last executing test programs: 3m30.356630656s ago: executing program 2 (id=2352): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) syncfs(0xffffffffffffffff) 3m30.094762949s ago: executing program 2 (id=2358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) 3m29.962330475s ago: executing program 2 (id=2359): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3m29.745041522s ago: executing program 2 (id=2365): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfefff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 3m29.462980143s ago: executing program 2 (id=2371): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3m29.307462507s ago: executing program 2 (id=2372): unshare(0x400) r0 = memfd_secret(0x0) shutdown(r0, 0x0) 3m14.88690189s ago: executing program 1 (id=2534): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x8, 0x4, 0x2, 0x40082, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3m14.581139203s ago: executing program 1 (id=2537): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101081, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 3m14.371372486s ago: executing program 1 (id=2540): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r0, 0x14, 0xb9c, 0x2a, 0x0, 0x0) 3m14.264130387s ago: executing program 32 (id=2372): unshare(0x400) r0 = memfd_secret(0x0) shutdown(r0, 0x0) 3m14.090142416s ago: executing program 1 (id=2545): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 3m13.77911601s ago: executing program 1 (id=2547): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m13.515405673s ago: executing program 1 (id=2551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2m58.058074671s ago: executing program 33 (id=2551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2m10.550871083s ago: executing program 5 (id=3191): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x46, 0x50, 0xd3, 0x10, 0xc45, 0x800a, 0xdb47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xa6, 0x37}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000680)={0x0, 0x14, 0x4, "f9dbc4ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m9.059367059s ago: executing program 5 (id=3220): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0xb6fa, 0x0, 0x0, 0x3cd}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x2}, @generic={0x2, "fddbfa43af4f308f2c8ab5f15238"}, @l2tp={0x2, 0x0, @multicast2}, 0xa00, 0x0, 0x0, 0x0, 0x52, 0x0, 0x2, 0x2}) 2m8.933419421s ago: executing program 5 (id=3222): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 2m8.660521687s ago: executing program 5 (id=3227): prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 2m8.551402923s ago: executing program 5 (id=3229): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 2m8.42214586s ago: executing program 5 (id=3232): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 1m53.238354393s ago: executing program 34 (id=3232): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 6.763165753s ago: executing program 6 (id=4960): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x28, 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 5.784118244s ago: executing program 6 (id=4977): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x20400) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) 5.585547219s ago: executing program 6 (id=4982): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") 5.335497273s ago: executing program 6 (id=4990): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0xad92, 0x1000, 0x4}, &(0x7f0000000300), &(0x7f0000000280)) r1 = eventfd2(0x210d28e2, 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) 5.114008575s ago: executing program 6 (id=4996): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x40, 0x5, 0xc, {0xc, 0x22, "2771db4cb5331771e678"}}, 0x0, 0x0, 0x0}, 0x0) 4.07902281s ago: executing program 7 (id=5010): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 3.873882832s ago: executing program 7 (id=5013): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, {0x11, 0xa, 0x0, @multicast2=0xe0000001}}}}}, 0x0) 3.702024766s ago: executing program 7 (id=5017): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000002c0)=[{0x9, 0x9a01, 0x0, 0x0}, {0xad8, 0x6000, 0x0, 0x0}], 0x2}) 3.597440827s ago: executing program 3 (id=5021): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = fanotify_init(0xf00, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.696652068s ago: executing program 3 (id=5024): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x21c) 2.547094076s ago: executing program 4 (id=5027): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x11e, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) 2.097677548s ago: executing program 4 (id=5028): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x70ad2a, 0x25dfdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) 1.910389813s ago: executing program 6 (id=5029): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "ddc9fac7"}]}}, 0x0}, 0x0) 1.859458645s ago: executing program 4 (id=5031): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) 1.611403171s ago: executing program 3 (id=5033): bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000100), 0xfffffd79) 1.487487727s ago: executing program 3 (id=5036): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000900)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 1.444862867s ago: executing program 3 (id=5037): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x8201, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) 552.039533ms ago: executing program 7 (id=5045): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 551.818713ms ago: executing program 4 (id=5046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2c, 0x25df9bfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) 551.495719ms ago: executing program 0 (id=5047): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x80000002}, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 474.808542ms ago: executing program 0 (id=5048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 399.752318ms ago: executing program 0 (id=5049): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigsuspend(0x0, 0x0) 318.03142ms ago: executing program 0 (id=5050): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad430000000000c5e8d202"], 0x14}}, 0x0) 284.611322ms ago: executing program 4 (id=5051): chdir(0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r0, 0x6) 210.315286ms ago: executing program 7 (id=5052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 176.869089ms ago: executing program 0 (id=5053): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) 137.11098ms ago: executing program 3 (id=5054): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x0, 0xfffffffd, 0x33}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) 126.741612ms ago: executing program 4 (id=5055): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00@W'], 0x0, 0x0, 0x0, 0x0}, 0x0) 11.560768ms ago: executing program 0 (id=5056): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x2e020000) 0s ago: executing program 7 (id=5057): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x101, 0x2, 0x10000, 0x800004, 0x1001, 0x4, 0x4, 0xffff, 0x3, 0x104, 0x6, 0x1001, 0xffffffff, 0x800800, 0xa237, 0x7fffffff, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa7, 0x0, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x6, 0xefcb, 0x8]}) kernel console output (not intermixed with test programs): ion: [ 303.276473][ T5931] hackrf 5-1:0.0: Registered as swradio24 [ 303.276498][ T5931] videodev: could not get a free minor [ 303.276507][ T5931] hackrf 5-1:0.0: Failed to register as video device (-23) [ 303.284582][ T5931] hackrf 5-1:0.0: probe with driver hackrf failed with error -23 [ 303.475837][ T1236] usb 5-1: USB disconnect, device number 24 [ 303.492926][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.895011][ T5854] Bluetooth: hci1: command tx timeout [ 303.924071][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2675'. [ 303.952476][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.090566][T11772] vlan2: entered promiscuous mode [ 304.090586][T11772] gretap0: entered promiscuous mode [ 304.275613][ T8126] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 304.388962][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.451661][ T8126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.451691][ T8126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.451727][ T8126] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 304.451748][ T8126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.506187][T11781] sp0: Synchronizing with TNC [ 304.506337][T11784] sp0: Found TNC [ 304.506826][ T8126] usb 4-1: config 0 descriptor?? [ 304.538284][T11780] [U] ` [ 304.926159][ T8126] elo 0003:04E7:0030.0022: item fetching failed at offset 5/7 [ 304.927034][ T8126] elo 0003:04E7:0030.0022: parse failed [ 304.927133][ T8126] elo 0003:04E7:0030.0022: probe with driver elo failed with error -22 [ 305.134546][T11700] chnl_net:caif_netlink_parms(): no params data found [ 305.160727][ T1236] usb 4-1: USB disconnect, device number 32 [ 305.442830][T11810] autofs: Bad value for 'fd' [ 305.554125][T11490] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 305.609158][T11490] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 305.660127][ T991] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 305.686275][ T991] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 305.914062][T11490] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 305.969218][ T5854] Bluetooth: hci1: command 0x0419 tx timeout [ 306.080796][T11490] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 306.175450][T11700] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.175591][T11700] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.175833][T11700] bridge_slave_0: entered allmulticast mode [ 306.191751][T11700] bridge_slave_0: entered promiscuous mode [ 306.270543][T11700] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.270757][T11700] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.270989][T11700] bridge_slave_1: entered allmulticast mode [ 306.273707][T11700] bridge_slave_1: entered promiscuous mode [ 306.414448][ T13] bridge_slave_1: left allmulticast mode [ 306.414483][ T13] bridge_slave_1: left promiscuous mode [ 306.414820][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.554802][T11849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2706'. [ 306.923869][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 308.045198][ T5843] Bluetooth: hci1: command 0x0419 tx timeout [ 309.042483][T11893] program syz.0.2727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.256502][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.315601][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.341588][ T13] bond0 (unregistering): Released all slaves [ 309.450542][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.484282][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.521246][T11700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.549723][ T13] tipc: Left network mode [ 309.571235][T11700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.789559][T11908] Bluetooth: MGMT ver 1.23 [ 310.241684][T11700] team0: Port device team_slave_0 added [ 310.260742][T11700] team0: Port device team_slave_1 added [ 310.469266][T11932] Invalid logical block size (8192) [ 311.070046][T11700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.070062][T11700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.070086][T11700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.132172][T11700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.132189][T11700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.132214][T11700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.196673][ T31] kernel write not supported for file /media1 (pid: 31 comm: kworker/1:0) [ 311.487116][ T13] hsr_slave_0: left promiscuous mode [ 311.535615][ T13] hsr_slave_1: left promiscuous mode [ 311.537218][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.537246][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.585563][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 311.633944][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.633975][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.745060][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 311.748177][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.748206][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.748225][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.748264][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 311.748284][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.753764][ T31] usb 1-1: config 0 descriptor?? [ 311.803053][ T13] veth1_macvtap: left promiscuous mode [ 311.804733][ T13] veth0_macvtap: left promiscuous mode [ 311.811766][ T13] veth1_vlan: left promiscuous mode [ 311.822844][ T13] veth0_vlan: left promiscuous mode [ 312.219819][ T31] ryos 0003:1E7D:31CE.0024: global environment stack underflow [ 312.219839][ T31] ryos 0003:1E7D:31CE.0024: item 0 2 1 11 parsing failed [ 312.220623][ T31] ryos 0003:1E7D:31CE.0024: parse failed [ 312.220687][ T31] ryos 0003:1E7D:31CE.0024: probe with driver ryos failed with error -22 [ 312.420824][ T31] usb 1-1: USB disconnect, device number 21 [ 312.519876][T11992] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 312.519900][T11992] UDF-fs: Scanning with blocksize 512 failed [ 312.521609][T11992] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 312.521625][T11992] UDF-fs: Scanning with blocksize 1024 failed [ 312.522054][T11992] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 312.522066][T11992] UDF-fs: Scanning with blocksize 2048 failed [ 312.522356][T11992] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 312.522364][T11992] UDF-fs: Scanning with blocksize 4096 failed [ 313.275145][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 