last executing test programs: 11.587464403s ago: executing program 2 (id=1412): syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) 10.959661187s ago: executing program 1 (id=1414): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000006000008"], 0x38}}, 0x0) 10.409526621s ago: executing program 1 (id=1416): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050003"], 0x48}}, 0x0) 9.831984137s ago: executing program 2 (id=1418): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x20000800) 9.667480407s ago: executing program 1 (id=1419): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x100, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.661088601s ago: executing program 2 (id=1420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffd}, {0x6, 0x24, 0x1a, 0x0, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x0, 0x2, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xff}}}}}}}]}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000dc0)={0x0, 0x6, 0x4, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000}]}}}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000001000000000000000000000000000000feffffff01000000030000000000000008000000000000008000000000000000000064756d6d79300000000000000000000001000000000030000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0001000000000180c20000000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000047f000001ac14140000000000000033a2452db3cbe0bc64c2ff240000008441554449540000bcb92dfff07fca000000466ef58f5dc8438b000000000000000800"/376]}, 0x1c8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6, 0x10000}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r6, 0x0, 0x2, 0x4}}, 0x20) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x18}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c880) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x60081, 0x100) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xf}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8.902445416s ago: executing program 2 (id=1422): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0, @ANYRESDEC], 0x0) 6.931051312s ago: executing program 0 (id=1428): syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) 6.717922487s ago: executing program 2 (id=1431): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000e80)={0x0, 0x0, 0x1, "b7"}, 0x0, 0x0}) 6.712440969s ago: executing program 3 (id=1432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffd}, {0x6, 0x24, 0x1a, 0x0, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x0, 0x2, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xff}}}}}}}]}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000dc0)={0x0, 0x6, 0x4, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000}]}}}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1c8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6, 0x10000}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r6, 0x0, 0x2, 0x4}}, 0x20) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x18}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c880) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x60081, 0x100) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xf}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.298993571s ago: executing program 1 (id=1434): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/68, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000003380)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f00000002c0)={0x1, 0x6}) 5.936525903s ago: executing program 0 (id=1436): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="400100001000330600"/22], 0x140}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 5.79992738s ago: executing program 1 (id=1437): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="0012ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000280)={0x40, 0x18, 0x6, "239227d53c15"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.79440675s ago: executing program 3 (id=1438): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00001000e000030000010001000000000006000008"], 0x38}}, 0x0) 5.558794217s ago: executing program 0 (id=1439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000"]) 5.075662165s ago: executing program 3 (id=1441): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0, @ANYRESDEC], 0x0) 4.544518465s ago: executing program 0 (id=1442): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050003"], 0x48}}, 0x0) 4.314193709s ago: executing program 4 (id=1443): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004800}, 0x20000800) 4.18534615s ago: executing program 0 (id=1444): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x100, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.552200056s ago: executing program 4 (id=1445): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000000)='./file1\x00', 0x14b27e, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 2.71948634s ago: executing program 3 (id=1446): syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) 2.233068723s ago: executing program 4 (id=1447): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/68, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000002c0)={0x1, 0x6}) 1.548237009s ago: executing program 3 (id=1448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffd}, {0x6, 0x24, 0x1a, 0x0, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x0, 0x2, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xff}}}}}}}]}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000dc0)={0x0, 0x6, 0x4, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000}]}}}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1c8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6, 0x10000}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r6, 0x0, 0x2, 0x4}}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x18}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c880) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x60081, 0x100) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xf}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.540186534s ago: executing program 4 (id=1449): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="400100001000330600"/26], 0x140}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 1.203073257s ago: executing program 2 (id=1450): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000200)='./file1\x00', 0x10000, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000001580)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") r0 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) open(&(0x7f0000000040)='./file1\x00', 0xc0842, 0x0) 1.156299816s ago: executing program 0 (id=1451): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000010c0), 0x420000, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000005800)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@atgc}, {@user_xattr}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") unlink(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407e, &(0x7f0000000780)=ANY=[], 0x1, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 906.06452ms ago: executing program 4 (id=1452): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0], 0x48}}, 0x0) 229.344747ms ago: executing program 1 (id=1453): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d00011c85000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000018003480140035006970365f76746930"], 0x38}}, 0x4804) 131.933583ms ago: executing program 3 (id=1454): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003bab900", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050003"], 0x48}}, 0x0) 0s ago: executing program 4 (id=1455): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004800}, 0x20000800) kernel console output (not intermixed with test programs): cted event for opcode 0x1003 [ 253.677941][ T6073] binder: 6069:6073 ioctl c0306201 20000680 returned -14 [ 253.920830][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 254.249951][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 254.371911][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 254.400746][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 256.022241][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.266572][ T51] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 256.323942][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 256.403699][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 256.542059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #241!!! [ 256.813383][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 256.827500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 257.067340][ T5834] usb 2-1: config 0 has no interfaces? [ 257.087127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 257.157844][ T5834] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 257.167701][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.176027][ T5834] usb 2-1: Product: syz [ 257.180416][ T5834] usb 2-1: Manufacturer: syz [ 257.188526][ T5834] usb 2-1: SerialNumber: syz [ 257.453222][ T5834] usb 2-1: config 0 descriptor?? [ 257.495627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 257.801284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 258.181339][ T6110] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 258.824697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 259.034324][ T29] audit: type=1326 audit(1733817846.055:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 259.056635][ T29] audit: type=1326 audit(1733817846.055:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 259.138316][ T29] audit: type=1326 audit(1733817846.135:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 259.229550][ T29] audit: type=1326 audit(1733817846.255:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 259.255914][ T29] audit: type=1326 audit(1733817846.255:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 259.695293][ T51] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 260.157322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 260.361079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 260.463350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 260.770693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 261.360676][ T5841] usb 2-1: USB disconnect, device number 2 [ 263.650738][ T5841] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 263.826472][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 263.890481][ T5841] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 263.899859][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.908491][ T5841] usb 3-1: Product: syz [ 263.912980][ T5841] usb 3-1: Manufacturer: syz [ 263.917803][ T5841] usb 3-1: SerialNumber: syz [ 263.957305][ T5841] usb 3-1: config 0 descriptor?? [ 264.234298][ T5841] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 264.243044][ T5841] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 264.324751][ T5841] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 264.422290][ T5841] usb 3-1: USB disconnect, device number 3 [ 267.897490][ T6260] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 268.894245][ T6275] netlink: 56 bytes leftover after parsing attributes in process `syz.3.121'. [ 269.023029][ T5787] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 269.811243][ T6292] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 269.905461][ T6286] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 271.261651][ T6311] netlink: 56 bytes leftover after parsing attributes in process `syz.4.136'. [ 271.561697][ T5787] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 271.833822][ T6325] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 272.165233][ T6313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 272.172824][ T6313] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 272.204279][ T6313] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.211144][ T6313] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.217481][ T6313] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 272.234999][ T6313] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.247286][ T6313] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 272.255321][ T6313] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 272.942358][ T6330] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 273.623281][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 273.717523][ T6353] netlink: 56 bytes leftover after parsing attributes in process `syz.4.153'. [ 273.793678][ T6359] IPVS: stopping backup sync thread 6325 ... [ 274.243401][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.249710][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 274.322009][ T5787] Bluetooth: hci4: command 0x0c1a tx timeout [ 274.328284][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 274.636644][ T6369] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 275.686081][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 276.071456][ T6388] netlink: 44 bytes leftover after parsing attributes in process `syz.0.167'. [ 276.330512][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 276.404568][ T5787] Bluetooth: hci4: command 0x0c1a tx timeout [ 277.952136][ T6414] ALSA: mixer_oss: invalid OSS volume '' [ 278.493189][ T5787] Bluetooth: hci4: command 0x0c1a tx timeout [ 278.780065][ T6428] netlink: 44 bytes leftover after parsing attributes in process `syz.3.186'. [ 280.509148][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.516071][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.715505][ T6449] ALSA: mixer_oss: invalid OSS volume '' [ 281.792685][ T6460] netlink: 44 bytes leftover after parsing attributes in process `syz.2.200'. [ 282.584937][ T5837] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 282.832130][ T5837] usb 4-1: unable to get BOS descriptor or descriptor too short [ 282.866587][ T5837] usb 4-1: config 1 has an invalid interface number: 43 but max is 1 [ 282.875216][ T5837] usb 4-1: config 1 has no interface number 1 [ 282.884863][ T5837] usb 4-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 282.899964][ T5837] usb 4-1: config 1 interface 0 has no altsetting 0 [ 282.908192][ T5837] usb 4-1: config 1 interface 43 has no altsetting 0 [ 283.180661][ T5837] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 283.190126][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.202522][ T5837] usb 4-1: Product: syz [ 283.207021][ T5837] usb 4-1: Manufacturer: syz [ 283.213241][ T5837] usb 4-1: SerialNumber: syz [ 283.366402][ T6479] process 'syz.1.207' launched './file1' with NULL argv: empty string added [ 283.725899][ T5837] gspca_main: spca501-2.14.0 probing 0000:0000 [ 283.776495][ T5837] gspca_spca501: reg write: error -71 [ 283.782206][ T5837] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 283.789743][ T5837] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 283.886749][ T5837] usb 4-1: USB disconnect, device number 3 [ 284.004075][ T6488] syz.1.213 uses obsolete (PF_INET,SOCK_PACKET) [ 285.135092][ T6497] netlink: 32 bytes leftover after parsing attributes in process `syz.3.216'. [ 288.583433][ T6535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.232'. [ 288.926354][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.233'. [ 289.039919][ T6537] bond1: entered promiscuous mode [ 291.771694][ T6562] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 291.778492][ T6562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.785155][ T6562] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 291.834259][ T6562] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.841323][ T6562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.848042][ T6562] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 293.167022][ T6597] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 293.201464][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 293.940675][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 293.951000][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.957234][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 