last executing test programs: 13m3.003639566s ago: executing program 3 (id=4731): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000440)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x6, 0xfffa, 0x8, 0x8, 0x7fffffff, 0x2, "9dbb4290a7e8"}}, 0x11e) 13m2.556683635s ago: executing program 3 (id=4736): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x49, 0x1, 0x0, "4749570000000000000000000e00000008000000000000001400", 0x64737664}) 13m2.345295643s ago: executing program 3 (id=4741): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@updpolicy={0xc4, 0x13, 0xcb23c9c9931e99e9, 0x70bd26, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x10, 0xc, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x10, 0x0, 0x1, 0x1}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xa8}}]}, 0xc4}}, 0x0) 13m2.208415654s ago: executing program 3 (id=4744): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0xfffffffe}, 0xc) 13m1.989812158s ago: executing program 3 (id=4747): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 13m1.828339987s ago: executing program 3 (id=4750): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) 12m47.648105872s ago: executing program 32 (id=4750): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) 2m28.820105383s ago: executing program 2 (id=15886): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfe, {0xd}}, 0x14}}, 0x20000814) 2m28.696130968s ago: executing program 2 (id=15890): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) 2m28.497098297s ago: executing program 2 (id=15895): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r0, r0, 0x0, 0x548) 2m28.312841273s ago: executing program 2 (id=15900): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e80)=@newtaction={0x74, 0x30, 0x871a15abc695fa3d, 0x4, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 2m28.153433189s ago: executing program 2 (id=15904): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000540)="0000000000000004ff6943b80004000802ab000028f600000000860700000007", 0x20, r0) 2m28.006638293s ago: executing program 2 (id=15907): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m22.932233434s ago: executing program 5 (id=15989): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) 2m22.730509529s ago: executing program 5 (id=15992): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 2m22.577802822s ago: executing program 5 (id=15994): unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 2m22.404232459s ago: executing program 5 (id=15998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) 2m22.34202044s ago: executing program 5 (id=15999): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m22.285017816s ago: executing program 5 (id=16000): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x786d) 2m13.807855546s ago: executing program 33 (id=15907): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m8.123001483s ago: executing program 34 (id=16000): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x786d) 36.585044448s ago: executing program 1 (id=17130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 36.392502226s ago: executing program 1 (id=17134): r0 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r0, 0x409, 0xb) 34.563469535s ago: executing program 1 (id=17155): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) 34.336092894s ago: executing program 1 (id=17158): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c00038008000a"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 34.084218674s ago: executing program 1 (id=17163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 33.9155055s ago: executing program 1 (id=17168): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c40)=ANY=[@ANYBLOB="dc0300001a0001002abd7000fbdbdf250a00fc003a2a5e247b000000100003800c"], 0x3dc}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 19.855410899s ago: executing program 35 (id=17168): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c40)=ANY=[@ANYBLOB="dc0300001a0001002abd7000fbdbdf250a00fc003a2a5e247b000000100003800c"], 0x3dc}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 3.6154787s ago: executing program 8 (id=17515): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) 3.172512191s ago: executing program 8 (id=17521): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) 3.032367351s ago: executing program 8 (id=17522): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x7, 0x4800, 0x0, 0x0}, {0x5, 0x6000, 0x0, 0x0}], 0x2}) 2.569833436s ago: executing program 0 (id=17527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000000116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.317974624s ago: executing program 0 (id=17528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000340)={'veth0_to_batadv\x00'}) 2.171999643s ago: executing program 4 (id=17530): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x7fff}, 0x1c) 1.899774187s ago: executing program 0 (id=17533): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0xc3d33000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1.632709087s ago: executing program 6 (id=17536): unshare(0x28040680) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7, r0}, 0x38) 1.572094006s ago: executing program 0 (id=17537): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000280)=0x8006, 0x4) 1.484759334s ago: executing program 7 (id=17538): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.243303927s ago: executing program 4 (id=17539): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x3b, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x24048800) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 1.227026396s ago: executing program 0 (id=17540): mkdir(&(0x7f0000000000)='./file0\x00', 0x15a) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000020, &(0x7f0000000280)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x2c, 0x36, 0x2c, 0x37]}}}}]}) 1.141381501s ago: executing program 6 (id=17541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 976.159739ms ago: executing program 7 (id=17542): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000004c0)={0x9, 0x108, 0xfa00, {r1, 0x9, "1c5665", "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"}}, 0x110) 971.173522ms ago: executing program 0 (id=17543): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 960.813911ms ago: executing program 6 (id=17544): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 839.942198ms ago: executing program 4 (id=17545): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_secret(0x80000) syz_io_uring_setup(0x4061, &(0x7f0000000100)={0x0, 0x24b2, 0x20, 0x0, 0x72, 0x0, r0}, 0x0, 0x0) 791.366139ms ago: executing program 7 (id=17546): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c054}, 0x40000080) 705.563496ms ago: executing program 6 (id=17547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r1, 0x1, 0x0, 0x25dfdbff, {0x3a}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 661.459122ms ago: executing program 8 (id=17548): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001401038010010080080003"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000040), 0x2) 618.194608ms ago: executing program 7 (id=17549): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1}, 0x8010) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 522.68807ms ago: executing program 4 (id=17550): socket(0x11, 0x2, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x24, 0x14, 0x51b, 0x70bd26, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "695ee93d40b4f10000"}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a051}, 0x44000) 451.244771ms ago: executing program 6 (id=17551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010026bd7000000000000300000090000180380004001400010002000000ac5414aa0000000000000000200002000a004e2200000d617000000000000000000000080000000077e800000d0001007564703a73"], 0xa4}}, 0x0) 448.522688ms ago: executing program 7 (id=17552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1b, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 367.72013ms ago: executing program 8 (id=17553): r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) read(r0, &(0x7f0000000180)=""/243, 0xf3) 261.055753ms ago: executing program 4 (id=17554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 184.565034ms ago: executing program 7 (id=17555): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4094, 0xffe}, {&(0x7f0000006080)=""/4064, 0xfe0}, {&(0x7f00000004c0)=""/106, 0x6a}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0xf}], 0x4, 0x40010020, 0x0) 86.191028ms ago: executing program 6 (id=17556): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff}) 6.263211ms ago: executing program 8 (id=17557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x34}}, 0x4000040) 0s ago: executing program 4 (id=17558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000009c0)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {0xc, 0x0, 0xff01}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x8000) kernel console output (not intermixed with test programs): id wMaxPacketSize 0 [ 1141.343784][ T5987] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1141.343812][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.343833][ T5987] usb 6-1: Product: syz [ 1141.343847][ T5987] usb 6-1: Manufacturer: syz [ 1141.343862][ T5987] usb 6-1: SerialNumber: syz [ 1141.460121][ T5987] hso 6-1:6.2: Failed to find BULK IN ep [ 1141.598965][T14527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15588'. [ 1141.642929][ T5924] usb 6-1: USB disconnect, device number 57 [ 1142.106684][T14553] netlink: 'syz.1.15599': attribute type 21 has an invalid length. [ 1142.466985][T14567] Smack: duplicate mount options [ 1143.860822][ T5924] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1143.926483][ T3939] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1143.933725][T14643] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15636'. [ 1144.005984][ T5924] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1144.006015][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.013693][ T5924] usb 3-1: config 0 descriptor?? [ 1144.028531][ T5924] cp210x 3-1:0.0: cp210x converter detected [ 1144.040054][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1144.040070][ T37] audit: type=1326 audit(2000000011.539:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.1.15638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1144.040704][ T37] audit: type=1326 audit(2000000011.539:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.1.15638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1144.074110][ T3939] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1144.074139][ T3939] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1144.074164][ T3939] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.074236][ T3939] usb 1-1: config 220 has no interface number 2 [ 1144.074310][ T3939] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1144.074337][ T3939] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1144.074406][ T3939] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1144.074420][ T3939] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1144.089369][ T3939] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1144.089398][ T3939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.089419][ T3939] usb 1-1: Product: syz [ 1144.089433][ T3939] usb 1-1: Manufacturer: syz [ 1144.089447][ T3939] usb 1-1: SerialNumber: syz [ 1144.101654][ T37] audit: type=1326 audit(2000000011.603:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.1.15638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1144.134919][ T37] audit: type=1326 audit(2000000011.635:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.1.15638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1144.139013][ T37] audit: type=1326 audit(2000000011.646:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.1.15638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1144.441491][ T3939] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1144.441524][ T3939] usb 1-1: No valid video chain found. [ 1144.441974][ T3939] usb 1-1: selecting invalid altsetting 0 [ 1144.452451][ T5924] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1144.453042][ T5924] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1144.453088][ T5924] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1144.528846][ T5924] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1144.540251][ T3939] usb 1-1: selecting invalid altsetting 0 [ 1144.540292][ T3939] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1144.568329][ T5924] usb 3-1: USB disconnect, device number 51 [ 1144.619664][ T3939] usb 1-1: USB disconnect, device number 52 [ 1144.627930][ T5924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1144.628754][ T5924] cp210x 3-1:0.0: device disconnected [ 1145.439935][T27035] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1145.595493][T27035] usb 1-1: Using ep0 maxpacket: 8 [ 1145.603548][T27035] usb 1-1: config 0 has an invalid interface number: 150 but max is 0 [ 1145.603575][T27035] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 1145.603594][T27035] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 1145.603612][T27035] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 1145.603632][T27035] usb 1-1: config 0 has no interface number 0 [ 1145.603647][T27035] usb 1-1: config 0 has no interface number 1 [ 1145.603663][T27035] usb 1-1: config 0 has no interface number 2 [ 1145.603740][T27035] usb 1-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1145.603766][T27035] usb 1-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 1145.603804][T27035] usb 1-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 1145.603830][T27035] usb 1-1: config 0 interface 150 has no altsetting 0 [ 1145.603846][T27035] usb 1-1: config 0 interface 112 has no altsetting 0 [ 1145.603889][T27035] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 1145.603914][T27035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.747162][T27035] usb 1-1: config 0 descriptor?? [ 1146.043332][T27035] usb 1-1: string descriptor 0 read error: -71 [ 1146.086546][T27035] usb 1-1: USB disconnect, device number 53 [ 1146.650664][T14799] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 1146.650694][T14799] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 1146.732847][T27035] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1146.817312][T14799] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1146.893458][T27035] usb 2-1: Using ep0 maxpacket: 16 [ 1146.896026][T27035] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1146.896051][T27035] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.896069][T27035] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1146.896089][T27035] usb 2-1: config 1 has no interface number 1 [ 1146.896136][T27035] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1146.909563][T27035] usb 2-1: New USB device found, idVendor=9f6b, idProduct=c643, bcdDevice= 0.9d [ 1146.909594][T27035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.909615][T27035] usb 2-1: Product: syz [ 1146.909630][T27035] usb 2-1: Manufacturer: syz [ 1146.909645][T27035] usb 2-1: SerialNumber: syz [ 1147.023733][T14841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15684'. [ 1147.224836][T27035] usb 2-1: cannot find UAC_HEADER [ 1147.254534][T27035] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1147.275325][T27035] usb 2-1: USB disconnect, device number 53 [ 1147.411083][T12651] udevd[12651]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1147.539476][T14878] syz_tun: refused to change device tx_queue_len [ 1147.565049][T14880] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1147.565384][T14880] /dev/nullb0: Can't open blockdev [ 1147.717933][ T37] audit: type=1326 audit(2000000015.485:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14883 comm="syz.4.15697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc93fec29 code=0x7ffc0000 [ 1147.720126][ T37] audit: type=1326 audit(2000000015.485:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14883 comm="syz.4.15697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc93fec29 code=0x7ffc0000 [ 1147.766874][ T37] audit: type=1326 audit(2000000015.528:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14883 comm="syz.4.15697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f2bc93fec29 