314.955862][ T13] team0 (unregistering): Port device team_slave_1 removed [ 315.166131][ T13] team0 (unregistering): Port device team_slave_0 removed [ 317.331889][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.331963][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.792545][T12036] binder: 12032:12036 ioctl c00c620f 200000000500 returned -22 [ 317.858677][T11700] hsr_slave_0: entered promiscuous mode [ 317.859936][T11700] hsr_slave_1: entered promiscuous mode [ 317.860861][T11700] debugfs: 'hsr0' already exists in 'hsr' [ 317.860885][T11700] Cannot create hsr debugfs directory [ 318.215100][ T5916] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 318.365237][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 318.371275][ T5916] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 318.371299][ T5916] usb 5-1: config 0 has an invalid interface number: 150 but max is 64 [ 318.371317][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.371333][ T5916] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 318.371352][ T5916] usb 5-1: config 0 has no interface number 0 [ 318.371434][ T5916] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.371458][ T5916] usb 5-1: config 0 interface 150 has no altsetting 0 [ 318.371489][ T5916] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 318.371509][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.387025][ T5916] usb 5-1: config 0 descriptor?? [ 318.820099][ T5916] usb 5-1: USB disconnect, device number 25 [ 319.058757][T11490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.168352][T11490] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.260644][T12060] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 319.310120][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.310336][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.398643][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.398879][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.458620][T11700] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 319.523162][T12062] sp0: Synchronizing with TNC [ 319.533356][T11700] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 319.712682][T11700] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 319.792782][T11700] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 319.907817][T12076] netlink: 'syz.0.2809': attribute type 1 has an invalid length. [ 319.907837][T12076] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2809'. [ 319.907863][T12076] netlink: 'syz.0.2809': attribute type 1 has an invalid length. [ 320.455556][T11700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.554389][T11700] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.602832][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.603050][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.644045][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.644194][ T1438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.723936][T12099] netlink: 'syz.4.2816': attribute type 10 has an invalid length. [ 320.753735][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'. [ 320.880562][T12099] team0: Port device syz_tun added [ 321.073964][T11490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.099503][T12109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2821'. [ 321.202213][T12109] gretap0: entered promiscuous mode [ 321.214968][T12109] gretap0: left promiscuous mode [ 321.615117][ T5930] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 321.767579][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.767627][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 321.767649][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.815079][ T5930] usb 5-1: config 0 descriptor?? [ 322.251511][ T5930] logitech 0003:046D:C50C.0025: unbalanced delimiter at end of report description [ 322.252215][ T5930] logitech 0003:046D:C50C.0025: parse failed [ 322.252307][ T5930] logitech 0003:046D:C50C.0025: probe with driver logitech failed with error -22 [ 322.341485][T11700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.342064][T11490] veth0_vlan: entered promiscuous mode [ 322.389696][T11490] veth1_vlan: entered promiscuous mode [ 322.414304][T12153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2837'. [ 322.460892][ T5930] usb 5-1: USB disconnect, device number 26 [ 322.523911][T11490] veth0_macvtap: entered promiscuous mode [ 322.555431][T11490] veth1_macvtap: entered promiscuous mode [ 322.598835][T11490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.631678][T11490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.677719][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 322.690981][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.701355][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.701651][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.701888][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.815074][ T5916] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 322.825186][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 322.828219][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.828247][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.828267][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 322.828304][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 322.828324][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.838556][ T31] usb 1-1: config 0 descriptor?? [ 322.967085][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 322.980249][ T5916] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 322.980274][ T5916] usb 4-1: config 0 has no interface number 0 [ 322.997824][ T5916] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 322.997901][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.997920][ T5916] usb 4-1: Product: syz [ 322.997932][ T5916] usb 4-1: Manufacturer: syz [ 322.997945][ T5916] usb 4-1: SerialNumber: syz [ 323.139490][ T5916] usb 4-1: config 0 descriptor?? [ 323.166558][ T5916] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 323.230176][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.230196][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.307829][T11700] veth0_vlan: entered promiscuous mode [ 323.360659][ T31] microsoft 0003:045E:07DA.0026: ignoring exceeding usage max [ 323.370996][ T31] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 323.371029][ T31] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 323.371054][ T31] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 323.371316][ T31] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 323.371342][ T31] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 323.371366][ T31] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 323.372390][ T31] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 323.372417][ T31] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 323.372442][ T31] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 323.372466][ T31] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 323.417202][ T5916] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 323.454323][ T5916] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 323.476036][T11700] veth1_vlan: entered promiscuous mode [ 323.501590][ T31] microsoft 0003:045E:07DA.0026: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 323.501621][ T31] microsoft 0003:045E:07DA.0026: no inputs found [ 323.501847][ T31] microsoft 0003:045E:07DA.0026: could not initialize ff, continuing anyway [ 323.530147][ T31] usb 1-1: USB disconnect, device number 22 [ 323.577906][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.577926][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.660126][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 49 [ 323.863702][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 323.868441][ T31] usb 4-1: USB disconnect, device number 33 [ 323.877322][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 323.882506][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 323.883139][ T31] quatech2 4-1:0.51: device disconnected [ 323.960573][T11700] veth0_macvtap: entered promiscuous mode [ 323.985471][T11700] veth1_macvtap: entered promiscuous mode [ 324.019021][T11700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.061807][T11700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.123938][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.145015][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.149713][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.150960][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.240251][T12173] random: crng reseeded on system resumption [ 324.882037][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.882068][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.095459][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.095479][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.694686][T12228] ALSA: mixer_oss: invalid OSS volume '"gL' [ 325.865118][ T5923] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 325.965590][ T5916] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 326.015120][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 326.017602][ T5923] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 326.017624][ T5923] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 326.017641][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.020800][ T5923] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.020826][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.020845][ T5923] usb 4-1: Product: syz [ 326.020858][ T5923] usb 4-1: Manufacturer: syz [ 326.020869][ T5923] usb 4-1: SerialNumber: syz [ 326.117334][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.117379][ T5916] usb 5-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 326.117400][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.135696][ T5916] usb 5-1: config 0 descriptor?? [ 326.213702][T12244] netlink: 'syz.5.2876': attribute type 10 has an invalid length. [ 326.304879][ T5923] usb 4-1: 0:2 : does not exist [ 326.340893][ T5923] usb 4-1: USB disconnect, device number 34 [ 326.628495][ T5916] hid-alps 0003:044E:121E.0027: hidraw0: USB HID v0.05 Device [HID 044e:121e] on usb-dummy_hcd.4-1/input0 [ 326.813759][ T5916] usb 5-1: USB disconnect, device number 27 [ 327.145444][T12270] Bluetooth: MGMT ver 1.23 [ 327.425448][T12280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2894'. [ 327.875122][ T5923] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 328.027376][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.027407][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.027442][ T5923] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 328.027462][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.075718][ T5923] usb 1-1: config 0 descriptor?? [ 328.525683][ T5923] aquacomputer_d5next 0003:0C70:F00D.0028: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.0-1/input0 [ 328.713580][ T5923] usb 1-1: USB disconnect, device number 23 [ 329.595277][ T991] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 329.751864][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.751911][ T991] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 329.751932][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.758037][ T991] usb 5-1: config 0 descriptor?? [ 330.209190][ T991] zeroplus 0003:0C12:0005.0029: report_id 0 is invalid [ 330.209211][ T991] zeroplus 0003:0C12:0005.0029: item 0 0 1 8 parsing failed [ 330.209993][ T991] zeroplus 0003:0C12:0005.0029: parse failed [ 330.210057][ T991] zeroplus 0003:0C12:0005.0029: probe with driver zeroplus failed with error -22 [ 330.403063][ T5931] usb 5-1: USB disconnect, device number 28 [ 330.425223][ T5923] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 330.575043][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 330.580970][ T5923] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 330.580997][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.581015][ T5923] usb 6-1: Product: syz [ 330.581028][ T5923] usb 6-1: Manufacturer: syz [ 330.581040][ T5923] usb 6-1: SerialNumber: syz [ 330.626716][ T5923] usb 6-1: config 0 descriptor?? [ 330.632471][ T5923] gspca_main: se401-2.14.0 probing 047d:5003 [ 330.826996][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2942'. [ 330.827023][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2942'. [ 331.088575][ T5923] gspca_se401: Bayer format not supported! [ 331.315210][ T5931] usb 6-1: USB disconnect, device number 2 [ 331.990462][T12433] sp0: Synchronizing with TNC [ 331.992541][T12429] [U] [ 332.088375][ T1236] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 332.153457][T12441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2970'. [ 332.241055][T12445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2972'. [ 332.245125][ T1236] usb 4-1: Using ep0 maxpacket: 32 [ 332.247730][ T1236] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 332.250832][ T1236] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 332.250856][ T1236] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 332.250875][ T1236] usb 4-1: Product: syz [ 332.250888][ T1236] usb 4-1: Manufacturer: syz [ 332.250900][ T1236] usb 4-1: SerialNumber: syz [ 332.317539][ T1236] usb 4-1: config 0 descriptor?? [ 332.318672][T12428] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 332.536698][ T5931] usb 4-1: USB disconnect, device number 35 [ 332.895030][ T1236] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 333.015224][ T1215] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 333.055014][ T1236] usb 5-1: Using ep0 maxpacket: 32 [ 333.071885][ T1236] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 333.071929][ T1236] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 333.072031][ T1236] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 333.072055][ T1236] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 333.072080][ T1236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 