912] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 298.099287][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 298.135701][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 298.146010][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 298.153658][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 298.160927][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 298.168485][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 298.175691][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 298.182903][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 298.190287][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 298.197495][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 298.204701][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 298.218582][ T43] usb 3-1: USB disconnect, device number 27 [ 298.224588][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 298.244068][ T43] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 298.248872][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.278606][ T5912] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 298.291423][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 298.299201][ T9] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 298.309373][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.323891][ T9] usb 4-1: config 0 descriptor?? [ 298.503333][ T5912] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 298.724938][ T24] usb 5-1: USB disconnect, device number 25 [ 298.731709][ T24] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 298.797230][ T9] nti 0003:0757:0A00.0036: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.3-1/input0 [ 298.968937][ T5912] usb 4-1: USB disconnect, device number 28 [ 299.047503][T12956] fido_id[12956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 299.345727][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 299.526144][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 299.542624][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 299.559531][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.583414][ T9] usb 3-1: Product: syz [ 299.601052][ T9] usb 3-1: Manufacturer: syz [ 299.612311][ T9] usb 3-1: SerialNumber: syz [ 299.639447][ T9] usb 3-1: config 0 descriptor?? [ 299.686960][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 300.065750][ T9] gspca_se401: Wrong descriptor type [ 300.264460][ T24] usb 3-1: USB disconnect, device number 28 [ 300.331815][T13022] smc: net device bond0 applied user defined pnetid SYZ2 [ 301.086309][T13042] netlink: 'syz.2.3272': attribute type 29 has an invalid length. [ 301.593847][ T30] audit: type=1326 audit(1754329629.585:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027378eb69 code=0x7ffc0000 [ 301.660834][ T30] audit: type=1326 audit(1754329629.585:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027378eb69 code=0x7ffc0000 [ 301.736323][ T30] audit: type=1326 audit(1754329629.625:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f027378eb69 code=0x7ffc0000 [ 301.814265][ T30] audit: type=1326 audit(1754329629.625:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027378eb69 code=0x7ffc0000 [ 301.864698][ T30] audit: type=1326 audit(1754329629.625:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027378eb69 code=0x7ffc0000 [ 301.864757][ T30] audit: type=1326 audit(1754329629.625:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f027378eb69 code=0x7ffc0000 [ 301.864807][ T30] audit: type=1326 audit(1754329629.625:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027378eb69 code=0x7ffc0000 [ 302.201439][ T30] audit: type=1326 audit(1754329630.195:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13094 comm="syz.1.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027378eb69 code=0x7ffc0000 [ 302.294878][ T30] audit: type=1326 audit(1754329630.195:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13094 comm="syz.1.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027378eb69 code=0x7ffc0000 [ 302.385943][ T30] audit: type=1326 audit(1754329630.195:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13094 comm="syz.1.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f027378eb69 code=0x7ffc0000 [ 303.051449][T13138] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.059279][T13138] IPv6: NLM_F_CREATE should be set when creating new route [ 303.066681][T13138] IPv6: NLM_F_CREATE should be set when creating new route [ 303.073993][T13138] IPv6: NLM_F_CREATE should be set when creating new route [ 303.134325][T13138] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.375818][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 303.538829][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 303.570215][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.582117][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3330'. [ 303.601170][ T9] usb 3-1: config 0 descriptor?? [ 303.973532][T13180] program syz.3.3338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.266471][ T9] ath6kl: Failed to read usb control message: -71 [ 304.273218][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 304.292932][ T9] ath6kl: unable to read target info byte count: -71 [ 304.311823][ T9] ath6kl: Failed to init ath6kl core: -71 [ 304.343750][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 304.410988][ T9] usb 3-1: USB disconnect, device number 29 [ 304.915850][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 305.025896][ T43] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 305.082997][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.105209][ T9] usb 2-1: config 0 has no interface number 0 [ 305.134038][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.150567][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.170671][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 305.184700][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.197862][ T9] usb 2-1: config 0 descriptor?? [ 305.197904][ T43] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 305.213182][ T43] usb 4-1: config 0 has no interface number 0 [ 305.231917][ T43] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 305.252480][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.271077][ T43] usb 4-1: Product: syz [ 305.283073][ T43] usb 4-1: Manufacturer: syz [ 305.308579][ T43] usb 4-1: SerialNumber: syz [ 305.341694][ T43] usb 4-1: config 0 descriptor?? [ 305.653901][ T9] uclogic 0003:256C:006D.0037: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1 [ 305.868426][ T8366] usb 2-1: USB disconnect, device number 25 [ 305.965009][ T43] usb 4-1: Firmware version (0.0) predates our first public release. [ 305.992219][ T43] usb 4-1: Please update to version 0.2 or newer [ 306.053068][ T43] usb 4-1: USB disconnect, device number 29 [ 306.885171][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 307.055685][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 307.070363][ T43] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 307.093745][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.144329][ T43] usb 3-1: config 0 descriptor?? [ 307.239777][T13319] macsec1: entered promiscuous mode [ 307.245100][T13319] bridge0: entered promiscuous mode [ 307.459310][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 307.621444][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 307.638563][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 307.661041][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 307.700952][ T43] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 307.720901][ T24] usb 5-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 307.745704][ T43] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 307.759185][ T24] usb 5-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 307.792790][ T24] usb 5-1: config 4 interface 0 has no altsetting 0 [ 307.812722][ T24] usb 5-1: string descriptor 0 read error: -22 [ 307.829711][ T24] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 307.853234][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.892455][ T24] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 307.914967][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 307.946176][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 307.953477][ T24] usb 5-1: media controller created [ 308.029722][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.097495][T13320] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 308.161330][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 308.297001][ T24] usb 5-1: USB disconnect, device number 26 [ 308.364923][T13351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3418'. [ 308.422392][T13351] vxcan3: entered promiscuous mode [ 308.625999][T13364] sp0: Synchronizing with TNC [ 308.633325][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3424'. [ 309.584852][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 309.584872][ T30] audit: type=1326 audit(1754329637.565:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13411 comm="syz.2.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 309.678073][ T30] audit: type=1326 audit(1754329637.565:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13411 comm="syz.2.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 309.699774][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.740068][ T30] audit: type=1326 audit(1754329637.595:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13411 comm="syz.2.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 309.783132][ T30] audit: type=1326 audit(1754329637.595:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13411 comm="syz.2.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 309.807646][T13420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3450'. [ 309.855376][ T30] audit: type=1326 audit(1754329637.595:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13411 comm="syz.2.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 309.913844][ T30] audit: type=1326 audit(1754329637.595:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13411 comm="syz.2.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 309.935882][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.974213][ T30] audit: type=1326 audit(1754329637.595:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13411 comm="syz.2.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 310.075797][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 310.225810][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 310.239528][ T10] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 310.259078][ T10] usb 5-1: config 0 has no interface number 0 [ 310.265380][ T10] usb 5-1: config 0 interface 12 has no altsetting 0 [ 310.303146][ T10] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 310.316052][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.334546][ T10] usb 5-1: Product: syz [ 310.341337][ T10] usb 5-1: Manufacturer: syz [ 310.347804][ T10] usb 5-1: SerialNumber: syz [ 310.365220][ T10] usb 5-1: config 0 descriptor?? [ 310.743634][T13457] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3468'. [ 310.754716][T13457] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3468'. [ 311.001562][ T10] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 311.032378][ T10] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 311.043483][ T10] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 311.057556][ T10] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 311.063935][ T10] usb 5-1: USB disconnect, device number 27 [ 311.090576][ T9710] udevd[9710]: setting owner of /dev/bus/usb/005/027 to uid=0, gid=0 failed: No such file or directory [ 311.269484][T13475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3478'. [ 311.738109][T13493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.761892][T13496] tmpfs: Bad value for 'mpol' [ 311.832360][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3489'. [ 312.268250][ T8360] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 312.327400][T13523] vlan3: entered promiscuous mode [ 312.332538][T13523] macvtap0: entered promiscuous mode [ 312.440166][ T8360] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.459936][ T8360] usb 4-1: config 0 has no interface number 0 [ 312.493878][ T8360] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 312.516812][ T8360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.524956][ T8360] usb 4-1: Product: syz [ 312.526653][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 312.537881][ T8360] usb 4-1: Manufacturer: syz [ 312.566152][ T8360] usb 4-1: SerialNumber: syz [ 312.590141][ T8360] usb 4-1: config 0 descriptor?? [ 312.817257][ T8360] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 312.820466][ T8360] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 312.820830][ T8360] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 312.820894][ T8360] usb 4-1: media controller created [ 312.889156][ T8360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.273981][ T8360] usb 4-1: USB disconnect, device number 30 [ 313.973220][T13585] netlink: 'syz.3.3530': attribute type 10 has an invalid length. [ 313.999036][T13585] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3530'. [ 314.056694][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3532'. [ 314.082067][T13590] nbd: socks must be embedded in a SOCK_ITEM attr [ 315.364615][T13649] overlayfs: workdir and upperdir must be separate subtrees [ 315.548350][T13661] tmpfs: Bad value for 'mpol' [ 315.599485][T13661] tmpfs: Bad value for 'mpol' [ 315.624731][T13664] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 315.642471][T13664] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 315.661427][T13664] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 315.676225][T13664] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 315.692748][T13664] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 315.701354][T13667] netlink: 'syz.3.3570': attribute type 1 has an invalid length. [ 315.721411][T13664] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 315.739535][T13664] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 315.749711][T13664] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 315.759294][T13664] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 315.768528][T13664] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 315.779651][T13664] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 