code=0x7ffc0000 [ 1147.766926][ T37] audit: type=1326 audit(2000000015.528:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14883 comm="syz.4.15697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc93fec29 code=0x7ffc0000 [ 1147.766975][ T37] audit: type=1326 audit(2000000015.528:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14883 comm="syz.4.15697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc93fec29 code=0x7ffc0000 [ 1148.208715][T14902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15705'. [ 1149.076871][T14948] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1149.429341][ T3939] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1149.577319][ T3939] usb 3-1: Using ep0 maxpacket: 8 [ 1149.579810][ T3939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1149.579846][ T3939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1149.579868][ T3939] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1149.579891][ T3939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1149.579917][ T3939] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1149.579956][ T3939] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1149.579979][ T3939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.589344][ T3939] usb 3-1: config 0 descriptor?? [ 1149.590736][T14952] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1150.057051][T27035] usb 3-1: USB disconnect, device number 52 [ 1150.078123][ T59] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 1150.160351][ C1] vkms_vblank_simulate: vblank timer overrun [ 1150.845726][T15023] netlink: 'syz.0.15751': attribute type 1 has an invalid length. [ 1150.845747][T15023] netlink: 'syz.0.15751': attribute type 3 has an invalid length. [ 1150.845763][T15023] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15751'. [ 1150.901507][T27035] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1151.052962][T27035] usb 5-1: Using ep0 maxpacket: 16 [ 1151.055310][T27035] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1151.055367][T27035] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1151.055389][T27035] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1151.055413][T27035] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1151.055435][T27035] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1151.055458][T27035] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1151.055490][T27035] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1151.055512][T27035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.149328][T27035] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1151.339589][T27035] scsi host1: usb-storage 5-1:1.0 [ 1151.532060][T27035] usb 5-1: USB disconnect, device number 64 [ 1151.648725][ C0] vkms_vblank_simulate: vblank timer overrun [ 1152.350843][T15089] ubi31: attaching mtd0 [ 1152.382210][T15089] ubi31: scanning is finished [ 1152.420147][T15089] ubi31: empty MTD device detected [ 1152.873886][T15089] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1152.873911][T15089] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1152.873926][T15089] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1152.873940][T15089] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1152.873953][T15089] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1152.873967][T15089] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1152.873980][T15089] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2897502173 [ 1152.873997][T15089] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1152.947291][T15145] ubi31: background thread "ubi_bgt31d" started, PID 15145 [ 1153.492826][T15154] : entered promiscuous mode [ 1153.512492][ T3939] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1153.536924][T15154] (unregistering): Released all slaves [ 1153.651873][ T3939] usb 3-1: Using ep0 maxpacket: 16 [ 1153.654816][ T3939] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1153.654843][ T3939] usb 3-1: config 0 has no interface number 0 [ 1153.654891][ T3939] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1153.657683][ T3939] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1153.657711][ T3939] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1153.657732][ T3939] usb 3-1: Product: syz [ 1153.657747][ T3939] usb 3-1: SerialNumber: syz [ 1153.698328][ T3939] usb 3-1: config 0 descriptor?? [ 1153.748793][ T3939] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input103 [ 1153.870314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1153.962158][ C0] cm109_urb_ctl_callback: 43 callbacks suppressed [ 1153.962191][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1153.962455][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1153.962693][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1153.962930][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1153.963217][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1153.963449][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1153.963732][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1153.963966][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1153.964214][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1153.964498][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1153.988185][T27035] usb 3-1: USB disconnect, device number 53 [ 1153.988197][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1154.110216][T27035] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1154.790184][T15284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15811'. [ 1155.265733][T27035] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1155.435707][T27035] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1155.435790][T27035] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7 [ 1155.435818][T27035] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024 [ 1155.435845][T27035] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1155.435886][T27035] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1155.435909][T27035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.509544][T27035] usb 3-1: config 0 descriptor?? [ 1155.532639][T27035] em28xx 3-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1155.532674][T27035] em28xx 3-1:0.0: DVB interface 0 found: isoc [ 1155.759738][T27035] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1155.841021][T27035] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1155.841052][T27035] em28xx 3-1:0.0: board has no eeprom [ 1155.930148][T27035] em28xx 3-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 1155.930179][T27035] em28xx 3-1:0.0: dvb set to isoc mode. [ 1155.931685][ T993] em28xx 3-1:0.0: Binding DVB extension [ 1155.993270][T27035] usb 3-1: USB disconnect, device number 54 [ 1155.995460][T27035] em28xx 3-1:0.0: Disconnecting em28xx [ 1156.355993][ T993] DVB: Unable to find symbol drxk_attach() [ 1156.357044][ T993] em28xx 3-1:0.0: Registering input extension [ 1156.359373][T27035] em28xx 3-1:0.0: Closing input extension [ 1156.468294][T27035] em28xx 3-1:0.0: Freeing device [ 1157.125088][T15410] netlink: 144 bytes leftover after parsing attributes in process `syz.5.15861'. [ 1158.329679][T15457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1158.961332][T15486] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1159.172368][ T993] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1159.312339][ T993] usb 1-1: Using ep0 maxpacket: 8 [ 1159.314795][ T993] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1159.314844][ T993] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1159.314868][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.370297][ T993] usb 1-1: config 0 descriptor?? [ 1159.646109][T15516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15908'. [ 1159.673077][T15517] bridge0: port 3(netdevsim0) entered blocking state [ 1159.673922][T15517] bridge0: port 3(netdevsim0) entered disabled state [ 1159.707556][T15517] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1159.774399][ T993] corsair 0003:1B1C:1B09.0004: unbalanced collection at end of report description [ 1159.776727][ T993] corsair 0003:1B1C:1B09.0004: parse failed [ 1159.777348][ T993] corsair 0003:1B1C:1B09.0004: probe with driver corsair failed with error -22 [ 1159.790341][T15519] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1159.878211][T15524] netlink: 27 bytes leftover after parsing attributes in process `syz.1.15911'. [ 1159.950834][ T993] usb 1-1: USB disconnect, device number 54 [ 1160.644462][T15560] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1160.644492][T15560] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1160.644734][T15560] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1160.644754][T15560] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1160.770623][T15571] netlink: 'syz.5.15929': attribute type 1 has an invalid length. [ 1160.771267][T15569] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1160.870597][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15930'. [ 1160.906647][ T3939] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1161.050842][ T3939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.050903][ T3939] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1161.050931][ T3939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 1161.050960][ T3939] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x34, changing to 0x4 [ 1161.050984][ T3939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1161.051007][ T3939] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1161.053689][ T3939] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1161.053717][ T3939] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1161.053737][ T3939] usb 2-1: Manufacturer: syz [ 1161.073649][ T3939] usb 2-1: config 0 descriptor?? [ 1161.295822][T15593] program syz.5.15936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1161.301027][ T5924] usb 2-1: USB disconnect, device number 54 [ 1161.503782][ T3939] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1161.610622][T15612] lo: left allmulticast mode [ 1161.646607][ T3939] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 1161.646636][ T3939] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 1161.646657][ T3939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.646677][ T3939] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1161.646698][ T3939] usb 1-1: config 0 has no interface number 0 [ 1161.646745][ T3939] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1161.646768][ T3939] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1161.646794][ T3939] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1161.646817][ T3939] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1161.646861][ T3939] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1161.646884][ T3939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.664682][ T3939] usb 1-1: config 0 descriptor?? [ 1161.709958][ T3939] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1161.846211][T15616] netlink: 'syz.5.15944': attribute type 1 has an invalid length. [ 1161.846234][T15616] netlink: 184 bytes leftover after parsing attributes in process `syz.5.15944'. [ 1161.846251][T15616] netlink: 'syz.5.15944': attribute type 1 has an invalid length. [ 1161.885670][ T3939] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 1161.914835][ T3939] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1161.914910][ T3939] usb 1-1: MIDIStreaming interface descriptor not found [ 1162.178298][ T3939] usb 1-1: USB disconnect, device number 55 [ 1162.363910][T15655] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1162.622319][T15668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15957'. [ 1163.889969][T15725] netlink: 80 bytes leftover after parsing attributes in process `syz.5.15982'. [ 1163.890034][T15725] netlink: 80 bytes leftover after parsing attributes in process `syz.5.15982'. [ 1163.902415][ T5987] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1163.941636][T15727] binder_alloc: binder_alloc_mmap_handler: 15726 200000ffc000-200001000000 already mapped failed -16 [ 1164.056410][T15730] netlink: 'syz.4.15984': attribute type 2 has an invalid length. [ 1164.073191][ T5987] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 1164.073219][ T5987] usb 1-1: config 0 has no interface number 0 [ 1164.073269][ T5987] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1164.073295][ T5987] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1164.076499][ T5987] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1164.076527][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.076547][ T5987] usb 1-1: Product: syz [ 1164.076562][ T5987] usb 1-1: Manufacturer: syz [ 1164.076576][ T5987] usb 1-1: SerialNumber: syz [ 1164.154353][ T5987] usb 1-1: config 0 descriptor?? [ 1164.155884][T15710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1164.159775][ T5987] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1164.199438][ T5987] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1164.240663][T15733] netlink: 'syz.5.15986': attribute type 3 has an invalid length. [ 1164.518210][T15750] netlink: 524 bytes leftover after parsing attributes in process `syz.1.15990'. [ 1164.582393][ T3939] usb 1-1: USB disconnect, device number 56 [ 1164.607559][ T3939] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1164.642298][ T3939] cyberjack 1-1:0.69: device disconnected [ 1164.791515][ T37] audit: type=1400 audit(2000000033.791:3222): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15768 comm="syz.1.15993" daddr=::ffff:172.20.20.63 dest=20004 [ 1165.086790][T15780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16001'. [ 1165.248740][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1165.830853][ T3939] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1165.976201][ T3939] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1165.976233][ T3939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.976253][ T3939] usb 5-1: Product: syz [ 1165.976268][ T3939] usb 5-1: Manufacturer: syz [ 1165.976283][ T3939] usb 5-1: SerialNumber: syz [ 1165.992417][ T3939] usb 5-1: config 0 descriptor?? [ 1166.005330][T15815] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1166.005330][T15815] The task syz.0.16015 (15815) triggered the difference, watch for misbehavior. [ 1166.012882][ T3939] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1166.023231][T15813] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1166.076355][ T3939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1166.079759][ T3939] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1166.079820][ T3939] usb 5-1: media controller created [ 1166.201839][T15796] dvb-usb: bulk message failed: -22 (7/0) [ 1166.239965][ T3939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1166.512149][ T3939] DVB: Unable to find symbol mt352_attach() [ 1166.570704][ T3939] DVB: Unable to find symbol nxt6000_attach() [ 1166.570733][ T3939] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1166.584712][ T3939] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input105 [ 1166.595058][ T3939] dvb-usb: schedule remote query interval to 1000 msecs. [ 1166.595080][ T3939] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1166.595102][ T3939] dvb-usb: bulk message failed: -22 (7/0) [ 1166.595116][ T3939] dvb-usb: bulk message failed: -22 (7/0) [ 1166.621910][ T3939] usb 5-1: USB disconnect, device number 65 [ 1166.945542][ T3939] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1167.640004][ T5987] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1167.812630][ T5987] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1167.812660][ T5987] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1167.812678][ T5987] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.812698][ T5987] usb 5-1: config 220 has no interface number 2 [ 1167.812776][ T5987] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1167.812803][ T5987] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1167.812822][ T5987] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1167.812840][ T5987] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1167.819297][ T5987] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1167.819326][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.819344][ T5987] usb 5-1: Product: syz [ 1167.819358][ T5987] usb 5-1: Manufacturer: syz [ 1167.819371][ T5987] usb 5-1: SerialNumber: syz [ 1168.126499][ T5987] usb 5-1: selecting invalid altsetting 0 [ 1168.127101][ T5987] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1168.127130][ T5987] usb 5-1: No valid video chain found. [ 1168.171467][ T5987] usb 5-1: selecting invalid altsetting 0 [ 1168.171507][ T5987] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1168.177586][ T5987] usb 5-1: USB disconnect, device number 66 [ 1168.702069][ T5987] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1168.842371][ T5987] usb 1-1: Using ep0 maxpacket: 16 [ 1168.848331][ T5987] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1168.848367][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.848387][ T5987] usb 1-1: Product: syz [ 1168.848401][ T5987] usb 1-1: Manufacturer: syz [ 1168.848416][ T5987] usb 1-1: SerialNumber: syz [ 1168.919139][ T5987] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1168.919164][ T5987] r8152-cfgselector 1-1: config 0 descriptor?? [ 1169.115961][ T5987] r8152-cfgselector 1-1: Needed 1 retries to read version [ 1169.116011][ T5987] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1169.116561][ T5987] r8152-cfgselector 1-1: bad CDC descriptors [ 1169.140526][ T5924] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1169.283170][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 1169.297671][ T5924] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1169.297702][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.297722][ T5924] usb 5-1: Product: syz [ 1169.297737][ T5924] usb 5-1: Manufacturer: syz [ 1169.297750][ T5924] usb 5-1: SerialNumber: syz [ 1169.322117][ T3939] r8152-cfgselector 1-1: USB disconnect, device number 57 [ 1169.333781][ T5924] usb 5-1: config 0 descriptor?? [ 1169.360921][ T5924] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1169.362827][ T5924] usb 5-1: Detected FT4233HP [ 1169.548395][ T5924] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1169.558472][ T5924] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1169.700455][ T5987] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1169.746113][ T5924] usb 5-1: USB disconnect, device number 67 [ 1169.784742][ T5924] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1169.797276][ T5924] ftdi_sio 5-1:0.0: device disconnected [ 1169.868085][ T5987] usb 2-1: Using ep0 maxpacket: 8 [ 1169.870704][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1169.870751][ T5987] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1169.870774][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.915249][ T5987] usb 2-1: config 0 descriptor?? [ 1170.311468][ T5987] kye 0003:0458:4018.0005: unbalanced collection at end of report description [ 1170.312343][ T5987] kye 0003:0458:4018.0005: parse failed [ 1170.312411][ T5987] kye 0003:0458:4018.0005: probe with driver kye failed with error -22 [ 1170.503022][ T5924] usb 2-1: USB disconnect, device number 55 [ 1172.068550][ T5987] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1172.218114][ T5987] usb 5-1: Using ep0 maxpacket: 32 [ 1172.220669][ T5987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.220701][ T5987] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1172.259603][ T5987] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1172.259633][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1172.259653][ T5987] usb 5-1: Product: syz [ 1172.259668][ T5987] usb 5-1: Manufacturer: syz [ 1172.259683][ T5987] usb 5-1: SerialNumber: syz [ 1172.326103][ T5987] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input106 [ 1172.650275][ T5924] usb 5-1: USB disconnect, device number 68 [ 1172.650391][ C1] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1172.716413][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16074'. [ 1172.883192][ T5924] appletouch 5-1:1.0: input: appletouch disconnected [ 1173.106672][T16061] bond0: option arp_interval: invalid value (18446744071880835072) [ 1173.106698][T16061] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1173.279618][T16065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16079'. [ 1173.618910][T16076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16085'. [ 1173.619367][T16074] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16085'. [ 1174.565767][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1174.588725][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1174.607253][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1174.633512][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1174.682525][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1174.808955][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1174.810307][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1174.826176][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1174.866569][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1174.880662][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1174.905985][ T37] audit: type=1326 audit(2000000044.633:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16161 comm="syz.4.16102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc93fec29 code=0x7ffc0000 [ 1174.906251][ T37] audit: type=1326 audit(2000000044.644:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16161 comm="syz.4.16102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc93fec29 code=0x7ffc0000 [ 1174.909042][ T37] audit: type=1326 audit(2000000044.644:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16161 comm="syz.4.16102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f2bc93fec29 code=0x7ffc0000 [ 1174.909819][ T37] audit: type=1326 audit(2000000044.644:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16161 comm="syz.4.16102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc93fec29 code=0x7ffc0000 [ 1174.910049][ T37] audit: type=1326 audit(2000000044.644:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16161 comm="syz.4.16102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f2bc93fec29 code=0x7ffc0000 [ 1174.940156][T16162] Zero length message leads to an empty skb [ 1174.942851][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16100'. [ 1175.043648][ T37] audit: type=1326 audit(2000000044.644:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16161 comm="syz.4.16102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc93fec29 code=0x7ffc0000 [ 1175.487425][T16177] netlink: 204 bytes leftover after parsing attributes in process `syz.1.16106'. [ 1176.090912][ T3939] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1176.241309][ T3939] usb 1-1: Using ep0 maxpacket: 32 [ 1176.244016][ T3939] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1176.244047][ T3939] usb 1-1: config 0 has no interface number 0 [ 1176.268673][ T3939] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1176.268702][ T3939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.268723][ T3939] usb 1-1: Product: syz [ 1176.268738][ T3939] usb 1-1: Manufacturer: syz [ 1176.268752][ T3939] usb 1-1: SerialNumber: syz [ 1176.304488][ T3939] usb 1-1: config 0 descriptor?? [ 1176.332772][ T3939] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1176.588950][ T3939] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1176.620266][ T3939] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1176.766130][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1176.805440][ T5840] Bluetooth: hci5: command tx timeout [ 1176.949719][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1176.950584][T27035] usb 1-1: USB disconnect, device number 58 [ 1177.013641][T27035] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1177.049233][T27035] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1177.050342][T27035] quatech2 1-1:0.51: device disconnected [ 1177.517021][T16103] chnl_net:caif_netlink_parms(): no params data found [ 1177.691541][T16348] Bluetooth: MGMT ver 1.23 [ 1178.345739][T16386] bridge0: entered promiscuous mode [ 1178.346016][T16386] macsec1: entered promiscuous mode [ 1178.347929][T16103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.348141][T16103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.348342][T16103] bridge_slave_0: entered allmulticast mode [ 1178.391649][T16103] bridge_slave_0: entered promiscuous mode [ 1178.456117][T16103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.457553][T16103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.457804][T16103] bridge_slave_1: entered allmulticast mode [ 1178.460433][T16103] bridge_slave_1: entered promiscuous mode [ 1178.538219][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16131'. [ 1178.736242][ T5987] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1178.745797][ T5840] Bluetooth: hci5: command tx timeout [ 1178.865351][T16103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.879510][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.879546][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.879587][ T5987] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1178.879610][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.934402][ T5987] usb 2-1: config 0 descriptor?? [ 1178.944501][T16103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.420093][T16103] team0: Port device team_slave_0 added [ 1179.424567][T16103] team0: Port device team_slave_1 added [ 1179.447508][ T5987] aquacomputer_d5next 0003:0C70:F00D.0006: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0 [ 1179.566492][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1179.605899][T16484] netlink: 72 bytes leftover after parsing attributes in process `syz.0.16139'. [ 1179.612140][ T5987] usb 2-1: USB disconnect, device number 56 [ 1179.677190][T16481] fido_id[16481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1180.168824][ C0] vkms_vblank_simulate: vblank timer overrun [ 1180.292495][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1180.339018][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1180.350012][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1180.351545][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1180.359143][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1180.572977][ C0] vkms_vblank_simulate: vblank timer overrun [ 1180.675278][T16551] netlink: 'syz.4.16149': attribute type 3 has an invalid length. [ 1180.684612][ T5840] Bluetooth: hci5: command tx timeout [ 1180.804937][T16103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.804953][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.804975][T16103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.863059][T16103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.863076][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.863103][T16103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.730142][ T5924] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1181.843378][T16103] hsr_slave_0: entered promiscuous mode [ 1181.860976][T16103] hsr_slave_1: entered promiscuous mode [ 1181.861871][T16103] debugfs: 'hsr0' already exists in 'hsr' [ 1181.861894][T16103] Cannot create hsr debugfs directory [ 1181.882415][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1181.882462][ T5924] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 1181.882485][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.907931][ T5924] usb 1-1: config 0 descriptor?? [ 1182.326497][ T5840] Bluetooth: hci1: command tx timeout [ 1182.456044][ T5924] elecom 0003:056E:00FC.0007: unknown main item tag 0x0 [ 1182.456108][ T5924] elecom 0003:056E:00FC.0007: unknown main item tag 0x0 [ 1182.456137][ T5924] elecom 0003:056E:00FC.0007: unknown main item tag 0x0 [ 1182.456165][ T5924] elecom 0003:056E:00FC.0007: unknown main item tag 0x0 [ 1182.456196][ T5924] elecom 0003:056E:00FC.0007: unknown main item tag 0x0 [ 1182.532956][ T5924] elecom 0003:056E:00FC.0007: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.0-1/input0 [ 1182.587167][ T5924] usb 1-1: USB disconnect, device number 59 [ 1182.624791][ T5840] Bluetooth: hci5: command tx timeout [ 1182.767936][T16651] fido_id[16651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1183.361066][T28664] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 1183.375330][T28664] bridge0: port 3(netdevsim0) entered disabled state [ 1183.589379][T16704] IPVS: Error connecting to the multicast addr [ 1183.912062][T16727] veth5: entered promiscuous mode [ 1184.275465][ T5840] Bluetooth: hci1: command tx timeout [ 1184.984009][ T3940] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1185.123332][ T3940] usb 2-1: Using ep0 maxpacket: 16 [ 1185.136858][T28664] bridge0: port 2($H) entered disabled state [ 1185.153232][ T3940] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.153266][ T3940] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1185.153300][ T3940] usb 2-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1185.153323][ T3940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.212346][ T3940] usb 2-1: config 0 descriptor?? [ 1185.237544][T28664] bridge_slave_0: left allmulticast mode [ 1185.237874][T28664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.601617][ T3940] logitech 0003:046D:C219.0008: unknown main item tag 0x0 [ 1185.601653][ T3940] logitech 0003:046D:C219.0008: unknown main item tag 0x0 [ 1185.601680][ T3940] logitech 0003:046D:C219.0008: unknown main item tag 0x0 [ 1185.601706][ T3940] logitech 0003:046D:C219.0008: unknown main item tag 0x0 [ 1185.601731][ T3940] logitech 0003:046D:C219.0008: unknown main item tag 0x0 [ 1185.644524][ T3940] logitech 0003:046D:C219.0008: hidraw0: USB HID v0.05 Device [HID 046d:c219] on usb-dummy_hcd.1-1/input0 [ 1185.644571][ T3940] logitech 0003:046D:C219.0008: no inputs found [ 1185.788378][ T3940] usb 2-1: USB disconnect, device number 57 [ 1185.917565][T16903] fido_id[16903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1186.205277][ T5840] Bluetooth: hci1: command tx timeout [ 1188.153982][ T5840] Bluetooth: hci1: command tx timeout [ 1188.732365][ T3940] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1188.909118][ T3940] usb 1-1: Using ep0 maxpacket: 8 [ 1188.914518][ T3940] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1188.914549][ T3940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.914570][ T3940] usb 1-1: Product: syz [ 1188.914584][ T3940] usb 1-1: Manufacturer: syz [ 1188.914600][ T3940] usb 1-1: SerialNumber: syz [ 1188.923081][ T3940] usb 1-1: config 0 descriptor?? [ 1188.940881][ T3940] gspca_main: se401-2.14.0 probing 047d:5003 [ 1189.311132][T28664] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 1189.316822][ T3940] gspca_se401: Wrong descriptor type [ 1189.334235][T28664] bond_slave_0: left promiscuous mode [ 1189.334459][T28664] bond_slave_0: left allmulticast mode [ 1189.368065][T28664] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 1189.404035][T28664] bond_slave_1: left promiscuous mode [ 1189.404256][T28664] bond_slave_1: left allmulticast mode [ 1189.404994][T28664] $H (unregistering): Released all slaves [ 1189.511390][ T5987] usb 1-1: USB disconnect, device number 60 [ 1190.362595][T16974] program syz.4.16216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1190.443424][ T5987] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1190.508291][T28664] bond0 (unregistering): Released all slaves [ 1190.553086][T28664] bond1 (unregistering): Released all slaves [ 1190.611699][ T5987] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1190.611729][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.706674][ T5987] usb 1-1: config 0 descriptor?? [ 1190.727611][ T5987] cp210x 1-1:0.0: cp210x converter detected [ 1191.138703][ T5987] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1191.313624][ T5987] usb 1-1: USB disconnect, device number 61 [ 1191.339364][ T5987] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1191.543530][ T5987] cp210x 1-1:0.0: device disconnected [ 1191.900700][T28664] bond2 (unregistering): Released all slaves [ 1191.927102][T28664] bond3 (unregistering): Released all slaves [ 1191.962859][T28664] bond4 (unregistering): Released all slaves [ 1192.002089][T28664] bond5 (unregistering): Released all slaves [ 1192.040656][T28664] bond6 (unregistering): Released all slaves [ 1192.399284][T17007] Falling back ldisc for ptm0. [ 1192.823045][ T3940] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1192.989918][ T3940] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1192.989947][ T3940] usb 5-1: config 0 has no interface number 0 [ 1192.989993][ T3940] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.990019][ T3940] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.990057][ T3940] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1192.990081][ T3940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.005127][ T3940] usb 5-1: config 0 descriptor?? [ 1193.119085][T28664] bond7 (unregistering): Released all slaves [ 1193.153806][T28664] bond8 (unregistering): Released all slaves [ 1193.456959][ T3940] uclogic 0003:256C:006D.0009: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input1 [ 1193.591575][ T3940] usb 5-1: USB disconnect, device number 69 [ 1193.662735][T17040] fido_id[17040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1194.285174][T28664] bond9 (unregistering): Released all slaves [ 1194.307643][T28664] bond10 (unregistering): Released all slaves [ 1195.389201][T28664] bond11 (unregistering): Released all slaves [ 1195.435390][T28664] bond12 (unregistering): Released all slaves [ 1195.467733][T28664] bond13 (unregistering): Released all slaves [ 1195.940831][ T3940] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1196.098945][ T3940] usb 5-1: Using ep0 maxpacket: 32 [ 1196.106588][ T3940] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1196.106617][ T3940] usb 5-1: config 0 has no interface number 0 [ 1196.106667][ T3940] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1196.144922][ T3940] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1196.144951][ T3940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.144971][ T3940] usb 5-1: Product: syz [ 1196.144986][ T3940] usb 5-1: Manufacturer: syz [ 1196.145001][ T3940] usb 5-1: SerialNumber: syz [ 1196.182283][ T3940] usb 5-1: config 0 descriptor?? [ 1196.215019][ T3940] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1196.215063][ T3940] em28xx 5-1:0.132: Video interface 132 found: [ 1196.506309][T28664] bond14 (unregistering): Released all slaves [ 1196.558295][T28664] bond15 (unregistering): Released all slaves [ 1196.598668][ T3940] em28xx 5-1:0.132: chip ID is em2800 [ 1196.832360][T16917] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1196.835197][T17053] tunl0: entered promiscuous mode [ 1196.850912][T17053] team0: Port device tunl0 added [ 1196.922874][ T3940] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1196.922908][ T3940] em28xx 5-1:0.132: board has no eeprom [ 1197.001186][ T3940] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1197.001216][ T3940] em28xx 5-1:0.132: analog set to bulk mode. [ 1197.002708][ T5924] em28xx 5-1:0.132: Registering V4L2 extension [ 1197.037828][ T3940] usb 5-1: USB disconnect, device number 70 [ 1197.050923][ T3940] em28xx 5-1:0.132: Disconnecting em28xx [ 1197.069689][T28664] _Z`Ԁ@: left promiscuous mode [ 1197.133940][T17114] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1197.298943][ T5924] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1197.298968][ T5924] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1197.298981][ T5924] em28xx 5-1:0.132: No AC97 audio processor [ 1197.331540][T16103] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1197.363694][ T5924] usb 5-1: Decoder not found [ 1197.363715][ T5924] em28xx 5-1:0.132: failed to create media graph [ 1197.363752][ T5924] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1197.412448][ T5924] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1197.412518][ T3940] em28xx 5-1:0.132: Closing input extension [ 1197.465361][T16529] chnl_net:caif_netlink_parms(): no params data found [ 1197.467410][ T3940] em28xx 5-1:0.132: Freeing device [ 1197.550663][T28664] : left promiscuous mode [ 1197.717547][T16103] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1197.843051][ T3940] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1197.873602][T16103] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1197.977728][T16103] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1197.991034][T28664] IPVS: stopping backup sync thread 28430 ... [ 1198.001423][T17153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16255'. [ 1198.014609][ T3940] usb 5-1: Using ep0 maxpacket: 32 [ 1198.016817][ T3940] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1198.016842][ T3940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.088601][ T3940] usb 5-1: config 0 descriptor?? [ 1198.107137][ T3940] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1198.710846][ T993] usb 5-1: USB disconnect, device number 71 [ 1199.550376][T16529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.550605][T16529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.550904][T16529] bridge_slave_0: entered allmulticast mode [ 1199.563780][T16529] bridge_slave_0: entered promiscuous mode [ 1199.580473][T16529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.580634][T16529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.580971][T16529] bridge_slave_1: entered allmulticast mode [ 1199.595772][T16529] bridge_slave_1: entered promiscuous mode [ 1200.416382][T17304] netlink: 'syz.1.16274': attribute type 1 has an invalid length. [ 1200.416404][T17304] netlink: 208 bytes leftover after parsing attributes in process `syz.1.16274'. [ 1200.416432][T17304] netlink: 'syz.1.16274': attribute type 1 has an invalid length. [ 1200.416446][T17304] netlink: 'syz.1.16274': attribute type 2 has an invalid length. [ 1200.529640][T16529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.629370][T16529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.353143][T16529] team0: Port device team_slave_0 added [ 1201.379510][T16529] team0: Port device team_slave_1 added [ 1201.715573][T16529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.715590][T16529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.715613][T16529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.778269][T16529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.778295][T16529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.778321][T16529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.239514][T16529] hsr_slave_0: entered promiscuous mode [ 1202.243183][T16529] hsr_slave_1: entered promiscuous mode [ 1202.296928][T16529] debugfs: 'hsr0' already exists in 'hsr' [ 1202.296956][T16529] Cannot create hsr debugfs directory [ 1202.960421][T17481] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.16296'. [ 1203.386746][T16103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.518557][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16302'. [ 1203.571022][T17519] dummy0: entered promiscuous mode [ 1203.582354][T17525] xt_HMARK: spi-set and port-set can't be combined [ 1203.606816][T17519] dummy0: left promiscuous mode [ 1203.737671][T16103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.784462][T12330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.784687][T12330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.878563][T12331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.878721][T12331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.204750][T17544] tipc: Invalid UDP bearer configuration [ 1204.204797][T17544] tipc: Enabling of bearer rejected, failed to enable media [ 1204.448250][ T37] audit: type=1800 audit(2000000076.279:3229): pid=17553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.16311" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1204.654976][T16529] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1204.736017][T16529] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1204.762016][ T5987] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1204.818314][T16529] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1204.867041][T16529] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1204.901924][ T5987] usb 5-1: Using ep0 maxpacket: 8 [ 1204.904294][ T5987] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1204.907384][ T5987] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1204.907411][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.907431][ T5987] usb 5-1: Product: syz [ 1204.907445][ T5987] usb 5-1: Manufacturer: syz [ 1204.907460][ T5987] usb 5-1: SerialNumber: syz [ 1204.972592][ T5987] usb 5-1: config 0 descriptor?? [ 1204.989972][ T5987] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1204.990048][ T5987] usb 5-1: setting power ON [ 1204.993017][ T5987] dvb-usb: bulk message failed: -22 (2/0) [ 1205.020067][ T5987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1205.033175][ T5987] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1205.033245][ T5987] usb 5-1: media controller created [ 1205.075678][ T5987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1205.105247][ T5987] usb 5-1: selecting invalid altsetting 6 [ 1205.105270][ T5987] usb 5-1: digital interface selection failed (-22) [ 1205.105296][ T5987] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1205.129897][ T5987] usb 5-1: setting power OFF [ 1205.130202][ T5987] dvb-usb: bulk message failed: -22 (2/0) [ 1205.130222][ T5987] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1205.130235][ T5987] (NULL device *): no alternate interface [ 1205.214967][T17557] dvb-usb: bulk message failed: -22 (3/0) [ 1205.254536][ T5987] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1205.277505][ T5987] usb 5-1: USB disconnect, device number 72 [ 1205.792734][T16529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.890969][T16529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.927301][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.927497][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.991580][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.992513][ T3637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.104695][ T5924] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1206.266289][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.266322][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1206.266362][ T5924] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1206.266384][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.306271][ T5924] usb 2-1: config 0 descriptor?? [ 1206.337473][ T3940] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1206.340459][T16103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1206.512053][ T3940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1206.512104][ T3940] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1206.512186][ T3940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.582340][ T3940] usb 5-1: config 0 descriptor?? [ 1206.586652][T17622] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1206.951933][T17642] ipvlan2: entered promiscuous mode [ 1206.952084][ T5924] hid_mf 0003:0079:1846.000A: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 1206.952331][ T5924] hid_mf 0003:0079:1846.000A: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1206.970689][ T5924] usb 2-1: USB disconnect, device number 58 [ 1206.986372][ T3940] belkin 0003:050D:3201.000B: unbalanced collection at end of report description [ 1206.987163][ T3940] belkin 0003:050D:3201.000B: parse failed [ 1206.987230][ T3940] belkin 0003:050D:3201.000B: probe with driver belkin failed with error -22 [ 1207.138217][T17663] fido_id[17663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1207.194571][ T5987] usb 5-1: USB disconnect, device number 73 [ 1207.539586][T17681] netlink: 'syz.1.16325': attribute type 2 has an invalid length. [ 1207.603964][T16529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.113291][T17702] devtmpfs: Too few inodes for current use [ 1208.164385][T16103] veth0_vlan: entered promiscuous mode [ 1208.190896][T16103] veth1_vlan: entered promiscuous mode [ 1208.511778][T16103] veth0_macvtap: entered promiscuous mode [ 1208.570535][T16103] veth1_macvtap: entered promiscuous mode [ 1208.629862][T16103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1208.693707][T16103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.757494][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.760196][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.764567][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.764612][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.375359][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.375382][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.558798][T14816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.558820][T14816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.714921][T16529] veth0_vlan: entered promiscuous mode [ 1209.761997][T16529] veth1_vlan: entered promiscuous mode [ 1210.121840][T16529] veth0_macvtap: entered promiscuous mode [ 1210.124457][T17768] sp0: Synchronizing with TNC [ 1210.158767][T16529] veth1_macvtap: entered promiscuous mode [ 1210.615452][T16529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1210.694593][T16529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1210.765540][ T3637] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.778678][ T3637] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.779163][ T3637] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.785586][ T3637] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.888376][ T5987] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1211.028148][ T5987] usb 1-1: Using ep0 maxpacket: 32 [ 1211.030617][ T5987] usb 1-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.030648][ T5987] usb 1-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1211.030677][ T5987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1211.030711][ T5987] usb 1-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1211.030735][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.093774][ T3939] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1211.111135][ T5987] usb 1-1: config 0 descriptor?? [ 1211.176241][ T5924] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1211.254560][ T3939] usb 7-1: Using ep0 maxpacket: 32 [ 1211.257248][ T3939] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.270790][ T3939] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1211.270818][ T3939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.270839][ T3939] usb 7-1: Product: syz [ 1211.270853][ T3939] usb 7-1: Manufacturer: syz [ 1211.270868][ T3939] usb 7-1: SerialNumber: syz [ 1211.301339][ T3939] usb 7-1: config 0 descriptor?? [ 1211.331067][ T3939] cdc_ether 7-1:0.0: skipping garbage [ 1211.331102][ T3939] usb 7-1: bad CDC descriptors [ 1211.332332][ T3939] usb 7-1: unsupported MDLM descriptors [ 1211.352479][ T5924] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1211.352514][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1211.352548][ T5924] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1211.352570][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.587354][ T5987] asus 0003:048D:CE50.000C: item fetching failed at offset 2/5 [ 1211.592239][ T5924] usb 2-1: config 0 descriptor?? [ 1211.597520][ T3939] usb 7-1: USB disconnect, device number 2 [ 1211.616105][ T5987] asus 0003:048D:CE50.000C: Asus hid parse failed: -22 [ 1211.616199][ T5987] asus 0003:048D:CE50.000C: probe with driver asus failed with error -22 [ 1211.819268][ T3952] usb 1-1: USB disconnect, device number 62 [ 1211.836673][ T1484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.836695][ T1484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.997108][ T5924] logitech 0003:046D:C294.000D: unknown main item tag 0x0 [ 1211.997146][ T5924] logitech 0003:046D:C294.000D: unknown main item tag 0x0 [ 1212.024708][ T5924] logitech 0003:046D:C294.000D: hidraw0: USB HID v0.04 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0 [ 1212.024755][ T5924] logitech 0003:046D:C294.000D: no inputs found [ 1212.026424][T27035] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1212.105351][ T1484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.105380][ T1484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.181071][T27035] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1212.181118][T27035] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1212.181141][T27035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.189093][T27035] usb 5-1: config 0 descriptor?? [ 1212.228363][ T5924] usb 2-1: USB disconnect, device number 59 [ 1212.438058][T17870] fido_id[17870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1212.640858][T27035] asus 