333.127270][ T1236] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 333.127299][ T1236] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 333.127318][ T1236] usb 5-1: Product: syz [ 333.127331][ T1236] usb 5-1: Manufacturer: syz [ 333.127344][ T1236] usb 5-1: SerialNumber: syz [ 333.165948][ T1215] usb 6-1: Using ep0 maxpacket: 8 [ 333.168447][ T1215] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.168512][ T1215] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 333.168533][ T1215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.171121][ T1236] usb 5-1: config 0 descriptor?? [ 333.187312][ T1215] usb 6-1: config 0 descriptor?? [ 333.205319][ T1215] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 333.224261][ T1236] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 333.247008][ T1236] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 333.372219][T12478] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2988'. [ 333.372243][T12478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2988'. [ 333.445120][ T991] usb 5-1: USB disconnect, device number 29 [ 333.478055][ T991] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 333.822487][ T1215] gspca_vc032x: reg_r err -71 [ 333.822580][ T1215] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 333.839552][ T1215] usb 6-1: USB disconnect, device number 3 [ 334.828773][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3006'. [ 334.828954][T12516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.355094][ T1236] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 335.505119][ T1236] usb 6-1: Using ep0 maxpacket: 8 [ 335.510012][ T1236] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.510041][ T1236] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.510062][ T1236] usb 6-1: config 0 interface 0 has no altsetting 0 [ 335.510094][ T1236] usb 6-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 335.510113][ T1236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.567482][ T1236] usb 6-1: config 0 descriptor?? [ 335.686437][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'. [ 335.782843][ T5843] Bluetooth: hci0: Malformed LE Event: 0x0d [ 335.795056][ T1236] usbhid 6-1:0.0: can't add hid device: -71 [ 335.795169][ T1236] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 335.799046][ T1236] usb 6-1: USB disconnect, device number 4 [ 336.508341][ T1236] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 336.655106][ T1236] usb 1-1: Using ep0 maxpacket: 32 [ 336.657735][ T1236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.657762][ T1236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.657798][ T1236] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 336.657818][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.711753][ T1236] usb 1-1: config 0 descriptor?? [ 337.075107][ T5931] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 337.095961][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3045'. [ 337.154568][ T1236] corsair-cpro 0003:1B1C:1D00.002A: hidraw0: USB HID v0.07 Device [HID 1b1c:1d00] on usb-dummy_hcd.0-1/input0 [ 337.170409][T12600] netlink: 'syz.4.3047': attribute type 3 has an invalid length. [ 337.224004][ T1236] corsair-cpro 0003:1B1C:1D00.002A: probe with driver corsair-cpro failed with error -38 [ 337.229942][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 337.241380][ T5931] usb 6-1: config 0 interface 0 has no altsetting 0 [ 337.241418][ T5931] usb 6-1: New USB device found, idVendor=05ac, idProduct=0250, bcdDevice= 0.00 [ 337.241438][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.272890][ T5931] usb 6-1: config 0 descriptor?? [ 337.334011][ T991] usb 1-1: USB disconnect, device number 24 [ 337.708900][ T5931] hid_parser_main: 7 callbacks suppressed [ 337.708925][ T5931] apple 0003:05AC:0250.002B: unknown main item tag 0x0 [ 337.708955][ T5931] apple 0003:05AC:0250.002B: unknown main item tag 0x0 [ 337.708980][ T5931] apple 0003:05AC:0250.002B: unknown main item tag 0x0 [ 337.709004][ T5931] apple 0003:05AC:0250.002B: unknown main item tag 0x0 [ 337.709027][ T5931] apple 0003:05AC:0250.002B: unknown main item tag 0x0 [ 337.709050][ T5931] apple 0003:05AC:0250.002B: unknown main item tag 0x0 [ 337.709074][ T5931] apple 0003:05AC:0250.002B: unknown main item tag 0x0 [ 337.709098][ T5931] apple 0003:05AC:0250.002B: unknown main item tag 0x0 [ 337.709122][ T5931] apple 0003:05AC:0250.002B: unknown main item tag 0x0 [ 337.709152][ T5931] apple 0003:05AC:0250.002B: unknown main item tag 0x0 [ 337.751980][ T5931] apple 0003:05AC:0250.002B: hidraw0: USB HID v0.4b Device [HID 05ac:0250] on usb-dummy_hcd.5-1/input0 [ 337.935668][ T5931] usb 6-1: USB disconnect, device number 5 [ 338.388365][T12647] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 338.953216][T12676] kAFS: unable to lookup cell 'sէKyy [ 338.953216][T12676] [ 338.953216][T12676] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 339.005241][ T1236] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 339.045260][T12679] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3086'. [ 339.177653][ T1236] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.177678][ T1236] usb 5-1: config 0 has no interface number 0 [ 339.180772][ T1236] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 339.180796][ T1236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.180814][ T1236] usb 5-1: Product: syz [ 339.180825][ T1236] usb 5-1: Manufacturer: syz [ 339.180838][ T1236] usb 5-1: SerialNumber: syz [ 339.200818][ T1236] usb 5-1: config 0 descriptor?? [ 339.283819][T12689] program syz.6.3091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.443943][ T1236] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 339.458316][ T1236] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 339.458713][ T1236] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 339.458762][ T1236] usb 5-1: media controller created [ 339.483800][T12695] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3094'. [ 339.568594][T12701] pim6reg527: entered allmulticast mode [ 339.580462][ T1236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.625707][T12702] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3095'. [ 339.629093][T12699] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3095'. [ 339.927487][ T1236] usb 5-1: USB disconnect, device number 30 [ 340.352060][T12736] tipc: Started in network mode [ 340.352088][T12736] tipc: Node identity 080000000000000008, cluster identity 4711 [ 340.445189][ T5931] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 340.510547][T12742] Bluetooth: MGMT ver 1.23 [ 340.545067][ T5916] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 340.595122][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 340.598927][ T5931] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 340.598951][ T5931] usb 6-1: config 0 has no interface number 0 [ 340.599003][ T5931] usb 6-1: config 0 interface 184 has no altsetting 0 [ 340.602831][ T5931] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 340.602855][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.602873][ T5931] usb 6-1: Product: syz [ 340.602886][ T5931] usb 6-1: Manufacturer: syz [ 340.602899][ T5931] usb 6-1: SerialNumber: syz [ 340.618572][ T5931] usb 6-1: config 0 descriptor?? [ 340.633149][ T5931] smsc75xx v1.0.0 [ 340.727653][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.727683][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.727723][ T5916] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 340.727744][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.778325][ T5916] usb 4-1: config 0 descriptor?? [ 341.194481][ T5916] ortek 0003:1223:3F07.002C: item fetching failed at offset 48/69 [ 341.215527][ T5916] ortek 0003:1223:3F07.002C: probe with driver ortek failed with error -22 [ 341.300624][ T5931] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 341.300654][ T5931] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 341.300670][ T5931] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 341.300955][ T5931] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 341.321012][ T5931] usb 6-1: USB disconnect, device number 6 [ 341.398437][ T1236] usb 4-1: USB disconnect, device number 36 [ 341.862514][T12783] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3134'. [ 342.788208][ T5916] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 342.821602][T12832] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 342.823555][T12829] IPVS: stopping master sync thread 12832 ... [ 342.876635][T12834] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3159'. [ 342.937498][ T5916] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.937531][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 342.937562][ T5916] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 342.937582][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.969924][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 343.019108][ T5916] usb 1-1: config 0 descriptor?? [ 343.240265][ T1167] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.253252][ T1167] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.255171][ T1167] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.255210][ T1167] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.431732][T12851] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3167'. [ 343.452640][ T5916] lenovo 0003:17EF:6067.002D: item fetching failed at offset 0/2 [ 343.453351][ T5916] lenovo 0003:17EF:6067.002D: hid_parse failed [ 343.453415][ T5916] lenovo 0003:17EF:6067.002D: probe with driver lenovo failed with error -22 [ 343.635836][T12856] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3169'. [ 343.659790][ T5931] usb 1-1: USB disconnect, device number 25 [ 343.771441][ T37] audit: type=1400 audit(1756668749.271:65): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12860 comm="syz.3.3172" src=1 dest=20000 netif=wpan0 [ 344.925116][ T5931] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 345.075151][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 345.080445][ T5931] usb 6-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 345.080483][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.080500][ T5931] usb 6-1: Product: syz [ 345.080512][ T5931] usb 6-1: Manufacturer: syz [ 345.080523][ T5931] usb 6-1: SerialNumber: syz [ 345.106915][ T5931] usb 6-1: config 0 descriptor?? [ 345.122085][ T5931] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 345.328061][ T5931] gspca_sn9c2028: read1 error -32 [ 345.443743][T12933] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3206'. [ 345.443769][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'. [ 345.529534][ T5931] gspca_sn9c2028: read1 error -71 [ 345.529623][ T5931] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 345.546212][ T5931] usb 6-1: USB disconnect, device number 7 [ 345.970628][T12949] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3215'. [ 346.444695][T12972] sp0: Synchronizing with TNC [ 346.664502][T12980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.693215][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 347.718634][ T37] audit: type=1400 audit(1756668753.221:66): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=13012 comm="syz.6.3246" src=1 dest=20000 netif=wpan0 [ 347.952838][ T1236] IPVS: starting estimator thread 0... [ 348.035177][T13022] IPVS: using max 8 ests per chain, 19200 per kthread [ 349.006940][T13054] hugetlbfs: Bad value '%' for mount option 'size' [ 349.006940][T13054] [ 349.105074][ T991] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 349.255036][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 349.257653][ T991] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 349.257681][ T991] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 349.257742][ T991] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.257764][ T991] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 349.260805][ T991] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.260829][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.260846][ T991] usb 4-1: Product: syz [ 349.260858][ T991] usb 4-1: Manufacturer: syz [ 349.260871][ T991] usb 4-1: SerialNumber: syz [ 349.616942][ T991] usb 4-1: USB disconnect, device number 37 [ 349.725875][T13068] lo speed is unknown, defaulting to 1000 [ 349.725972][T13068] lo speed is unknown, defaulting to 1000 [ 349.730682][T13068] lo speed is unknown, defaulting to 1000 [ 349.780319][T13068] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 349.839763][T13068] lo speed is unknown, defaulting to 1000 [ 349.843057][T13068] lo speed is unknown, defaulting to 1000 [ 349.850727][T13068] lo speed is unknown, defaulting to 1000 [ 349.859400][T13068] lo speed is unknown, defaulting to 1000 [ 349.871537][T13068] lo speed is unknown, defaulting to 1000 [ 350.001094][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3274'. [ 350.435122][ T991] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 350.588854][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.588882][ T991] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.588929][ T991] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 350.588949][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.639069][ T991] usb 5-1: config 0 descriptor?? [ 350.665121][ T1215] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 350.815196][ T1215] usb 4-1: Using ep0 maxpacket: 16 [ 350.821398][ T1215] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.821481][ T1215] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.821503][ T1215] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.821535][ T1215] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 350.821555][ T1215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.897295][ T1215] usb 4-1: config 0 descriptor?? [ 351.135652][ T991] hid-picolcd 0003:04D8:C002.002E: No report with id 0x11 found [ 351.258534][ T1236] usb 5-1: USB disconnect, device number 31 [ 351.312382][ T1215] hid_parser_main: 1262 callbacks suppressed [ 351.312405][ T1215] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 351.312435][ T1215] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 351.312460][ T1215] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 351.312483][ T1215] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 351.312507][ T1215] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 351.312531][ T1215] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 351.312554][ T1215] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 351.312584][ T1215] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 351.312607][ T1215] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 351.312631][ T1215] kye 0003:0458:0138.002F: unknown main item tag 0x0 [ 351.403372][ T1215] kye 0003:0458:0138.002F: collection stack underflow [ 351.403402][ T1215] kye 0003:0458:0138.002F: item 0 0 0 12 parsing failed [ 351.404232][ T1215] kye 0003:0458:0138.002F: parse failed [ 351.404296][ T1215] kye 0003:0458:0138.002F: probe with driver kye failed with error -22 [ 351.532472][ T1236] usb 4-1: USB disconnect, device number 38 [ 351.560376][T13096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.837687][T13101] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 352.188738][T13109] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 353.315120][ T1215] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 353.465078][ T1215] usb 5-1: Using ep0 maxpacket: 8 [ 353.468003][ T1215] usb 5-1: unable to get BOS descriptor or descriptor too short [ 353.469527][ T1215] usb 5-1: config 4 interface 0 has no altsetting 0 [ 353.473043][ T1215] usb 5-1: string descriptor 0 read error: -22 [ 353.473139][ T1215] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 353.473161][ T1215] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 353.547867][ T1215] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 353.553588][ T1215] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 353.554039][ T1215] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 353.554086][ T1215] usb 5-1: media controller created [ 353.618029][ T1215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.176885][T13138] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3306'. [ 354.176907][T13138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3306'. [ 354.685410][ T1215] zl10353_read_register: readreg error (reg=127, ret==0) [ 354.785553][ T1215] usb 5-1: USB disconnect, device number 32 [ 355.285073][ T1215] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 355.453716][ T1215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.453741][ T1215] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 355.453794][ T1215] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 355.453815][ T1215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.504879][ T1215] usb 4-1: config 0 descriptor?? [ 355.516114][ T1215] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 355.516164][ T1215] dvb-usb: bulk message failed: -22 (3/0) [ 355.539095][ T1215] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 355.540037][ T1215] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 355.540086][ T1215] usb 4-1: media controller created [ 355.542556][ T1215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.593147][ T1215] dvb-usb: bulk message failed: -22 (6/0) [ 355.593233][ T1215] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 355.617775][ T1215] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 355.638911][ T1215] dvb-usb: schedule remote query interval to 150 msecs. [ 355.638933][ T1215] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 355.766598][T13156] dvb-usb: bulk message failed: -22 (4/0) [ 355.778537][ T1236] usb 4-1: USB disconnect, device number 39 [ 355.933204][ T1236] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 356.724266][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3336'. [ 357.329130][T13224] sp0: Synchronizing with TNC [ 357.655054][ T991] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 357.805163][ T991] usb 5-1: Using ep0 maxpacket: 32 [ 357.807629][ T991] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 357.807652][ T991] usb 5-1: config 0 has no interface number 0 [ 357.810457][ T991] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 357.810482][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.810500][ T991] usb 5-1: Product: syz [ 357.810513][ T991] usb 5-1: Manufacturer: syz [ 357.810525][ T991] usb 5-1: SerialNumber: syz [ 357.841389][ T991] usb 5-1: config 0 descriptor?? [ 357.862914][ T991] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 358.099673][ T991] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 358.132729][ T991] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 358.282684][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 358.481251][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 358.482680][ T1236] usb 5-1: USB disconnect, device number 33 [ 358.507322][ T1236] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 358.543237][ T1236] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 358.543913][ T1236] quatech2 5-1:0.51: device disconnected [ 359.385352][ T1236] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 359.538004][ T1236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.538035][ T1236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.538073][ T1236] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 359.538093][ T1236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.596477][ T1236] usb 5-1: config 0 descriptor?? [ 360.035916][ T991] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 360.198577][ T991] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.198603][ T991] usb 4-1: config 0 has no interface number 0 [ 360.198654][ T991] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.198677][ T991] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.198697][ T991] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.198735][ T991] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 360.198754][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.208422][ T991] usb 4-1: config 0 descriptor?? [ 360.279667][ T1236] hid-led 0003:0FC5:B080.0030: probe with driver hid-led failed with error -71 [ 360.302664][ T1236] usb 5-1: USB disconnect, device number 34 [ 360.703252][ T991] hid (null): report_id 35660 is invalid [ 360.908650][ T991] uclogic 0003:28BD:0042.0031: failed retrieving string descriptor #100: -71 [ 360.908725][ T991] uclogic 0003:28BD:0042.0031: failed retrieving pen parameters: -71 [ 360.908741][ T991] uclogic 0003:28BD:0042.0031: pen probing failed: -71 [ 360.908757][ T991] uclogic 0003:28BD:0042.0031: failed probing parameters: -71 [ 360.908861][ T991] uclogic 0003:28BD:0042.0031: probe with driver uclogic failed with error -71 [ 360.930407][ T991] usb 4-1: USB disconnect, device number 40 [ 361.728706][T13297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3381'. [ 361.908538][T13301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3383'. [ 362.045688][T13304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3386'. [ 362.183885][T13308] tipc: Started in network mode [ 362.183902][T13308] tipc: Node identity , cluster identity 4711 [ 362.183917][T13308] tipc: Failed to obtain node identity [ 362.183941][T13308] tipc: Enabling of bearer rejected, failed to enable media [ 362.635148][ T5923] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 362.743482][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.754613][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.757728][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.782887][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.786082][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 362.786330][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.790523][ T5923] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 362.818968][ T5923] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 362.818994][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.819012][ T5923] usb 1-1: Product: syz [ 362.819024][ T5923] usb 1-1: Manufacturer: syz [ 362.819035][ T5923] usb 1-1: SerialNumber: syz [ 362.877207][ T5923] usb 1-1: config 0 descriptor?? [ 362.893439][ T5923] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 362.893487][ T5923] usb 1-1: setting power ON [ 362.893505][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 362.956064][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 362.956847][ T5923] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 362.956900][ T5923] usb 1-1: media controller created [ 362.992117][T13321] wg1 speed is unknown, defaulting to 1000 [ 362.994769][T13321] lo speed is unknown, defaulting to 1000 [ 363.036680][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.084483][ T5923] usb 1-1: selecting invalid altsetting 6 [ 363.084503][ T5923] usb 1-1: digital interface selection failed (-22) [ 363.084515][ T5923] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 363.106371][ T5923] usb 1-1: setting power OFF [ 363.106392][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 363.106408][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 363.106420][ T5923] (NULL device *): no alternate interface [ 363.135896][T13312] dvb-usb: bulk message failed: -22 (4/0) [ 363.135917][T13312] cxusb: i2c read failed [ 363.219115][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 363.240254][ T5923] usb 1-1: USB disconnect, device number 26 [ 363.475586][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.380487][T13348] netlink: 'syz.4.3406': attribute type 5 has an invalid length. [ 364.539685][T13359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3409'. [ 364.694123][ T67] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.925166][ T5843] Bluetooth: hci5: command tx timeout [ 365.293993][ T67] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.416500][T13321] chnl_net:caif_netlink_parms(): no params data found [ 365.772261][ T67] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.092942][ T67] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.382262][T13431] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 366.680962][T13321] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.681103][T13321] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.681666][T13321] bridge_slave_0: entered allmulticast mode [ 366.684361][T13321] bridge_slave_0: entered promiscuous mode [ 366.774073][T13321] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.774457][T13321] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.774650][T13321] bridge_slave_1: entered allmulticast mode [ 366.780579][T13321] bridge_slave_1: entered promiscuous mode [ 367.005073][ T5843] Bluetooth: hci5: command tx timeout [ 367.081345][T13321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.131892][T13321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.228342][ T67] bridge_slave_1: left allmulticast mode [ 367.228572][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.351626][ T67] bridge_slave_0: left allmulticast mode [ 367.351658][ T67] bridge_slave_0: left promiscuous mode [ 367.351914][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.085218][ T5843] Bluetooth: hci5: command tx timeout [ 369.600691][ T5923] kernel write not supported for file /273/clear_refs (pid: 5923 comm: kworker/0:3) [ 370.086062][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.176306][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.220348][ T67] bond0 (unregistering): Released all slaves [ 370.494621][T13470] netlink: 'syz.0.3460': attribute type 6 has an invalid length. [ 370.510938][T13321] team0: Port device team_slave_0 added [ 370.528204][T13321] team0: Port device team_slave_1 added [ 371.031109][T13529] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3487'. [ 371.165311][ T5843] Bluetooth: hci5: command tx timeout [ 371.296196][ T37] audit: type=1400 audit(1756668776.791:67): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=13536 comm="syz.6.3491" src=1 dest=20000 netif=wpan0 [ 371.688778][T13321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.688792][T13321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.688806][T13321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.689208][T13541] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3493'. [ 371.689228][T13541] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3493'. [ 371.692597][T13321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.692612][T13321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.692638][T13321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.830385][T13525] syz.0.3484 (13525) used greatest stack depth: 17584 bytes left [ 372.123066][T13566] usb usb8: usbfs: process 13566 (syz.0.3504) did not claim interface 0 before use [ 372.217241][T13569] netlink: 'syz.3.3506': attribute type 16 has an invalid length. [ 372.496324][ T67] hsr_slave_0: left promiscuous mode [ 372.515290][ T67] hsr_slave_1: left promiscuous mode [ 372.516399][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.516426][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.555103][ T5923] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 372.574009][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.574039][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.691086][ T67] veth1_macvtap: left promiscuous mode [ 372.691213][ T67] veth0_macvtap: left promiscuous mode [ 372.691503][ T67] veth1_vlan: left promiscuous mode [ 372.691709][ T67] veth0_vlan: left promiscuous mode [ 372.705086][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 372.723693][ T5923] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 372.723721][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.723738][ T5923] usb 1-1: Product: syz [ 372.723751][ T5923] usb 1-1: Manufacturer: syz [ 372.723763][ T5923] usb 1-1: SerialNumber: syz [ 372.725137][ T991] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 372.772394][ T5923] usb 1-1: config 0 descriptor?? [ 372.782297][ T5923] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 372.892102][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 372.892150][ T991] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 372.892170][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.915821][ T991] usb 4-1: config 0 descriptor?? [ 373.363611][ T991] asus 0003:0B05:17E0.0032: item fetching failed at offset 2/5 [ 373.364422][ T991] asus 0003:0B05:17E0.0032: Asus hid parse failed: -22 [ 373.364520][ T991] asus 0003:0B05:17E0.0032: probe with driver asus failed with error -22 [ 373.397412][ T5923] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 373.412912][ T5923] usb 1-1: USB disconnect, device number 27 [ 373.573047][ T1215] usb 4-1: USB disconnect, device number 41 [ 374.169506][ T37] audit: type=1326 audit(1756668779.671:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13587 comm="syz.3.