315.788440][T13664] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 315.855739][ T10] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 315.966067][T13679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3574'. [ 316.020347][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 316.042363][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.079475][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 316.094873][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00 [ 316.113356][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.144907][ T10] usb 2-1: config 0 descriptor?? [ 316.194850][T13690] program syz.4.3581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.449911][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3584'. [ 316.475805][ T8366] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 316.593255][ T10] hid-generic 0003:045E:008E.0038: unbalanced collection at end of report description [ 316.627621][ T10] hid-generic 0003:045E:008E.0038: probe with driver hid-generic failed with error -22 [ 316.650971][ T8366] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 316.685971][ T8366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.704437][ T8366] usb 4-1: Product: syz [ 316.715753][ T8366] usb 4-1: Manufacturer: syz [ 316.720445][ T8366] usb 4-1: SerialNumber: syz [ 316.757050][ T8366] usb 4-1: config 0 descriptor?? [ 316.815669][ T8360] usb 2-1: USB disconnect, device number 26 [ 317.074106][T13715] program syz.4.3593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.331127][ T977] usb 4-1: [UEAGLE-ATM] firmware is not available [ 317.386607][ T8366] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 317.403245][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3597'. [ 317.425921][ T8366] asix 4-1:0.0: probe with driver asix failed with error -71 [ 317.452750][ T8366] usb 4-1: USB disconnect, device number 31 [ 317.748437][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3601'. [ 318.169358][T13759] netlink: 'syz.0.3613': attribute type 26 has an invalid length. [ 318.458927][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'. [ 318.491586][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'. [ 318.539176][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'. [ 318.905889][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 319.044078][T13805] tipc: Started in network mode [ 319.061522][T13805] tipc: Node identity ac14140f, cluster identity 4711 [ 319.081682][T13805] tipc: Enabled bearer , priority 10 [ 319.095984][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 319.115824][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.160563][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 319.191329][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 319.210907][ T10] usb 5-1: Manufacturer: syz [ 319.232653][ T10] usb 5-1: config 0 descriptor?? [ 319.382488][T13822] netlink: 'syz.3.3643': attribute type 5 has an invalid length. [ 319.406238][ T10] rc_core: IR keymap rc-hauppauge not found [ 319.412262][ T10] Registered IR keymap rc-empty [ 319.434720][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 319.462659][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 319.922764][T13844] netlink: 'syz.3.3653': attribute type 2 has an invalid length. [ 319.950585][ T8360] usb 5-1: USB disconnect, device number 28 [ 319.953181][T13844] bridge: entered promiscuous mode [ 320.005773][ T8366] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 320.151802][T13846] xt_CT: No such helper "pptp" [ 320.196316][ T10] tipc: Node number set to 2886997007 [ 320.196494][ T8366] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 320.222991][ T8366] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.255330][ T8366] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.276846][ T8366] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.285811][ T8366] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.304205][ T8366] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.322413][ T8366] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.349393][ T8366] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.370353][ T8366] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.395937][ T8366] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.417224][ T8366] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.435896][ T8366] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.464994][ T8366] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.496899][ T8366] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.517964][ T8366] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.545639][ T8366] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.567171][ T8366] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.589191][ T8366] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.615496][ T8366] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.632813][ T8366] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.643885][ T8366] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.665975][ T8366] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.681416][ T8366] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.705859][ T8366] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.723345][ T8366] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.744377][ T8366] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 320.772592][ T8366] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 320.791735][ T8366] usb 2-1: Product: syz [ 320.801905][ T8366] usb 2-1: Manufacturer: syz [ 320.811713][ T8366] usb 2-1: SerialNumber: syz [ 320.842630][ T8366] usb 2-1: config 0 descriptor?? [ 320.855842][ T24] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 320.886890][ T8366] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 321.039182][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.067433][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 321.087499][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.119413][ T24] usb 4-1: config 0 descriptor?? [ 321.162383][ T977] usb 2-1: USB disconnect, device number 27 [ 321.191011][ T977] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 321.463360][T13899] program syz.2.3679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.545090][ T24] kye 0003:0458:500F.0039: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 321.564299][ T30] audit: type=1326 audit(1754329649.555:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 321.568123][ T24] kye 0003:0458:500F.0039: unknown main item tag 0x3 [ 321.613738][ T30] audit: type=1326 audit(1754329649.555:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 321.636322][ T24] kye 0003:0458:500F.0039: hidraw0: USB HID v0.01 Device [HID 0458:500f] on usb-dummy_hcd.3-1/input0 [ 321.648896][ T24] kye 0003:0458:500F.0039: tablet-enabling feature report not found [ 321.658258][ T24] kye 0003:0458:500F.0039: tablet enabling failed [ 321.683628][T13905] netlink: 'syz.4.3682': attribute type 61 has an invalid length. [ 321.704828][ T30] audit: type=1326 audit(1754329649.595:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 321.726495][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.775688][ T30] audit: type=1326 audit(1754329649.595:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 321.802719][ T24] usb 4-1: USB disconnect, device number 32 [ 321.813396][ T30] audit: type=1326 audit(1754329649.595:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 321.865660][T13906] fido_id[13906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 321.904568][ T30] audit: type=1326 audit(1754329649.595:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13902 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 321.926927][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.036280][ T24] kernel write not supported for file /dsp1 (pid: 24 comm: kworker/1:0) [ 322.227263][ T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 322.389367][T13932] netlink: 'syz.1.3695': attribute type 12 has an invalid length. [ 322.391114][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 322.399190][T13932] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3695'. [ 322.426653][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.438562][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 322.454100][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.463709][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.482780][ T10] usb 5-1: config 0 descriptor?? [ 322.496456][T13915] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 322.733747][T13941] bridge1: entered promiscuous mode [ 322.739186][T13941] bridge1: entered allmulticast mode [ 322.753778][T13941] team0: Port device bridge1 added [ 322.924821][ T10] hid (null): invalid report_count 1943037601 [ 322.932279][ T10] hid (null): unknown global tag 0x86 [ 322.939896][ T10] hid (null): usage index exceeded [ 322.946708][ T10] hid (null): unknown global tag 0xd [ 322.953182][ T10] hid (null): unknown global tag 0x65 [ 322.995723][ T10] uclogic 0003:28BD:0078.003A: interface is invalid, ignoring [ 323.149260][ T8360] usb 5-1: USB disconnect, device number 29 [ 323.306867][ T24] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 323.371806][T13966] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3711'. [ 323.488500][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.498853][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 323.510083][ T24] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 323.519458][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.531781][ T24] usb 2-1: config 0 descriptor?? [ 323.541940][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 323.548848][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 323.557323][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 323.566798][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 323.574032][ T24] usb 2-1: media controller created [ 323.581589][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.595347][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 323.602584][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 323.616730][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 323.634738][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 323.643081][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 323.665841][ T8366] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 323.751811][T13951] dvb-usb: bulk message failed: -22 (2/0) [ 323.758942][ T24] usb 2-1: USB disconnect, device number 28 [ 323.814060][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 323.827179][ T8366] usb 4-1: Using ep0 maxpacket: 16 [ 323.840000][ T8366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.873154][ T8366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.889241][ T8366] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.904232][ T8366] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.916192][ T8366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.936451][ T8366] usb 4-1: config 0 descriptor?? [ 324.099454][T13982] autofs4:pid:13982:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 324.355333][ T8366] microsoft 0003:045E:07DA.003B: unknown main item tag 0x7 [ 324.380530][ T8366] microsoft 0003:045E:07DA.003B: unknown main item tag 0x2 [ 324.400347][ T8366] microsoft 0003:045E:07DA.003B: reserved main item tag 0xe [ 324.415916][ T8366] microsoft 0003:045E:07DA.003B: item 0 2 0 9 parsing failed [ 324.430630][ T8366] microsoft 0003:045E:07DA.003B: parse failed [ 324.439599][ T8366] microsoft 0003:045E:07DA.003B: probe with driver microsoft failed with error -22 [ 324.574803][ T8366] usb 4-1: USB disconnect, device number 33 [ 325.205838][ T8366] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 325.367886][ T8366] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.385626][ T8366] usb 5-1: config 0 interface 0 has no altsetting 0 [ 325.392453][ T8366] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 325.413571][ T8366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.425072][ T8366] usb 5-1: config 0 descriptor?? [ 325.864327][ T8366] apple 0003:05AC:027A.003C: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 325.994263][ T30] audit: type=1326 audit(1754329653.985:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.3.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f5d8eb69 code=0x7ffc0000 [ 326.023023][ T30] audit: type=1326 audit(1754329653.985:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.3.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f5d8eb69 code=0x7ffc0000 [ 326.051538][ T30] audit: type=1326 audit(1754329653.985:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.3.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa9f5d8eb69 code=0x7ffc0000 [ 326.057691][ T8366] usb 5-1: USB disconnect, device number 30 [ 326.073511][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.079276][ T30] audit: type=1326 audit(1754329653.985:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14050 comm="syz.3.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f5d8eb69 code=0x7ffc0000 [ 326.108234][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.691071][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3757'. [ 326.992420][T14090] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3765'. [ 327.002076][T14090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3765'. [ 327.025789][T14090] tipc: MTU too low for tipc bearer [ 327.087075][ T8366] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 327.258229][ T8366] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 327.273543][ T8366] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 327.284301][ T8366] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 327.296393][ T8366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.310128][T14081] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 327.335239][ T8366] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.745741][ T10] usb 5-1: USB disconnect, device number 31 [ 328.156292][ T8360] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 328.260620][T14128] xt_hashlimit: max too large, truncated to 1048576 [ 328.386723][ T8360] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 328.402725][ T8360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.435174][ T8360] usb 2-1: Product: syz [ 328.443740][ T8360] usb 2-1: Manufacturer: syz [ 328.461618][ T8360] usb 2-1: SerialNumber: syz [ 328.493396][ T8360] usb 2-1: config 0 descriptor?? [ 328.528993][ T8360] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 329.060831][T14160] genirq: Flags mismatch irq 5. 