293.964899][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 294.922119][ T6610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 294.928652][ T6610] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 294.984247][ T6610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 294.991989][ T6610] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 294.998716][ T6610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.005621][ T6610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.161658][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 297.041739][ T5787] Bluetooth: hci4: command 0x0c1a tx timeout [ 297.048017][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 297.054591][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 297.060961][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 297.667107][ T6643] netlink: 48 bytes leftover after parsing attributes in process `syz.4.276'. [ 298.265611][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 298.569092][ T5781] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 299.405835][ T6667] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 299.819411][ T6674] netlink: 48 bytes leftover after parsing attributes in process `syz.4.287'. [ 300.594258][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 301.130772][ T5834] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 301.431977][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 301.460815][ T5834] usb 2-1: no configurations [ 301.465674][ T5834] usb 2-1: can't read configurations, error -22 [ 301.613563][ T5834] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 301.790523][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 301.798291][ T5834] usb 2-1: no configurations [ 301.803492][ T5834] usb 2-1: can't read configurations, error -22 [ 301.811648][ T5834] usb usb2-port1: attempt power cycle [ 302.180565][ T5834] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 302.222883][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 302.263536][ T5834] usb 2-1: no configurations [ 302.268395][ T5834] usb 2-1: can't read configurations, error -22 [ 302.601358][ T5834] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 302.628998][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 302.637491][ T5834] usb 2-1: no configurations [ 302.642817][ T5834] usb 2-1: can't read configurations, error -22 [ 302.741080][ T5834] usb usb2-port1: unable to enumerate USB device [ 302.988020][ T6709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.301'. [ 304.281217][ T5834] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 304.532722][ T5834] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.543413][ T5834] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.603067][ T5834] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.612527][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.621015][ T5834] usb 3-1: Product: syz [ 304.625417][ T5834] usb 3-1: Manufacturer: syz [ 304.630343][ T5834] usb 3-1: SerialNumber: syz [ 304.940619][ T5834] usb 3-1: 0:2 : does not exist [ 305.000088][ T5834] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 305.237693][ T5834] usb 3-1: USB disconnect, device number 4 [ 305.372906][ T6740] netlink: 48 bytes leftover after parsing attributes in process `syz.0.314'. [ 305.539065][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.292001][ T6748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.520776][ T5834] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 306.701559][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 306.725634][ T5834] usb 3-1: no configurations [ 306.730714][ T5834] usb 3-1: can't read configurations, error -22 [ 306.910886][ T5834] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 307.140855][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 307.244818][ T5834] usb 3-1: no configurations [ 307.249693][ T5834] usb 3-1: can't read configurations, error -22 [ 307.341106][ T5834] usb usb3-port1: attempt power cycle [ 307.760868][ T5834] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 307.823240][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 307.849702][ T5834] usb 3-1: no configurations [ 307.854831][ T5834] usb 3-1: can't read configurations, error -22 [ 308.041606][ T5834] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 308.114740][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 308.125038][ T5834] usb 3-1: no configurations [ 308.129879][ T5834] usb 3-1: can't read configurations, error -22 [ 308.157870][ T5834] usb usb3-port1: unable to enumerate USB device [ 308.504752][ T6772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.327'. [ 309.341082][ T5834] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 309.532781][ T5834] usb 2-1: device descriptor read/64, error -71 [ 309.821821][ T5834] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 309.850012][ T6783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.990528][ T5834] usb 2-1: device descriptor read/64, error -71 [ 310.187364][ T5834] usb usb2-port1: attempt power cycle [ 310.533131][ T5834] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 310.593671][ T5834] usb 2-1: device descriptor read/8, error -71 [ 310.850793][ T5834] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 310.911533][ T5834] usb 2-1: device descriptor read/8, error -71 [ 311.024148][ T5834] usb usb2-port1: unable to enumerate USB device [ 311.131937][ T6798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.339'. [ 311.900713][ T5841] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 312.089192][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 312.142157][ T5841] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.152892][ T5841] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.215908][ T5841] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 312.225546][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.233955][ T5841] usb 5-1: Product: syz [ 312.238357][ T5841] usb 5-1: Manufacturer: syz [ 312.243385][ T5841] usb 5-1: SerialNumber: syz [ 312.342546][ T5841] r8152-cfgselector 5-1: Unknown version 0x0000 [ 312.349208][ T5841] r8152-cfgselector 5-1: config 0 descriptor?? [ 313.089546][ T6811] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 314.152897][ T6821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.271998][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.352'. [ 314.892761][ T5834] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 315.509555][ T6838] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 316.112507][ T6850] netlink: 40 bytes leftover after parsing attributes in process `syz.4.363'. [ 316.132537][ T25] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 316.461338][ T25] usb 3-1: device descriptor read/64, error -71 [ 316.690603][ T5841] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 316.786510][ T25] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 316.861213][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 316.896427][ T5841] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.907244][ T5841] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.953728][ T5841] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 316.963293][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.971823][ T5841] usb 5-1: Product: syz [ 316.976216][ T5841] usb 5-1: Manufacturer: syz [ 316.981188][ T5841] usb 5-1: SerialNumber: syz [ 317.061460][ T25] usb 3-1: device descriptor read/64, error -71 [ 317.132030][ T5841] r8152-cfgselector 5-1: Unknown version 0x0000 [ 317.138579][ T5841] r8152-cfgselector 5-1: config 0 descriptor?? [ 317.312768][ T25] usb usb3-port1: attempt power cycle [ 318.020647][ T25] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 318.086270][ T25] usb 3-1: device descriptor read/8, error -71 [ 318.331031][ T25] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 318.585321][ T25] usb 3-1: device not accepting address 12, error -71 [ 318.607433][ T25] usb usb3-port1: unable to enumerate USB device [ 318.776447][ T6876] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 319.122781][ T6878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.376'. [ 319.695736][ T5841] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 319.926586][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 319.934446][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 319.942663][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 319.950472][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 319.962145][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 319.971096][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 319.978933][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 319.986763][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 319.994642][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.002469][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.010191][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.017992][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.025923][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.034597][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.042467][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.050162][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.061848][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.069549][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.078577][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.086492][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.094316][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.102130][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.109857][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.117685][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.125513][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.133827][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.141655][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.149340][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.157160][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.174372][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.183313][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.191174][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.198856][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.206700][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.214494][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.222296][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.230030][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.237910][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.245784][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.253551][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.265479][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.274358][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.282184][ T5837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 320.689867][ T5837] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 322.440887][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 322.550628][ T5837] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 322.702399][ T5837] usb 1-1: device descriptor read/64, error -71 [ 323.951838][ T5837] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 324.197369][ T5837] usb 1-1: device descriptor read/64, error -71 [ 324.312283][ T5837] usb usb1-port1: attempt power cycle [ 324.772989][ T5837] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 324.805588][ T5837] usb 1-1: device descriptor read/8, error -71 [ 325.092402][ T5837] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 325.388512][ T5837] usb 1-1: device descriptor read/8, error -71 [ 325.518332][ T5837] usb usb1-port1: unable to enumerate USB device [ 328.191212][ T5837] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 328.365258][ T5837] usb 3-1: device descriptor read/64, error -71 [ 328.691534][ T5837] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 328.842777][ T5837] usb 3-1: device descriptor read/64, error -71 [ 328.953314][ T5837] usb usb3-port1: attempt power cycle [ 329.330704][ T5837] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 329.399456][ T5837] usb 3-1: device descriptor read/8, error -71 [ 329.650547][ T5837] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 329.720341][ T5837] usb 3-1: device descriptor read/8, error -71 [ 329.878990][ T5837] usb usb3-port1: unable to enumerate USB device [ 330.149575][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 331.390770][ T5834] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 331.584833][ T5834] usb 1-1: device descriptor read/64, error -71 [ 331.861684][ T5834] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 332.021906][ T5834] usb 1-1: device descriptor read/64, error -71 [ 332.135812][ T5834] usb usb1-port1: attempt power cycle [ 332.567170][ T5834] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 332.644770][ T5834] usb 1-1: device descriptor read/8, error -71 [ 332.940478][ T5834] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 332.968818][ T5834] usb 1-1: device descriptor read/8, error -71 [ 333.083246][ T5834] usb usb1-port1: unable to enumerate USB device [ 335.758918][ T7083] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 336.910524][ T5837] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 337.280733][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 337.289928][ T5837] usb 3-1: no configurations [ 337.294893][ T5837] usb 3-1: can't read configurations, error -22 [ 337.445304][ T5837] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 337.638564][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 337.685504][ T5837] usb 3-1: no configurations [ 337.690462][ T5837] usb 3-1: can't read configurations, error -22 [ 337.780628][ T5837] usb usb3-port1: attempt power cycle [ 338.210820][ T5837] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 338.242236][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 338.274144][ T5837] usb 3-1: no configurations [ 338.279051][ T5837] usb 3-1: can't read configurations, error -22 [ 338.481208][ T5837] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 338.922770][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 338.970019][ T5837] usb 3-1: no configurations [ 338.975213][ T5837] usb 3-1: can't read configurations, error -22 [ 338.991189][ T5837] usb usb3-port1: unable to enumerate USB device [ 339.689673][ T7123] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 341.091312][ T29] audit: type=1326 audit(1733817928.095:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 341.113704][ T29] audit: type=1326 audit(1733817928.095:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 341.136034][ T29] audit: type=1326 audit(1733817928.115:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 341.162072][ T29] audit: type=1326 audit(1733817928.115:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 341.311197][ T7141] mmap: syz.1.483 (7141) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 341.963337][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.973999][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.194377][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 342.845480][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 343.290802][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 343.361677][ T25] usb 1-1: no configurations [ 343.366700][ T25] usb 1-1: can't read configurations, error -22 [ 343.527105][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 343.690743][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 343.698891][ T25] usb 1-1: no configurations [ 343.703861][ T25] usb 1-1: can't read configurations, error -22 [ 343.717634][ T25] usb usb1-port1: attempt power cycle [ 344.160729][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 344.193641][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 344.202246][ T25] usb 1-1: no configurations [ 344.207074][ T25] usb 1-1: can't read configurations, error -22 [ 344.245831][ T7170] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 344.400902][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 344.445917][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 344.474158][ T25] usb 1-1: no configurations [ 344.479096][ T25] usb 1-1: can't read configurations, error -22 [ 344.520853][ T25] usb usb1-port1: unable to enumerate USB device [ 344.604749][ T7180] netlink: 56 bytes leftover after parsing attributes in process `syz.3.498'. [ 344.907151][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.500'. [ 346.702157][ T7209] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 347.622359][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 348.230540][ T5101] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 348.391147][ T5101] usb 1-1: Using ep0 maxpacket: 32 [ 348.420811][ T5101] usb 1-1: no configurations [ 348.431874][ T5101] usb 1-1: can't read configurations, error -22 [ 348.644632][ T5101] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 348.852894][ T5101] usb 1-1: Using ep0 maxpacket: 32 [ 348.883742][ T5101] usb 1-1: no configurations [ 348.888601][ T5101] usb 1-1: can't read configurations, error -22 [ 348.966551][ T5101] usb usb1-port1: attempt power cycle [ 349.360942][ T5101] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 349.411796][ T5101] usb 1-1: Using ep0 maxpacket: 32 [ 349.435742][ T5101] usb 1-1: no configurations [ 349.440860][ T5101] usb 1-1: can't read configurations, error -22 [ 349.620715][ T5101] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 349.677263][ T5101] usb 1-1: Using ep0 maxpacket: 32 [ 349.691830][ T5101] usb 1-1: no configurations [ 349.696830][ T5101] usb 1-1: can't read configurations, error -22 [ 349.737052][ T5101] usb usb1-port1: unable to enumerate USB device [ 350.257821][ T7247] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 350.501532][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 351.008891][ T7257] vlan2: entered promiscuous mode [ 351.014307][ T7257] vlan2: entered allmulticast mode [ 351.859553][ T7268] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 352.541127][ T7268] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 353.572596][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 353.753240][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 353.770674][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.781377][ T8] usb 5-1: config 0 has no interfaces? [ 353.799690][ T8] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 353.809965][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.818377][ T8] usb 5-1: Product: syz [ 353.822889][ T8] usb 5-1: Manufacturer: syz [ 353.827719][ T8] usb 5-1: SerialNumber: syz [ 353.884254][ T8] usb 5-1: config 0 descriptor?? [ 354.486441][ T7301] vlan2: entered promiscuous mode [ 354.491865][ T7301] vlan2: entered allmulticast mode [ 355.131342][ T7308] netlink: 'syz.3.548': attribute type 1 has an invalid length. [ 355.383561][ T7316] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 356.061234][ T7327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 356.067964][ T7327] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 356.096375][ T7327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.107018][ T7327] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 356.148586][ T7327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.155510][ T7327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.162967][ T7327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 357.320064][ T5837] usb 5-1: USB disconnect, device number 4 [ 358.000778][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 358.188720][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.242426][ T5781] Bluetooth: hci4: command 0x0c1a tx timeout [ 358.248734][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 358.261061][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.743431][ T7355] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 360.013676][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 360.081273][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 360.240731][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 360.241681][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 360.297526][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.311142][ T25] usb 2-1: config 0 has no interfaces? [ 360.354580][ T25] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 360.364124][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.372568][ T25] usb 2-1: Product: syz [ 360.376966][ T25] usb 2-1: Manufacturer: syz [ 360.382435][ T25] usb 2-1: SerialNumber: syz [ 360.453768][ T25] usb 2-1: config 0 descriptor?? [ 362.462187][ T7410] netlink: 112 bytes leftover after parsing attributes in process `syz.4.579'. [ 362.561781][ T7409] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 363.218370][ T7419] IPv6: NLM_F_REPLACE set, but no existing node found! [ 363.351334][ T5837] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 363.544284][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 363.571986][ T5837] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 363.585230][ T5837] usb 5-1: config 0 has no interface number 0 [ 363.674589][ T5837] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 363.692623][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.702646][ T5837] usb 5-1: Product: syz [ 363.707052][ T5837] usb 5-1: Manufacturer: syz [ 363.711991][ T5837] usb 5-1: SerialNumber: syz [ 363.739407][ T8] usb 2-1: USB disconnect, device number 11 [ 363.862585][ T5837] usb 5-1: config 0 descriptor?? [ 363.908683][ T5837] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 364.438209][ T5837] gspca_spca1528: reg_w err -110 [ 364.462470][ T5837] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 364.777330][ T5834] usb 5-1: USB disconnect, device number 5 [ 365.827352][ T7446] netlink: 56 bytes leftover after parsing attributes in process `syz.4.593'. [ 365.993747][ T7450] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 366.780533][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 366.820750][ T5834] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 366.949089][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.963706][ T25] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 366.974193][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.071828][ T25] usb 4-1: config 0 descriptor?? [ 367.130753][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 367.146254][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.156998][ T5834] usb 5-1: config 0 has no interfaces? [ 367.190620][ T5834] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 367.200386][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.208642][ T5834] usb 5-1: Product: syz [ 367.213281][ T5834] usb 5-1: Manufacturer: syz [ 367.218279][ T5834] usb 5-1: SerialNumber: syz [ 367.258310][ T5834] usb 5-1: config 0 descriptor?? [ 367.591591][ T25] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 367.646634][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input5 [ 368.023828][ T25] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 368.521488][ T25] usb 4-1: USB disconnect, device number 4 [ 370.614674][ T7496] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 371.138176][ T25] usb 5-1: USB disconnect, device number 6 [ 371.363539][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 371.606228][ T7496] bond3: (slave veth11): Enslaving as a backup interface with a down link [ 372.457370][ T7518] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 373.690527][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 373.852877][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 373.883387][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.894222][ T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.946959][ T25] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 373.956940][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.965503][ T25] usb 1-1: Product: syz [ 373.969904][ T25] usb 1-1: Manufacturer: syz [ 373.974855][ T25] usb 1-1: SerialNumber: syz [ 374.119213][ T25] usb 1-1: config 0 descriptor?? [ 374.590041][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 375.000581][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 375.706050][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 375.853347][ T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 375.863074][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.875196][ T25] usb 4-1: Product: syz [ 375.879601][ T25] usb 4-1: Manufacturer: syz [ 375.885789][ T25] usb 4-1: SerialNumber: syz [ 375.940778][ T25] r8152-cfgselector 4-1: Unknown version 0x0000 [ 375.947318][ T25] r8152-cfgselector 4-1: config 0 descriptor?? [ 377.348118][ T8] usb 1-1: USB disconnect, device number 19 [ 378.012652][ T25] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 379.660592][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 379.944515][ T25] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 379.954504][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.979975][ T25] usb 1-1: config 0 descriptor?? [ 380.028719][ T25] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 380.190581][ T5834] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 380.231156][ T25] gspca_sunplus: reg_w_riv err -71 [ 380.236773][ T25] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 380.322635][ T25] usb 1-1: USB disconnect, device number 20 [ 380.392384][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 380.430601][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 380.456156][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.466912][ T5834] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.691426][ T5834] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 380.700947][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.709211][ T5834] usb 5-1: Product: syz [ 380.713773][ T5834] usb 5-1: Manufacturer: syz [ 380.718603][ T5834] usb 5-1: SerialNumber: syz [ 380.880169][ T5834] usb 5-1: config 0 descriptor?? [ 382.695094][ T7644] netlink: 92 bytes leftover after parsing attributes in process `syz.0.662'. [ 383.715632][ T5834] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 383.905698][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 383.964472][ T5834] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 383.973143][ T5834] usb 1-1: config 0 has no interface number 0 [ 383.979486][ T5834] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 383.991085][ T5834] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 384.055096][ T5834] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 384.068656][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 384.078508][ T5834] usb 1-1: Product: syz [ 384.083063][ T5834] usb 1-1: SerialNumber: syz [ 384.105632][ T25] usb 5-1: USB disconnect, device number 7 [ 384.185449][ T5834] usb 1-1: config 0 descriptor?? [ 384.228338][ T5834] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 384.343906][ T5834] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input6 [ 384.587411][ T5787] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 384.616941][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 384.621688][ T8] usb 1-1: USB disconnect, device number 21 [ 384.624141][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 384.641475][ T8] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 385.992717][ T7684] netlink: 92 bytes leftover after parsing attributes in process `syz.0.676'. [ 386.735867][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 386.982812][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 387.328340][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.343264][ T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.550828][ T25] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 387.560565][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.568965][ T25] usb 5-1: Product: syz [ 387.573687][ T25] usb 5-1: Manufacturer: syz [ 387.578533][ T25] usb 5-1: SerialNumber: syz [ 387.756342][ T25] usb 5-1: config 0 descriptor?? [ 388.377093][ T7721] netlink: 92 bytes leftover after parsing attributes in process `syz.2.691'. [ 388.608111][ T7725] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 388.652957][ T5787] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 388.661741][ T5787] Bluetooth: hci0: Injecting HCI hardware error event [ 388.682308][ T5787] Bluetooth: hci0: hardware error 0x00 [ 389.806247][ T29] audit: type=1326 audit(1733817976.815:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 389.829037][ T29] audit: type=1326 audit(1733817976.825:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 389.851819][ T29] audit: type=1326 audit(1733817976.825:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 389.874139][ T29] audit: type=1326 audit(1733817976.825:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 389.950889][ T5834] usb 5-1: USB disconnect, device number 8 [ 390.060445][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 390.730498][ T5787] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 392.392574][ T7787] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 392.491150][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 392.691320][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 392.883175][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.893857][ T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.918583][ T25] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 392.928304][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.936810][ T25] usb 5-1: Product: syz [ 392.941361][ T25] usb 5-1: Manufacturer: syz [ 392.946207][ T25] usb 5-1: SerialNumber: syz [ 392.958377][ T7795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.716'. [ 392.977216][ T25] usb 5-1: config 0 descriptor?? [ 394.360762][ T7811] fuse: Bad value for 'user_id' [ 394.360860][ T7811] fuse: Bad value for 'user_id' [ 395.536604][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.730'. [ 395.583267][ T8] usb 5-1: USB disconnect, device number 9 [ 395.806557][ T7832] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 395.956442][ T5837] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 396.076356][ T7838] sctp: [Deprecated]: syz.4.732 (pid 7838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.076356][ T7838] Use struct sctp_sack_info instead [ 396.121752][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 396.290555][ T5837] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.298968][ T5837] usb 4-1: config 0 has no interface number 0 [ 396.331033][ T5837] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 396.340589][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.352671][ T5837] usb 4-1: Product: syz [ 396.357090][ T5837] usb 4-1: Manufacturer: syz [ 396.363593][ T5837] usb 4-1: SerialNumber: syz [ 396.402266][ T5837] usb 4-1: config 0 descriptor?? [ 396.548179][ T5837] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 396.943701][ T7845] fuse: Bad value for 'user_id' [ 396.948823][ T7845] fuse: Bad value for 'user_id' [ 397.081371][ T5837] gspca_spca1528: reg_w err -110 [ 397.109111][ T5837] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 397.232041][ T25] usb 4-1: USB disconnect, device number 8 [ 399.509731][ T7872] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 399.524453][ T7879] fuse: Bad value for 'user_id' [ 399.529555][ T7879] fuse: Bad value for 'user_id' [ 400.697515][ T7893] tipc: Invalid UDP bearer configuration [ 400.697732][ T7893] tipc: Enabling of bearer rejected, failed to enable media [ 401.832335][ T7913] fuse: Bad value for 'fd' [ 401.894046][ T7914] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 402.817140][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.769'. [ 402.826551][ T7928] netem: invalid attributes len -13 [ 402.832103][ T7928] netem: change failed [ 403.265772][ T7935] netlink: 92 bytes leftover after parsing attributes in process `syz.3.771'. [ 403.350782][ T7937] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 