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 374.169837][ T37] audit: type=1326 audit(1756668779.671:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13587 comm="syz.3.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 374.170532][ T37] audit: type=1326 audit(1756668779.671:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13587 comm="syz.3.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 374.170804][ T37] audit: type=1326 audit(1756668779.671:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13587 comm="syz.3.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 374.174797][ T37] audit: type=1326 audit(1756668779.671:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13587 comm="syz.3.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 374.177736][ T37] audit: type=1326 audit(1756668779.671:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13587 comm="syz.3.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 374.178489][ T37] audit: type=1326 audit(1756668779.681:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13587 comm="syz.3.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 375.796197][ T67] team0 (unregistering): Port device team_slave_1 removed [ 375.996125][ T67] team0 (unregistering): Port device team_slave_0 removed [ 378.250276][T13321] hsr_slave_0: entered promiscuous mode [ 378.251067][T13321] hsr_slave_1: entered promiscuous mode [ 378.783692][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.783767][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.949120][T13617] loop4: detected capacity change from 0 to 524255232 [ 379.465091][ T1236] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 379.512341][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3535'. [ 379.627351][ T1236] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 379.627378][ T1236] usb 1-1: config 0 has no interface number 0 [ 379.627424][ T1236] usb 1-1: config 0 interface 176 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.627447][ T1236] usb 1-1: config 0 interface 176 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.627482][ T1236] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 379.627503][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.689143][ T45] IPVS: starting estimator thread 0... [ 379.704060][ T1236] usb 1-1: config 0 descriptor?? [ 379.795196][T13637] IPVS: using max 9 ests per chain, 21600 per kthread [ 380.129106][ T1236] uclogic 0003:256C:006D.0033: interface is invalid, ignoring [ 380.260191][T13321] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 380.304758][T13321] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 380.340238][ T45] usb 1-1: USB disconnect, device number 28 [ 380.400294][T13321] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 380.476686][T13321] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 380.758241][T13321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.859767][T13321] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.899585][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.899817][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.932260][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.932417][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.975050][ T5923] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 381.147470][ T5923] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.147497][ T5923] usb 5-1: config 0 has no interface number 0 [ 381.147542][ T5923] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 381.147562][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.188281][ T5923] usb 5-1: config 0 descriptor?? [ 381.208055][ T5923] usb 5-1: selecting invalid altsetting 1 [ 381.209406][ T5923] dvb_ttusb_budget: ttusb_init_controller: error [ 381.209422][ T5923] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 381.305328][ T991] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 381.435125][ T5923] DVB: Unable to find symbol cx22700_attach() [ 381.455159][ T991] usb 4-1: Using ep0 maxpacket: 32 [ 381.465951][ T991] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.480112][ T991] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 381.480139][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.480156][ T991] usb 4-1: Product: syz [ 381.480168][ T991] usb 4-1: Manufacturer: syz [ 381.480180][ T991] usb 4-1: SerialNumber: syz [ 381.507067][ T991] usb 4-1: config 0 descriptor?? [ 381.516975][ T45] kernel write not supported for file /vcs (pid: 45 comm: kworker/1:1) [ 381.551106][ T5923] DVB: Unable to find symbol tda10046_attach() [ 381.551121][ T5923] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 381.553701][ T5923] usb 5-1: USB disconnect, device number 35 [ 381.632538][T13321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.936844][ T991] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 382.093119][T13700] loop4: detected capacity change from 0 to 524255232 [ 382.145142][ T991] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 382.147499][ T991] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 382.192341][ T991] usb 4-1: USB disconnect, device number 42 [ 382.249850][T13702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3559'. [ 382.252204][T13321] veth0_vlan: entered promiscuous mode [ 382.279791][T13321] veth1_vlan: entered promiscuous mode [ 382.403473][T13706] tmpfs: Cannot change global quota limit on remount [ 382.404687][T13321] veth0_macvtap: entered promiscuous mode [ 382.500221][T13708] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 382.503075][T13321] veth1_macvtap: entered promiscuous mode [ 382.579461][T13321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.598442][T13321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.629536][ T1167] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.646053][ T1167] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.650106][ T1167] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.654820][T13712] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3564'. [ 382.692064][ T1167] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.119811][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.119831][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.224076][T13720] tipc: Started in network mode [ 383.224105][T13720] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 383.242492][T13720] tipc: Enabled bearer , priority 10 [ 383.252545][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.252564][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.295392][T13722] netlink: 'syz.3.3569': attribute type 4 has an invalid length. [ 383.393091][T13722] netlink: 'syz.3.3569': attribute type 4 has an invalid length. [ 384.338593][ T1215] tipc: Node number set to 10398378 [ 384.436041][T13763] netlink: 336 bytes leftover after parsing attributes in process `syz.7.3584'. [ 384.436064][T13763] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3584'. [ 384.436112][T13763] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3584'. [ 384.647981][T13774] netlink: 'syz.0.3590': attribute type 1 has an invalid length. [ 384.648001][T13774] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3590'. [ 384.648018][T13774] netlink: 'syz.0.3590': attribute type 1 has an invalid length. [ 384.648029][T13774] netlink: 'syz.0.3590': attribute type 2 has an invalid length. [ 385.268466][ T5930] IPVS: starting estimator thread 0... [ 385.365906][T13805] IPVS: using max 8 ests per chain, 19200 per kthread [ 385.941284][T13838] program syz.4.3620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 387.055078][ T5930] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 387.222759][ T5930] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 387.222790][ T5930] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.222811][ T5930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 387.222843][ T5930] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 387.222861][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.237322][ T5930] usb 5-1: config 0 descriptor?? [ 387.280844][T13886] sp0: Synchronizing with TNC [ 387.616116][T13896] ptrace attach of "./syz-executor exec"[5851] was attempted by ""[13896] [ 387.695660][ T5930] hid_parser_main: 643 callbacks suppressed [ 387.695683][ T5930] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 387.695714][ T5930] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 387.695738][ T5930] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 387.695763][ T5930] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 387.695880][ T5930] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 387.695905][ T5930] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 387.695930][ T5930] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 387.695955][ T5930] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 387.700976][ T5930] holtek_mouse 0003:04D9:A067.0034: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.4-1/input0 [ 387.914069][ T5930] usb 5-1: USB disconnect, device number 36 [ 388.156217][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.180508][T13906] devpts: Bad value for 'max' [ 388.655840][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.966277][ T37] audit: type=1326 audit(1756668794.461:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13930 comm="syz.4.3664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e2a60ebe9 code=0x0 [ 389.465179][T13946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3671'. [ 389.835149][T13958] vxcan1: entered allmulticast mode [ 389.874964][ T37] audit: type=1326 audit(1756668795.371:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13959 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 389.875019][ T37] audit: type=1326 audit(1756668795.371:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13959 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 389.875060][ T37] audit: type=1326 audit(1756668795.371:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13959 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 389.875108][ T37] audit: type=1326 audit(1756668795.371:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13959 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 389.875147][ T37] audit: type=1326 audit(1756668795.371:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13959 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 390.383993][T13982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3688'. [ 391.562362][T14017] IPVS: Error joining to the multicast group [ 391.734020][T14029] usb usb1: check_ctrlrecip: process 14029 (syz.7.3710) requesting ep 01 but needs 81 [ 391.993759][T14039] netlink: 'syz.0.3715': attribute type 31 has an invalid length. [ 392.290242][T14048] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 392.748858][T14068] zonefs (nullb0) ERROR: Not a zoned block device [ 392.965334][ T991] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 393.118237][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.118282][ T991] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 393.118303][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.128547][ T991] usb 5-1: config 0 descriptor?? [ 393.282820][T14090] netlink: 'syz.0.3740': attribute type 2 has an invalid length. [ 393.617852][ T991] nintendo 0003:057E:200E.0035: unbalanced delimiter at end of report description [ 393.618740][ T991] nintendo 0003:057E:200E.0035: HID parse failed [ 393.644132][ T991] nintendo 0003:057E:200E.0035: probe - fail = -22 [ 393.644253][ T991] nintendo 0003:057E:200E.0035: probe with driver nintendo failed with error -22 [ 393.801769][ T5930] usb 5-1: USB disconnect, device number 37 [ 394.095452][ T5930] IPVS: starting estimator thread 0... [ 394.097155][T14113] IPVS: ip_vs_edit_dest(): server weight less than zero [ 394.195173][T14114] IPVS: using max 7 ests per chain, 16800 per kthread [ 394.335548][T14122] sp0: Synchronizing with TNC [ 394.417237][ T37] audit: type=1326 audit(1756668799.921:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.0.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42dd5ebe9 code=0x7ffc0000 [ 394.420288][ T37] audit: type=1326 audit(1756668799.921:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.0.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd42dd5ebe9 code=0x7ffc0000 [ 394.421165][ T37] audit: type=1326 audit(1756668799.921:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.0.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42dd5ebe9 code=0x7ffc0000 [ 394.421424][ T37] audit: type=1326 audit(1756668799.921:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.0.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42dd5ebe9 code=0x7ffc0000 [ 394.422310][ T37] audit: type=1326 audit(1756668799.921:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.0.