00200000 (aio_iiro_16) vs. 00200000 (pcl818) [ 329.133058][ T8360] gspca_sunplus: reg_r err -71 [ 329.145882][ T8360] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 329.174792][ T8360] usb 2-1: USB disconnect, device number 29 [ 329.226951][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 329.226970][ T30] audit: type=1326 audit(1754329657.225:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 329.303225][ T30] audit: type=1326 audit(1754329657.225:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 329.356646][ T30] audit: type=1326 audit(1754329657.255:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 329.396962][ T30] audit: type=1326 audit(1754329657.255:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 329.445771][ T30] audit: type=1326 audit(1754329657.255:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 329.473937][ T30] audit: type=1326 audit(1754329657.265:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 329.539678][ T30] audit: type=1326 audit(1754329657.265:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 329.585071][ T30] audit: type=1326 audit(1754329657.265:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14164 comm="syz.2.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 330.241402][T14209] macsec1: entered promiscuous mode [ 330.260811][T14209] macsec1: entered allmulticast mode [ 330.395263][T14213] sp0: Synchronizing with TNC [ 331.094105][T14245] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 331.462173][T14266] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 331.473599][T14266] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 331.481685][T14266] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 331.777138][ T24] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 331.816933][T14283] mkiss: ax0: crc mode is auto. [ 331.951846][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30 [ 331.966773][ T24] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 331.998531][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 332.013470][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 332.033202][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.061849][ T24] usb 5-1: config 0 descriptor?? [ 332.438309][T14309] [U]  [ 332.441167][T14309] [U] K{ [ 332.444217][T14309] [U] t 1ŠFfˊ`GJgo/mC [ 332.451288][T14309] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 332.467058][T14309] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 332.477509][T14309] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 332.514306][T14309] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 332.538232][T14309] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 332.549642][T14309] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 332.561328][T14309] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 332.670914][T14309] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 332.679457][T14309] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 332.693026][T14309] [U] 22Ʃx?0;3u [ 332.697238][T14309] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 332.722466][T14309] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 332.731823][T14309] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 332.740571][T14309] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 332.746777][T14309] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 332.759223][T14309] [U] ec [ 332.762381][T14309] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 332.774783][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.790330][ T24] kye 0003:0458:501B.003D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 332.807197][ T24] kye 0003:0458:501B.003D: hidraw0: USB HID v8.00 Device [HID 0458:501b] on usb-dummy_hcd.4-1/input0 [ 332.826840][ T24] kye 0003:0458:501B.003D: tablet-enabling feature report not found [ 332.835012][ T24] kye 0003:0458:501B.003D: tablet enabling failed [ 332.887709][T14308] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 333.024602][ T24] usb 5-1: USB disconnect, device number 32 [ 333.385796][ T977] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 333.548477][ T977] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 333.561649][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.579997][ T977] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 333.590024][ T977] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 333.602309][ T977] usb 4-1: Manufacturer: syz [ 333.620339][ T977] usb 4-1: config 0 descriptor?? [ 333.717331][T14341] qnx6: unable to read the first superblock [ 333.738647][ T977] rc_core: IR keymap rc-hauppauge not found [ 333.766053][ T977] Registered IR keymap rc-empty [ 333.772286][ T977] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 333.807080][ T977] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 334.025409][ T30] audit: type=1326 audit(1754329662.015:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.1.3888" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f027378eb69 code=0x0 [ 334.154849][T14363] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3891'. [ 334.196188][T14358] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3891'. [ 334.308535][ T977] usb 4-1: USB disconnect, device number 34 [ 335.130131][T14411] netlink: 'syz.1.3916': attribute type 30 has an invalid length. [ 336.085874][ T977] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 336.250481][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.263789][ T977] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 336.274830][ T977] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 336.289608][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.306615][ T977] usb 5-1: config 0 descriptor?? [ 336.322778][ T977] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 336.337624][ T977] dvb-usb: bulk message failed: -22 (3/0) [ 336.358784][ T977] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 336.386681][ T977] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 336.398963][ T977] usb 5-1: media controller created [ 336.417388][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.453015][ T977] dvb-usb: bulk message failed: -22 (6/0) [ 336.467620][ T977] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 336.470801][ T977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 336.489401][ T977] dvb-usb: schedule remote query interval to 150 msecs. [ 336.536147][ T977] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 336.570866][T14449] dvb-usb: bulk message failed: -22 (2/0) [ 336.587926][ T8360] usb 5-1: USB disconnect, device number 33 [ 336.623544][ T8360] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 337.287464][ T977] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 337.315723][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 337.445632][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 337.453092][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.465905][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 337.471026][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.481563][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 337.483224][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.498091][ T977] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 337.519848][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.530341][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.546867][ T977] usb 4-1: config 0 descriptor?? [ 337.547341][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 337.595805][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 337.604977][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.619846][ T24] usb 2-1: config 0 descriptor?? [ 337.641017][T14482] IPVS: Scheduler module ip_vs_sip not found [ 337.791237][T14487] tmpfs: Bad value for 'mpol' [ 337.987500][ T977] lg-g15 0003:046D:C227.003E: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.3-1/input0 [ 338.063338][ T24] microsoft 0003:045E:07DA.003F: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 338.098208][ T24] microsoft 0003:045E:07DA.003F: no inputs found [ 338.105063][ T24] microsoft 0003:045E:07DA.003F: could not initialize ff, continuing anyway [ 338.181295][ T977] usb 4-1: USB disconnect, device number 35 [ 338.251834][T14496] fido_id[14496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 338.275006][ T9] usb 2-1: USB disconnect, device number 30 [ 338.324096][T14503] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 338.365429][T14503] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 339.125672][ T8366] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 339.178560][T14540] ipvlan2: entered promiscuous mode [ 339.184391][T14540] ipvlan2: entered allmulticast mode [ 339.190958][T14540] batadv0: entered allmulticast mode [ 339.200267][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3978'. [ 339.210321][T14540] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 339.308093][ T8366] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 339.316915][ T8366] usb 5-1: config 0 has no interface number 0 [ 339.323199][ T8366] usb 5-1: config 0 interface 176 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.355721][ T8366] usb 5-1: config 0 interface 176 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.375397][ T8366] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 339.405277][ T8366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.425969][ T8366] usb 5-1: config 0 descriptor?? [ 339.740099][T14565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.857220][ T8366] uclogic 0003:256C:006D.0040: interface is invalid, ignoring [ 340.074265][ T977] usb 5-1: USB disconnect, device number 34 [ 341.552356][T14633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.698556][ T30] audit: type=1326 audit(1754329669.695:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14640 comm="syz.4.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc5d8eb69 code=0x7ffc0000 [ 341.777886][ T30] audit: type=1326 audit(1754329669.715:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14640 comm="syz.4.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc5d8eb69 code=0x7ffc0000 [ 341.807567][ T30] audit: type=1326 audit(1754329669.715:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14640 comm="syz.4.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cc5d8eb69 code=0x7ffc0000 [ 341.893938][ T30] audit: type=1326 audit(1754329669.715:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14640 comm="syz.4.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc5d8eb69 code=0x7ffc0000 [ 341.934759][ T30] audit: type=1326 audit(1754329669.715:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14640 comm="syz.4.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc5d8eb69 code=0x7ffc0000 [ 342.013309][ T30] audit: type=1326 audit(1754329669.725:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14640 comm="syz.4.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f9cc5d8eb69 code=0x7ffc0000 [ 342.071159][ T30] audit: type=1326 audit(1754329669.725:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14640 comm="syz.4.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc5d8eb69 code=0x7ffc0000 [ 342.130638][ T30] audit: type=1326 audit(1754329669.725:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14640 comm="syz.4.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc5d8eb69 code=0x7ffc0000 [ 342.273993][T14665] devtmpfs: Too few inodes for current use [ 342.405708][ T977] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 342.566102][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 342.576303][ T977] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.599932][ T977] usb 5-1: config 0 interface 0 has no altsetting 0 [ 342.615629][ T977] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 342.624976][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.654047][ T977] usb 5-1: config 0 descriptor?? [ 343.107314][ T977] uclogic 0003:5543:0042.0041: unbalanced delimiter at end of report description [ 343.136968][ T977] uclogic 0003:5543:0042.0041: parse failed [ 343.158514][ T977] uclogic 0003:5543:0042.0041: probe with driver uclogic failed with error -22 [ 343.301539][ T8366] usb 5-1: USB disconnect, device number 35 [ 343.334223][T14710] tmpfs: User quota inode hardlimit too large. [ 343.415858][ T30] audit: type=1326 audit(1754329671.405:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14711 comm="syz.0.4060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f998d18eb69 code=0x0 [ 343.865843][T14729] netlink: 'syz.1.4068': attribute type 16 has an invalid length. [ 343.873972][T14729] netlink: 'syz.1.4068': attribute type 3 has an invalid length. [ 343.882615][T14729] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.4068'. [ 344.164965][ T30] audit: type=1326 audit(1754329672.155:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.3.