403.463311][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.469980][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.888879][ T7946] fuse: Bad value for 'fd' [ 404.190892][ T5837] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 404.412993][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.423588][ T5837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.507664][ T5837] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.517230][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.526069][ T5837] usb 2-1: Product: syz [ 404.530568][ T5837] usb 2-1: Manufacturer: syz [ 404.535405][ T5837] usb 2-1: SerialNumber: syz [ 404.781407][ T7957] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 404.908445][ T5837] usb 2-1: 0:2 : does not exist [ 404.914965][ T5837] usb 2-1: unit 6 not found! [ 405.042294][ T5837] usb 2-1: USB disconnect, device number 12 [ 405.564740][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 405.590795][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.780591][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 405.843934][ T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 405.852719][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.863061][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.876942][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.888465][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.902014][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 405.911650][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.342946][ T7973] netlink: 92 bytes leftover after parsing attributes in process `syz.2.790'. [ 406.430783][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 406.436633][ T25] usbtmc 1-1:16.0: can't read capabilities [ 406.782107][ T7978] fuse: Bad value for 'fd' [ 408.038044][ T7994] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 408.378189][ T29] audit: type=1326 audit(1733817995.405:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 408.414624][ T5837] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 408.426486][ T29] audit: type=1326 audit(1733817995.435:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 408.452453][ T29] audit: type=1326 audit(1733817995.435:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 408.475798][ T29] audit: type=1326 audit(1733817995.435:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 408.505338][ T29] audit: type=1326 audit(1733817995.435:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 408.523878][ T25] usb 1-1: USB disconnect, device number 22 [ 408.672156][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.682726][ T5837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.730087][ T5837] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.743499][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.753131][ T5837] usb 2-1: Product: syz [ 408.757691][ T5837] usb 2-1: Manufacturer: syz [ 408.762652][ T5837] usb 2-1: SerialNumber: syz [ 409.215190][ T8004] fuse: Bad value for 'fd' [ 409.264132][ T5837] usb 2-1: 0:2 : does not exist [ 409.269318][ T5837] usb 2-1: unit 6 not found! [ 409.354172][ T5837] usb 2-1: USB disconnect, device number 13 [ 409.655645][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.676692][ T8013] netlink: 92 bytes leftover after parsing attributes in process `syz.4.804'. [ 409.997420][ T8015] vlan2: entered promiscuous mode [ 410.005104][ T8015] ip6gretap0: entered promiscuous mode [ 410.011949][ T8015] vlan2: entered allmulticast mode [ 410.017295][ T8015] ip6gretap0: entered allmulticast mode [ 410.060496][ T8015] ip6gretap0: left allmulticast mode [ 410.073118][ T8015] ip6gretap0: left promiscuous mode [ 411.317353][ T8039] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 411.355623][ T8043] fuse: Bad value for 'fd' [ 412.100289][ T8055] netlink: 92 bytes leftover after parsing attributes in process `syz.1.820'. [ 412.511379][ T8062] vlan2: entered promiscuous mode [ 412.516663][ T8062] ip6gretap0: entered promiscuous mode [ 412.523176][ T8062] vlan2: entered allmulticast mode [ 412.533416][ T8062] ip6gretap0: entered allmulticast mode [ 412.697312][ T8062] ip6gretap0: left allmulticast mode [ 412.703104][ T8062] ip6gretap0: left promiscuous mode [ 412.790634][ T25] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 412.965029][ T8070] fuse: Bad value for 'fd' [ 413.054602][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.065678][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.144662][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.154680][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.163182][ T25] usb 3-1: Product: syz [ 413.167587][ T25] usb 3-1: Manufacturer: syz [ 413.172689][ T25] usb 3-1: SerialNumber: syz [ 413.429342][ T25] usb 3-1: 0:2 : does not exist [ 413.435949][ T25] usb 3-1: unit 6 not found! [ 413.547152][ T25] usb 3-1: USB disconnect, device number 21 [ 413.832949][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.978527][ T8079] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 414.116509][ T8083] netlink: 92 bytes leftover after parsing attributes in process `syz.1.834'. [ 415.732727][ T8102] fuse: Invalid rootmode [ 416.307909][ T8114] netlink: 92 bytes leftover after parsing attributes in process `syz.2.846'. [ 417.351714][ T8128] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 418.491716][ T8147] netlink: 92 bytes leftover after parsing attributes in process `syz.3.861'. [ 419.281221][ T29] audit: type=1326 audit(1733818006.255:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.4.862" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x0 [ 420.891635][ T8176] netlink: 92 bytes leftover after parsing attributes in process `syz.0.875'. [ 422.020762][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 422.340637][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 422.378650][ T8] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.390076][ T8] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.400817][ T8] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 422.414028][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.421059][ T8] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 422.430558][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.601736][ T8] usb 5-1: config 0 descriptor?? [ 422.926614][ T8209] netlink: 92 bytes leftover after parsing attributes in process `syz.3.890'. [ 423.198958][ T5101] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 423.402802][ T8] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.0003/input/input7 [ 423.458199][ T5101] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.468848][ T5101] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.521403][ T8] kye 0003:0458:5010.0003: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 423.565895][ T5101] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.575445][ T5101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.588350][ T5101] usb 3-1: Product: syz [ 423.588463][ T5101] usb 3-1: Manufacturer: syz [ 423.588571][ T5101] usb 3-1: SerialNumber: syz [ 423.674801][ T8] usb 5-1: USB disconnect, device number 10 [ 423.835357][ T5101] usb 3-1: 0:2 : does not exist [ 423.979889][ T5101] usb 3-1: USB disconnect, device number 22 [ 424.858788][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.369701][ T8238] netlink: 92 bytes leftover after parsing attributes in process `syz.1.903'. [ 425.671442][ T1539] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 426.186068][ T8249] vlan2: entered promiscuous mode [ 426.191532][ T8249] ip6gretap0: entered promiscuous mode [ 426.197853][ T8249] vlan2: entered allmulticast mode [ 426.203659][ T8249] ip6gretap0: entered allmulticast mode [ 426.272707][ T8249] ip6gretap0: left allmulticast mode [ 426.278387][ T8249] ip6gretap0: left promiscuous mode [ 427.609718][ T8265] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 427.733601][ T8268] netlink: 92 bytes leftover after parsing attributes in process `syz.1.914'. [ 429.647908][ T8299] netlink: 92 bytes leftover after parsing attributes in process `syz.0.926'. [ 430.359782][ T8308] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 431.711798][ T8330] netlink: 92 bytes leftover after parsing attributes in process `syz.1.940'. [ 433.389891][ T8355] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 433.735019][ T8361] netlink: 92 bytes leftover after parsing attributes in process `syz.0.954'. [ 434.298757][ T1539] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 [ 435.086890][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.961'. [ 435.621189][ T8383] netlink: 'syz.4.966': attribute type 1 has an invalid length. [ 436.211452][ T8394] netlink: 56 bytes leftover after parsing attributes in process `syz.2.967'. [ 436.441922][ T8398] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 436.461455][ T5101] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 436.790034][ T5101] usb 2-1: Using ep0 maxpacket: 32 [ 436.888236][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.974'. [ 437.023194][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.973'. [ 437.033047][ T5101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.044472][ T5101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.048827][ T8407] gretap0: entered promiscuous mode [ 437.054550][ T5101] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 437.069319][ T5101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.106981][ T5101] usb 2-1: config 0 descriptor?? [ 437.127038][ T5101] hub 2-1:0.0: USB hub found [ 437.143483][ T8407] gretap0: left promiscuous mode [ 437.363048][ T5101] hub 2-1:0.0: 1 port detected [ 438.131848][ T8418] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 438.444764][ T5101] hub 2-1:0.0: activate --> -90 [ 438.537066][ T5101] usb 2-1-port1: config error [ 438.748005][ T5101] usb 2-1: Failed to suspend device, error -71 [ 438.751234][ T1539] usb 2-1: USB disconnect, device number 14 [ 439.192021][ T8429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.985'. [ 439.213187][ T8428] netlink: 56 bytes leftover after parsing attributes in process `syz.0.982'. [ 439.413535][ T8431] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 441.272044][ T8457] netlink: 'syz.3.993': attribute type 1 has an invalid length. [ 441.467958][ T8466] netlink: 36 bytes leftover after parsing attributes in process `syz.4.999'. [ 441.494181][ T8465] netlink: 56 bytes leftover after parsing attributes in process `syz.1.998'. [ 442.313494][ T8479] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 442.642656][ T8484] overlayfs: missing 'lowerdir' [ 442.900425][ T8488] tipc: Enabling of bearer rejected, failed to enable media [ 443.712259][ T5101] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 443.717229][ T8498] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1012'. [ 443.800556][ T8503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1013'. [ 443.868191][ T5101] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 443.877972][ T5101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.905583][ T5101] usb 4-1: config 0 descriptor?? [ 443.945876][ T5101] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 444.471331][ T5101] gspca_sunplus: reg_w_riv err -110 [ 444.481501][ T5101] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 444.771026][ T8514] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 444.962489][ T5101] usb 4-1: USB disconnect, device number 9 [ 445.003672][ T8517] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 445.347509][ T8527] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 446.183884][ T8539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1025'. [ 446.308974][ T8537] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1024'. [ 447.311502][ T8556] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 448.500766][ T5101] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 448.525837][ T8575] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1040'. [ 448.643116][ T8576] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 448.689365][ T5101] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 448.698897][ T5101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.755849][ T5101] usb 2-1: config 0 descriptor?? [ 448.787176][ T5101] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 448.977459][ T5101] gspca_sunplus: reg_w_riv err -71 [ 448.988594][ T5101] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 449.040571][ T5101] usb 2-1: USB disconnect, device number 15 [ 449.324550][ T8581] vlan2: entered promiscuous mode [ 449.329852][ T8581] ip6gretap0: entered promiscuous mode [ 449.336329][ T8581] vlan2: entered allmulticast mode [ 449.341800][ T8581] ip6gretap0: entered allmulticast mode [ 449.430445][ T8581] ip6gretap0: left allmulticast mode [ 449.436217][ T8581] ip6gretap0: left promiscuous mode [ 450.389520][ T8599] netlink: 'syz.2.1050': attribute type 1 has an invalid length. [ 451.112700][ T8610] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1053'. [ 451.725050][ T8612] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 452.010582][ T1539] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 452.040974][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 452.047178][ T8622] vlan2: entered promiscuous mode [ 452.058981][ T8622] ip6gretap0: entered promiscuous mode [ 452.066788][ T8622] vlan2: entered allmulticast mode [ 452.072346][ T8622] ip6gretap0: entered allmulticast mode [ 452.105882][ T8622] ip6gretap0: left allmulticast mode [ 452.111839][ T8622] ip6gretap0: left promiscuous mode [ 452.191534][ T1539] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 452.201239][ T1539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.212623][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 452.228008][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 452.239865][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 452.251096][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.264564][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.273126][ T1539] usb 3-1: config 0 descriptor?? [ 452.278968][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.292470][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.349167][ T1539] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 452.498919][ T1539] gspca_sunplus: reg_w_riv err -71 [ 452.504721][ T1539] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 452.631941][ T1539] usb 3-1: USB disconnect, device number 23 [ 452.709995][ T8] usb 4-1: GET_CAPABILITIES returned 2f [ 452.716130][ T8] usbtmc 4-1:16.0: can't read capabilities [ 452.891196][ T1539] usb 4-1: USB disconnect, device number 10 [ 453.031997][ T8630] syz_tun: entered promiscuous mode [ 453.065310][ T8630] batadv_slave_1: entered promiscuous mode [ 453.094765][ T8630] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 453.107490][ T8630] Cannot create hsr debugfs directory [ 453.601266][ T8635] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 454.032345][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 454.072055][ T8650] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1067'. [ 454.341329][ T8653] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1068'. [ 454.515741][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.529768][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.541008][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.554284][ T8] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 454.575776][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.625700][ T8] usb 3-1: config 0 descriptor?? [ 455.109865][ T8657] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 455.161478][ T8] hid-alps 0003:044E:120B.0006: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.2-1/input0 [ 455.312102][ T8] usb 3-1: USB disconnect, device number 24 [ 455.677239][ T8666] vlan2: entered promiscuous mode [ 455.682825][ T8666] ip6gretap0: entered promiscuous mode [ 455.689143][ T8666] vlan2: entered allmulticast mode [ 455.694672][ T8666] ip6gretap0: entered allmulticast mode [ 455.724440][ T8666] ip6gretap0: left allmulticast mode [ 455.730389][ T8666] ip6gretap0: left promiscuous mode [ 456.190929][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 456.399749][ T8] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 456.409371][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.452769][ T8] usb 1-1: config 0 descriptor?? [ 456.476637][ T8677] netlink: 'syz.1.1078': attribute type 1 has an invalid length. [ 456.496532][ T8] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 456.510567][ T5834] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 456.681103][ T8] gspca_sunplus: reg_w_riv err -71 [ 456.686719][ T8] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 456.696279][ T5834] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.707036][ T5834] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.767991][ T8] usb 1-1: USB disconnect, device number 23 [ 456.815322][ T5834] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 456.825585][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.834454][ T5834] usb 3-1: Product: syz [ 456.838854][ T5834] usb 3-1: Manufacturer: syz [ 456.843932][ T5834] usb 3-1: SerialNumber: syz [ 457.153360][ T5834] usb 3-1: 0:2 : does not exist [ 457.155631][ T8683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1081'. [ 457.279936][ T5834] usb 3-1: USB disconnect, device number 25 [ 457.344788][ T5960] udevd[5960]: setting mode of /dev/bus/usb/003/025 to 020664 failed: No such file or directory [ 457.416578][ T5960] udevd[5960]: setting owner of /dev/bus/usb/003/025 to uid=0, gid=0 failed: No such file or directory [ 457.724771][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.357029][ T8696] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 458.755301][ T8712] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 459.850466][ T5834] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 460.016244][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 460.089729][ T5834] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.100838][ T5834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.201026][ T5834] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.210828][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.219096][ T5834] usb 2-1: Product: syz [ 460.223733][ T5834] usb 2-1: Manufacturer: syz [ 460.228589][ T5834] usb 2-1: SerialNumber: syz [ 460.287057][ T8] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 460.296957][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.356349][ T8] usb 3-1: config 0 descriptor?? [ 460.384464][ T8] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 460.530536][ T5834] usb 2-1: 0:2 : does not exist [ 460.575899][ T8] gspca_sunplus: reg_w_riv err -71 [ 460.581699][ T8] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 460.608220][ T5834] usb 2-1: USB disconnect, device number 16 [ 460.699089][ T8] usb 3-1: USB disconnect, device number 26 [ 460.943506][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.794141][ T8752] netlink: 'syz.2.1107': attribute type 1 has an invalid length. [ 461.923091][ T8754] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 464.862960][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.869627][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.810565][ T5834] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 465.989347][ T5834] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.000797][ T5834] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.092127][ T5834] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.101747][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.110010][ T5834] usb 3-1: Product: syz [ 466.114565][ T5834] usb 3-1: Manufacturer: syz [ 466.119389][ T5834] usb 3-1: SerialNumber: syz [ 466.426605][ T8863] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1121'. [ 466.485119][ T5834] usb 3-1: 0:2 : does not exist [ 466.496261][ T5834] usb 3-1: unit 3 not found! [ 466.552629][ T5834] usb 3-1: USB disconnect, device number 27 [ 466.783057][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.242634][ T8873] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 467.607454][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1127'. [ 467.676441][ T8884] program syz.3.1128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.601443][ T8897] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1134'. [ 469.299785][ T8910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1139'. [ 469.423069][ T8913] fuse: Unknown parameter '0x0000000000000003' [ 469.491237][ T8] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 469.823889][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.834542][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.953650][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.961075][ T8921] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 469.963100][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.983747][ T8] usb 2-1: Product: syz [ 469.988157][ T8] usb 2-1: Manufacturer: syz [ 469.993448][ T8] usb 2-1: SerialNumber: syz [ 470.285366][ T8] usb 2-1: 0:2 : does not exist [ 470.290773][ T8] usb 2-1: unit 3 not found! [ 470.434873][ T8] usb 2-1: USB disconnect, device number 17 [ 470.634208][ T8928] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 470.802451][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.700942][ T8977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1152'. [ 473.222171][ T9005] fuse: Unknown parameter '0x0000000000000003' [ 474.182267][ T9033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1157'. [ 474.811484][ T5834] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 475.023483][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.034772][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.057664][ T5834] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 475.068189][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.114990][ T5834] usb 2-1: config 0 descriptor?? [ 475.549870][ T5834] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 475.557700][ T5834] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 475.608680][ T9047] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 475.637983][ T5834] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0007/input/input8 [ 475.743681][ T5834] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 475.851812][ T5834] usb 2-1: USB disconnect, device number 18 [ 476.511771][ T1539] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 476.684674][ T1539] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.695208][ T1539] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.772199][ T1539] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 476.781832][ T1539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.790106][ T1539] usb 1-1: Product: syz [ 476.794764][ T1539] usb 1-1: Manufacturer: syz [ 476.799598][ T1539] usb 1-1: SerialNumber: syz [ 477.087020][ T1539] usb 1-1: 0:2 : does not exist [ 477.092507][ T1539] usb 1-1: unit 3 not found! [ 477.233890][ T9069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1167'. [ 477.251226][ T1539] usb 1-1: USB disconnect, device number 24 [ 478.588923][ T9128] fuse: Unknown parameter '0x0000000000000003' [ 479.671687][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.173691][ T9156] overlayfs: missing 'lowerdir' [ 481.189166][ T9151] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 482.041515][ T9168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1181'. [ 482.063105][ T9171] fuse: Unknown parameter '0x0000000000000003' [ 484.072939][ T9202] overlayfs: missing 'lowerdir' [ 484.079070][ T9201] netlink: 'syz.3.1193': attribute type 10 has an invalid length. [ 484.334939][ T9205] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 484.683978][ T9216] fuse: Unknown parameter 'fd0x0000000000000003' [ 484.869610][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 486.091131][ T9248] binder: 9227:9248 ioctl c0306201 20000680 returned -14 [ 488.769344][ T9297] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 488.940995][ T9301] overlayfs: missing 'lowerdir' [ 489.379478][ T9307] fuse: Unknown parameter 'fd0x0000000000000003' [ 489.409587][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 489.878290][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 490.058822][ T9313] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 490.110508][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 490.141612][ T25] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 490.154155][ T25] usb 1-1: config 0 has no interface number 0 [ 490.162089][ T25] usb 1-1: config 0 interface 107 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 16 [ 490.172549][ T25] usb 1-1: config 0 interface 107 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 490.182899][ T25] usb 1-1: config 0 interface 107 has no altsetting 0 [ 490.223380][ T25] usb 1-1: New USB device found, idVendor=1618, idProduct=9116, bcdDevice= 8.ea [ 490.233206][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.241675][ T25] usb 1-1: Product: syz [ 490.249882][ T25] usb 1-1: Manufacturer: syz [ 490.256015][ T25] usb 1-1: SerialNumber: syz [ 490.294302][ T25] usb 1-1: config 0 descriptor?? [ 490.302547][ T9309] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 490.310734][ T9309] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 490.600488][ T8] usb 1-1: USB disconnect, device number 25 [ 491.147631][ T9331] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 491.410901][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 491.416808][ T9337] overlayfs: missing 'lowerdir' [ 491.607918][ T8] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 491.617694][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.626547][ T8] usb 2-1: Product: syz [ 491.631110][ T8] usb 2-1: Manufacturer: syz [ 491.635949][ T8] usb 2-1: SerialNumber: syz [ 491.670448][ T8] usb 2-1: config 0 descriptor?? [ 491.802945][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 491.853246][ T8] go7007 2-1:0.0: Sensoray 2250 found [ 491.859157][ T8] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 492.234070][ T9330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.244356][ T9330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.291966][ T8] usb 2-1: USB disconnect, device number 19 [ 492.402804][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 492.577021][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.587570][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 492.598867][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 492.615920][ T25] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 492.626621][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.741750][ T25] usb 5-1: config 0 descriptor?? [ 493.089496][ T9357] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 493.275388][ T25] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 493.335866][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input9 [ 493.508506][ T25] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 493.618120][ T25] usb 5-1: USB disconnect, device number 11 [ 493.860526][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 494.030490][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 494.295080][ T8] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 494.304688][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.313261][ T8] usb 3-1: Product: syz [ 494.317656][ T8] usb 3-1: Manufacturer: syz [ 494.322667][ T8] usb 3-1: SerialNumber: syz [ 494.350927][ T8] usb 3-1: config 0 descriptor?? [ 494.397142][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 494.616706][ T9371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1236'. [ 495.890685][ T5101] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 496.101612][ T5101] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 496.110640][ T5101] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 496.119213][ T5101] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 496.128695][ T5101] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 496.139641][ T5101] usb 1-1: config 0 interface 0 has no altsetting 0 [ 496.214341][ T5101] usb 1-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 496.224202][ T5101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.233073][ T5101] usb 1-1: Product: syz [ 496.237650][ T5101] usb 1-1: Manufacturer: syz [ 496.242893][ T5101] usb 1-1: SerialNumber: syz [ 496.336170][ T5101] usb 1-1: config 0 descriptor?? [ 496.472086][ T9383] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 496.621280][ T25] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 496.767277][ T5101] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 496.776436][ T5101] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 496.788714][ T5101] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 496.797911][ T5101] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 496.810834][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 496.835756][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 496.845504][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.853926][ T25] usb 2-1: Product: syz [ 496.858395][ T25] usb 2-1: Manufacturer: syz [ 496.863339][ T25] usb 2-1: SerialNumber: syz [ 496.873961][ T25] usb 2-1: config 0 descriptor?? [ 496.959119][ T5101] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 496.974881][ T5101] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 496.983757][ T5101] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 497.043070][ T5101] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 497.058506][ T5101] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 497.067439][ T5101] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 497.094979][ T5101] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 497.116105][ T5101] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 497.127358][ T5101] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 497.156918][ T5101] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 497.161833][ T25] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 497.290034][ T5101] usb 1-1: USB disconnect, device number 26 [ 497.311952][ T5101] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 497.382563][ T9397] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 497.543351][ T5101] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 497.634522][ T5101] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 497.695377][ T5101] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 497.709871][ T5101] keyspan 1-1:0.0: device disconnected [ 497.719610][ T8] gspca_stk1135: reg_w 0x352 err -71 [ 497.732234][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 497.738785][ T8] gspca_stk1135: Sensor write failed [ 497.746059][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 497.752696][ T8] gspca_stk1135: Sensor write failed [ 497.758215][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 497.764913][ T8] gspca_stk1135: Sensor read failed [ 497.776360][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 497.783025][ T8] gspca_stk1135: Sensor read failed [ 497.788492][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 497.795468][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 497.802745][ T8] gspca_stk1135: Sensor read failed [ 497.808180][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 497.814812][ T8] gspca_stk1135: Sensor read failed [ 497.820374][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 497.831872][ T8] gspca_stk1135: Sensor write failed [ 497.837406][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 497.847121][ T8] gspca_stk1135: Sensor write failed [ 497.853317][ T8] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 498.087060][ T8] usb 3-1: USB disconnect, device number 28 [ 498.665267][ T1539] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 498.852205][ T1539] usb 1-1: Using ep0 maxpacket: 32 [ 498.894582][ T1539] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 498.931880][ T1539] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 