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fd42dd5ebe9 code=0x7ffc0000 [ 394.422665][ T37] audit: type=1326 audit(1756668799.921:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.0.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42dd5ebe9 code=0x7ffc0000 [ 394.422930][ T37] audit: type=1326 audit(1756668799.921:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.0.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42dd5ebe9 code=0x7ffc0000 [ 394.718437][T14136] netlink: 'syz.7.3761': attribute type 1 has an invalid length. [ 394.718457][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3761'. [ 395.556861][ T37] audit: type=1800 audit(1756668801.061:88): pid=14167 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.3775" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 398.013740][T14266] netlink: 'syz.0.3823': attribute type 5 has an invalid length. [ 398.153039][T14271] tmpfs: Cannot retroactively limit inodes [ 398.799254][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3839'. [ 399.850634][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3865'. [ 399.972317][T14358] netlink: 'syz.4.3868': attribute type 3 has an invalid length. [ 400.221326][T14368] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3873'. [ 400.221383][T14368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3873'. [ 400.735090][ T991] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 400.889961][ T991] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.889986][ T991] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.891388][ T991] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 400.891413][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 400.891430][ T991] usb 4-1: SerialNumber: syz [ 401.142181][ T991] usb 4-1: 0:2 : does not exist [ 401.199394][ T991] usb 4-1: USB disconnect, device number 43 [ 402.634730][T14455] batadv0: entered promiscuous mode [ 402.647253][T14455] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 402.720460][T14455] batadv0: left promiscuous mode [ 403.763003][T14490] netlink: 'syz.7.3931': attribute type 2 has an invalid length. [ 404.062558][T14504] tipc: Started in network mode [ 404.062586][T14504] tipc: Node identity 00000000000000000040000000000001, cluster identity 4711 [ 404.062637][T14504] tipc: Enabling of bearer rejected, failed to enable media [ 404.077349][T14502] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 404.108268][T14499] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 404.622267][T14526] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3948'. [ 404.748074][T14528] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3949'. [ 405.882572][ T37] audit: type=1326 audit(1756668811.381:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 405.882623][ T37] audit: type=1326 audit(1756668811.381:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 405.895952][ T37] audit: type=1326 audit(1756668811.401:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 405.964856][ T37] audit: type=1326 audit(1756668811.461:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 405.975178][ T37] audit: type=1326 audit(1756668811.461:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 405.985566][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3975'. [ 406.800115][T14618] gfs2: path_lookup on c:::!(>yo=O-FmSH_Y8yu [ 406.800115][T14618] FãzR #xI6BYCg)'!A{g [ 406.800115][T14618] }m]x%{qm*PN~%U5JhBoGhN].L.`$ returned error -2 [ 407.102179][T14629] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3997'. [ 407.427007][T14643] gretap0: entered promiscuous mode [ 407.427432][T14643] vlan3: entered promiscuous mode [ 408.065138][ T1215] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 408.218606][ T1215] usb 5-1: unable to get BOS descriptor or descriptor too short [ 408.220186][ T1215] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 408.224613][ T1215] usb 5-1: string descriptor 0 read error: -22 [ 408.224762][ T1215] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 408.224783][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.425857][ T1215] usb 5-1: reset high-speed USB device number 38 using dummy_hcd [ 408.515099][ T10] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 408.692841][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 408.692874][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.694130][ T10] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 408.694156][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 408.694174][ T10] usb 4-1: Manufacturer: syz [ 408.712236][ T10] usb 4-1: config 0 descriptor?? [ 409.155461][ T1215] usb 5-1: device descriptor read/64, error -71 [ 409.180672][ T10] cougar 0003:060B:700A.0036: unknown main item tag 0x0 [ 409.180706][ T10] cougar 0003:060B:700A.0036: unknown main item tag 0x0 [ 409.180731][ T10] cougar 0003:060B:700A.0036: unknown main item tag 0x0 [ 409.180756][ T10] cougar 0003:060B:700A.0036: unknown main item tag 0x0 [ 409.180780][ T10] cougar 0003:060B:700A.0036: unknown main item tag 0x0 [ 409.194038][ T10] cougar 0003:060B:700A.0036: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 409.401024][ T10] usb 4-1: USB disconnect, device number 44 [ 409.415274][ T1215] usb 5-1: reset high-speed USB device number 38 using dummy_hcd [ 409.603240][ T1215] usb 5-1: unable to get BOS descriptor or descriptor too short [ 409.633747][ T1215] usb 5-1: device firmware changed [ 409.678958][ T1215] usb 5-1: USB disconnect, device number 38 [ 409.976475][T14697] ieee802154 phy0 wpan0: encryption failed: -126 [ 409.983679][T14695] netlink: 'syz.6.4029': attribute type 49 has an invalid length. [ 410.218686][T14707] netlink: 'syz.3.4035': attribute type 2 has an invalid length. [ 410.241074][T14707] : entered promiscuous mode [ 410.504736][T14721] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 410.505399][ T1215] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 410.659284][ T1215] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 410.659312][ T1215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.673587][ T1215] usb 5-1: config 0 descriptor?? [ 410.681324][ T1215] cp210x 5-1:0.0: cp210x converter detected [ 410.988348][T14737] devpts: Bad value for 'max' [ 411.109152][ T1215] usb 5-1: cp210x converter now attached to ttyUSB0 [ 411.302180][ T10] usb 5-1: USB disconnect, device number 39 [ 411.309270][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 411.445854][ T10] cp210x 5-1:0.0: device disconnected [ 412.453572][T14765] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 413.018617][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4069'. [ 413.167209][ T5843] Bluetooth: hci5: command tx timeout [ 413.226942][T14757] syz.0.4060 (14757): drop_caches: 2 [ 413.298210][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4073'. [ 413.298233][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4073'. [ 413.298267][T14785] netlink: 'syz.4.4073': attribute type 13 has an invalid length. [ 413.660266][T14801] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 413.660321][T14801] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 413.660411][T14801] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 413.660555][T14801] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 413.660602][T14801] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 413.660649][T14801] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 413.660775][T14801] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 413.660821][T14801] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 413.660868][T14801] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 413.660953][T14801] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 413.661005][T14801] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 413.661051][T14801] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 413.901635][T14809] netlink: 'syz.0.4085': attribute type 2 has an invalid length. [ 413.901657][T14809] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.4085'. [ 414.146587][ T37] audit: type=1326 audit(1756668819.651:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14815 comm="syz.7.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1973cebe9 code=0x7ffc0000 [ 414.146632][ T37] audit: type=1326 audit(1756668819.651:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14815 comm="syz.7.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1973cebe9 code=0x7ffc0000 [ 414.154422][ T37] audit: type=1326 audit(1756668819.651:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14815 comm="syz.7.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc1973cebe9 code=0x7ffc0000 [ 414.154472][ T37] audit: type=1326 audit(1756668819.651:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14815 comm="syz.7.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1973cebe9 code=0x7ffc0000 [ 414.154512][ T37] audit: type=1326 audit(1756668819.651:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14815 comm="syz.7.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1973cebe9 code=0x7ffc0000 [ 414.182768][ T37] audit: type=1326 audit(1756668819.681:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14815 comm="syz.7.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc1973cebe9 code=0x7ffc0000 [ 414.182832][ T37] audit: type=1326 audit(1756668819.681:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14815 comm="syz.7.4088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1973cebe9 code=0x7ffc0000 [ 414.862479][T14840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4099'. [ 416.110288][T14867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4112'. [ 416.453366][T14876] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 416.453392][T14876] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 416.453495][T14876] vhci_hcd vhci_hcd.0: Device attached [ 416.665254][ T45] vhci_hcd: vhci_device speed not set [ 416.693960][T14888] veth1_macvtap: left promiscuous mode [ 416.693986][T14888] macsec0: entered allmulticast mode [ 416.706155][ T5930] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 416.725070][ T45] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 416.747661][T14888] veth1_macvtap: entered promiscuous mode [ 416.747709][T14888] veth1_macvtap: entered allmulticast mode [ 416.751259][T14888] macsec0: left allmulticast mode [ 416.751274][T14888] veth1_macvtap: left allmulticast mode [ 416.857795][ T5930] usb 5-1: config 0 has no interfaces? [ 416.857832][ T5930] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 416.857852][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.871199][ T5930] usb 5-1: config 0 descriptor?? [ 416.887468][T14891] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 416.887468][T14891] The task syz.7.4122 (14891) triggered the difference, watch for misbehavior. [ 417.105572][ T5930] usb 5-1: USB disconnect, device number 40 [ 417.115142][T14877] vhci_hcd: connection reset by peer [ 417.126618][ T57] vhci_hcd: stop threads [ 417.126639][ T57] vhci_hcd: release socket [ 417.143935][ T57] vhci_hcd: disconnect device [ 417.165690][ T45] vhci_hcd: vhci_device speed not set [ 418.200174][T14806] syz.6.4083 (14806): drop_caches: 1 [ 418.497755][T14943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4146'. [ 419.353895][T14980] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4166'. [ 419.353923][T14980] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4166'. [ 419.354582][T14980] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 419.853630][T15001] netlink: 'syz.4.4176': attribute type 1 has an invalid length. [ 419.853644][T15001] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.4176'. [ 420.685333][ T5923] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 420.835099][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 420.837673][ T5923] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 420.837699][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.843143][ T5923] usb 5-1: config 0 descriptor?? [ 421.163717][T15038] netlink: 'syz.3.4194': attribute type 15 has an invalid length. [ 421.268601][ T5923] konepure 0003:1E7D:2DBE.0037: hidraw0: USB HID v1.01 Device [HID 1e7d:2dbe] on usb-dummy_hcd.4-1/input0 [ 421.470370][ T5923] usb 5-1: USB disconnect, device number 41 [ 421.795339][ T45] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 421.953602][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.953633][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.953669][ T45] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 421.953690][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.009992][ T45] usb 4-1: config 0 descriptor?? [ 422.212824][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4206'. [ 422.422602][T15068] sctp: [Deprecated]: syz.4.4209 (pid 15068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.422602][T15068] Use struct sctp_sack_info instead [ 422.485605][ T45] uclogic 0003:5543:0522.0038: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 422.647409][ T5923] usb 4-1: USB disconnect, device number 45 [ 423.016369][ T45] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 423.175176][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 423.177985][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.178013][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.178047][ T45] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 423.178066][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.229561][ T45] usb 5-1: config 0 descriptor?? [ 423.648979][ T45] hid_mf 0003:0079:1801.0039: item fetching failed at offset 0/2 [ 423.649656][ T45] hid_mf 0003:0079:1801.0039: HID parse failed. [ 423.649719][ T45] hid_mf 0003:0079:1801.0039: probe with driver hid_mf failed with error -22 [ 423.664453][T15110] xfs: Unexpected value for 'discard' [ 423.773378][T15114] netlink: 'syz.0.4230': attribute type 12 has an invalid length. [ 423.773399][T15114] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4230'. [ 