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f5d8eb69 code=0x7ffc0000 [ 344.312966][T14746] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.688152][T14773] sp0: Synchronizing with TNC [ 344.909853][T14780] sp0: Synchronizing with TNC [ 346.011104][T14830] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 346.169646][T14840] program syz.1.4120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.180402][T14842] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 346.341480][T14849] can0: slcan on ptm0. [ 346.411856][T14848] can0 (unregistered): slcan off ptm0. [ 346.429892][T14854] netlink: 'syz.4.4126': attribute type 10 has an invalid length. [ 346.438655][T14854] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.446719][T14854] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.463354][T14854] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.471001][T14854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.478679][T14854] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.486090][T14854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.500028][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4126'. [ 346.514418][T14854] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 346.537053][T14855] bridge_slave_1: left allmulticast mode [ 346.543203][T14855] bridge_slave_1: left promiscuous mode [ 346.549851][T14855] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.580217][T14855] bridge_slave_0: left allmulticast mode [ 346.586169][T14855] bridge_slave_0: left promiscuous mode [ 346.591970][T14855] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.638820][T14855] bond0: (slave bridge0): Releasing backup interface [ 346.696919][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 347.366051][ T977] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 347.538048][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 347.555040][ T977] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 347.586132][ T977] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 347.607936][ T977] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 347.625902][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 347.639697][ T977] usb 5-1: config 0 interface 0 has no altsetting 0 [ 347.651189][ T977] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 347.662748][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.698443][ T977] usb 5-1: config 0 descriptor?? [ 347.786145][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 347.800607][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 347.827841][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.846008][ T9] usb 4-1: Product: syz [ 347.855923][ T9] usb 4-1: Manufacturer: syz [ 347.871096][ T9] usb 4-1: SerialNumber: syz [ 347.885788][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 347.894708][ T9] usb 4-1: config 0 descriptor?? [ 347.918274][ T9] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 348.055673][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 348.068697][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 348.079049][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.087524][ T10] usb 2-1: Product: syz [ 348.092130][ T10] usb 2-1: Manufacturer: syz [ 348.097243][ T10] usb 2-1: SerialNumber: syz [ 348.123130][ T10] usb 2-1: config 0 descriptor?? [ 348.156243][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 348.172259][ T977] topre 0003:0853:0148.0042: hidraw0: USB HID vc9.b6 Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 348.341085][ T9] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 348.378733][ T8360] usb 5-1: USB disconnect, device number 36 [ 348.541618][ T9] usb 4-1: USB disconnect, device number 36 [ 348.555965][ T9] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 348.565244][ T9] visor 4-1:0.0: device disconnected [ 348.985781][ T10] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 349.185698][ T8360] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 349.377536][ T8360] usb 5-1: Using ep0 maxpacket: 32 [ 349.384860][ T10] gspca_se401: read req failed req 0x06 error -71 [ 349.395013][ T10] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 349.406249][ T8360] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 349.428039][ T8360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.435209][ T10] usb 2-1: USB disconnect, device number 31 [ 349.483112][ T8360] usb 5-1: config 0 descriptor?? [ 349.567489][T14954] tipc: Started in network mode [ 349.572458][T14954] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 349.587675][T14954] tipc: Enabled bearer , priority 0 [ 349.630109][T14956] Bluetooth: MGMT ver 1.23 [ 349.929079][ T8360] uclogic 0003:145F:0212.0043: interface is invalid, ignoring [ 350.139340][ T10] usb 5-1: USB disconnect, device number 37 [ 350.705758][ T10] tipc: Node number set to 11578026 [ 350.841563][T15008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4186'. [ 351.038218][T15018] netlink: 'syz.0.4191': attribute type 49 has an invalid length. [ 351.057469][T15017] netlink: 'syz.3.4189': attribute type 2 has an invalid length. [ 351.072238][T15018] netlink: 'syz.0.4191': attribute type 49 has an invalid length. [ 351.112804][T15022] netlink: 'syz.1.4193': attribute type 2 has an invalid length. [ 351.145874][T15022] netlink: 119 bytes leftover after parsing attributes in process `syz.1.4193'. [ 351.715820][ T10] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 351.888013][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.910186][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 351.920029][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.958056][ T10] usb 2-1: config 0 descriptor?? [ 352.404943][ T10] pyra 0003:1E7D:2C24.0044: hidraw0: USB HID v0.08 Device [HID 1e7d:2c24] on usb-dummy_hcd.1-1/input0 [ 352.595340][ T24] usb 2-1: USB disconnect, device number 32 [ 352.739824][T15096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.880008][T15136] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4248'. [ 354.024868][T15146] vivid-009: disconnect [ 354.035829][T15144] vivid-009: reconnect [ 354.647629][T15169] can0: slcan on ttyS3. [ 354.736445][T15175] can0 (unregistered): slcan off ttyS3. [ 355.649293][ T8360] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 355.827986][ T8360] usb 5-1: config 0 has no interfaces? [ 355.843085][ T8360] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 355.853188][ T8360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.866922][ T8360] usb 5-1: config 0 descriptor?? [ 356.091117][ T5851] Bluetooth: hci1: Malformed HCI Event [ 356.092462][ T8360] usb 5-1: USB disconnect, device number 38 [ 356.875755][ T8360] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 357.046128][ T8360] usb 4-1: Using ep0 maxpacket: 16 [ 357.053719][ T8360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.066338][T15282] netlink: 'syz.2.4305': attribute type 29 has an invalid length. [ 357.078541][ T8360] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 357.099749][T15282] netlink: 'syz.2.4305': attribute type 29 has an invalid length. [ 357.108161][ T8360] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 357.125662][ T8360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.147157][ T8360] usb 4-1: config 0 descriptor?? [ 357.616768][ T8360] nintendo 0003:057E:2019.0045: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 357.700884][ T8360] nintendo 0003:057E:2019.0045: Failed to get joycon info; ret=-38 [ 357.732184][ T8360] nintendo 0003:057E:2019.0045: Failed to retrieve controller info; ret=-38 [ 357.753214][ T8360] nintendo 0003:057E:2019.0045: Failed to initialize controller; ret=-38 [ 357.788867][ T8360] nintendo 0003:057E:2019.0045: probe - fail = -38 [ 357.798465][ T8360] nintendo 0003:057E:2019.0045: probe with driver nintendo failed with error -38 [ 357.814344][ T8360] usb 4-1: USB disconnect, device number 37 [ 358.755678][ T977] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 358.927538][ T977] usb 2-1: Using ep0 maxpacket: 8 [ 358.941540][ T977] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 358.952605][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.961601][ T977] usb 2-1: Product: syz [ 358.966738][ T977] usb 2-1: Manufacturer: syz [ 358.971394][ T977] usb 2-1: SerialNumber: syz [ 358.985958][ T977] usb 2-1: config 0 descriptor?? [ 359.202346][ T977] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 359.429283][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4338'. [ 359.550241][T15357] netlink: 'syz.4.4340': attribute type 3 has an invalid length. [ 359.558913][T15357] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4340'. [ 359.612647][ T977] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 359.637327][ T977] usb 2-1: USB disconnect, device number 33 [ 360.354257][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'. [ 360.369336][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4356'. [ 360.386083][T15389] netlink: 'syz.4.4356': attribute type 15 has an invalid length. [ 360.472986][T15395] 9pnet_rdma: rdma_create_trans (15395): problem binding to privport: 13 [ 361.225729][ T977] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 361.406177][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 361.420443][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 361.435627][ T977] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 361.445363][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 361.465613][ T977] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 361.475414][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 361.503207][ T977] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 361.513011][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.532227][ T977] usb 5-1: config 0 descriptor?? [ 361.640019][T15440] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4380'. [ 361.766851][ T977] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 362.339579][T15464] netlink: 'syz.0.4392': attribute type 10 has an invalid length. [ 362.342349][ T8360] kernel write not supported for file bpf-map (pid: 8360 comm: kworker/1:8) [ 362.354456][T15464] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 362.373169][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4392'. [ 362.385165][T15464] bridge_slave_1: left allmulticast mode [ 362.391379][T15464] bridge_slave_1: left promiscuous mode [ 362.416523][T15464] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.440620][T15464] bridge_slave_0: left allmulticast mode [ 362.452928][T15464] bridge_slave_0: left promiscuous mode [ 362.461449][T15464] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.523229][T15464] bond0: (slave bridge0): Releasing backup interface [ 362.764739][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4396'. [ 363.399049][T15499] sctp: [Deprecated]: syz.1.4407 (pid 15499) Use of int in maxseg socket option. [ 363.399049][T15499] Use struct sctp_assoc_value instead [ 363.722127][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4413'. [ 364.074146][ T8360] usb 5-1: USB disconnect, device number 39 [ 364.123876][ T8360] usblp0: removed [ 364.347331][ T977] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 364.506361][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 364.517493][ T977] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 364.538184][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.554781][ T977] usb 4-1: config 0 descriptor?? [ 364.780041][ T977] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 364.807042][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 364.818833][ T977] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 364.832835][ T977] usb 4-1: media controller created [ 364.872097][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.981318][T15522] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 364.994155][ T977] az6027: usb out operation failed. (-71) [ 365.006189][ T977] az6027: usb out operation failed. (-71) [ 365.012637][ T977] stb0899_attach: Driver disabled by Kconfig [ 365.019200][ T977] az6027: no front-end attached [ 365.019200][ T977] [ 365.027602][ T977] az6027: usb out operation failed. (-71) [ 365.034099][ T977] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 365.066941][ T977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 365.132339][ T977] dvb-usb: schedule remote query interval to 400 msecs. [ 365.141152][T15553] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4434'. [ 365.156198][ T977] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 365.188471][ T977] usb 4-1: USB disconnect, device number 38 [ 365.244896][T15555] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4435'. [ 365.377965][ T977] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 365.649643][T15566] support for cryptoloop has been removed. Use dm-crypt instead. [ 366.053866][T15593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4452'. [ 366.079993][T15593] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 366.206726][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 366.304475][T15606] tap0: tun_chr_ioctl cmd 1074025677 [ 366.315459][T15606] tap0: linktype set to 823 [ 366.368935][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 366.398310][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.414448][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.435207][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.460254][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 366.476316][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.513298][ T10] usb 2-1: config 0 descriptor?? [ 366.945383][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 366.976066][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 366.989858][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 367.011754][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 367.029763][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 367.064252][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 367.090671][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 367.112336][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 367.130855][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 367.172638][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 367.191277][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 367.220216][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 367.236741][ T10] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 367.276041][ T10] microsoft 0003:045E:07DA.0046: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 367.302920][ T10] microsoft 0003:045E:07DA.0046: no inputs found [ 367.313039][ T10] microsoft 0003:045E:07DA.0046: could not initialize ff, continuing anyway [ 367.361628][ T10] usb 2-1: USB disconnect, device number 34 [ 367.435323][T15633] fido_id[15633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 367.530761][T15640] mkiss: ax0: crc mode is auto. [ 367.696126][ T8360] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 367.856669][ T8360] usb 5-1: Using ep0 maxpacket: 8 [ 367.871911][ T8360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.893644][ T8360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.917506][ T8360] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 367.936130][ T8360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.966249][ T8360] usb 5-1: config 0 descriptor?? [ 368.408147][ T8360] logitech 0003:046D:C626.0047: unknown main item tag 0x0 [ 368.426355][ T8360] logitech 0003:046D:C626.0047: unknown main item tag 0x0 [ 368.443780][ T8360] logitech 0003:046D:C626.0047: unknown main item tag 0x0 [ 368.473744][ T8360] logitech 0003:046D:C626.0047: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.4-1/input0 [ 368.541413][ T43] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 