498.941576][ T1539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.953975][ T1539] usb 1-1: Product: syz [ 498.958385][ T1539] usb 1-1: Manufacturer: syz [ 498.964640][ T1539] usb 1-1: SerialNumber: syz [ 498.995199][ T9410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1250'. [ 499.301760][ T1539] usb 1-1: selecting invalid altsetting 1 [ 499.516523][ T1539] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 499.517166][ T1539] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 499.540095][ T5834] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 499.594358][ T1539] usb 1-1: USB disconnect, device number 27 [ 499.741514][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 499.775062][ T5834] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 499.802436][ T5834] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 499.812338][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 499.821169][ T5834] usb 5-1: Product: syz [ 499.825732][ T5834] usb 5-1: Manufacturer: syz [ 499.830932][ T5834] usb 5-1: SerialNumber: syz [ 499.884959][ T5834] usb 5-1: config 0 descriptor?? [ 499.892973][ T9406] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 500.317160][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.327350][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.457969][ T25] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 500.531016][ T25] usb 2-1: USB disconnect, device number 20 [ 501.803979][ T9440] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 501.850950][ T25] usb 5-1: USB disconnect, device number 12 [ 502.143092][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 502.143358][ T9443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1262'. [ 502.307803][ T8] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 502.320684][ T8] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 502.335296][ T8] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 502.348813][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 502.358534][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.374663][ T9437] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 502.441194][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 502.631957][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.647367][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.658865][ T25] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 502.668331][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.824907][ T25] usb 4-1: config 0 descriptor?? [ 503.056234][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.066778][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.512360][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.522310][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.752843][ T25] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 503.786660][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0009/input/input11 [ 503.825485][ T5834] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 503.964118][ T1539] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 503.990864][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 504.019491][ T5834] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 504.028228][ T5834] usb 5-1: config 0 has no interface number 0 [ 504.034988][ T5834] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 504.045207][ T5834] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 504.055547][ T5834] usb 5-1: config 0 interface 41 has no altsetting 0 [ 504.077195][ T25] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 504.107615][ T25] usb 4-1: USB disconnect, device number 11 [ 504.128231][ T5834] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 504.137948][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.146369][ T5834] usb 5-1: Product: syz [ 504.150839][ T5834] usb 5-1: Manufacturer: syz [ 504.155678][ T5834] usb 5-1: SerialNumber: syz [ 504.176333][ T5834] usb 5-1: config 0 descriptor?? [ 504.187156][ T9454] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 504.206711][ T9454] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 504.249902][ T1539] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.262623][ T1539] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.340083][ T1539] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 504.353743][ T1539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.362307][ T1539] usb 1-1: Product: syz [ 504.366868][ T1539] usb 1-1: Manufacturer: syz [ 504.371997][ T1539] usb 1-1: SerialNumber: syz [ 504.443052][ T9454] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 504.552265][ T9454] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 504.603968][ T1539] usb 1-1: 0:2 : does not exist [ 504.609515][ T1539] usb 1-1: unit 6 not found! [ 504.736620][ T1539] usb 1-1: USB disconnect, device number 28 [ 504.983720][ T5834] Error reading MAC address [ 504.998174][ T9454] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 505.011332][ T9454] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 505.170904][ T5101] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 505.205930][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.452281][ T5101] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.462983][ T5101] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.476394][ T5101] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 505.485862][ T5101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.625126][ T5101] usb 2-1: config 0 descriptor?? [ 505.684533][ T5101] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 506.237440][ T9469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.248163][ T9469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.335138][ T9469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.345764][ T9469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.413920][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1274'. [ 506.534799][ T9471] bond2: entered promiscuous mode [ 506.885691][ T8] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 506.897205][ T8] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input10 [ 507.380104][ T8] usb 3-1: USB disconnect, device number 29 [ 507.380498][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 507.495757][ T5834] sr9700 5-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, e2:ef:c6:70:77:83 [ 507.588152][ T9476] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 507.589798][ T5834] usb 5-1: USB disconnect, device number 13 [ 507.661489][ T5834] sr9700 5-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 507.925744][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 508.130724][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 508.349684][ T8] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 508.358366][ T8] usb 3-1: config 0 has no interface number 0 [ 508.380737][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 508.398109][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 508.409847][ T8] usb 3-1: config 0 interface 41 has no altsetting 0 [ 508.558829][ T5834] usb 2-1: USB disconnect, device number 21 [ 508.836334][ T8] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 508.846353][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.854905][ T8] usb 3-1: Product: syz [ 508.859294][ T8] usb 3-1: Manufacturer: syz [ 508.864229][ T8] usb 3-1: SerialNumber: syz [ 509.067163][ T8] usb 3-1: config 0 descriptor?? [ 509.078157][ T9481] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 509.117524][ T9481] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 509.530496][ T5101] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 509.583092][ T9481] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 509.632314][ T9481] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 509.748751][ T5101] usb 2-1: Using ep0 maxpacket: 32 [ 509.773948][ T5101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.785411][ T5101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.795831][ T5101] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 509.808634][ T5101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.911227][ T5101] usb 2-1: config 0 descriptor?? [ 510.091429][ T8] Error reading MAC address [ 510.132684][ T9481] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 510.168773][ T9481] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 510.170916][ T9501] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1284'. [ 510.288941][ T9500] loop4: detected capacity change from 0 to 4096 [ 510.385966][ T9500] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 510.748966][ T5101] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 510.757134][ T5101] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 510.765169][ T5101] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 510.772888][ T5101] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 510.780469][ T5101] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 510.815674][ T5101] koneplus 0003:1E7D:2D51.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 510.852685][ T9506] loop3: detected capacity change from 0 to 764 [ 510.922764][ T5101] koneplus 0003:1E7D:2D51.000A: couldn't init struct koneplus_device [ 510.936565][ T5101] koneplus 0003:1E7D:2D51.000A: couldn't install mouse [ 510.966221][ T5101] koneplus 0003:1E7D:2D51.000A: probe with driver koneplus failed with error -71 [ 510.996539][ T9500] ntfs3(loop4): failed to convert "c46c" to iso8859-13 [ 511.102358][ T5101] usb 2-1: USB disconnect, device number 22 [ 511.835652][ T9510] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 513.022209][ T8] sr9700 3-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, 4e:d5:60:4b:07:a0 [ 513.229309][ T8] usb 3-1: USB disconnect, device number 30 [ 513.237499][ T8] sr9700 3-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet [ 513.472845][ T9524] loop1: detected capacity change from 0 to 4096 [ 513.516360][ T9530] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1296'. [ 514.448177][ T9540] loop3: detected capacity change from 0 to 2048 [ 514.485336][ T9540] ======================================================= [ 514.485336][ T9540] WARNING: The mand mount option has been deprecated and [ 514.485336][ T9540] and is ignored by this kernel. Remove the mand [ 514.485336][ T9540] option from the mount to silence this warning. [ 514.485336][ T9540] ======================================================= [ 514.727712][ T9540] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 514.858894][ T9545] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 514.859232][ T9540] syz.3.1301: attempt to access beyond end of device [ 514.859232][ T9540] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 515.108113][ T9540] syz.3.1301: attempt to access beyond end of device [ 515.108113][ T9540] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 515.211985][ T9540] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 515.220979][ T9540] NILFS (loop3): error -5 reading inode: ino=12 [ 515.282360][ T9548] syz.3.1301: attempt to access beyond end of device [ 515.282360][ T9548] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 515.296500][ T9548] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 515.305449][ T9548] NILFS (loop3): error -5 reading inode: ino=12 [ 515.504450][ T5834] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 515.601313][ T9551] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 515.851369][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 515.862948][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 515.874112][ T5834] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 515.883608][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.943143][ T5834] usb 5-1: config 0 descriptor?? [ 515.956877][ T9544] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 516.038867][ T5834] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 516.054115][ T1539] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 516.247931][ T1539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.263170][ T1539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.274717][ T1539] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 516.284241][ T1539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.348676][ T1539] usb 4-1: config 0 descriptor?? [ 516.544139][ T9557] loop0: detected capacity change from 0 to 4096 [ 516.578434][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.589041][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.628674][ T5125] bcm5974 5-1:0.0: could not read from device [ 516.639345][ T5834] usb 5-1: USB disconnect, device number 14 [ 516.655798][ T5125] bcm5974 5-1:0.0: could not read from device [ 516.828310][ T9557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.861871][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.875554][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.117174][ T1539] usbhid 4-1:0.0: can't add hid device: -71 [ 517.123991][ T1539] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 517.148773][ T1539] usb 4-1: USB disconnect, device number 12 [ 517.410961][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.226952][ T9572] loop3: detected capacity change from 0 to 128 [ 518.336413][ T9573] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1309'. [ 518.362942][ T9572] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 518.429482][ T9572] ext4 filesystem being mounted at /252/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 518.805332][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 519.872705][ T9591] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 520.264770][ T9594] loop3: detected capacity change from 0 to 4096 [ 520.310554][ T9594] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 520.871083][ T9602] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1324'. [ 521.098886][ T29] audit: type=1800 audit(1733818108.095:21): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1320" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 521.856404][ T9585] loop1: detected capacity change from 0 to 32768 [ 521.884198][ T9585] read_mapping_page failed! [ 521.893800][ T9585] jfs_mount: dbMount failed w/rc = -5 [ 521.912489][ T9585] Mount JFS Failure: -5 [ 521.916862][ T9585] jfs_mount failed w/return code = -5 [ 523.354356][ T9612] loop3: detected capacity change from 0 to 40427 [ 523.389324][ T9612] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 523.396739][ T9612] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 523.439129][ T9612] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1fffff [ 523.479934][ T9612] F2FS-fs (loop3): invalid crc value [ 523.508300][ T9612] F2FS-fs (loop3): Found nat_bits in checkpoint [ 523.872023][ T9625] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 523.980283][ T9612] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 523.987829][ T9612] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 524.527327][ T9628] loop4: detected capacity change from 0 to 256 [ 524.536672][ T9628] vfat: Unknown parameter 'un.pi_xlate' [ 524.922403][ T9628] loop4: detected capacity change from 0 to 4096 [ 524.953024][ T5834] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 524.995710][ T9628] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 525.092425][ T9634] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1336'. [ 525.144763][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 525.208421][ T5834] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 525.218267][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.226689][ T5834] usb 2-1: Product: syz [ 525.231246][ T5834] usb 2-1: Manufacturer: syz [ 525.236081][ T5834] usb 2-1: SerialNumber: syz [ 525.363749][ T5834] usb 2-1: config 0 descriptor?? [ 525.641362][ T5834] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 526.296662][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.303533][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.424439][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 527.759741][ T9654] loop0: detected capacity change from 0 to 764 [ 528.299347][ T9656] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 528.908478][ T9652] loop4: detected capacity change from 0 to 32768 [ 529.002205][ T5834] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 529.033075][ T5834] usb 2-1: USB disconnect, device number 23 [ 529.420568][ T1539] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 529.637453][ T1539] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.648067][ T1539] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.728484][ T1539] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.738093][ T1539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.746632][ T1539] usb 4-1: Product: syz [ 529.751121][ T1539] usb 4-1: Manufacturer: syz [ 529.755955][ T1539] usb 4-1: SerialNumber: syz [ 530.653095][ T1539] usb 4-1: 0:2 : does not exist [ 530.683668][ T1539] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 531.017517][ T1539] usb 4-1: USB disconnect, device number 13 [ 531.264097][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.328719][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 531.600541][ T5101] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 532.171207][ T9672] loop2: detected capacity change from 0 to 32768 [ 532.212463][ T5101] usb 4-1: Using ep0 maxpacket: 16 [ 532.282884][ T5101] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 532.291515][ T5101] usb 4-1: config 0 has no interface number 0 [ 532.297963][ T5101] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 532.308250][ T5101] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 532.318616][ T5101] usb 4-1: config 0 interface 41 has no altsetting 0 [ 532.370807][ T5101] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 532.380376][ T5101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.388633][ T5101] usb 4-1: Product: syz [ 532.393254][ T5101] usb 4-1: Manufacturer: syz [ 532.398098][ T5101] usb 4-1: SerialNumber: syz [ 532.413534][ T5101] usb 4-1: config 0 descriptor?? [ 532.425688][ T9683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 532.445251][ T9683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 532.513567][ T9691] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 532.676332][ T9683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 532.694320][ T9683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 533.177601][ T5101] Error reading MAC address [ 533.187375][ T9683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 533.231690][ T9683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 534.930828][ T9697] loop2: detected capacity change from 0 to 64 [ 535.341600][ T29] audit: type=1800 audit(1733818122.315:22): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1364" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 535.390829][ T29] audit: type=1804 audit(1733818122.405:23): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1364" name="/newroot/257/file1/file1" dev="loop2" ino=18 res=1 errno=0 [ 535.416375][ T29] audit: type=1800 audit(1733818122.405:24): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1364" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 535.686370][ T5101] sr9700 4-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, 8e:50:46:ce:be:6d [ 535.838444][ T5101] usb 4-1: USB disconnect, device number 14 [ 535.848660][ T5101] sr9700 4-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 538.721551][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 539.099544][ T1539] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 539.420834][ T5834] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 539.461828][ T1539] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.472653][ T1539] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.498472][ T1539] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.511919][ T1539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.522623][ T1539] usb 4-1: Product: syz [ 539.527037][ T1539] usb 4-1: Manufacturer: syz [ 539.532070][ T1539] usb 4-1: SerialNumber: syz [ 539.630387][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 539.649933][ T5834] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 539.658768][ T5834] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.669165][ T5834] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 539.679457][ T5834] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.693701][ T5834] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.711324][ T5834] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 539.722089][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.778291][ T9703] loop2: detected capacity change from 0 to 32768 [ 539.812650][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 539.830494][ T9703] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1365 (9703) [ 539.846269][ T1539] usb 4-1: 0:2 : does not exist [ 539.876625][ T9703] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 539.887406][ T9703] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 539.919888][ T1539] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 540.026873][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 540.131293][ T5834] usb 1-1: usb_control_msg returned -32 [ 540.138201][ T5834] usbtmc 1-1:16.0: can't read capabilities [ 540.149539][ T1539] usb 4-1: USB disconnect, device number 15 [ 540.169133][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 540.178582][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.187336][ T25] usb 5-1: Product: syz [ 540.191828][ T25] usb 5-1: Manufacturer: syz [ 540.196661][ T25] usb 5-1: SerialNumber: syz [ 540.277038][ T25] usb 5-1: config 0 descriptor?? [ 540.381267][ T9703] BTRFS info (device loop2): rebuilding free space tree [ 540.484969][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.569189][ T25] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 540.706441][ T9703] BTRFS info (device loop2): disabling free space tree [ 540.713949][ T9703] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 540.725770][ T9703] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 540.848102][ T1539] usb 1-1: USB disconnect, device number 29 [ 541.510800][ T5785] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 542.410548][ T5101] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 542.661712][ T5101] usb 1-1: Using ep0 maxpacket: 16 [ 542.744238][ T5101] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 542.752862][ T5101] usb 1-1: config 0 has no interface number 0 [ 542.759210][ T5101] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 542.769558][ T5101] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 542.783058][ T5101] usb 1-1: config 0 interface 41 has no altsetting 0 [ 543.735610][ T5101] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 543.745170][ T5101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.753709][ T5101] usb 1-1: Product: syz [ 543.758106][ T5101] usb 1-1: Manufacturer: syz [ 543.763042][ T5101] usb 1-1: SerialNumber: syz [ 543.860023][ T5101] usb 1-1: config 0 descriptor?? [ 543.879991][ T9743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 543.975549][ T9743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 544.230120][ T9743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 544.251668][ T9743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 544.291007][ T25] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 544.471160][ T25] usb 5-1: USB disconnect, device number 15 [ 544.484767][ T9764] loop3: detected capacity change from 0 to 128 [ 544.701729][ T5101] Error reading MAC address [ 544.712855][ T9743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 544.773001][ T9743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 544.960464][ T5834] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 545.052269][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1387'. [ 545.176228][ T5834] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.187702][ T5834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.294654][ T5834] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.304355][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.312874][ T5834] usb 2-1: Product: syz [ 545.317288][ T5834] usb 2-1: Manufacturer: syz [ 545.322283][ T5834] usb 2-1: SerialNumber: syz [ 545.632529][ T5834] usb 2-1: 0:2 : does not exist [ 545.744639][ T5834] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 545.896277][ T5834] usb 2-1: USB disconnect, device number 24 [ 546.564973][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.025154][ T5101] sr9700 1-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.0-1, CoreChip SR9700 USB Ethernet, 4a:56:d2:39:07:cd [ 547.145120][ T5101] usb 1-1: USB disconnect, device number 30 [ 547.155396][ T5101] sr9700 1-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.0-1, CoreChip SR9700 USB Ethernet [ 547.981726][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 548.028171][ T9793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1399'. [ 548.150744][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 548.188666][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 548.198552][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.211881][ T8] usb 4-1: Product: syz [ 548.216586][ T8] usb 4-1: Manufacturer: syz [ 548.221664][ T8] usb 4-1: SerialNumber: syz [ 548.265033][ T8] usb 4-1: config 0 descriptor?? [ 548.571708][ T8] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 549.010703][ T5101] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 549.283291][ T5101] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.294190][ T5101] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.323676][ T5101] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.336750][ T5101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.347021][ T5101] usb 3-1: Product: syz [ 549.351878][ T5101] usb 3-1: Manufacturer: syz [ 549.356888][ T5101] usb 3-1: SerialNumber: syz [ 549.584317][ T5101] usb 3-1: 0:2 : does not exist [ 549.619189][ T5101] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 549.792144][ T5101] usb 3-1: USB disconnect, device number 31 [ 550.041423][ T5834] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 550.103772][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.274706][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 550.525618][ T5834] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 550.534148][ T5834] usb 5-1: config 0 has no interface number 0 [ 550.540682][ T5834] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 550.550925][ T5834] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 550.570383][ T5834] usb 5-1: config 0 interface 41 has no altsetting 0 [ 550.611452][ T5834] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 550.621320][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.629592][ T5834] usb 5-1: Product: syz [ 550.634220][ T5834] usb 5-1: Manufacturer: syz [ 550.639045][ T5834] usb 5-1: SerialNumber: syz [ 550.652644][ T5834] usb 5-1: config 0 descriptor?? [ 550.666256][ T9813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 550.693452][ T9813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 550.947533][ T9813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 551.009480][ T9813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 551.392513][ T9825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1415'. [ 551.454830][ T5834] Error reading MAC address [ 551.465771][ T9813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 551.481622][ T9813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 551.629184][ T8] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 551.652054][ T8] usb 4-1: USB disconnect, device number 16 [ 552.950683][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 553.211084][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 553.238120][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.249759][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.260640][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 553.269979][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.288682][ T25] usb 2-1: config 0 descriptor?? [ 553.319887][ T25] hub 2-1:0.0: USB hub found [ 553.420502][ T8] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 553.548993][ T25] hub 2-1:0.0: 1 port detected [ 553.620952][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.637354][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.686348][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.696251][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.704653][ T8] usb 3-1: Product: syz [ 553.709050][ T8] usb 3-1: Manufacturer: syz [ 553.714069][ T8] usb 3-1: SerialNumber: syz [ 553.855493][ T5834] sr9700 5-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, 5e:d8:b8:ac:66:0d [ 553.969582][ T5834] usb 5-1: USB disconnect, device number 16 [ 554.011358][ T5834] sr9700 5-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 554.108369][ T8] usb 3-1: 0:2 : does not exist [ 554.177782][ T5942] udevd[5942]: setting mode of /dev/bus/usb/005/016 to 020664 failed: No such file or directory [ 554.196248][ T8] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 554.203552][ T5942] udevd[5942]: setting owner of /dev/bus/usb/005/016 to uid=0, gid=0 failed: No such file or directory [ 554.222620][ T25] hub 2-1:0.0: activate --> -90 [ 554.274137][ T9847] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1425'. [ 554.478239][ T8] usb 3-1: USB disconnect, device number 32 [ 554.601052][ T5101] usb 2-1: USB disconnect, device number 25 [ 554.785450][ T9852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1427'. [ 555.321494][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.365577][ T5781] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 555.684569][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 555.871280][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 556.211846][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 556.221415][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.229688][ T8] usb 3-1: Product: syz [ 556.234328][ T8] usb 3-1: Manufacturer: syz [ 556.239194][ T8] usb 3-1: SerialNumber: syz [ 556.273490][ T8] usb 3-1: config 0 descriptor?? [ 556.526541][ T8] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 556.730557][ T5834] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 556.913497][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 556.973234][ T5834] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 556.981722][ T5834] usb 2-1: config 0 has no interface number 0 [ 556.988245][ T5834] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 556.998664][ T5834] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 557.008989][ T5834] usb 2-1: config 0 interface 41 has no altsetting 0 [ 557.188918][ T5834] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 557.198638][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.207172][ T5834] usb 2-1: Product: syz [ 557.211676][ T5834] usb 2-1: Manufacturer: syz [ 557.221343][ T5834] usb 2-1: SerialNumber: syz [ 557.233815][ T9882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1440'. [ 557.289880][ T5834] usb 2-1: config 0 descriptor?? [ 557.302507][ T9875] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 557.311985][ T9875] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 557.570410][ T5101] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 557.611338][ T9875] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 557.619852][ T9875] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 557.882074][ T5101] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.892724][ T5101] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.050992][ T5101] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.060848][ T5101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.069138][ T5101] usb 4-1: Product: syz [ 558.073719][ T5101] usb 4-1: Manufacturer: syz [ 558.078564][ T5101] usb 4-1: SerialNumber: syz [ 558.292627][ T5834] Error reading MAC address [ 