423.859558][ T5930] usb 5-1: USB disconnect, device number 42 [ 425.524020][T15179] program syz.7.4261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.905163][ T45] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 426.065133][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 426.070963][ T45] usb 4-1: config 10 has an invalid interface number: 184 but max is 0 [ 426.070987][ T45] usb 4-1: config 10 has no interface number 0 [ 426.071077][ T45] usb 4-1: config 10 interface 184 has no altsetting 0 [ 426.105369][ T45] usb 4-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=4a.d0 [ 426.105396][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.105414][ T45] usb 4-1: Product: syz [ 426.105426][ T45] usb 4-1: Manufacturer: syz [ 426.105439][ T45] usb 4-1: SerialNumber: syz [ 426.358357][ T45] usb-storage 4-1:10.184: USB Mass Storage device detected [ 426.363444][ T45] usb-storage 4-1:10.184: Quirks match for vid 054c pid 0069: 1 [ 426.450638][ T45] usb 4-1: USB disconnect, device number 46 [ 427.301918][T15232] vlan0: entered promiscuous mode [ 427.323238][T15232] team0: Port device vlan0 added [ 428.075337][ T5916] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 428.235209][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 428.237761][ T5916] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 428.237787][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.273373][ T5916] usb 4-1: config 0 descriptor?? [ 428.287594][ T5916] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 428.536705][ T5930] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 428.690749][ T5930] usb 5-1: config 9 has an invalid interface number: 88 but max is 1 [ 428.690775][ T5930] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 428.690792][ T5930] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 428.690808][ T5930] usb 5-1: config 9 has no interface number 1 [ 428.690868][ T5930] usb 5-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 428.690890][ T5930] usb 5-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 428.690909][ T5930] usb 5-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 428.690933][ T5930] usb 5-1: config 9 interface 88 has no altsetting 0 [ 428.725780][ T5930] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 428.725807][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.725825][ T5930] usb 5-1: Product: syz [ 428.725836][ T5930] usb 5-1: Manufacturer: syz [ 428.725847][ T5930] usb 5-1: SerialNumber: syz [ 428.890445][ T5916] gspca_vc032x: reg_w err -71 [ 428.890475][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890486][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890494][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890501][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890508][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890515][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890523][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890530][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890539][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890546][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890554][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890560][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890568][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890575][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890581][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890588][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890595][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890603][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 428.890611][ T5916] gspca_vc032x: Unknown sensor... [ 428.890703][ T5916] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 428.893984][ T5916] usb 4-1: USB disconnect, device number 47 [ 428.985217][ T5930] qmi_wwan 5-1:9.88: skipping garbage [ 428.985501][ T5930] qmi_wwan 5-1:9.88: probe with driver qmi_wwan failed with error -22 [ 429.040809][ T5930] usb 5-1: Could not set interface, error -71 [ 429.052125][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4310'. [ 429.060333][ T5930] usb 5-1: USB disconnect, device number 43 [ 429.213258][ T5843] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 429.361969][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4314'. [ 429.361991][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4314'. [ 429.362015][T15292] netlink: 'syz.0.4314': attribute type 11 has an invalid length. [ 429.362028][T15292] netlink: 'syz.0.4314': attribute type 13 has an invalid length. [ 430.124022][T15313] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 430.124079][T15313] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 430.124128][T15313] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 430.124310][T15313] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 430.124355][T15313] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 430.124401][T15313] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 431.944574][T15378] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4354'. [ 432.031606][ T37] audit: type=1326 audit(1756668837.531:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15380 comm="syz.3.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 432.031667][ T37] audit: type=1326 audit(1756668837.531:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15380 comm="syz.3.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 432.031707][ T37] audit: type=1326 audit(1756668837.531:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15380 comm="syz.3.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 432.031748][ T37] audit: type=1326 audit(1756668837.531:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15380 comm="syz.3.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 432.031788][ T37] audit: type=1326 audit(1756668837.531:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15380 comm="syz.3.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 432.638669][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4366'. [ 433.415690][T15438] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.453263][T15438] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.665680][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4388'. [ 434.305516][ T5916] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 434.457980][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.458006][ T5916] usb 5-1: config 0 has no interface number 0 [ 434.458052][ T5916] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 434.458072][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.498532][ T5916] usb 5-1: config 0 descriptor?? [ 434.516308][ T5916] usb 5-1: selecting invalid altsetting 1 [ 434.516485][ T5916] dvb_ttusb_budget: ttusb_init_controller: error [ 434.516498][ T5916] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 434.631615][ T5916] DVB: Unable to find symbol cx22700_attach() [ 434.712597][ T5916] DVB: Unable to find symbol tda10046_attach() [ 434.712612][ T5916] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 434.756582][ T5916] usb 5-1: USB disconnect, device number 44 [ 435.015341][T15499] ALSA: seq fatal error: cannot create timer (-19) [ 435.645167][ T5923] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 435.795056][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 435.797818][ T5923] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 435.797841][ T5923] usb 5-1: config 0 has no interface number 0 [ 435.801018][ T5923] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 435.801043][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.801060][ T5923] usb 5-1: Product: syz [ 435.801074][ T5923] usb 5-1: Manufacturer: syz [ 435.801086][ T5923] usb 5-1: SerialNumber: syz [ 435.851463][T15536] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4429'. [ 435.872555][ T5923] usb 5-1: config 0 descriptor?? [ 435.897513][ T5923] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 435.897538][ T5923] usb 5-1: selecting invalid altsetting 1 [ 435.897551][ T5923] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 435.902539][ T5923] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 435.902931][ T5923] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 435.902978][ T5923] usb 5-1: media controller created [ 435.977761][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.401384][T15554] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4438'. [ 437.085799][ T5923] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 437.085890][ T5923] zl10353_read_register: readreg error (reg=127, ret==-110) [ 437.089526][ T5923] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 437.228665][ T5923] usb 5-1: USB disconnect, device number 45 [ 437.427676][T15574] tipc: Enabling of bearer rejected, failed to enable media [ 438.041031][T15594] overlayfs: workdir and upperdir must be separate subtrees [ 438.278445][T15604] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4461'. [ 438.521294][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4466'. [ 438.820231][T15628] team_slave_0: entered promiscuous mode [ 438.820281][T15628] team_slave_1: entered promiscuous mode [ 438.839333][T15625] team_slave_0: left promiscuous mode [ 438.839429][T15625] team_slave_1: left promiscuous mode [ 439.014089][T15640] netlink: 'syz.4.4477': attribute type 13 has an invalid length. [ 439.231006][T15648] [U] N{st3 )Lbo7UюNQʈ tQZ4s [ 439.622709][T15640] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.623188][T15640] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.225785][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.225870][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.412269][T15640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.452166][T15640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.260561][ T5916] lo speed is unknown, defaulting to 1000 [ 441.260687][ T5916] syz2: Port: 1 Link DOWN [ 441.278964][T15652] netlink: 'syz.6.4485': attribute type 4 has an invalid length. [ 441.345156][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.345188][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.355874][ T67] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.355904][ T67] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.355940][ T67] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.355962][ T67] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.355994][ T67] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.356016][ T67] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.674817][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4499'. [ 442.917932][T15729] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (22) [ 444.032251][T15772] syz.6.4544 (15772) used obsolete PPPIOCDETACH ioctl [ 444.771772][ T37] audit: type=1326 audit(1756668850.271:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.3.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 444.771822][ T37] audit: type=1326 audit(1756668850.271:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.3.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 444.809258][ T37] audit: type=1326 audit(1756668850.311:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.3.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 444.815237][ T37] audit: type=1326 audit(1756668850.311:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.3.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 444.815281][ T37] audit: type=1326 audit(1756668850.311:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.3.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 444.815319][ T37] audit: type=1326 audit(1756668850.311:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.3.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 444.815356][ T37] audit: type=1326 audit(1756668850.311:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.3.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 444.815393][ T37] audit: type=1326 audit(1756668850.311:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.3.