368.595637][ T43] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 368.632371][ T8360] usb 5-1: USB disconnect, device number 40 [ 368.646248][ T43] usb 3-1: USB disconnect, device number 30 [ 368.669592][T15665] fido_id[15665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 368.695409][T15669] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.905774][T15677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4492'. [ 368.990728][T15680] netlink: 'syz.1.4494': attribute type 4 has an invalid length. [ 368.999634][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4494'. [ 369.166517][T15688] sock: sock_set_timeout: `syz.2.4498' (pid 15688) tries to set negative timeout [ 369.655286][T15714] vivid-000: ================= START STATUS ================= [ 369.672106][T15717] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4508'. [ 369.681577][T15714] vivid-000: Test Pattern: 75% Colorbar [ 369.695976][T15714] vivid-000: Fill Percentage of Frame: 100 [ 369.712286][T15714] vivid-000: Horizontal Movement: No Movement [ 369.728301][T15714] vivid-000: Vertical Movement: No Movement [ 369.768151][T15714] vivid-000: OSD Text Mode: All [ 369.776073][T15714] vivid-000: Show Border: false [ 369.791377][T15714] vivid-000: Show Square: false [ 369.805726][T15714] vivid-000: Sensor Flipped Horizontally: false [ 369.822008][T15714] vivid-000: Sensor Flipped Vertically: false [ 369.838606][T15714] vivid-000: Insert SAV Code in Image: false [ 369.847752][T15714] vivid-000: Insert EAV Code in Image: false [ 369.876155][T15714] vivid-000: Insert Video Guard Band: false [ 369.884542][T15714] vivid-000: Reduced Framerate: false [ 369.907028][T15714] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 369.926846][T15714] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 369.955309][T15714] vivid-000: Enable Capture Cropping: true grabbed [ 369.993096][T15714] vivid-000: Enable Capture Composing: true grabbed [ 370.023330][T15725] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 370.030499][T15714] vivid-000: Enable Capture Scaler: true grabbed [ 370.037545][T15714] vivid-000: Timestamp Source: End of Frame [ 370.043867][T15725] syzkaller0: linktype set to 7 [ 370.049749][T15714] vivid-000: Colorspace: Rec. 709 [ 370.063255][T15714] vivid-000: Transfer Function: Default [ 370.091425][T15714] vivid-000: Y'CbCr Encoding: Default [ 370.100047][T15714] vivid-000: HSV Encoding: Hue 0-179 [ 370.106251][T15714] vivid-000: Quantization: Default [ 370.111710][T15714] vivid-000: Apply Alpha To Red Only: false [ 370.125054][T15714] vivid-000: Standard Aspect Ratio: 4x3 [ 370.137966][T15714] vivid-000: DV Timings Signal Mode: Current DV Timings [ 370.176449][T15714] vivid-000: DV Timings: 640x480p59 inactive [ 370.214446][T15714] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 370.225301][T15714] vivid-000: Maximum EDID Blocks: 2 [ 370.241452][T15714] vivid-000: Limited RGB Range (16-235): true [ 370.255659][T15714] vivid-000: Rx RGB Quantization Range: Automatic [ 370.284530][T15714] vivid-000: Power Present: 0x00000001 [ 370.315878][T15714] tpg source WxH: 1280x720 (Y'CbCr) [ 370.326478][T15714] tpg field: 1 [ 370.330417][T15714] tpg crop: (0,0)/1280x720 [ 370.346094][T15714] tpg compose: (0,0)/1280x720 [ 370.359476][T15714] tpg colorspace: 3 [ 370.363495][T15714] tpg transfer function: 0/1 [ 370.380251][T15714] tpg Y'CbCr encoding: 0/2 [ 370.395020][T15714] tpg quantization: 0/2 [ 370.407223][T15714] tpg RGB range: 0/1 [ 370.419386][T15714] vivid-000: ================== END STATUS ================== [ 370.584837][T15742] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 372.516256][T15800] netlink: 'syz.2.4546': attribute type 1 has an invalid length. [ 372.762539][T15805] netlink: 'syz.2.4548': attribute type 49 has an invalid length. [ 373.082796][T15815] bpf: Bad value for 'uid' [ 374.004040][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4558'. [ 374.061330][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4558'. [ 374.066496][T15842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4562'. [ 374.495234][T15850] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 375.546336][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 375.717646][ T43] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 375.746663][ T43] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 375.775789][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.821095][ T43] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 375.998783][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 376.188470][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 376.210113][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 376.224608][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 376.251422][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.293218][T15878] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 376.316139][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.500274][T15903] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 376.678487][ T8360] usb 2-1: USB disconnect, device number 35 [ 376.852675][ T43] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 376.873175][ T43] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 376.887593][ T43] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 377.090939][ T10] usb 3-1: USB disconnect, device number 31 [ 377.620549][T15947] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 377.783807][T15953] netlink: 'syz.2.4611': attribute type 1 has an invalid length. [ 377.795330][T15953] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4611'. [ 377.805940][T15953] netlink: 'syz.2.4611': attribute type 1 has an invalid length. [ 377.813871][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4611'. [ 377.886419][T15958] netlink: 'syz.2.4613': attribute type 9 has an invalid length. [ 377.894391][T15958] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.4613'. [ 377.971152][T15960] Falling back ldisc for ptm0. [ 378.935229][T16010] program syz.1.4637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.005882][ T8360] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 379.082160][T16016] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4640'. [ 379.168637][ T8360] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.185757][ T8360] usb 4-1: config 0 has no interface number 0 [ 379.198732][ T8360] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.219201][ T8360] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.230178][ T8360] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 379.241158][ T8360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.261470][ T8360] usb 4-1: config 0 descriptor?? [ 379.509804][T16029] netlink: 'syz.1.4646': attribute type 25 has an invalid length. [ 379.519244][T16029] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4646'. [ 379.650064][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 379.650084][ T30] audit: type=1326 audit(1754329707.645:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16031 comm="syz.2.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 379.711943][ T30] audit: type=1326 audit(1754329707.675:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16031 comm="syz.2.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 379.756105][ T8360] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0048/input/input27 [ 379.765218][ T30] audit: type=1326 audit(1754329707.675:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16031 comm="syz.2.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 379.832560][ T30] audit: type=1326 audit(1754329707.705:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16031 comm="syz.2.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 379.890592][ T30] audit: type=1326 audit(1754329707.705:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16036 comm="syz.2.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d9a7c1425 code=0x7ffc0000 [ 379.945797][ T30] audit: type=1326 audit(1754329707.735:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16031 comm="syz.2.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 379.993408][ T30] audit: type=1326 audit(1754329707.755:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16031 comm="syz.2.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 380.003945][ T8360] holtek_kbd 0003:04D9:A055.0048: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 380.081146][ T30] audit: type=1326 audit(1754329707.755:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16031 comm="syz.2.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 380.095087][ T8360] usb 4-1: USB disconnect, device number 39 [ 380.154416][ T30] audit: type=1326 audit(1754329707.755:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16031 comm="syz.2.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 380.212735][ T30] audit: type=1326 audit(1754329707.875:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16036 comm="syz.2.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4d9a78eb69 code=0x7ffc0000 [ 380.243826][T16041] fido_id[16041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 381.339311][T16090] netlink: 'syz.4.4672': attribute type 1 has an invalid length. [ 381.536211][T16099] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4676'. [ 381.551913][T16099] netem: unknown loss type 0 [ 381.558823][T16099] netem: change failed [ 382.125726][ T10] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 382.246007][ T977] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 382.288059][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.302208][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 382.313906][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 382.331433][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 382.350915][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 382.360447][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 382.373043][ T10] usb 4-1: Manufacturer: syz [ 382.383837][ T10] usb 4-1: config 0 descriptor?? [ 382.406073][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 382.414240][ T977] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 382.423427][ T977] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 382.434871][ T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.460801][ T977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.473765][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.475992][ T8360] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 382.482682][ T977] usb 2-1: Product: syz [ 382.494332][ T977] usb 2-1: Manufacturer: syz [ 382.499769][ T977] usb 2-1: SerialNumber: syz [ 382.669107][ T8360] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.684724][ T8360] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.699277][ T10] rc_core: IR keymap rc-hauppauge not found [ 382.703791][ T8360] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.714518][ T10] Registered IR keymap rc-empty [ 382.714780][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 382.726999][ T8360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.748046][T16133] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 382.759788][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 382.768483][ T8360] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.787843][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 382.814534][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 382.865126][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 382.916147][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 382.939588][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 382.976267][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 382.999213][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 383.038692][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 383.075955][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 383.098347][ T9] usb 5-1: USB disconnect, device number 41 [ 383.116258][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 383.146755][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 383.186806][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 383.237768][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 383.251876][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 383.270147][ T10] usb 4-1: USB disconnect, device number 40 [ 383.322602][ T977] usb 2-1: 0:2 : does not exist [ 383.383148][ T977] usb 2-1: USB disconnect, device number 36 [ 383.891038][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.096187][ T977] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 384.225964][T16172] netlink: 'syz.4.4708': attribute type 2 has an invalid length. [ 384.233899][T16172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4708'. [ 384.281095][ T977] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 384.297971][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.313109][ T977] usb 3-1: Product: syz [ 384.322355][ T977] usb 3-1: Manufacturer: syz [ 384.327119][ T977] usb 3-1: SerialNumber: syz [ 384.342520][ T977] usb 3-1: config 0 descriptor?? [ 384.573983][ T8360] usb 3-1: USB disconnect, device number 32 [ 384.740870][T16183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4712'. [ 384.893725][T16189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4713'. [ 385.187582][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4719'. [ 385.624381][T16211] batman_adv: batadv0: Adding interface: ipvlan2 [ 385.642755][T16211] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.708438][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.743558][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.773299][T16211] batman_adv: batadv0: Interface activated: ipvlan2 [ 385.788198][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4730'. [ 385.816133][T16223] sch_tbf: burst 6 is lower than device team_slave_0 mtu (269) ! [ 385.917231][T16227] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4732'. [ 386.562348][T16253] netlink: 'syz.2.4743': attribute type 14 has an invalid length. [ 386.886806][T16262] ntfs3(nullb0): Primary boot signature is not NTFS. [ 386.895270][T16262] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 387.043257][T16271] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4752'. [ 387.442604][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4758'. [ 387.652528][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4762'. [ 