558.299414][ T25] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 558.320732][ T9875] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 558.350650][ T5101] usb 4-1: 0:2 : does not exist [ 558.351333][ T9875] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 558.413026][ T5101] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 558.491621][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 558.522693][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.534307][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.544659][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 558.557948][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.678499][ T5101] usb 4-1: USB disconnect, device number 17 [ 558.715547][ T25] usb 1-1: config 0 descriptor?? [ 558.777299][ T25] hub 1-1:0.0: USB hub found [ 558.964284][ T25] hub 1-1:0.0: 1 port detected [ 558.984835][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.000805][ T9893] loop4: detected capacity change from 0 to 1024 [ 559.006485][ T9893] EXT4-fs: Ignoring removed orlov option [ 559.014499][ T9893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 559.213287][ T9893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.753010][ T25] hub 1-1:0.0: activate --> -90 [ 559.793149][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.001211][ T8] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 560.042290][ T8] usb 3-1: USB disconnect, device number 33 [ 560.071197][ T5101] usb 1-1: USB disconnect, device number 31 [ 560.753335][ T5834] sr9700 2-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, de:9d:80:bc:47:73 [ 560.861529][ T5834] usb 2-1: USB disconnect, device number 26 [ 560.869604][ T5834] sr9700 2-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 561.109538][ T9908] loop2: detected capacity change from 0 to 256 [ 561.206829][ T9908] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 561.324741][ T29] audit: type=1800 audit(1733818148.335:25): pid=9908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1450" name="file1" dev="loop2" ino=1048600 res=0 errno=0 [ 561.453033][ T9908] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 561.461568][ T9908] exFAT-fs (loop2): Filesystem has been set read-only [ 562.018827][ T9912] ===================================================== [ 562.026254][ T9912] BUG: KMSAN: uninit-value in ima_add_template_entry+0x52b/0x880 [ 562.039053][ T9912] ima_add_template_entry+0x52b/0x880 [ 562.046215][ T9912] ima_store_measurement+0x36b/0x8d0 [ 562.051875][ T9912] process_measurement+0x2c13/0x3f30 [ 562.057391][ T9912] ima_file_check+0x8e/0xd0 [ 562.062339][ T9912] security_file_post_open+0xc6/0x540 [ 562.067919][ T9912] path_openat+0x58cc/0x6200 [ 562.073437][ T9912] do_filp_open+0x268/0x600 [ 562.078179][ T9912] do_sys_openat2+0x1bf/0x2f0 [ 562.093623][ T9912] __ia32_compat_sys_open+0x26c/0x2d0 [ 562.099223][ T9912] ia32_sys_call+0x6d2/0x4180 [ 562.104213][ T9912] __do_fast_syscall_32+0xb0/0x110 [ 562.109499][ T9912] do_fast_syscall_32+0x38/0x80 [ 562.114695][ T9912] do_SYSENTER_32+0x1f/0x30 [ 562.119371][ T9912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.127900][ T9912] [ 562.134255][ T9912] [ 562.134255][ T9912] [ 562.145330][ T9912] Uninit was stored to memory at: [ 562.151268][ T9912] sha256_transform_blocks+0x2dbf/0x2e90 [ 562.157126][ T9912] sha256_update+0x2ff/0x340 [ 562.162707][ T9912] crypto_sha256_update+0x37/0x60 [ 562.167949][ T9912] crypto_shash_update+0x79/0xa0 [ 562.173334][ T9912] ima_calc_file_hash+0x1804/0x3c90 [ 562.178776][ T9912] ima_collect_measurement+0x464/0xd20 [ 562.184667][ T9912] process_measurement+0x294a/0x3f30 [ 562.190329][ T9912] ima_file_check+0x8e/0xd0 [ 562.195029][ T9912] security_file_post_open+0xc6/0x540 [ 562.200828][ T9912] path_openat+0x58cc/0x6200 [ 562.205626][ T9912] do_filp_open+0x268/0x600 [ 562.210910][ T9912] do_sys_openat2+0x1bf/0x2f0 [ 562.215790][ T9912] __ia32_compat_sys_open+0x26c/0x2d0 [ 562.221509][ T9912] ia32_sys_call+0x6d2/0x4180 [ 562.226363][ T9912] __do_fast_syscall_32+0xb0/0x110 [ 562.231821][ T9912] do_fast_syscall_32+0x38/0x80 [ 562.240590][ T9912] do_SYSENTER_32+0x1f/0x30 [ 562.245301][ T9912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.254386][ T9912] [ 562.256812][ T9912] Uninit was stored to memory at: [ 562.262595][ T9912] sha256_transform_blocks+0x2dbf/0x2e90 [ 562.268456][ T9912] sha256_update+0x2ff/0x340 [ 562.273446][ T9912] crypto_sha256_update+0x37/0x60 [ 562.278715][ T9912] crypto_shash_update+0x79/0xa0 [ 562.284088][ T9912] ima_calc_file_hash+0x1804/0x3c90 [ 562.289515][ T9912] ima_collect_measurement+0x464/0xd20 [ 562.295359][ T9912] process_measurement+0x294a/0x3f30 [ 562.300974][ T9912] ima_file_check+0x8e/0xd0 [ 562.305664][ T9912] security_file_post_open+0xc6/0x540 [ 562.311406][ T9912] path_openat+0x58cc/0x6200 [ 562.316218][ T9912] do_filp_open+0x268/0x600 [ 562.321070][ T9912] do_sys_openat2+0x1bf/0x2f0 [ 562.325943][ T9912] __ia32_compat_sys_open+0x26c/0x2d0 [ 562.331691][ T9912] ia32_sys_call+0x6d2/0x4180 [ 562.340632][ T9912] __do_fast_syscall_32+0xb0/0x110 [ 562.345931][ T9912] do_fast_syscall_32+0x38/0x80 [ 562.353293][ T9912] do_SYSENTER_32+0x1f/0x30 [ 562.358301][ T9912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.365003][ T9912] [ 562.367425][ T9912] Uninit was stored to memory at: [ 562.372864][ T9912] sha256_transform_blocks+0xf33/0x2e90 [ 562.378631][ T9912] sha256_update+0x2ff/0x340 [ 562.383587][ T9912] crypto_sha256_update+0x37/0x60 [ 562.388842][ T9912] crypto_shash_update+0x79/0xa0 [ 562.394179][ T9912] ima_calc_file_hash+0x1804/0x3c90 [ 562.399611][ T9912] ima_collect_measurement+0x464/0xd20 [ 562.405778][ T9912] process_measurement+0x294a/0x3f30 [ 562.411618][ T9912] ima_file_check+0x8e/0xd0 [ 562.416345][ T9912] security_file_post_open+0xc6/0x540 [ 562.422122][ T9912] path_openat+0x58cc/0x6200 [ 562.426914][ T9912] do_filp_open+0x268/0x600 [ 562.431795][ T9912] do_sys_openat2+0x1bf/0x2f0 [ 562.436665][ T9912] __ia32_compat_sys_open+0x26c/0x2d0 [ 562.447000][ T9912] ia32_sys_call+0x6d2/0x4180 [ 562.453419][ T9912] __do_fast_syscall_32+0xb0/0x110 [ 562.458800][ T9912] do_fast_syscall_32+0x38/0x80 [ 562.463951][ T9912] do_SYSENTER_32+0x1f/0x30 [ 562.468627][ T9912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.475345][ T9912] [ 562.477777][ T9912] Uninit was stored to memory at: [ 562.483197][ T9912] sha256_transform_blocks+0xf7d/0x2e90 [ 562.488961][ T9912] sha256_update+0x2ff/0x340 [ 562.493954][ T9912] crypto_sha256_update+0x37/0x60 [ 562.499217][ T9912] crypto_shash_update+0x79/0xa0 [ 562.504605][ T9912] ima_calc_file_hash+0x1804/0x3c90 [ 562.510010][ T9912] ima_collect_measurement+0x464/0xd20 [ 562.515850][ T9912] process_measurement+0x294a/0x3f30 [ 562.521529][ T9912] ima_file_check+0x8e/0xd0 [ 562.526223][ T9912] security_file_post_open+0xc6/0x540 [ 562.531963][ T9912] path_openat+0x58cc/0x6200 [ 562.536776][ T9912] do_filp_open+0x268/0x600 [ 562.545557][ T9912] do_sys_openat2+0x1bf/0x2f0 [ 562.552589][ T9912] __ia32_compat_sys_open+0x26c/0x2d0 [ 562.558180][ T9912] ia32_sys_call+0x6d2/0x4180 [ 562.563521][ T9912] __do_fast_syscall_32+0xb0/0x110 [ 562.569502][ T9912] do_fast_syscall_32+0x38/0x80 [ 562.574715][ T9912] do_SYSENTER_32+0x1f/0x30 [ 562.579385][ T9912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.586180][ T9912] [ 562.588597][ T9912] Uninit was stored to memory at: [ 562.594031][ T9912] sha256_transform_blocks+0xfb5/0x2e90 [ 562.599784][ T9912] sha256_update+0x2ff/0x340 [ 562.604714][ T9912] crypto_sha256_update+0x37/0x60 [ 562.609958][ T9912] crypto_shash_update+0x79/0xa0 [ 562.615250][ T9912] ima_calc_file_hash+0x1804/0x3c90 [ 562.620907][ T9912] ima_collect_measurement+0x464/0xd20 [ 562.626615][ T9912] process_measurement+0x294a/0x3f30 [ 562.632279][ T9912] ima_file_check+0x8e/0xd0 [ 562.636975][ T9912] security_file_post_open+0xc6/0x540 [ 562.646672][ T9912] path_openat+0x58cc/0x6200 [ 562.653929][ T9912] do_filp_open+0x268/0x600 [ 562.658657][ T9912] do_sys_openat2+0x1bf/0x2f0 [ 562.663685][ T9912] __ia32_compat_sys_open+0x26c/0x2d0 [ 562.669260][ T9912] ia32_sys_call+0x6d2/0x4180 [ 562.674324][ T9912] __do_fast_syscall_32+0xb0/0x110 [ 562.679610][ T9912] do_fast_syscall_32+0x38/0x80 [ 562.684775][ T9912] do_SYSENTER_32+0x1f/0x30 [ 562.689460][ T9912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.696219][ T9912] [ 562.698639][ T9912] Uninit was stored to memory at: [ 562.704050][ T9912] sha256_transform_blocks+0x2c35/0x2e90 [ 562.709901][ T9912] sha256_update+0x2ff/0x340 [ 562.715148][ T9912] crypto_sha256_update+0x37/0x60 [ 562.720555][ T9912] crypto_shash_update+0x79/0xa0 [ 562.725711][ T9912] ima_calc_file_hash+0x1804/0x3c90 [ 562.731273][ T9912] ima_collect_measurement+0x464/0xd20 [ 562.736968][ T9912] process_measurement+0x294a/0x3f30 [ 562.742878][ T9912] ima_file_check+0x8e/0xd0 [ 562.751571][ T9912] security_file_post_open+0xc6/0x540 [ 562.759272][ T9912] path_openat+0x58cc/0x6200 [ 562.764558][ T9912] do_filp_open+0x268/0x600 [ 562.769285][ T9912] do_sys_openat2+0x1bf/0x2f0 [ 562.774322][ T9912] __ia32_compat_sys_open+0x26c/0x2d0 [ 562.779912][ T9912] ia32_sys_call+0x6d2/0x4180 [ 562.784892][ T9912] __do_fast_syscall_32+0xb0/0x110 [ 562.790292][ T9912] do_fast_syscall_32+0x38/0x80 [ 562.795340][ T9912] do_SYSENTER_32+0x1f/0x30 [ 562.800006][ T9912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.806853][ T9912] [ 562.809284][ T9912] Uninit was stored to memory at: [ 562.814780][ T9912] _copy_to_iter+0x1248/0x2b30 [ 562.819729][ T9912] copy_page_to_iter+0x419/0x880 [ 562.824999][ T9912] filemap_read+0xc65/0x1560 [ 562.829784][ T9912] generic_file_read_iter+0x136/0xad0 [ 562.835529][ T9912] __kernel_read+0x726/0xd30 [ 562.840442][ T9912] integrity_kernel_read+0x77/0x90 [ 562.845769][ T9912] ima_calc_file_hash+0x1731/0x3c90 [ 562.854988][ T9912] ima_collect_measurement+0x464/0xd20 [ 562.862901][ T9912] process_measurement+0x294a/0x3f30 [ 562.868819][ T9912] ima_file_check+0x8e/0xd0 [ 562.873704][ T9912] security_file_post_open+0xc6/0x540 [ 562.879282][ T9912] path_openat+0x58cc/0x6200 [ 562.884255][ T9912] do_filp_open+0x268/0x600 [ 562.888968][ T9912] do_sys_openat2+0x1bf/0x2f0 [ 562.893984][ T9912] __ia32_compat_sys_open+0x26c/0x2d0 [ 562.899575][ T9912] ia32_sys_call+0x6d2/0x4180 [ 562.904574][ T9912] __do_fast_syscall_32+0xb0/0x110 [ 562.909877][ T9912] do_fast_syscall_32+0x38/0x80 [ 562.915070][ T9912] do_SYSENTER_32+0x1f/0x30 [ 562.919733][ T9912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.926939][ T9912] [ 562.929376][ T9912] Uninit was created at: [ 562.933980][ T9912] __alloc_pages_noprof+0x9a7/0xe00 [ 562.939378][ T9912] alloc_pages_mpol_noprof+0x299/0x990 [ 562.945172][ T9912] folio_alloc_noprof+0x1db/0x310 [ 562.954196][ T9912] filemap_alloc_folio_noprof+0xa6/0x440 [ 562.960037][ T9912] __filemap_get_folio+0xac4/0x1550 [ 562.967913][ T9912] block_write_begin+0x6e/0x2b0 [ 562.973172][ T9912] exfat_write_begin+0xfb/0x400 [ 562.978220][ T9912] exfat_file_write_iter+0x771/0x12a0 [ 562.983927][ T9912] do_iter_readv_writev+0x88a/0xa30 [ 562.989363][ T9912] vfs_writev+0x56a/0x14f0 [ 562.994162][ T9912] __se_compat_sys_pwritev2+0x282/0x480 [ 562.999908][ T9912] __ia32_compat_sys_pwritev2+0x11d/0x1a0 [ 563.005983][ T9912] ia32_sys_call+0x3587/0x4180 [ 563.011138][ T9912] __do_fast_syscall_32+0xb0/0x110 [ 563.016420][ T9912] do_fast_syscall_32+0x38/0x80 [ 563.021568][ T9912] do_SYSENTER_32+0x1f/0x30 [ 563.026232][ T9912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 563.032980][ T9912] [ 563.035442][ T9912] CPU: 0 UID: 0 PID: 9912 Comm: syz.2.1450 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 563.046502][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 563.061371][ T9912] ===================================================== [ 563.068425][ T9912] Disabling lock debugging due to kernel taint [ 563.076276][ T9912] Kernel panic - not syncing: kmsan.panic set ... [ 563.082848][ T9912] CPU: 0 UID: 0 PID: 9912 Comm: syz.2.1450 Tainted: G B 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 563.095222][ T9912] Tainted: [B]=BAD_PAGE [ 563.099478][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 563.109678][ T9912] Call Trace: [ 563.113081][ T9912] [ 563.116125][ T9912] dump_stack_lvl+0x216/0x2d0 [ 563.121005][ T9912] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 563.126995][ T9912] dump_stack+0x1e/0x24 [ 563.131337][ T9912] panic+0x4e2/0xcf0 [ 563.135421][ T9912] ? kmsan_get_metadata+0x131/0x1c0 [ 563.140809][ T9912] kmsan_report+0x2c7/0x2d0 [ 563.145468][ T9912] ? crypto_shash_final+0x72/0xa0 [ 563.150702][ T9912] ? ima_calc_field_array_hash_tfm+0x7d8/0x810 [ 563.157082][ T9912] ? __msan_warning+0x95/0x120 [ 563.162062][ T9912] ? ima_add_template_entry+0x52b/0x880 [ 563.167884][ T9912] ? ima_store_measurement+0x36b/0x8d0 [ 563.173588][ T9912] ? process_measurement+0x2c13/0x3f30 [ 563.179271][ T9912] ? ima_file_check+0x8e/0xd0 [ 563.184132][ T9912] ? security_file_post_open+0xc6/0x540 [ 563.189869][ T9912] ? path_openat+0x58cc/0x6200 [ 563.194831][ T9912] ? do_filp_open+0x268/0x600 [ 563.199697][ T9912] ? do_sys_openat2+0x1bf/0x2f0 [ 563.204724][ T9912] ? __ia32_compat_sys_open+0x26c/0x2d0 [ 563.210462][ T9912] ? ia32_sys_call+0x6d2/0x4180 [ 563.215475][ T9912] ? __do_fast_syscall_32+0xb0/0x110 [ 563.220920][ T9912] ? do_fast_syscall_32+0x38/0x80 [ 563.226098][ T9912] ? do_SYSENTER_32+0x1f/0x30 [ 563.230924][ T9912] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 563.237657][ T9912] ? kmsan_get_metadata+0x13e/0x1c0 [ 563.243024][ T9912] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 563.248998][ T9912] ? ima_add_template_entry+0x9b/0x880 [ 563.254655][ T9912] ? filter_irq_stacks+0x60/0x1a0 [ 563.259884][ T9912] ? stack_depot_save_flags+0x2c/0x750 [ 563.265540][ T9912] ? kmsan_get_metadata+0x13e/0x1c0 [ 563.270908][ T9912] ? kmsan_get_metadata+0x13e/0x1c0 [ 563.276278][ T9912] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 563.282267][ T9912] __msan_warning+0x95/0x120 [ 563.287065][ T9912] ima_add_template_entry+0x52b/0x880 [ 563.292664][ T9912] ? kmsan_get_metadata+0x13e/0x1c0 [ 563.298035][ T9912] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 563.304020][ T9912] ima_store_measurement+0x36b/0x8d0 [ 563.309538][ T9912] process_measurement+0x2c13/0x3f30 [ 563.315059][ T9912] ? filter_irq_stacks+0x60/0x1a0 [ 563.320268][ T9912] ? kmsan_get_metadata+0x13e/0x1c0 [ 563.325628][ T9912] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 563.331616][ T9912] ? end_current_label_crit_section+0x124/0x2a0 [ 563.338069][ T9912] ? kmsan_get_metadata+0x13e/0x1c0 [ 563.343430][ T9912] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 563.349411][ T9912] ima_file_check+0x8e/0xd0 [ 563.354097][ T9912] security_file_post_open+0xc6/0x540 [ 563.359675][ T9912] path_openat+0x58cc/0x6200 [ 563.364521][ T9912] ? kmsan_get_metadata+0x13e/0x1c0 [ 563.369899][ T9912] do_filp_open+0x268/0x600 [ 563.374632][ T9912] do_sys_openat2+0x1bf/0x2f0 [ 563.379497][ T9912] __ia32_compat_sys_open+0x26c/0x2d0 [ 563.385068][ T9912] ia32_sys_call+0x6d2/0x4180 [ 563.389917][ T9912] __do_fast_syscall_32+0xb0/0x110 [ 563.395188][ T9912] ? switch_fpu_return+0x17/0x20 [ 563.400294][ T9912] do_fast_syscall_32+0x38/0x80 [ 563.405303][ T9912] do_SYSENTER_32+0x1f/0x30 [ 563.409953][ T9912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 563.416517][ T9912] RIP: 0023:0xf744d579 [ 563.420719][ T9912] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 563.440523][ T9912] RSP: 002b:00000000f510557c EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 563.449118][ T9912] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00000000000c0842 [ 563.457238][ T9912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.465353][ T9912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.473484][ T9912] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 563.481589][ T9912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.489707][ T9912] [ 563.493125][ T9912] Kernel Offset: disabled [ 563.497532][ T9912] Rebooting in 86400 seconds..