0003:0B05:17E0.000E: item fetching failed at offset 2/5 [ 1212.663383][T27035] asus 0003:0B05:17E0.000E: Asus hid parse failed: -22 [ 1212.663498][T27035] asus 0003:0B05:17E0.000E: probe with driver asus failed with error -22 [ 1212.866504][ T3945] usb 5-1: USB disconnect, device number 74 [ 1213.469226][T17921] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 1213.843917][ T993] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1213.986717][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.986743][ T993] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1213.989914][ T993] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 1213.989942][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.989962][ T993] usb 2-1: Product: syz [ 1213.989977][ T993] usb 2-1: Manufacturer: syz [ 1213.989991][ T993] usb 2-1: SerialNumber: syz [ 1214.060215][ T993] usb 2-1: config 0 descriptor?? [ 1214.215116][T17965] netlink: 84 bytes leftover after parsing attributes in process `syz.0.16384'. [ 1214.332713][ T3940] usb 2-1: USB disconnect, device number 60 [ 1214.439178][T15656] udevd[15656]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1214.571809][ T5924] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1214.715047][ T5924] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1214.715080][ T5924] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1214.715107][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1214.715139][ T5924] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1214.715161][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.736000][ T5924] usb 1-1: config 0 descriptor?? [ 1214.737059][T17967] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1215.116549][ C1] vkms_vblank_simulate: vblank timer overrun [ 1215.206620][ T5924] hid-u2fzero 0003:10C4:8ACF.000F: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 1215.460641][ T5924] hid-u2fzero 0003:10C4:8ACF.000F: U2F Zero LED initialised [ 1215.460817][ T5924] hid-u2fzero 0003:10C4:8ACF.000F: U2F Zero RNG initialised [ 1215.477776][ T5924] usb 1-1: USB disconnect, device number 63 [ 1215.550567][ T3940] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1215.700187][ T3940] usb 2-1: Using ep0 maxpacket: 16 [ 1215.704721][ T3940] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.704757][ T3940] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1215.704793][ T3940] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1215.704817][ T3940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.720438][ T3940] usb 2-1: config 0 descriptor?? [ 1215.883353][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16398'. [ 1216.259130][ T993] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1216.397052][T27035] usb 2-1: USB disconnect, device number 61 [ 1216.413131][ T993] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1216.413166][ T993] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1216.413194][ T993] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1216.413227][ T993] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1216.413251][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.496785][ T993] usb 5-1: config 0 descriptor?? [ 1216.862975][T18078] devpts: Bad value for 'max' [ 1216.941212][ T993] holtek 0003:1241:5015.0011: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 1216.941246][ T993] holtek 0003:1241:5015.0011: no inputs found [ 1216.994742][T18085] Bluetooth: MGMT ver 1.23 [ 1217.104310][ T3940] usb 5-1: USB disconnect, device number 75 [ 1217.256266][T18087] fido_id[18087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1217.471960][ T3731] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1217.514321][ T37] audit: type=1400 audit(2000000090.328:3230): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18117 comm="syz.7.16412" [ 1217.616217][ T3731] usb 2-1: Using ep0 maxpacket: 8 [ 1217.618992][ T3731] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1217.619016][ T3731] usb 2-1: config 0 has no interface number 0 [ 1217.619064][ T3731] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1217.619108][ T3731] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1217.619132][ T3731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.641257][ T3731] usb 2-1: config 0 descriptor?? [ 1217.702436][ T3731] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1217.875507][ T3945] usb 2-1: USB disconnect, device number 62 [ 1218.188601][ T3731] IPVS: starting estimator thread 0... [ 1218.301628][T18158] IPVS: using max 6 ests per chain, 14400 per kthread [ 1219.365757][ T37] audit: type=1326 audit(2000000092.301:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18196 comm="syz.4.16436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bc93fec29 code=0x0 [ 1219.436512][T18200] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16437'. [ 1219.689876][ T37] audit: type=1400 audit(2000000092.666:3232): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=18205 comm="syz.6.16439" [ 1220.215544][T18229] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16447'. [ 1220.459411][ T3731] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1220.539254][ T3731] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1220.840606][T18250] fido_id[18250]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1221.211257][ T3731] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1221.350537][ T3731] usb 1-1: Using ep0 maxpacket: 32 [ 1221.358851][ T3731] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1221.358881][ T3731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.358902][ T3731] usb 1-1: Product: syz [ 1221.358916][ T3731] usb 1-1: Manufacturer: syz [ 1221.358931][ T3731] usb 1-1: SerialNumber: syz [ 1221.407603][ T3731] usb 1-1: config 0 descriptor?? [ 1221.806572][ T3731] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 1221.806596][ T3731] airspy 1-1:0.0: Could not detect board [ 1221.806686][ T3731] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 1221.838542][ T3731] usb 1-1: USB disconnect, device number 64 [ 1222.021764][ T3945] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1222.166452][ T3945] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1222.166484][ T3945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.215346][ T3945] usb 5-1: config 0 descriptor?? [ 1222.406215][ T3945] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1222.548799][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1222.598642][ T3945] [drm:udl_init] *ERROR* Selecting channel failed [ 1222.751243][ T3945] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1222.751269][ T3945] [drm] Initialized udl on minor 2 [ 1222.791500][ T3945] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1222.791857][ T3945] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1222.819158][T27035] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1222.830964][T27035] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1222.831138][T27035] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1222.847017][ T3945] usb 5-1: USB disconnect, device number 76 [ 1223.486465][ T37] audit: type=1326 audit(2000000096.730:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18367 comm="syz.6.16479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x50000 [ 1223.486513][ T37] audit: type=1326 audit(2000000096.730:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18367 comm="syz.6.16479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x50000 [ 1223.486559][ T37] audit: type=1326 audit(2000000096.730:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18367 comm="syz.6.16479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x50000 [ 1223.486603][ T37] audit: type=1326 audit(2000000096.730:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18367 comm="syz.6.16479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x50000 [ 1223.486707][ T37] audit: type=1326 audit(2000000096.730:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18367 comm="syz.6.16479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x50000 [ 1223.486749][ T37] audit: type=1326 audit(2000000096.730:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18367 comm="syz.6.16479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x50000 [ 1223.486789][ T37] audit: type=1326 audit(2000000096.730:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18367 comm="syz.6.16479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x50000 [ 1223.486831][ T37] audit: type=1326 audit(2000000096.730:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18367 comm="syz.6.16479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x50000 [ 1223.486871][ T37] audit: type=1326 audit(2000000096.730:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18367 comm="syz.6.16479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x50000 [ 1223.486912][ T37] audit: type=1326 audit(2000000096.730:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18367 comm="syz.6.16479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x50000 [ 1224.687322][T18426] fuse: Bad value for 'user_id' [ 1224.687341][T18426] fuse: Bad value for 'user_id' [ 1224.756240][ T5924] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1224.756276][ T5924] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1224.756302][ T5924] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1224.756327][ T5924] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1224.756352][ T5924] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1224.756376][ T5924] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1224.756402][ T5924] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1224.756427][ T5924] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1224.756451][ T5924] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1224.806585][T18428] usb usb1: check_ctrlrecip: process 18428 (syz.0.16495) requesting ep 01 but needs 81 [ 1224.861815][ T5924] hid-generic 0006:0004:0009.0013: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1225.029922][T18438] fido_id[18438]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1225.483977][T18452] sp0: Synchronizing with TNC [ 1226.143031][T18489] comedi comedi3: pcmda12: I/O port conflict (0x4f27,16) [ 1227.460363][T18550] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1227.460421][T18550] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 1227.460496][T18550] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1227.460546][T18550] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1227.460592][T18550] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1227.460746][T18550] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 1227.460817][T18550] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1227.460877][T18550] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 1227.700792][ T993] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1227.840617][ T993] usb 7-1: Using ep0 maxpacket: 16 [ 1227.856988][ T993] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1227.857017][ T993] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1227.857038][ T993] usb 7-1: Product: syz [ 1227.857053][ T993] usb 7-1: Manufacturer: syz [ 1227.857066][ T993] usb 7-1: SerialNumber: syz [ 1227.895552][ T993] usb 7-1: config 0 descriptor?? [ 1228.177136][ T993] usb 7-1: USB disconnect, device number 3 [ 1228.319126][T18595] tc_dump_action: action bad kind [ 1228.458613][T18607] ieee802154 phy1 wpan1: encryption failed: -22 [ 1228.494120][T12651] udevd[12651]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1229.042045][T18628] ptrace attach of "./syz-executor exec"[5837] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5 [ 1229.763830][T18659] MTD: Attempt to mount non-MTD device "/dev/nbd6" [ 1229.766492][T18659] block nbd6: Attempted send on invalid socket [ 1229.766516][T18659] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1230.572350][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16573'. [ 1230.930353][T18711] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16581'. [ 1231.025261][T18710] mkiss: ax0: crc mode is auto. [ 1231.422287][T18734] pim6reg: entered allmulticast mode [ 1231.551623][ T37] kauditd_printk_skb: 66 callbacks suppressed [ 1231.551641][ T37] audit: type=1326 audit(2000000105.384:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18742 comm="syz.6.16590" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f713760ec29 code=0x0 [ 1233.398111][ T37] audit: type=1326 audit(2000000107.357:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18818 comm="syz.7.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cb26ec29 code=0x7ffc0000 [ 1233.398986][ T37] audit: type=1326 audit(2000000107.357:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18818 comm="syz.7.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cb26ec29 code=0x7ffc0000 [ 1233.403533][ T37] audit: type=1326 audit(2000000107.368:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18818 comm="syz.7.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f21cb26ec29 code=0x7ffc0000 [ 1233.407073][ T37] audit: type=1326 audit(2000000107.368:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18818 comm="syz.7.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cb26ec29 code=0x7ffc0000 [ 1233.428734][ T37] audit: type=1326 audit(2000000107.400:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18818 comm="syz.7.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f21cb26ec29 code=0x7ffc0000 [ 1233.577532][ T37] audit: type=1326 audit(2000000107.561:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18818 comm="syz.7.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cb26ec29 code=0x7ffc0000 [ 1233.577583][ T37] audit: type=1326 audit(2000000107.561:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18818 comm="syz.7.16621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cb26ec29 code=0x7ffc0000 [ 1234.263720][T18843] netlink: 'syz.0.16630': attribute type 178 has an invalid length. [ 1234.698877][T18866] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 1234.698877][T18866] program syz.4.16639 not setting count and/or reply_len properly [ 1235.141917][T18884] netlink: 'syz.4.16645': attribute type 3 has an invalid length. [ 1235.141938][T18884] netlink: 'syz.4.16645': attribute type 1 has an invalid length. [ 1235.141952][T18884] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.16645'. [ 1235.238605][ T3731] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1235.333256][T18890] loop6: detected capacity change from 0 to 7 [ 1235.389565][ T3731] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.389620][ T3731] usb 7-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1235.389645][ T3731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.402994][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.403273][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1235.431581][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.431616][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1235.451601][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.451636][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1235.451925][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.451968][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1235.453920][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.453960][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1235.469006][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.469039][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1235.469294][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.469319][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1235.469408][T18890] ldm_validate_partition_table(): Disk read failed. [ 1235.469564][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.469589][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1235.469810][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.469880][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1235.470201][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1235.470225][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1235.470593][T18890] Dev loop6: unable to read RDB block 0 [ 1235.472065][T18890] loop6: unable to read partition table [ 1235.472294][T18890] loop6: partition table beyond EOD, truncated [ 1235.472324][T18890] loop_reread_partitions: partition scan of loop6 (被x() failed (rc=-5) [ 1235.612733][ T3731] usb 7-1: config 0 descriptor?? [ 1236.026049][ T3731] kye 0003:0458:501B.0014: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1236.057071][ T3731] kye 0003:0458:501B.0014: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.6-1/input0 [ 1236.057103][ T3731] kye 0003:0458:501B.0014: tablet-enabling feature report not found [ 1236.057118][ T3731] kye 0003:0458:501B.0014: tablet enabling failed [ 1236.203177][ T993] usb 7-1: USB disconnect, device number 4 [ 1236.252420][T18934] netlink: 104 bytes leftover after parsing attributes in process `syz.7.16656'. [ 1236.312856][T18922] fido_id[18922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1236.429323][T27035] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1236.581160][T27035] usb 5-1: Using ep0 maxpacket: 8 [ 1236.584346][T27035] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.584372][T27035] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1236.623882][T27035] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1236.623915][T27035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.623936][T27035] usb 5-1: Product: syz [ 1236.623951][T27035] usb 5-1: Manufacturer: syz [ 1236.623966][T27035] usb 5-1: SerialNumber: syz [ 1236.650039][T27035] usb 5-1: config 0 descriptor?? [ 1236.849645][ T993] usb 5-1: USB disconnect, device number 77 [ 1236.939072][T27035] hid_parser_main: 8 callbacks suppressed [ 1236.939093][T27035] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 1236.939123][T27035] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 1236.939154][T27035] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 1236.939179][T27035] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 1236.939204][T27035] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 1236.939230][T27035] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 1236.939255][T27035] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 1236.939281][T27035] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 1236.939307][T27035] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 1236.939332][T27035] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 1236.984137][T27035] hid-generic 0000:0000:0004.0015: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1237.335295][T18975] fido_id[18975]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1237.678613][ T5840] Bluetooth: hci1: command tx timeout [ 1238.106266][T19018] can0: slcan on ptm0. [ 1238.428334][T19017] can0 (unregistered): slcan off ptm0. [ 1238.494855][ T37] audit: type=1326 audit(2000000112.837:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19042 comm="syz.1.16686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc755a15be7 code=0x0 [ 1238.625611][T19049] vxcan1: entered allmulticast mode [ 1238.891057][T19062] vivid-003: disconnect [ 1238.897968][T19061] vivid-003: reconnect [ 1239.212682][T19078] overlayfs: conflicting options: nfs_export=on,index=off [ 1239.353911][T19080] tipc: Started in network mode [ 1239.353945][T19080] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 1239.354516][T19080] tipc: Enabled bearer , priority 10 [ 1240.294096][ T3940] tipc: Node number set to 12429994 [ 1241.175669][ T3940] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1241.315621][ T3940] usb 7-1: Using ep0 maxpacket: 8 [ 1241.318185][ T3940] usb 7-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1241.318251][ T3940] usb 7-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1241.318279][ T3940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1241.318314][ T3940] usb 7-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1241.318336][ T3940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.382246][ T3940] usb 7-1: config 0 descriptor?? [ 1241.823794][ T3940] elecom 0003:056E:011C.0016: hidraw0: USB HID vf4.f6 Device [HID 056e:011c] on usb-dummy_hcd.6-1/input0 [ 1241.990902][ T3940] usb 7-1: USB disconnect, device number 5 [ 1242.018565][T19209] netlink: 'syz.1.16747': attribute type 16 has an invalid length. [ 1242.635519][ T37] audit: type=1326 audit(2000000117.277:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19242 comm="syz.1.16759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1242.639675][ T37] audit: type=1326 audit(2000000117.277:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19242 comm="syz.1.16759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1242.662962][ T37] audit: type=1326 audit(2000000117.299:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19242 comm="syz.1.16759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1242.663011][ T37] audit: type=1326 audit(2000000117.299:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19242 comm="syz.1.16759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1242.663052][ T37] audit: type=1326 audit(2000000117.299:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19242 comm="syz.1.16759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1242.673394][ T37] audit: type=1326 audit(2000000117.309:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19242 comm="syz.1.16759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1242.673444][ T37] audit: type=1326 audit(2000000117.309:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19242 comm="syz.1.16759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1242.673484][ T37] audit: type=1326 audit(2000000117.309:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19242 comm="syz.1.16759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1242.841144][ T5987] kernel write not supported for file /vcs (pid: 5987 comm: kworker/1:8) [ 1244.097835][T19298] futex_wake_op: syz.6.16778 tries to shift op by -1; fix this program [ 1244.184163][T19301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16779'. [ 1244.458297][T19313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1244.937840][T19335] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.16792'. [ 1245.046142][ T993] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1245.058796][T27035] hid_parser_main: 78 callbacks suppressed [ 1245.058817][T27035] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1245.106186][T27035] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1245.195062][ T993] usb 7-1: Using ep0 maxpacket: 16 [ 1245.200775][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.200808][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.200831][ T993] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1245.200882][ T993] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1245.200905][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.219589][ T993] usb 7-1: config 0 descriptor?? [ 1245.363138][T19345] fido_id[19345]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1245.711187][ T993] hid-multitouch 0003:0457:07DA.0018: unknown main item tag 0x0 [ 1245.711224][ T993] hid-multitouch 0003:0457:07DA.0018: unknown main item tag 0x0 [ 1245.711253][ T993] hid-multitouch 0003:0457:07DA.0018: unknown main item tag 0x0 [ 1245.711280][ T993] hid-multitouch 0003:0457:07DA.0018: unknown main item tag 0x0 [ 1245.711308][ T993] hid-multitouch 0003:0457:07DA.0018: unknown main item tag 0x0 [ 1245.711335][ T993] hid-multitouch 0003:0457:07DA.0018: unknown main item tag 0x0 [ 1245.711362][ T993] hid-multitouch 0003:0457:07DA.0018: unknown main item tag 0x0 [ 1245.711389][ T993] hid-multitouch 0003:0457:07DA.0018: unknown main item tag 0x0 [ 1245.711415][ T993] hid-multitouch 0003:0457:07DA.0018: unknown main item tag 0x0 [ 1245.717726][T19361] netlink: 76 bytes leftover after parsing attributes in process `syz.0.16798'. [ 1245.721772][ T993] hid-multitouch 0003:0457:07DA.0018: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 1245.878615][ T5924] usb 7-1: USB disconnect, device number 6 [ 1246.153057][T19382] fido_id[19382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1246.312642][ T3940] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1246.487196][ T3940] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.494514][ T3940] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1246.494544][ T3940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.494561][ T3940] usb 5-1: Product: syz [ 1246.494575][ T3940] usb 5-1: Manufacturer: syz [ 1246.494589][ T3940] usb 5-1: SerialNumber: syz [ 1246.566508][ T3940] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1246.987613][ T3940] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1248.883612][ T5924] usb 5-1: USB disconnect, device number 78 [ 1248.951583][T19492] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>fF" [ 1248.951601][T19492] CUSE: zero length info key specified [ 1249.802441][T19520] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1250.059460][T19528] netlink: 108 bytes leftover after parsing attributes in process `syz.4.16847'. [ 1250.059484][T19528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16847'. [ 1250.608976][ T37] audit: type=1326 audit(2000000125.824:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19554 comm="syz.1.16856" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc755a1ec29 code=0x0 [ 1252.508598][T19638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16882'. [ 1252.725083][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16884'. [ 1252.761909][ T37] audit: type=1326 audit(2000000128.130:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19646 comm="syz.6.16885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x7ffc0000 [ 1252.762192][ T37] audit: type=1326 audit(2000000128.130:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19646 comm="syz.6.16885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x7ffc0000 [ 1252.769628][ T37] audit: type=1326 audit(2000000128.141:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19646 comm="syz.6.16885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f713760ec29 code=0x7ffc0000 [ 1252.770595][ T37] audit: type=1326 audit(2000000128.141:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19646 comm="syz.6.16885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x7ffc0000 [ 1252.770867][ T37] audit: type=1326 audit(2000000128.141:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19646 comm="syz.6.16885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x7ffc0000 [ 1252.772501][ T37] audit: type=1326 audit(2000000128.141:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19646 comm="syz.6.16885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f713760ec29 code=0x7ffc0000 [ 1252.776066][ T37] audit: type=1326 audit(2000000128.151:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19646 comm="syz.6.16885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x7ffc0000 [ 1252.786213][ T37] audit: type=1326 audit(2000000128.151:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19646 comm="syz.6.16885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713760ec29 code=0x7ffc0000 [ 1253.608066][T19691] netlink: 188 bytes leftover after parsing attributes in process `syz.1.16902'. [ 1254.375237][T19724] netlink: 'syz.7.16914': attribute type 5 has an invalid length. [ 1254.736940][ T37] audit: type=1326 audit(2000000130.253:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19746 comm="syz.1.16926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc755a1ec29 code=0x7ffc0000 [ 1254.833792][ T3945] hid_parser_main: 18 callbacks suppressed [ 1254.833814][ T3945] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1254.833844][ T3945] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1254.833869][ T3945] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1254.833894][ T3945] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1254.833920][ T3945] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1254.833945][ T3945] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1254.833970][ T3945] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1254.833995][ T3945] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1254.834020][ T3945] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1254.834045][ T3945] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1254.926777][ T3945] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1255.269301][T19762] fido_id[19762]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1255.451348][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16933'. [ 1255.451371][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16933'. [ 1255.451397][T19778] netlink: 'syz.7.16933': attribute type 14 has an invalid length. [ 1255.507502][T19781] netlink: 'syz.6.16934': attribute type 2 has an invalid length. [ 1255.674439][T19781] bridge: entered promiscuous mode [ 1256.094971][T27035] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1256.239392][T27035] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1256.239424][T27035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.265946][T27035] usb 2-1: config 0 descriptor?? [ 1256.282684][T27035] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1256.563326][T19831] Invalid source name [ 1256.563345][T19831] UBIFS error (pid: 19831): cannot open "usrquota", error -22 [ 1256.647765][T27035] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1256.647811][T27035] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1256.846177][T27035] usb 2-1: USB disconnect, device number 63 [ 1257.009236][T19852] program syz.4.16955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1257.009581][T19852] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1257.522752][T19872] netlink: 'syz.1.16962': attribute type 5 has an invalid length. [ 1257.997295][T27035] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1258.142914][T27035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.142948][T27035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.142987][T27035] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1258.143012][T27035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.159324][T27035] usb 2-1: config 0 descriptor?? [ 1258.730095][T27035] hid-led 0003:0FC5:B080.001A: probe with driver hid-led failed with error -71 [ 1258.756575][T27035] usb 2-1: USB disconnect, device number 64 [ 1259.174982][T19932] netlink: 'syz.6.16981': attribute type 2 has an invalid length. [ 1260.114109][T27035] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1260.254506][T27035] usb 5-1: Using ep0 maxpacket: 16 [ 1260.256955][T27035] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.256988][T27035] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.257011][T27035] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1260.257046][T27035] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1260.257070][T27035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.262725][T27035] usb 5-1: config 0 descriptor?? [ 1260.632267][T20001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1260.681335][T27035] nzxt-smart2 0003:1E71:2009.001B: item fetching failed at offset 2/5 [ 1260.682274][T27035] nzxt-smart2 0003:1E71:2009.001B: probe with driver nzxt-smart2 failed with error -22 [ 1260.878074][T27035] usb 5-1: USB disconnect, device number 79 [ 1261.543211][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1261.543230][ T37] audit: type=1400 audit(2000000137.546:3342): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=20040 comm="syz.6.17013" [ 1261.718167][ T5924] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1261.863682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.900157][ T5924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.900184][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1261.902128][ T5924] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1261.902158][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1261.902179][ T5924] usb 2-1: SerialNumber: syz [ 1262.154338][ T5924] usb 2-1: 0:2 : does not exist [ 1262.286284][ T5924] usb 2-1: USB disconnect, device number 65 [ 1262.289505][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17020'. [ 1262.289528][T20074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17020'. [ 1262.289553][T20074] netlink: 'syz.0.17020': attribute type 14 has an invalid length. [ 1262.289567][T20074] netlink: 'syz.0.17020': attribute type 11 has an invalid length. [ 1262.488988][T15656] udevd[15656]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1262.809534][T20101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17025'. [ 