388.466108][T16329] Attempt to restore checkpoint with obsolete wellknown handles [ 389.135980][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 389.315611][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 389.332861][ T10] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 389.356123][ T10] usb 3-1: config 0 has no interface number 0 [ 389.370490][ T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 389.401419][ T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 389.424693][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 389.434265][ T977] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 389.450121][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.475574][ T10] usb 3-1: Product: syz [ 389.486174][ T10] usb 3-1: Manufacturer: syz [ 389.492070][ T10] usb 3-1: SerialNumber: syz [ 389.509278][ T10] usb 3-1: config 0 descriptor?? [ 389.528356][T16350] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 389.546323][T16350] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 389.648844][ T977] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 389.666286][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.684761][ T977] usb 2-1: Product: syz [ 389.689445][ T977] usb 2-1: Manufacturer: syz [ 389.694419][ T977] usb 2-1: SerialNumber: syz [ 389.716491][ T977] usb 2-1: config 0 descriptor?? [ 389.780764][T16350] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 389.808486][T16350] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 389.983660][ T977] usb 2-1: USB disconnect, device number 37 [ 390.242411][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 390.275971][ T10] asix 3-1:0.251: probe with driver asix failed with error -524 [ 390.448194][ T10] usb 3-1: USB disconnect, device number 33 [ 390.504636][T16379] cgroup: fork rejected by pids controller in /syz4 [ 390.559792][T16384] sctp: [Deprecated]: syz.0.4804 (pid 16384) Use of int in maxseg socket option. [ 390.559792][T16384] Use struct sctp_assoc_value instead [ 391.202950][ T3011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.379425][ T3011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.517670][ T3011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.672668][ T3011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.764342][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4817'. [ 391.923475][T16416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.200181][ T5851] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 392.411699][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.445776][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.466898][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.480664][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.491547][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.145321][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.161111][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.173424][ T3011] bond0 (unregistering): Released all slaves [ 393.508628][ T3011] tipc: Left network mode [ 393.865863][ T43] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 394.037200][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 394.068991][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.097873][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.135032][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 394.149674][ T3011] hsr_slave_0: left promiscuous mode [ 394.176827][ T43] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 394.197237][ T3011] hsr_slave_1: left promiscuous mode [ 394.211052][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.219911][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.234972][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.262639][ T43] usb 2-1: config 0 descriptor?? [ 394.282091][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.329427][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.480002][ T3011] veth1_macvtap: left promiscuous mode [ 394.496484][ T3011] veth0_macvtap: left promiscuous mode [ 394.523076][ T3011] veth1_vlan: left promiscuous mode [ 394.528565][ T5851] Bluetooth: hci1: command tx timeout [ 394.556369][ T3011] veth0_vlan: left promiscuous mode [ 394.799453][ T43] shield 0003:0955:7214.0049: unknown main item tag 0x0 [ 394.820976][ T43] shield 0003:0955:7214.0049: unknown main item tag 0x0 [ 394.829044][ T43] shield 0003:0955:7214.0049: unknown main item tag 0x0 [ 394.839114][ T43] shield 0003:0955:7214.0049: unknown main item tag 0x0 [ 394.874275][ T43] shield 0003:0955:7214.0049: unknown main item tag 0x0 [ 394.934822][ T43] input: HID 0955:7214 Haptics as /devices/virtual/input/input31 [ 394.957919][T16459] random: crng reseeded on system resumption [ 395.079125][ T43] shield 0003:0955:7214.0049: Registered Thunderstrike controller [ 395.109342][ T43] shield 0003:0955:7214.0049: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 395.188640][ T8360] shield 0003:0955:7214.0049: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 395.246396][ T8360] shield 0003:0955:7214.0049: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 395.257851][ T43] usb 2-1: USB disconnect, device number 38 [ 395.274401][ T8360] shield 0003:0955:7214.0049: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 395.323700][ T8360] shield 0003:0955:7214.0049: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 395.353342][ T3011] pim6reg (unregistering): left allmulticast mode [ 396.023266][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 396.080203][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 396.256837][T16517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4856'. [ 396.607154][ T5851] Bluetooth: hci1: command tx timeout [ 396.706491][T16487] syzkaller1: tun_chr_ioctl cmd 35108 [ 396.757940][T16424] chnl_net:caif_netlink_parms(): no params data found [ 396.956617][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 396.956637][ T30] audit: type=1326 audit(1754329724.955:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16527 comm="syz.2.4861" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d9a78eb69 code=0x0 [ 397.093727][T16424] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.101965][T16424] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.109899][T16424] bridge_slave_0: entered allmulticast mode [ 397.120228][T16424] bridge_slave_0: entered promiscuous mode [ 397.129824][T16424] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.137941][T16424] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.145299][T16424] bridge_slave_1: entered allmulticast mode [ 397.153675][T16424] bridge_slave_1: entered promiscuous mode [ 397.256265][ T5912] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 397.313219][T16424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.341677][T16424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.440043][ T5912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.463572][ T5912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.480185][T16424] team0: Port device team_slave_0 added [ 397.511382][T16424] team0: Port device team_slave_1 added [ 397.519810][ T5912] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 397.522577][ T3011] IPVS: stop unused estimator thread 0... [ 397.531463][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 397.574961][ T5912] usb 2-1: SerialNumber: syz [ 397.660845][T16424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.676625][T16424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.711070][T16424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.725217][T16424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.733020][T16424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.775371][T16424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.827216][ T5912] usb 2-1: 0:2 : does not exist [ 397.914980][ T5912] usb 2-1: USB disconnect, device number 39 [ 398.014905][T15791] udevd[15791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.043939][T16424] hsr_slave_0: entered promiscuous mode [ 398.055245][T16424] hsr_slave_1: entered promiscuous mode [ 398.258248][ T5912] kernel read not supported for file /usbmon9 (pid: 5912 comm: kworker/0:4) [ 398.473533][T16567] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4881'. [ 398.491112][T16567] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 398.687923][ T5851] Bluetooth: hci1: command tx timeout [ 399.474180][T16424] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 399.504269][T16424] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 399.534178][T16424] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 399.565104][T16424] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 399.930936][T16424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.980426][T16424] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.032118][ T2134] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.039386][ T2134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.104395][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.111661][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.204448][T16424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.766697][ T5851] Bluetooth: hci1: command tx timeout [ 400.884995][T16424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.858529][T16424] veth0_vlan: entered promiscuous mode [ 401.921077][T16424] veth1_vlan: entered promiscuous mode [ 402.045048][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4905'. [ 402.058252][T16424] veth0_macvtap: entered promiscuous mode [ 402.590000][T16700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4908'. [ 402.622089][T16424] veth1_macvtap: entered promiscuous mode [ 402.698719][T16424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.733018][T16424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.779264][T16424] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.817114][T16424] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.835782][T16424] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.875708][T16424] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.139213][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.148644][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4915'. [ 403.170720][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.240751][ T2134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.288142][ T2134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.508236][T16771] loop6: detected capacity change from 0 to 8388608 [ 404.561894][T16771] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.594889][T16771] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.622700][T16771] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.641494][T16771] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.661155][T16771] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.684172][T16771] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.707645][T16771] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.734016][T16771] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.762901][T16771] ldm_validate_partition_table(): Disk read failed. [ 404.785312][T16771] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.810484][T16771] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.874009][T16771] Dev loop6: unable to read RDB block 0 [ 404.892158][T16788] netlink: 'syz.4.4934': attribute type 10 has an invalid length. [ 404.906496][T16771] loop6: unable to read partition table [ 404.914872][T16771] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 405.496634][ T977] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 405.695637][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 405.717724][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.755386][ T977] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 405.775931][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.791262][ T977] usb 5-1: config 0 descriptor?? [ 406.262794][ T977] hid-multitouch 0003:0EEF:72C4.004A: unknown main item tag 0x0 [ 406.276070][ T977] hid-multitouch 0003:0EEF:72C4.004A: unknown main item tag 0x0 [ 406.283931][ T977] hid-multitouch 0003:0EEF:72C4.004A: unknown main item tag 0x0 [ 406.297731][ T977] hid-multitouch 0003:0EEF:72C4.004A: unknown main item tag 0x0 [ 406.334804][T16832] bridge_slave_0: default FDB implementation only supports local addresses [ 406.356090][ T977] hid-multitouch 0003:0EEF:72C4.004A: unknown main item tag 0x0 [ 406.383690][ T977] hid-multitouch 0003:0EEF:72C4.004A: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 406.538278][ T977] usb 5-1: USB disconnect, device number 42 [ 406.714572][T16842] input: syz1 as /devices/virtual/input/input32 [ 407.253643][T16853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.276604][T16853] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.285140][T16853] tipc: Resetting bearer [ 407.315826][T16853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.390856][T16854] tipc: Resetting bearer [ 407.414937][T16854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.505967][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 407.665959][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 407.673390][ T10] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 407.688480][ T10] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 407.697672][ T10] usb 2-1: config 0 has no interface number 0 [ 407.703848][ T10] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.719850][ T10] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 407.734740][ T10] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 407.753670][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 407.763369][ T10] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 407.772139][ T10] usb 2-1: Product: syz [ 407.784386][ T10] usb 2-1: Manufacturer: syz [ 407.794137][ T10] usb 2-1: config 0 descriptor?? [ 407.804237][T16863] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 408.434486][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input33 [ 408.653700][ T10] usb 2-1: USB disconnect, device number 40 [ 408.660173][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 408.954006][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4989'. [ 408.963258][T16915] netlink: 'syz.2.4989': attribute type 20 has an invalid length. [ 408.971883][T16915] netlink: 'syz.2.4989': attribute type 21 has an invalid length. [ 409.175944][ T8360] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 409.335794][ T8360] usb 4-1: Using ep0 maxpacket: 16 [ 409.344640][ T8360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.344677][ T8360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.344700][ T8360] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 409.344744][ T8360] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 409.344769][ T8360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.373319][ T8360] usb 4-1: config 0 descriptor?? [ 409.646278][ T5851] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 409.653816][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 409.787888][ T8360] microsoft 0003:045E:07DA.004B: unknown main item tag 0x0 [ 409.826847][ T8360] microsoft 0003:045E:07DA.004B: ignoring exceeding usage max [ 409.989656][ T8360] microsoft 0003:045E:07DA.004B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 410.015566][ T8360] microsoft 0003:045E:07DA.004B: no inputs found [ 410.066044][ T8360] microsoft 0003:045E:07DA.004B: could not initialize ff, continuing anyway [ 410.199426][ T8360] usb 4-1: USB disconnect, device number 41 [ 410.457510][T16961] bpf: Bad value for 'gid' [ 412.137012][T17024] program syz.1.5026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.162088][ T30] audit: type=1326 audit(1754329740.155:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17020 comm="syz.0.5025" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f998d18eb69 code=0x0 [ 412.183143][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.606540][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 412.766918][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 412.775559][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.803833][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.833907][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 412.846015][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 412.882523][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.954076][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 412.983895][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 413.022023][ T10] usb 3-1: Manufacturer: syz [ 413.047672][ T10] usb 3-1: config 0 descriptor?? [ 413.434564][T17079] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 413.488442][ T10] rc_core: IR keymap rc-hauppauge not found [ 413.509623][ T10] Registered IR keymap rc-empty [ 413.523863][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 413.569102][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 413.615318][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 413.644163][T17084] 2g,{: renamed from lo (while UP) [ 413.662345][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input34 [ 413.739788][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 413.788631][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 413.846391][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 413.899371][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 413.926309][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 413.959745][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 414.016609][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 414.056085][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 414.085696][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 414.115710][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 414.182937][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 414.223294][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 414.255202][ T10] usb 3-1: USB disconnect, device number 34 [ 415.911638][T17174] bond0: entered promiscuous mode [ 415.931535][T17174] bond_slave_0: entered promiscuous mode [ 415.948508][T17174] bond_slave_1: entered promiscuous mode [ 415.979127][T17174] batadv0: entered promiscuous mode [ 416.001957][T17174] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 416.040735][T17174] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 416.113417][T17174] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 416.140297][T17174] bond0: left promiscuous mode [ 416.145254][T17174] bond_slave_0: left promiscuous mode [ 416.186057][T17174] bond_slave_1: left promiscuous mode [ 416.194333][T17174] batadv0: left promiscuous mode [ 416.424442][T17176] ip6gre1: entered promiscuous mode [ 416.446025][ T8366] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 416.451649][T17176] ip6gre1: entered allmulticast mode [ 416.656834][ T8366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.687387][ T8366] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 416.717298][ T8366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.743331][ T8366] usb 5-1: config 0 descriptor?? [ 416.961330][T17203] tmpfs: Invalid gid '0x00000000ffffffff' [ 417.026976][T17207] 9pnet_fd: p9_fd_create_unix (17207): problem connecting socket: ./file0: -30 [ 417.380646][ T8366] razer 0003:1532:010E.004C: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 417.616685][ T8366] usb 5-1: USB disconnect, device number 43 [ 418.923362][T17272] netlink: 'syz.0.5119': attribute type 10 has an invalid length. [ 418.941261][T17272] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5119'. [ 419.000566][T15791] udevd[15791]: symlink '../../loop9' '/dev/disk/by-diskseq/79.tmp-b7:9' failed: Read-only file system [ 419.076324][T15791] udevd[15791]: symlink '../../loop9' '/dev/disk/by-diskseq/79.tmp-b7:9' failed: Read-only file system [ 419.169252][T15791] udevd[15791]: symlink '../../loop9' '/dev/disk/by-diskseq/79.tmp-b7:9' failed: Read-only file system [ 420.976811][T17333] [ 420.979221][T17333] ===================================================== [ 420.986271][T17333] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 420.993853][T17333] 6.16.0-syzkaller #0 Not tainted [ 420.998896][T17333] ----------------------------------------------------- [ 421.005937][T17333] syz.0.5144/17333 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 421.013681][T17333] ffff88806ac893a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 421.022441][T17333] [ 421.022441][T17333] and this task is already holding: [ 421.029905][T17333] ffff8880759e02b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 421.038651][T17333] which would create a new lock dependency: [ 421.044551][T17333] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 421.052275][T17333] [ 421.052275][T17333] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 421.061771][T17333] (&dev->event_lock#2){..-.}-{3:3} [ 421.061808][T17333] [ 421.061808][T17333] ... which became SOFTIRQ-irq-safe at: [ 421.075036][T17333] lock_acquire+0x120/0x360 [ 421.079752][T17333] _raw_spin_lock_irqsave+0xa7/0xf0 [ 421.085082][T17333] input_inject_event+0xab/0x320 [ 421.090130][T17333] led_trigger_event+0x138/0x210 [ 421.095375][T17333] kbd_bh+0x1c6/0x2e0 [ 421.099481][T17333] tasklet_action_common+0x369/0x580 [ 421.104888][T17333] handle_softirqs+0x283/0x870 [ 421.109783][T17333] run_ksoftirqd+0x9b/0x100 [ 421.114399][T17333] smpboot_thread_fn+0x53f/0xa60 [ 421.119434][T17333] kthread+0x70e/0x8a0 [ 421.123650][T17333] ret_from_fork+0x3fc/0x770 [ 421.128419][T17333] ret_from_fork_asm+0x1a/0x30 [ 421.133309][T17333] [ 421.133309][T17333] to a SOFTIRQ-irq-unsafe lock: [ 421.140555][T17333] (tasklist_lock){.+.+}-{3:3} [ 421.140591][T17333] [ 421.140591][T17333] ... which became SOFTIRQ-irq-unsafe at: [ 421.153358][T17333] ... [ 421.153370][T17333] lock_acquire+0x120/0x360 [ 421.160584][T17333] _raw_read_lock+0x36/0x50 [ 421.165216][T17333] __do_wait+0xde/0x740 [ 421.169497][T17333] do_wait+0x1f8/0x520 [ 421.173679][T17333] kernel_wait+0xab/0x170 [ 421.178130][T17333] call_usermodehelper_exec_work+0xbe/0x230 [ 421.184122][T17333] process_scheduled_works+0xade/0x17b0 [ 421.189943][T17333] worker_thread+0x8a0/0xda0 [ 421.194683][T17333] kthread+0x70e/0x8a0 [ 421.198866][T17333] ret_from_fork+0x3fc/0x770 [ 421.203585][T17333] ret_from_fork_asm+0x1a/0x30 [ 421.208466][T17333] [ 421.208466][T17333] other info that might help us debug this: [ 421.208466][T17333] [ 421.218826][T17333] Chain exists of: [ 421.218826][T17333] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 421.218826][T17333] [ 421.231826][T17333] Possible interrupt unsafe locking scenario: [ 421.231826][T17333] [ 421.240351][T17333] CPU0 CPU1 [ 421.245852][T17333] ---- ---- [ 421.251252][T17333] lock(tasklist_lock); [ 421.255546][T17333] local_irq_disable(); [ 421.262312][T17333] lock(&dev->event_lock#2); [ 421.269538][T17333] lock(&new->fa_lock); [ 421.276316][T17333] [ 421.279785][T17333] lock(&dev->event_lock#2); [ 421.284670][T17333] [ 421.284670][T17333] *** DEADLOCK *** [ 421.284670][T17333] [ 421.292908][T17333] 4 locks held by syz.0.5144/17333: [ 421.298119][T17333] #0: ffff8880578e7a08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 421.308362][T17333] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: sk_wake_async+0x7f/0x280 [ 421.317658][T17333] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 421.326759][T17333] #3: ffff8880759e02b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 421.335935][T17333] [ 421.335935][T17333] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 421.346383][T17333] -> (&dev->event_lock#2){..-.}-{3:3} { [ 421.352173][T17333] IN-SOFTIRQ-W at: [ 421.356436][T17333] lock_acquire+0x120/0x360 [ 421.362956][T17333] _raw_spin_lock_irqsave+0xa7/0xf0 [ 421.370214][T17333] input_inject_event+0xab/0x320 [ 421.377174][T17333] led_trigger_event+0x138/0x210 [ 421.384144][T17333] kbd_bh+0x1c6/0x2e0 [ 421.390235][T17333] tasklet_action_common+0x369/0x580 [ 421.397672][T17333] handle_softirqs+0x283/0x870 [ 421.404451][T17333] run_ksoftirqd+0x9b/0x100 [ 421.410972][T17333] smpboot_thread_fn+0x53f/0xa60 [ 421.417930][T17333] kthread+0x70e/0x8a0 [ 421.424021][T17333] ret_from_fork+0x3fc/0x770 [ 421.430633][T17333] ret_from_fork_asm+0x1a/0x30 [ 421.437425][T17333] INITIAL USE at: [ 421.441506][T17333] lock_acquire+0x120/0x360 [ 421.447934][T17333] _raw_spin_lock_irqsave+0xa7/0xf0 [ 421.455108][T17333] input_inject_event+0xab/0x320 [ 421.461995][T17333] kbd_led_trigger_activate+0xbc/0x100 [ 421.469384][T17333] led_trigger_set+0x52d/0x950 [ 421.476085][T17333] led_trigger_set_default+0x260/0x2a0 [ 421.483477][T17333] led_classdev_register_ext+0x73d/0x930 [ 421.491131][T17333] input_leds_connect+0x517/0x790 [ 421.498175][T17333] input_register_device+0xceb/0x10b0 [ 421.505727][T17333] atkbd_connect+0x70e/0x9c0 [ 421.512328][T17333] serio_driver_probe+0x82/0xa0 [ 421.519135][T17333] really_probe+0x26a/0x9a0 [ 421.525559][T17333] __driver_probe_device+0x18c/0x2f0 [ 421.532875][T17333] driver_probe_device+0x4f/0x430 [ 421.539854][T17333] __driver_attach+0x452/0x700 [ 421.546554][T17333] bus_for_each_dev+0x230/0x2b0 [ 421.553339][T17333] serio_handle_event+0x1a2/0x860 [ 421.560310][T17333] process_scheduled_works+0xade/0x17b0 [ 421.567796][T17333] worker_thread+0x8a0/0xda0 [ 421.574495][T17333] kthread+0x70e/0x8a0 [ 421.580931][T17333] ret_from_fork+0x3fc/0x770 [ 421.587532][T17333] ret_from_fork_asm+0x1a/0x30 [ 421.594244][T17333] } [ 421.596927][T17333] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 421.606496][T17333] -> (&client->buffer_lock){....}-{3:3} { [ 421.612516][T17333] INITIAL USE at: [ 421.616509][T17333] lock_acquire+0x120/0x360 [ 421.622765][T17333] _raw_spin_lock+0x2e/0x40 [ 421.629169][T17333] evdev_handle_get_val+0x70/0x9f0 [ 421.636132][T17333] evdev_ioctl_handler+0x1202/0x1f10 [ 421.643265][T17333] __se_sys_ioctl+0xfc/0x170 [ 421.649678][T17333] do_syscall_64+0xfa/0x3b0 [ 421.656044][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.663692][T17333] } [ 421.666313][T17333] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 421.674579][T17333] ... acquired at: [ 421.678504][T17333] lock_acquire+0x120/0x360 [ 421.683220][T17333] _raw_spin_lock+0x2e/0x40 [ 421.688055][T17333] evdev_handle_get_val+0x70/0x9f0 [ 421.693576][T17333] evdev_ioctl_handler+0x1202/0x1f10 [ 421.699136][T17333] __se_sys_ioctl+0xfc/0x170 [ 421.703924][T17333] do_syscall_64+0xfa/0x3b0 [ 421.708615][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.714690][T17333] [ 421.717159][T17333] -> (&new->fa_lock){....}-{3:3} { [ 421.722306][T17333] INITIAL USE at: [ 421.726222][T17333] lock_acquire+0x120/0x360 [ 421.732312][T17333] _raw_write_lock_irq+0xa2/0xf0 [ 421.738825][T17333] fasync_remove_entry+0xf1/0x1c0 [ 421.745520][T17333] lease_modify+0x1ca/0x3c0 [ 421.751606][T17333] locks_remove_file+0x4bf/0xea0 [ 421.758130][T17333] __fput+0x3ab/0xa70 [ 421.763721][T17333] task_work_run+0x1d1/0x260 [ 421.769896][T17333] exit_to_user_mode_loop+0xec/0x110 [ 421.776775][T17333] do_syscall_64+0x2bd/0x3b0 [ 421.782948][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.790505][T17333] INITIAL READ USE at: [ 421.794844][T17333] lock_acquire+0x120/0x360 [ 421.801354][T17333] _raw_read_lock_irqsave+0xaf/0x100 [ 421.808737][T17333] kill_fasync+0x199/0x4d0 [ 421.815262][T17333] evdev_pass_values+0x627/0xbd0 [ 421.822206][T17333] evdev_events+0x1e6/0x340 [ 421.828727][T17333] input_pass_values+0x285/0x890 [ 421.835688][T17333] input_event_dispose+0x330/0x6b0 [ 421.842902][T17333] input_inject_event+0x1fe/0x320 [ 421.850118][T17333] evdev_write+0x2fc/0x480 [ 421.856547][T17333] vfs_write+0x27e/0xa90 [ 421.862891][T17333] ksys_write+0x145/0x250 [ 421.869249][T17333] do_syscall_64+0xfa/0x3b0 [ 421.875772][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.883786][T17333] } [ 421.886649][T17333] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 421.895429][T17333] ... acquired at: [ 421.899326][T17333] lock_acquire+0x120/0x360 [ 421.904299][T17333] _raw_read_lock_irqsave+0xaf/0x100 [ 421.909951][T17333] kill_fasync+0x199/0x4d0 [ 421.914567][T17333] evdev_pass_values+0x627/0xbd0 [ 421.919709][T17333] evdev_events+0x1e6/0x340 [ 421.924444][T17333] input_pass_values+0x285/0x890 [ 421.929586][T17333] input_event_dispose+0x330/0x6b0 [ 421.934915][T17333] input_inject_event+0x1fe/0x320 [ 421.940151][T17333] evdev_write+0x2fc/0x480 [ 421.945107][T17333] vfs_write+0x27e/0xa90 [ 421.949536][T17333] ksys_write+0x145/0x250 [ 421.954047][T17333] do_syscall_64+0xfa/0x3b0 [ 421.958747][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.964848][T17333] [ 421.967185][T17333] [ 421.967185][T17333] the dependencies between the lock to be acquired [ 421.967197][T17333] and SOFTIRQ-irq-unsafe lock: [ 421.980779][T17333] -> (tasklist_lock){.+.