1263.042010][ T3940] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1263.191165][ T3940] usb 2-1: Using ep0 maxpacket: 32 [ 1263.193924][ T3940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.193956][ T3940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.193994][ T3940] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1263.194017][ T3940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.252149][ T3940] usb 2-1: config 0 descriptor?? [ 1263.291088][T20120] tmpfs: User quota inode hardlimit too large. [ 1263.692760][ T3940] koneplus 0003:1E7D:2D51.001C: item fetching failed at offset 1/5 [ 1263.693564][ T3940] koneplus 0003:1E7D:2D51.001C: parse failed [ 1263.693635][ T3940] koneplus 0003:1E7D:2D51.001C: probe with driver koneplus failed with error -22 [ 1263.875771][T27035] usb 2-1: USB disconnect, device number 66 [ 1264.049971][T20155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17042'. [ 1264.093496][T20155] IPVS: Error connecting to the multicast addr [ 1264.238967][T20166] hub 9-0:1.0: USB hub found [ 1264.240386][T20166] hub 9-0:1.0: 1 port detected [ 1264.625215][T20180] comedi comedi3: dt2817: I/O port conflict (0x4f27,5) [ 1265.315447][T20196] netlink: 'syz.4.17058': attribute type 23 has an invalid length. [ 1265.721842][T27035] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1265.816349][T20221] ptrace attach of "./syz-executor exec"[5848] was attempted by ""[20221] [ 1265.876927][T27035] usb 5-1: Using ep0 maxpacket: 8 [ 1265.882964][T27035] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1265.882994][T27035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.883014][T27035] usb 5-1: Product: syz [ 1265.883029][T27035] usb 5-1: Manufacturer: syz [ 1265.883043][T27035] usb 5-1: SerialNumber: syz [ 1265.908722][T27035] usb 5-1: config 0 descriptor?? [ 1265.946015][T27035] gspca_main: se401-2.14.0 probing 047d:5003 [ 1266.051404][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17067'. [ 1266.328684][T27035] gspca_se401: Bayer format not supported! [ 1266.523694][ T5924] usb 5-1: USB disconnect, device number 80 [ 1266.749229][T20251] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1268.061654][T20302] tipc: Enabling of bearer rejected, failed to enable media [ 1268.184197][ T37] audit: type=1326 audit(2000000144.674:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20306 comm="syz.0.17095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71d314ec29 code=0x0 [ 1268.638678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1268.903660][T20333] program syz.6.17102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1269.029160][T20337] netlink: 'syz.1.17106': attribute type 6 has an invalid length. [ 1270.251658][T20389] netlink: 'syz.1.17123': attribute type 29 has an invalid length. [ 1270.253248][T20389] netlink: 'syz.1.17123': attribute type 29 has an invalid length. [ 1270.469971][T20396] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1270.733499][T20407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17130'. [ 1271.035535][T20418] vivid-003: disconnect [ 1271.073594][T20412] vivid-003: reconnect [ 1271.196596][ T37] audit: type=1400 audit(2000000147.902:3344): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=20421 comm="syz.0.17135" [ 1272.066900][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.727884][T20475] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1273.058321][T20491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1273.235777][T20500] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17162'. [ 1273.455868][T20515] netlink: 'syz.1.17168': attribute type 3 has an invalid length. [ 1273.455890][T20515] netlink: 944 bytes leftover after parsing attributes in process `syz.1.17168'. [ 1273.635791][ T5840] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1273.636046][ T5840] Bluetooth: hci5: Injecting HCI hardware error event [ 1273.642361][ T59] Bluetooth: hci5: hardware error 0x00 [ 1275.032227][T20571] program syz.4.17182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1275.873455][ T59] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1276.260521][T20613] netlink: 504 bytes leftover after parsing attributes in process `syz.7.17190'. [ 1276.843898][T20628] devtmpfs: Too few inodes for current use [ 1278.603468][ T37] audit: type=1400 audit(2000000155.849:3345): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=20692 comm="syz.4.17215" [ 1279.832770][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1281.243397][T20798] vlan2: entered promiscuous mode [ 1281.243420][T20798] gretap0: entered promiscuous mode [ 1282.450864][T20855] trusted_key: encrypted_key: key trusted:syz not found [ 1282.686779][T20865] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1283.017607][T20879] overlayfs: failed to resolve './file1': -2 [ 1284.301980][ T3731] hid_parser_main: 73 callbacks suppressed [ 1284.302003][ T3731] hid-generic 0002:0004:0007.001D: unknown main item tag 0x0 [ 1284.302032][ T3731] hid-generic 0002:0004:0007.001D: unknown main item tag 0x0 [ 1284.302059][ T3731] hid-generic 0002:0004:0007.001D: unknown main item tag 0x0 [ 1284.302084][ T3731] hid-generic 0002:0004:0007.001D: unknown main item tag 0x0 [ 1284.302108][ T3731] hid-generic 0002:0004:0007.001D: unknown main item tag 0x0 [ 1284.302134][ T3731] hid-generic 0002:0004:0007.001D: unknown main item tag 0x0 [ 1284.302160][ T3731] hid-generic 0002:0004:0007.001D: unknown main item tag 0x0 [ 1284.302185][ T3731] hid-generic 0002:0004:0007.001D: unknown main item tag 0x0 [ 1284.302209][ T3731] hid-generic 0002:0004:0007.001D: unknown main item tag 0x0 [ 1284.302242][ T3731] hid-generic 0002:0004:0007.001D: unknown main item tag 0x0 [ 1284.452413][ T3731] hid-generic 0002:0004:0007.001D: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1284.607698][T20945] fido_id[20945]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1285.569157][T20992] loop9: detected capacity change from 0 to 7 [ 1285.570031][T20992] buffer_io_error: 10 callbacks suppressed [ 1285.570047][T20992] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.570165][T20992] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.570281][T20992] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.579030][T20992] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.579174][T20992] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.579310][T20992] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.579438][T20992] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.579512][T20992] ldm_validate_partition_table(): Disk read failed. [ 1285.579559][T20992] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.579667][T20992] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.579840][T20992] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.580007][T20992] Dev loop9: unable to read RDB block 0 [ 1285.582435][T20992] loop9: unable to read partition table [ 1285.582668][T20992] loop9: partition table beyond EOD, truncated [ 1285.582685][T20992] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1285.582685][T20992] ) failed (rc=-5) [ 1288.150565][T21078] netlink: 'syz.4.17340': attribute type 322 has an invalid length. [ 1288.314117][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1288.342072][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1288.343682][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1288.346168][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1288.346924][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1288.429094][T21086] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1288.896174][T21110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17349'. [ 1290.271533][ T59] Bluetooth: hci6: command tx timeout [ 1290.391544][T21082] chnl_net:caif_netlink_parms(): no params data found [ 1291.085864][ T37] audit: type=1326 audit(2000000169.232:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21324 comm="syz.6.17375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f713760ec29 code=0x0 [ 1291.163630][T21082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.163774][T21082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.164078][T21082] bridge_slave_0: entered allmulticast mode [ 1291.195177][T21082] bridge_slave_0: entered promiscuous mode [ 1291.247913][T21082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.251630][T21082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.251903][T21082] bridge_slave_1: entered allmulticast mode [ 1291.275213][T21082] bridge_slave_1: entered promiscuous mode [ 1291.509230][T21082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.533253][T21082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.798675][T21082] team0: Port device team_slave_0 added [ 1291.834431][T21082] team0: Port device team_slave_1 added [ 1292.220384][ T59] Bluetooth: hci6: command tx timeout [ 1292.265943][T21438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17392'. [ 1292.483373][T21082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.483389][T21082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.483415][T21082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.524323][T21082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.524339][T21082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.524365][T21082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.826015][T21467] tipc: Started in network mode [ 1292.826048][T21467] tipc: Node identity ac14140f, cluster identity 4711 [ 1292.869953][T21467] tipc: Enabled bearer , priority 10 [ 1293.076411][T21082] hsr_slave_0: entered promiscuous mode [ 1293.119298][T21082] hsr_slave_1: entered promiscuous mode [ 1293.138248][T21082] debugfs: 'hsr0' already exists in 'hsr' [ 1293.138275][T21082] Cannot create hsr debugfs directory [ 1293.330562][T21510] netlink: 44 bytes leftover after parsing attributes in process `syz.6.17402'. [ 1293.418162][T21503] netlink: 44 bytes leftover after parsing attributes in process `syz.6.17402'. [ 1293.696613][ T37] audit: type=1326 audit(2000000172.031:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21541 comm="syz.4.17410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bc93fec29 code=0x0 [ 1293.898093][ T3940] tipc: Node number set to 2886997007 [ 1294.159197][ T59] Bluetooth: hci6: command tx timeout [ 1294.368278][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17419'. [ 1294.368312][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17419'. [ 1294.368364][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17419'. [ 1294.681709][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17422'. [ 1294.681753][T21611] netlink: 'syz.4.17422': attribute type 7 has an invalid length. [ 1295.058399][T21631] sch_fq: defrate 4294967295 ignored. [ 1295.083284][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.263005][T21647] autofs4:pid:21647:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 1295.290788][T21650] program syz.4.17431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1295.539678][T21657] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1295.607563][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.715192][T21663] pimreg3: entered allmulticast mode [ 1295.725928][T21082] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1295.770212][T21082] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1295.826853][T21082] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1295.922026][T21082] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1296.045264][T21678] sp0: Synchronizing with TNC [ 1296.090452][ T59] Bluetooth: hci6: command tx timeout [ 1296.487227][T21082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.560604][T21082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.623855][ T1363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.624003][ T1363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.680399][T12331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.680635][T12331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.938085][ T5987] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1297.078107][ T5987] usb 5-1: Using ep0 maxpacket: 32 [ 1297.086022][ T5987] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1297.086050][ T5987] usb 5-1: config 0 has no interface number 0 [ 1297.108567][ T5987] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1297.108597][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.108616][ T5987] usb 5-1: Product: syz [ 1297.108630][ T5987] usb 5-1: Manufacturer: syz [ 1297.108644][ T5987] usb 5-1: SerialNumber: syz [ 1297.152017][ T5987] usb 5-1: config 0 descriptor?? [ 1297.165286][ T5987] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1297.165324][ T5987] usb 5-1: selecting invalid altsetting 1 [ 1297.165341][ T5987] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1297.189149][T21082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.212078][ T5987] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1297.212638][ T5987] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1297.213738][ T5987] usb 5-1: media controller created [ 1297.286892][ T5987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1297.866201][T21082] veth0_vlan: entered promiscuous mode [ 1297.922383][T21082] veth1_vlan: entered promiscuous mode [ 1298.116513][T21082] veth0_macvtap: entered promiscuous mode [ 1298.154715][T21082] veth1_macvtap: entered promiscuous mode [ 1298.279363][T21082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.330568][T21082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.344062][ T5987] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1298.346045][ T5987] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1298.375493][ T1363] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.376983][ T1363] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.377258][ T1363] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.377295][ T1363] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.474996][ T5987] usb 5-1: USB disconnect, device number 81 [ 1298.488600][T15656] udevd[15656]: setting owner of /dev/bus/usb/005/081 to uid=0, gid=0 failed: No such file or directory [ 1298.984460][T12332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.984481][T12332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.205835][T12332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.205856][T12332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.699398][T21802] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 1300.157530][T21827] pimreg: entered allmulticast mode [ 1301.340031][ T3945] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1301.481688][ T3945] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1301.481718][ T3945] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1301.481738][ T3945] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.481758][ T3945] usb 9-1: config 220 has no interface number 2 [ 1301.481836][ T3945] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1301.481864][ T3945] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1301.481881][ T3945] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1301.481899][ T3945] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1301.485144][ T3945] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1301.485172][ T3945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.485195][ T3945] usb 9-1: Product: syz [ 1301.485210][ T3945] usb 9-1: Manufacturer: syz [ 1301.485223][ T3945] usb 9-1: SerialNumber: syz [ 1301.772920][ T3945] usb 9-1: selecting invalid altsetting 0 [ 1301.773563][ T3945] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 1301.773595][ T3945] usb 9-1: No valid video chain found. [ 1301.839485][ T3945] usb 9-1: selecting invalid altsetting 0 [ 1301.839523][ T3945] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1301.854055][ T3945] usb 9-1: USB disconnect, device number 2 [ 1302.374831][ T3945] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1302.526628][ T3945] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 1302.526653][ T3945] usb 5-1: config 0 has no interface number 0 [ 1302.526695][ T3945] usb 5-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1302.526723][ T3945] usb 5-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.528282][ T3945] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=22.00 [ 1302.528309][ T3945] usb 5-1: New USB device strings: Mfr=17, Product=0, SerialNumber=0 [ 1302.528329][ T3945] usb 5-1: Manufacturer: syz [ 1302.545056][ T3945] usb 5-1: config 0 descriptor?? [ 1302.726068][T21966] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcl812) [ 1302.979493][ T3945] uclogic 0003:5543:0522.001E: unbalanced delimiter at end of report description [ 1302.980321][ T3945] uclogic 0003:5543:0522.001E: parse failed [ 1302.981522][ T3945] uclogic 0003:5543:0522.001E: probe with driver uclogic failed with error -22 [ 1303.173421][ T3945] usb 5-1: USB disconnect, device number 82 [ 1303.815107][T22013] sp0: Synchronizing with TNC [ 1303.817778][T22012] [U] [ 1304.509783][ T3952] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1304.580605][T22044] program syz.0.17525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1304.651338][ T3952] usb 9-1: Using ep0 maxpacket: 32 [ 1304.655163][ T3952] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1304.655191][ T3952] usb 9-1: config 0 has no interface number 0 [ 1304.658356][ T3952] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1304.658385][ T3952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.658406][ T3952] usb 9-1: Product: syz [ 1304.658420][ T3952] usb 9-1: Manufacturer: syz [ 1304.658435][ T3952] usb 9-1: SerialNumber: syz [ 1304.717213][ T3952] usb 9-1: config 0 descriptor?? [ 1304.734423][ T3952] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1304.734449][ T3952] usb 9-1: selecting invalid altsetting 1 [ 1304.734465][ T3952] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1304.787575][T22050] xt_l2tp: invalid flags combination: 0 [ 1304.796050][ T3952] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1304.796473][ T3952] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1304.796524][ T3952] usb 9-1: media controller created [ 1304.849934][ T3952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1305.683962][T22085] netlink: 536 bytes leftover after parsing attributes in process `syz.7.17535'. [ 1305.683989][T22085] netlink: 104 bytes leftover after parsing attributes in process `syz.7.17535'. [ 1305.862434][ T3952] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1305.862518][ T3952] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1305.915189][T22035] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1306.002437][ T3952] usb 9-1: USB disconnect, device number 3 [ 1306.101843][T22105] tmpfs: Bad value for 'mpol' [ 1306.210089][T22112] netlink: 11 bytes leftover after parsing attributes in process `syz.4.17539'. [ 1306.210117][T22112] netlink: 11 bytes leftover after parsing attributes in process `syz.4.17539'. [ 1306.213554][T22112] netlink: 11 bytes leftover after parsing attributes in process `syz.4.17539'. [ 1306.213579][T22112] netlink: 11 bytes leftover after parsing attributes in process `syz.4.17539'. [ 1306.694423][T22134] netlink: 260 bytes leftover after parsing attributes in process `syz.8.17548'. [ 1306.694450][T22134] netlink: 260 bytes leftover after parsing attributes in process `syz.8.17548'. [ 1306.982778][T22147] netlink: 68 bytes leftover after parsing attributes in process `syz.6.17551'. [ 1306.982884][T22147] tipc: Enabling of bearer rejected, failed to enable media [ 1307.280367][ T38] INFO: task syz.2.15907:15507 blocked for [ 1307.280367][ T38] INFO: task syz.2.15907:15507 blocked for more than 143 seconds. [ 1307.280392][ T38] Not tainted syzkaller #0 [ 1307.280403][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1307.280413][ T38] task:syz.2.15907 state:D stack:24536 pid:15507 tgid:15506 ppid:5851 task_flags:0x400140 flags:0x00004006 [ 1307.280461][ T38] Call Trace: [ 1307.280468][ T38] [ 1307.280482][ T38] __schedule+0x16f3/0x4c20 [ 1307.280523][ T38] ? validate_chain+0x897/0x2140 [ 1307.280569][ T38] ? __lock_acquire+0xab9/0xd20 [ 1307.280593][ T38] ? __pfx___schedule+0x10/0x10 [ 1307.280634][ T38] ? schedule+0x91/0x360 [ 1307.280661][ T38] schedule+0x165/0x360 [ 1307.280688][ T38] schedule_timeout+0x9a/0x270 [ 1307.280711][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1307.280746][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1307.280772][ T38] ? wait_for_completion+0x267/0x5d0 [ 1307.280798][ T38] wait_for_completion+0x2bf/0x5d0 [ 1307.280837][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1307.280866][ T38] ? disable_device+0x137/0x320 [ 1307.280898][ T38] disable_device+0x1c6/0x320 [ 1307.280921][ T38] ? __pfx_disable_device+0x10/0x10 [ 1307.280948][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 1307.280967][ T38] ? __ib_unregister_device+0x284/0x3f0 [ 1307.280993][ T38] __ib_unregister_device+0x2cb/0x3f0 [ 1307.281015][ T38] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1307.281042][ T38] ib_unregister_device_and_put+0xb8/0xf0 [ 1307.281065][ T38] nldev_dellink+0x2d1/0x320 [ 1307.281096][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 1307.281214][ T38] ? rcu_is_watching+0x15/0xb0 [ 1307.281240][ T38] ? cap_capable+0x11f/0x460 [ 1307.281262][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 1307.281287][ T38] ? bpf_lsm_capable+0x9/0x20 [ 1307.281309][ T38] ? security_capable+0x7e/0x2e0 [ 1307.281335][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 1307.281362][ T38] rdma_nl_rcv+0x6ab/0x980 [ 1307.281395][ T38] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1307.281412][ T38] ? __lock_acquire+0xab9/0xd20 [ 1307.281457][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1307.281490][ T38] netlink_unicast+0x843/0xa10 [ 1307.281523][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1307.281555][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1307.281576][ T38] ? skb_put+0x11b/0x210 [ 1307.281606][ T38] netlink_sendmsg+0x805/0xb30 [ 1307.281640][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1307.281673][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1307.281692][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1307.281716][ T38] __sock_sendmsg+0x219/0x270 [ 1307.281744][ T38] ____sys_sendmsg+0x508/0x820 [ 1307.281769][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1307.281799][ T38] ? import_iovec+0x74/0xa0 [ 1307.281826][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 1307.281848][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 1307.281908][ T38] ? __fget_files+0x2a/0x420 [ 1307.281931][ T38] ? __fget_files+0x3a6/0x420 [ 1307.281967][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 1307.281991][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1307.282022][ T38] ? rcu_is_watching+0x15/0xb0 [ 1307.282052][ T38] ? do_syscall_64+0xbe/0x3b0 [ 1307.282074][ T38] do_syscall_64+0xfa/0x3b0 [ 1307.282090][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1307.282111][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.282129][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1307.282151][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.282168][ T38] RIP: 0033:0x7f6ab70eec29 [ 1307.282184][ T38] RSP: 002b:00007f6ab5356038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1307.282202][ T38] RAX: ffffffffffffffda RBX: 00007f6ab7335fa0 RCX: 00007f6ab70eec29 [ 1307.282214][ T38] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1307.286272][ T38] RBP: 00007f6ab7171e41 R08: 0000000000000000 R09: 0000000000000000 [ 1307.286292][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.286305][ T38] R13: 00007f6ab7336038 R14: 00007f6ab7335fa0 R15: 00007ffcd31b6fc8 [ 1307.286338][ T38] [ 1307.286384][ T38] [ 1307.286384][ T38] Showing all locks held in the system: [ 1307.286396][ T38] 1 lock held by khungtaskd/38: [ 1307.286408][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1307.286471][ T38] 3 locks held by kworker/u8:11/1484: [ 1307.286495][ T38] 2 locks held by udevd/5207: [ 1307.286507][ T38] 2 locks held by getty/5595: [ 1307.286518][ T38] #0: ffff88823bf2e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1307.286575][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1307.286622][ T38] 9 locks held by syz-executor/5842: [ 1307.286639][ T38] 2 locks held by kworker/u8:5/12330: [ 1307.286650][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1307.286697][ T38] #1: ffffc9000652fbc0 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1307.286742][ T38] 2 locks held by kworker/u8:7/12331: [ 1307.286754][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1307.286797][ T38] #1: ffffc90006557bc0 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1307.286846][ T38] 4 locks held by kworker/u8:1/28664: [ 1307.286857][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1307.286902][ T38] #1: ffffc900177f7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1307.286945][ T38] #2: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1307.286993][ T38] #3: ffff8880350d4750 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1307.287040][ T38] 2 locks held by syz.2.15907/15507: [ 1307.287051][ T38] #0: ffffffff994265b8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 1307.287092][ T38] #1: ffff8880350d4750 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 1307.287136][ T38] 2 locks held by syz.1.17168/20509: [ 1307.287146][ T38] #0: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1307.287186][ T38] #1: ffff8880350d4750 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1307.287225][ T38] 10 locks held by syz-executor/21082: [ 1307.287238][ T38] 1 lock held by syz.7.17555/22154: [ 1307.287248][ T38] [ 1307.287253][ T38] ============================================= [ 1307.287253][ T38] [ 1307.287268][ T38] NMI backtrace for cpu 1 [ 1307.287281][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1307.287300][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1307.287310][ T38] Call Trace: [ 1307.287318][ T38] [ 1307.287325][ T38] dump_stack_lvl+0x189/0x250 [ 1307.287352][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1307.287374][ T38] ? __pfx__printk+0x10/0x10 [ 1307.287401][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1307.287424][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1307.287446][ T38] ? __pfx__printk+0x10/0x10 [ 1307.287468][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1307.287490][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1307.287513][ T38] watchdog+0xf93/0xfe0 [ 1307.287537][ T38] ? watchdog+0x1de/0xfe0 [ 1307.287569][ T38] kthread+0x70e/0x8a0 [ 1307.287595][ T38] ? __pfx_watchdog+0x10/0x10 [ 1307.287613][ T38] ? __pfx_kthread+0x10/0x10 [ 1307.287641][ T38] ? __pfx_kthread+0x10/0x10 [ 1307.287664][ T38] ret_from_fork+0x436/0x7d0 [ 1307.287688][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1307.287717][ T38] ? __switch_to_asm+0x39/0x70 [ 1307.287733][ T38] ? __switch_to_asm+0x33/0x70 [ 1307.287748][ T38] ? __pfx_kthread+0x10/0x10 [ 1307.287773][ T38] ret_from_fork_asm+0x1a/0x30 [ 1307.287805][ T38] [ 1307.287812][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1307.287836][ C0] NMI backtrace for cpu 0 [ 1307.287850][ C0] CPU: 0 UID: 0 PID: 22154 Comm: syz.7.17555 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1307.287868][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1307.287878][ C0] RIP: 0010:folios_put_refs+0x1f4/0x670 [ 1307.287896][ C0] Code: e8 a1 d2 ff 08 48 c7 44 24 58 00 00 00 00 e9 b4 00 00 00 49 8d 7c 24 34 be 04 00 00 00 e8 f4 26 24 00 31 db f0 45 29 7c 24 34 <41> 0f 94 c7 0f 94 c3 bf 02 00 00 00 89 de e8 f9 e0 c4 ff 31 ff 89 [ 1307.287909][ C0] RSP: 0018:ffffc9000cc4f200 EFLAGS: 00000206 [ 1307.287923][ C0] RAX: ffffffff81f99001 RBX: 0000000000000000 RCX: ffffffff81f9907c [ 1307.287935][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea0001c1eb34 [ 1307.287946][ C0] RBP: ffffc9000cc4f2f0 R08: ffffea0001c1eb37 R09: 1ffffd4000383d66 [ 1307.287958][ C0] R10: dffffc0000000000 R11: fffff94000383d67 R12: ffffea0001c1eb00 [ 1307.287970][ C0] R13: 1ffffd4000383d60 R14: 0200000000000000 R15: 0000000000000001 [ 1307.287982][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 1307.287996][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1307.288007][ C0] CR2: 00007f713586df98 CR3: 000000002d9fe000 CR4: 00000000003526f0 [ 1307.288023][ C0] Call Trace: [ 1307.288030][ C0] [ 1307.288042][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1307.288061][ C0] ? free_swap_cache+0x9b/0x300 [ 1307.288078][ C0] free_pages_and_swap_cache+0x277/0x520 [ 1307.288098][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1307.288137][ C0] ? tlb_table_flush+0x145/0x410 [ 1307.288151][ C0] ? __pfx_migrate_enable+0x10/0x10 [ 1307.288172][ C0] tlb_flush_mmu+0x3a0/0x680 [ 1307.288188][ C0] ? unmap_page_range+0x3550/0x3c10 [ 1307.288208][ C0] unmap_page_range+0x3573/0x3c10 [ 1307.288248][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1307.288269][ C0] ? mas_find+0xb0e/0xd30 [ 1307.288288][ C0] ? unmap_vmas+0x144/0x580 [ 1307.288305][ C0] unmap_vmas+0x399/0x580 [ 1307.288330][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1307.288359][ C0] exit_mmap+0x248/0xb50 [ 1307.288382][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1307.288400][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1307.288427][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1307.288451][ C0] ? uprobe_clear_state+0x280/0x2a0 [ 1307.288467][ C0] ? mm_update_next_owner+0xa7/0x870 [ 1307.288485][ C0] __mmput+0xcb/0x3d0 [ 1307.288504][ C0] exit_mm+0x1da/0x2c0 [ 1307.288519][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1307.288535][ C0] ? rcu_is_watching+0x15/0xb0 [ 1307.288558][ C0] do_exit+0x648/0x2300 [ 1307.288571][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1307.288591][ C0] ? rt_mutex_slowunlock+0x668/0x8a0 [ 1307.288611][ C0] ? __pfx_do_exit+0x10/0x10 [ 1307.288625][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1307.288647][ C0] ? __rcu_read_unlock+0x84/0xe0 [ 1307.288666][ C0] do_group_exit+0x21c/0x2d0 [ 1307.288683][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1307.288698][ C0] x64_sys_call+0x21f7/0x2200 [ 1307.288712][ C0] do_syscall_64+0xfa/0x3b0 [ 1307.288727][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1307.288746][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.288762][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1307.288779][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.288800][ C0] RIP: 0033:0x7f21cb26ec29 [ 1307.288814][ C0] Code: Unable to access opcode bytes at 0x7f21cb26ebff. [ 1307.288822][ C0] RSP: 002b:00007ffd7c7df1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1307.288838][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f21cb26ec29 [ 1307.288850][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1307.288860][ C0] RBP: 00007ffd7c7df24c R08: 000000037c7df2df R09: 00000000000927c0 [ 1307.288870][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000d7 [ 1307.288879][ C0] R13: 00000000000927c0 R14: 00000000001537b2 R15: 00007ffd7c7df2a0 [ 1307.288897][ C0] [ 1307.298352][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1307.298372][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1307.298414][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1307.298426][ T38] Call Trace: [ 1307.298434][ T38] [ 1307.298443][ T38] dump_stack_lvl+0x99/0x250 [ 1307.298472][ T38] ? __asan_memcpy+0x40/0x70 [ 1307.298492][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1307.298515][ T38] ? __pfx__printk+0x10/0x10 [ 1307.298554][ T38] vpanic+0x281/0x750 [ 1307.298581][ T38] ? __pfx_vpanic+0x10/0x10 [ 1307.298603][ T38] ? preempt_schedule+0xae/0xc0 [ 1307.298628][ T38] ? preempt_schedule_common+0x83/0xd0 [ 1307.298656][ T38] panic+0xb9/0xc0 [ 1307.298679][ T38] ? __pfx_panic+0x10/0x10 [ 1307.298704][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1307.298729][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1307.298751][ T38] watchdog+0xfd2/0xfe0 [ 1307.298777][ T38] ? watchdog+0x1de/0xfe0 [ 1307.298803][ T38] kthread+0x70e/0x8a0 [ 1307.298831][ T38] ? __pfx_watchdog+0x10/0x10 [ 1307.298851][ T38] ? __pfx_kthread+0x10/0x10 [ 1307.298879][ T38] ? __pfx_kthread+0x10/0x10 [ 1307.298905][ T38] ret_from_fork+0x436/0x7d0 [ 1307.298930][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1307.298956][ T38] ? __switch_to_asm+0x39/0x70 [ 1307.298973][ T38] ? __switch_to_asm+0x33/0x70 [ 1307.298989][ T38] ? __pfx_kthread+0x10/0x10 [ 1307.299014][ T38] ret_from_fork_asm+0x1a/0x30 [ 1307.299045][ T38] [ 1307.299309][ T38] Kernel Offset: disabled