+}-{3:3} { [ 421.986023][T17333] HARDIRQ-ON-R at: [ 421.990108][T17333] lock_acquire+0x120/0x360 [ 421.996467][T17333] _raw_read_lock+0x36/0x50 [ 422.002808][T17333] __do_wait+0xde/0x740 [ 422.008827][T17333] do_wait+0x1f8/0x520 [ 422.014760][T17333] kernel_wait+0xab/0x170 [ 422.020945][T17333] call_usermodehelper_exec_work+0xbe/0x230 [ 422.028943][T17333] process_scheduled_works+0xade/0x17b0 [ 422.036519][T17333] worker_thread+0x8a0/0xda0 [ 422.042949][T17333] kthread+0x70e/0x8a0 [ 422.048873][T17333] ret_from_fork+0x3fc/0x770 [ 422.055303][T17333] ret_from_fork_asm+0x1a/0x30 [ 422.062196][T17333] SOFTIRQ-ON-R at: [ 422.066383][T17333] lock_acquire+0x120/0x360 [ 422.072727][T17333] _raw_read_lock+0x36/0x50 [ 422.079180][T17333] __do_wait+0xde/0x740 [ 422.085288][T17333] do_wait+0x1f8/0x520 [ 422.091203][T17333] kernel_wait+0xab/0x170 [ 422.097640][T17333] call_usermodehelper_exec_work+0xbe/0x230 [ 422.105409][T17333] process_scheduled_works+0xade/0x17b0 [ 422.112882][T17333] worker_thread+0x8a0/0xda0 [ 422.119403][T17333] kthread+0x70e/0x8a0 [ 422.125435][T17333] ret_from_fork+0x3fc/0x770 [ 422.131863][T17333] ret_from_fork_asm+0x1a/0x30 [ 422.138479][T17333] INITIAL USE at: [ 422.142470][T17333] lock_acquire+0x120/0x360 [ 422.148722][T17333] _raw_write_lock_irq+0xa2/0xf0 [ 422.155412][T17333] copy_process+0x21d5/0x3b80 [ 422.161934][T17333] kernel_clone+0x224/0x7f0 [ 422.168195][T17333] user_mode_thread+0xdd/0x140 [ 422.174713][T17333] rest_init+0x23/0x300 [ 422.180623][T17333] start_kernel+0x47d/0x500 [ 422.186887][T17333] x86_64_start_reservations+0x24/0x30 [ 422.194108][T17333] x86_64_start_kernel+0x143/0x1c0 [ 422.201166][T17333] common_startup_64+0x13e/0x147 [ 422.208032][T17333] INITIAL READ USE at: [ 422.212461][T17333] lock_acquire+0x120/0x360 [ 422.219149][T17333] _raw_read_lock+0x36/0x50 [ 422.225837][T17333] __do_wait+0xde/0x740 [ 422.232189][T17333] do_wait+0x1f8/0x520 [ 422.238455][T17333] kernel_wait+0xab/0x170 [ 422.244989][T17333] call_usermodehelper_exec_work+0xbe/0x230 [ 422.253072][T17333] process_scheduled_works+0xade/0x17b0 [ 422.260803][T17333] worker_thread+0x8a0/0xda0 [ 422.267666][T17333] kthread+0x70e/0x8a0 [ 422.273923][T17333] ret_from_fork+0x3fc/0x770 [ 422.280695][T17333] ret_from_fork_asm+0x1a/0x30 [ 422.287749][T17333] } [ 422.290347][T17333] ... key at: [] tasklist_lock+0x18/0x40 [ 422.298176][T17333] ... acquired at: [ 422.302085][T17333] lock_acquire+0x120/0x360 [ 422.306951][T17333] _raw_read_lock+0x36/0x50 [ 422.311648][T17333] send_sigio+0x101/0x370 [ 422.316198][T17333] dnotify_handle_event+0x169/0x440 [ 422.321761][T17333] fsnotify+0x1814/0x1a80 [ 422.326384][T17333] vfs_mkdir+0x477/0x510 [ 422.330924][T17333] do_mkdirat+0x247/0x590 [ 422.335635][T17333] __x64_sys_mkdirat+0x87/0xa0 [ 422.340625][T17333] do_syscall_64+0xfa/0x3b0 [ 422.345330][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.351430][T17333] [ 422.353790][T17333] -> (&f_owner->lock){....}-{3:3} { [ 422.359059][T17333] INITIAL USE at: [ 422.362983][T17333] lock_acquire+0x120/0x360 [ 422.369169][T17333] _raw_write_lock_irq+0xa2/0xf0 [ 422.375871][T17333] __f_setown+0x67/0x370 [ 422.381728][T17333] generic_setlease+0xd5d/0x1240 [ 422.388518][T17333] fcntl_setlease+0x3a2/0x4c0 [ 422.394823][T17333] do_fcntl+0x6a9/0x1910 [ 422.400652][T17333] __se_sys_fcntl+0xc8/0x150 [ 422.406825][T17333] do_syscall_64+0xfa/0x3b0 [ 422.412922][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.420410][T17333] INITIAL READ USE at: [ 422.424750][T17333] lock_acquire+0x120/0x360 [ 422.431457][T17333] _raw_read_lock_irq+0xaa/0xf0 [ 422.438319][T17333] do_fcntl+0x812/0x1910 [ 422.444716][T17333] __se_sys_fcntl+0xc8/0x150 [ 422.451325][T17333] do_syscall_64+0xfa/0x3b0 [ 422.457951][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.465856][T17333] } [ 422.468368][T17333] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 422.477331][T17333] ... acquired at: [ 422.481174][T17333] lock_acquire+0x120/0x360 [ 422.485869][T17333] _raw_read_lock_irqsave+0xaf/0x100 [ 422.491465][T17333] send_sigio+0x38/0x370 [ 422.495954][T17333] kill_fasync+0x24d/0x4d0 [ 422.500595][T17333] sock_wake_async+0x137/0x160 [ 422.505658][T17333] sk_wake_async+0x184/0x280 [ 422.510448][T17333] unix_release_sock+0x768/0xd30 [ 422.515599][T17333] unix_release+0x92/0xd0 [ 422.520193][T17333] sock_close+0xc3/0x240 [ 422.524674][T17333] __fput+0x449/0xa70 [ 422.528859][T17333] task_work_run+0x1d1/0x260 [ 422.533675][T17333] exit_to_user_mode_loop+0xec/0x110 [ 422.539267][T17333] do_syscall_64+0x2bd/0x3b0 [ 422.544048][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.550131][T17333] [ 422.552468][T17333] [ 422.552468][T17333] stack backtrace: [ 422.558375][T17333] CPU: 0 UID: 0 PID: 17333 Comm: syz.0.5144 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 422.558403][T17333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.558430][T17333] Call Trace: [ 422.558441][T17333] [ 422.558450][T17333] dump_stack_lvl+0x189/0x250 [ 422.558475][T17333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.558494][T17333] ? __pfx__printk+0x10/0x10 [ 422.558521][T17333] validate_chain+0x1f05/0x2140 [ 422.558553][T17333] __lock_acquire+0xab9/0xd20 [ 422.558577][T17333] ? send_sigio+0x38/0x370 [ 422.558602][T17333] lock_acquire+0x120/0x360 [ 422.558617][T17333] ? send_sigio+0x38/0x370 [ 422.558641][T17333] ? kill_fasync+0x199/0x4d0 [ 422.558665][T17333] ? kill_fasync+0x199/0x4d0 [ 422.558690][T17333] _raw_read_lock_irqsave+0xaf/0x100 [ 422.558708][T17333] ? send_sigio+0x38/0x370 [ 422.558730][T17333] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 422.558748][T17333] ? do_raw_read_lock+0x3d/0x90 [ 422.558771][T17333] ? _raw_read_lock_irqsave+0xbb/0x100 [ 422.558787][T17333] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 422.558805][T17333] send_sigio+0x38/0x370 [ 422.558830][T17333] kill_fasync+0x24d/0x4d0 [ 422.558861][T17333] ? kill_fasync+0x53/0x4d0 [ 422.558885][T17333] sock_wake_async+0x137/0x160 [ 422.558906][T17333] ? sk_wake_async+0x7f/0x280 [ 422.558931][T17333] sk_wake_async+0x184/0x280 [ 422.558956][T17333] unix_release_sock+0x768/0xd30 [ 422.558984][T17333] ? __pfx_unix_release_sock+0x10/0x10 [ 422.559007][T17333] ? down_write+0x162/0x1f0 [ 422.559028][T17333] ? __pfx_down_write+0x10/0x10 [ 422.559048][T17333] ? do_raw_spin_lock+0x121/0x290 [ 422.559074][T17333] unix_release+0x92/0xd0 [ 422.559097][T17333] sock_close+0xc3/0x240 [ 422.559116][T17333] ? __pfx_sock_close+0x10/0x10 [ 422.559134][T17333] __fput+0x449/0xa70 [ 422.559162][T17333] task_work_run+0x1d1/0x260 [ 422.559189][T17333] ? __pfx_task_work_run+0x10/0x10 [ 422.559217][T17333] ? exit_to_user_mode_loop+0x40/0x110 [ 422.559235][T17333] exit_to_user_mode_loop+0xec/0x110 [ 422.559252][T17333] do_syscall_64+0x2bd/0x3b0 [ 422.559271][T17333] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.559289][T17333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.559306][T17333] ? clear_bhb_loop+0x60/0xb0 [ 422.559326][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.559343][T17333] RIP: 0033:0x7f998d18eb69 [ 422.559359][T17333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.559375][T17333] RSP: 002b:00007f998dfc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 422.559395][T17333] RAX: 0000000000000004 RBX: 00007f998d3b5fa0 RCX: 00007f998d18eb69 [ 422.559407][T17333] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 422.559418][T17333] RBP: 00007f998d211df1 R08: 0000000000000000 R09: 0000000000000000 [ 422.559428][T17333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.559438][T17333] R13: 0000000000000000 R14: 00007f998d3b5fa0 R15: 00007ffe1de53438 [ 422.559458][T17333] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 423.890026][ T1324] bridge_slave_1: left allmulticast mode [ 423.897929][ T1324] bridge_slave_1: left promiscuous mode [ 423.904560][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.913948][ T1324] bridge_slave_0: left allmulticast mode [ 423.920051][ T1324] bridge_slave_0: left promiscuous mode [ 423.933735][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.218136][ T1324] team0: Port device bridge1 removed [ 424.355457][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.365388][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.375059][ T1324] bond0 (unregistering): Released all slaves [ 424.384988][ T1324] bond1 (unregistering): Released all slaves [ 424.432630][ T1324] bridge: left promiscuous mode [ 424.487781][ T1324] tipc: Left network mode [ 424.508400][ T1324] IPVS: stopping backup sync thread 9316 ... [ 424.638628][ T1324] hsr_slave_0: left promiscuous mode [ 424.644701][ T1324] hsr_slave_1: left promiscuous mode [ 424.654806][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.663907][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.059589][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 425.107067][ T1324] team0 (unregistering): Port device team_slave_0 removed [ 425.792807][ T1324] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.817814][ T1324] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.862695][ T1324] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.913800][ T1324] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.231616][ T1324] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.242350][ T1324] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.275395][ T1324] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.286052][ T1324] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.342444][ T1324] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.353637][ T1324] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.402225][ T1324] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.414118][ T1324] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.729578][ T1324] bridge_slave_1: left allmulticast mode [ 426.735278][ T1324] bridge_slave_1: left promiscuous mode [ 426.741664][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.750573][ T1324] bridge_slave_0: left allmulticast mode [ 426.756236][ T1324] bridge_slave_0: left promiscuous mode [ 426.762602][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.771763][ T1324] bridge_slave_1: left allmulticast mode [ 426.777646][ T1324] bridge_slave_1: left promiscuous mode [ 426.783332][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.791839][ T1324] bridge_slave_0: left allmulticast mode [ 426.798496][ T1324] bridge_slave_0: left promiscuous mode [ 426.804300][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.813639][ T1324] bridge_slave_1: left allmulticast mode [ 426.819557][ T1324] bridge_slave_1: left promiscuous mode [ 426.825286][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.833621][ T1324] bridge_slave_0: left allmulticast mode [ 426.840100][ T1324] bridge_slave_0: left promiscuous mode [ 426.845913][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.970583][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.981248][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.992198][ T1324] bond0 (unregistering): Released all slaves [ 427.131257][ T1324] bridge0 (unregistering): left promiscuous mode [ 427.307506][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.317259][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.326402][ T1324] bond0 (unregistering): Released all slaves [ 427.337053][ T1324] bond1 (unregistering): Released all slaves [ 427.464874][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.476197][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.485983][ T1324] bond0 (unregistering): Released all slaves [ 427.709001][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.719208][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.732107][ T1324] bond0 (unregistering): Released all slaves [ 427.819932][ T1324] tipc: Disabling bearer [ 427.825621][ T1324] tipc: Left network mode [ 427.846702][ T1324] tipc: Disabling bearer [ 427.852938][ T1324] tipc: Left network mode [ 427.871184][ T1324] tipc: Disabling bearer [ 427.878223][ T1324] tipc: Left network mode [ 428.482926][ T1324] hsr_slave_0: left promiscuous mode [ 428.489167][ T1324] hsr_slave_1: left promiscuous mode [ 428.494906][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.502505][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.512145][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.520594][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.529562][ T1324] hsr_slave_0: left promiscuous mode [ 428.535350][ T1324] hsr_slave_1: left promiscuous mode [ 428.541228][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.549013][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.556622][ T1324] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 428.563511][ T1324] batman_adv: batadv0: Removing interface: ipvlan2 [ 428.573167][ T1324] hsr_slave_0: left promiscuous mode [ 428.579329][ T1324] hsr_slave_1: left promiscuous mode [ 428.585012][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.592595][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.600279][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.608418][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.617685][ T1324] hsr_slave_0: left promiscuous mode [ 428.623706][ T1324] hsr_slave_1: left promiscuous mode [ 428.630494][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.638445][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.651370][ T1324] veth1_macvtap: left promiscuous mode [ 428.657032][ T1324] veth0_macvtap: left promiscuous mode [ 428.662622][ T1324] veth1_vlan: left promiscuous mode [ 428.668079][ T1324] veth0_vlan: left promiscuous mode [ 428.674167][ T1324] veth1_macvtap: left promiscuous mode [ 428.679759][ T1324] veth0_macvtap: left promiscuous mode [ 428.685331][ T1324] veth1_vlan: left promiscuous mode [ 428.691626][ T1324] veth0_vlan: left promiscuous mode [ 428.908301][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 428.934800][ T1324] team0 (unregistering): Port device team_slave_0 removed [ 429.056153][ T1324] pim6reg (unregistering): left allmulticast mode [ 429.293646][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 429.334284][ T1324] team0 (unregistering): Port device team_slave_0 removed [ 429.811587][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 429.826929][ T1324] team0 (unregistering): Port device team_slave_0 removed [ 430.254326][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 430.291961][ T1324] team0 (unregistering): Port device team_slave_0 removed