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 446.026024][T15861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4586'. [ 446.685105][ T5923] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 446.838092][ T5923] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 446.838121][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 446.838144][ T5923] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 446.841431][ T5923] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 446.841457][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.841474][ T5923] usb 5-1: Product: syz [ 446.841487][ T5923] usb 5-1: Manufacturer: syz [ 446.841499][ T5923] usb 5-1: SerialNumber: syz [ 446.910660][ T5923] usb 5-1: config 0 descriptor?? [ 446.911458][T15879] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 446.911574][T15879] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 446.935861][ T5923] usb 5-1: ucan: probing device on interface #0 [ 447.035477][ T45] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 447.188322][ T45] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 447.188353][ T45] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.188373][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 447.188404][ T45] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 447.188424][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.197075][ T45] usb 4-1: config 0 descriptor?? [ 447.529898][ T5923] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 447.558382][ T5923] usb 5-1: USB disconnect, device number 46 [ 447.649543][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4611'. [ 447.673848][ T45] kovaplus 0003:1E7D:2D50.003A: unknown main item tag 0x0 [ 447.673883][ T45] kovaplus 0003:1E7D:2D50.003A: unknown main item tag 0x0 [ 447.673907][ T45] kovaplus 0003:1E7D:2D50.003A: unknown main item tag 0x0 [ 447.691808][ T45] kovaplus 0003:1E7D:2D50.003A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 447.844586][T15913] program syz.6.4613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.883537][ T45] usb 4-1: USB disconnect, device number 48 [ 448.031364][T15919] bridge0: entered promiscuous mode [ 448.048045][T15919] bridge0: port 3(macsec1) entered blocking state [ 448.048279][T15919] bridge0: port 3(macsec1) entered disabled state [ 448.048466][T15919] macsec1: entered allmulticast mode [ 448.048480][T15919] bridge0: entered allmulticast mode [ 448.107107][T15919] macsec1: left allmulticast mode [ 448.107129][T15919] bridge0: left allmulticast mode [ 448.158290][T15919] bridge0: left promiscuous mode [ 448.302512][T15925] program syz.4.4619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.090887][T15954] ip6tnl2: entered promiscuous mode [ 449.090915][T15954] ip6tnl2: entered allmulticast mode [ 449.136756][T15954] team0: Device ip6tnl2 is of different type [ 449.180358][T15956] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4634'. [ 449.879044][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4652'. [ 450.839941][T16026] random: crng reseeded on system resumption [ 450.975701][T16026] Restarting kernel threads ... [ 450.994428][T16026] Done restarting kernel threads. [ 451.053585][T16031] loop6: detected capacity change from 0 to 524288000 [ 451.203389][T16035] netlink: 'syz.3.4674': attribute type 27 has an invalid length. [ 451.836461][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4684'. [ 451.853379][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4687'. [ 451.853402][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4687'. [ 452.319053][T16088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.672893][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4705'. [ 452.785240][T16106] netlink: 'syz.7.4706': attribute type 10 has an invalid length. [ 452.868975][T16106] batman_adv: batadv0: Adding interface: team0 [ 452.868991][T16106] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.869017][T16106] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 452.880986][T16106] netlink: 'syz.7.4706': attribute type 10 has an invalid length. [ 452.881006][T16106] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4706'. [ 452.881272][T16106] team0: entered promiscuous mode [ 452.881287][T16106] team_slave_0: entered promiscuous mode [ 452.881509][T16106] team_slave_1: entered promiscuous mode [ 452.891829][T16106] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.892129][T16106] batman_adv: batadv0: Interface activated: team0 [ 452.892175][T16106] batman_adv: batadv0: Interface deactivated: team0 [ 452.892194][T16106] batman_adv: batadv0: Removing interface: team0 [ 452.958130][ T37] audit: type=1326 audit(1756668859.462:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16109 comm="syz.3.4708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f789e715ba7 code=0x0 [ 453.029865][T16106] bridge0: port 3(team0) entered blocking state [ 453.030117][T16106] bridge0: port 3(team0) entered disabled state [ 453.030301][T16106] team0: entered allmulticast mode [ 453.030380][T16106] team_slave_0: entered allmulticast mode [ 453.030402][T16106] team_slave_1: entered allmulticast mode [ 453.044770][T16106] bridge0: port 3(team0) entered blocking state [ 453.048649][T16106] bridge0: port 3(team0) entered forwarding state [ 453.700819][T16140] sctp: [Deprecated]: syz.7.4722 (pid 16140) Use of int in maxseg socket option. [ 453.700819][T16140] Use struct sctp_assoc_value instead [ 453.908716][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4729'. [ 454.226542][ T45] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 454.247694][ T45] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 455.005100][ T5930] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 455.201259][ T5930] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 455.201284][ T5930] usb 5-1: config 0 has no interface number 0 [ 455.201315][ T5930] usb 5-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 455.201370][ T5930] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.201393][ T5930] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.201412][ T5930] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 455.201451][ T5930] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 455.201471][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.231080][ T5930] usb 5-1: config 0 descriptor?? [ 455.667521][ T5930] wacom 0003:056A:0084.003C: unknown main item tag 0x0 [ 455.667554][ T5930] wacom 0003:056A:0084.003C: unknown main item tag 0x0 [ 455.686868][ T5930] wacom 0003:056A:0084.003C: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.4-1/input2 [ 455.866702][ T45] usb 5-1: USB disconnect, device number 47 [ 457.327347][ T37] audit: type=1326 audit(1756668863.832:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16280 comm="syz.0.4791" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd42dd5ebe9 code=0x0 [ 457.334728][T16285] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 457.334753][T16285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 457.338352][T16285] vhci_hcd vhci_hcd.0: Device attached [ 457.586861][ T5930] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 457.591431][ T5923] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 457.663247][T16298] netlink: 'syz.7.4798': attribute type 5 has an invalid length. [ 457.752190][ T5923] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 457.752218][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.752236][ T5923] usb 5-1: Product: syz [ 457.752248][ T5923] usb 5-1: Manufacturer: syz [ 457.752261][ T5923] usb 5-1: SerialNumber: syz [ 457.763077][ T5923] usb 5-1: config 0 descriptor?? [ 457.807583][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4799'. [ 457.925691][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.975069][T16286] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 457.988519][ T12] vhci_hcd: stop threads [ 457.988538][ T12] vhci_hcd: release socket [ 457.988609][ T12] vhci_hcd: disconnect device [ 457.989855][ T5923] usb 5-1: Firmware version (0.0) predates our first public release. [ 457.989876][ T5923] usb 5-1: Please update to version 0.2 or newer [ 458.001198][T16307] program syz.6.4802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.575924][ T5923] usb 5-1: USB disconnect, device number 48 [ 458.866145][T16338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4815'. [ 458.974452][T16335] sp0: Synchronizing with TNC [ 458.977253][T16333] [U] ` [ 459.211858][ T37] audit: type=1800 audit(1756668865.712:116): pid=16345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4818" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 459.440026][T16352] netlink: 'syz.6.4825': attribute type 10 has an invalid length. [ 459.481207][T16352] batman_adv: batadv0: Adding interface: team0 [ 459.481224][T16352] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.481249][T16352] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 459.525168][T16352] netlink: 'syz.6.4825': attribute type 10 has an invalid length. [ 459.525189][T16352] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4825'. [ 459.525384][T16352] team0: entered promiscuous mode [ 459.525400][T16352] team_slave_0: entered promiscuous mode [ 459.525738][T16352] team_slave_1: entered promiscuous mode [ 459.528326][T16352] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.541227][T16352] batman_adv: batadv0: Interface activated: team0 [ 459.541281][T16352] batman_adv: batadv0: Interface deactivated: team0 [ 459.541300][T16352] batman_adv: batadv0: Removing interface: team0 [ 459.626680][T16352] bridge0: port 3(team0) entered blocking state [ 459.626813][T16352] bridge0: port 3(team0) entered disabled state [ 459.626991][T16352] team0: entered allmulticast mode [ 459.627004][T16352] team_slave_0: entered allmulticast mode [ 459.627026][T16352] team_slave_1: entered allmulticast mode [ 459.634410][T16352] bridge0: port 3(team0) entered blocking state [ 459.642429][T16352] bridge0: port 3(team0) entered forwarding state [ 459.975123][T16372] syz.6.4829 (16372): /proc/16370/oom_adj is deprecated, please use /proc/16370/oom_score_adj instead. [ 461.123936][T16432] netlink: 'syz.7.4859': attribute type 6 has an invalid length. [ 461.265289][ T5923] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 461.355282][ T5916] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 461.435480][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 461.437820][ T5923] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 461.437844][ T5923] usb 5-1: config 0 has no interface number 0 [ 461.441025][ T5923] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 461.441051][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.441069][ T5923] usb 5-1: Product: syz [ 461.441081][ T5923] usb 5-1: Manufacturer: syz [ 461.441094][ T5923] usb 5-1: SerialNumber: syz [ 461.455882][ T5923] usb 5-1: config 0 descriptor?? [ 461.463780][ T5923] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 461.463803][ T5923] usb 5-1: selecting invalid altsetting 1 [ 461.463817][ T5923] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 461.503326][ T5923] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 461.503708][ T5923] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 461.503752][ T5923] usb 5-1: media controller created [ 461.565373][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 461.575566][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.575610][ T5916] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 461.575639][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.612155][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.612185][ T5916] usb 4-1: config 0 descriptor?? [ 461.679237][T16446] netlink: 'syz.7.4866': attribute type 3 has an invalid length. [ 461.730545][ T5923] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 461.730602][ T5923] zl10353_read_register: readreg error (reg=127, ret==-71) [ 461.731097][ T5923] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 461.765491][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4867'. [ 461.856648][ T5923] usb 5-1: USB disconnect, device number 49 [ 462.232864][ T5916] usb 4-1: string descriptor 0 read error: -71 [ 462.233375][ T5916] uclogic 0003:5543:004D.003D: failed retrieving string descriptor #200: -71 [ 462.233430][ T5916] uclogic 0003:5543:004D.003D: failed retrieving pen parameters: -71 [ 462.233446][ T5916] uclogic 0003:5543:004D.003D: failed probing pen v2 parameters: -71 [ 462.233494][ T5916] uclogic 0003:5543:004D.003D: failed probing parameters: -71 [ 462.233605][ T5916] uclogic 0003:5543:004D.003D: probe with driver uclogic failed with error -71 [ 462.290516][ T5916] usb 4-1: USB disconnect, device number 49 [ 462.372021][ T37] audit: type=1800 audit(1756668868.872:117): pid=16461 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.4873" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 462.695374][ T5930] vhci_hcd: vhci_device speed not set [ 462.775307][T16410] Bluetooth: hci1: command 0x0419 tx timeout [ 463.365899][T16486] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 464.025932][T16513] binder: 16512:16513 ioctl 400c620e 200000000000 returned -22 [ 465.721428][T16517] syz.4.4900 (16517): drop_caches: 2 [ 465.758079][ T37] audit: type=1326 audit(1756668872.262:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16565 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 465.767297][ T37] audit: type=1326 audit(1756668872.262:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16565 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 465.776657][ T37] audit: type=1326 audit(1756668872.282:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16565 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 465.776706][ T37] audit: type=1326 audit(1756668872.282:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16565 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 465.776744][ T37] audit: type=1326 audit(1756668872.282:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16565 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 465.778027][ T37] audit: type=1326 audit(1756668872.282:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16565 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 465.778358][ T37] audit: type=1326 audit(1756668872.282:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16565 comm="syz.3.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789e71ebe9 code=0x7ffc0000 [ 466.215308][ T5916] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 466.295289][ T5923] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 466.382714][ T5916] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 466.382732][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.382741][ T5916] usb 5-1: Product: syz [ 466.382748][ T5916] usb 5-1: Manufacturer: syz [ 466.382755][ T5916] usb 5-1: SerialNumber: syz [ 466.437124][ T5916] usb 5-1: config 0 descriptor?? [ 466.455315][ T5923] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 466.455340][ T5923] usb 4-1: config 0 has no interface number 0 [ 466.455368][ T5923] usb 4-1: config 0 interface 128 has no altsetting 0 [ 466.461219][ T5923] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 466.461244][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.461262][ T5923] usb 4-1: Product: syz [ 466.461275][ T5923] usb 4-1: Manufacturer: syz [ 466.461288][ T5923] usb 4-1: SerialNumber: syz [ 466.483215][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4933'. [ 466.483246][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4933'. [ 466.559427][ T5923] usb 4-1: config 0 descriptor?? [ 466.574022][ T5923] radio-si470x 4-1:0.128: could not find interrupt in endpoint [ 466.574106][ T5923] radio-si470x 4-1:0.128: probe with driver radio-si470x failed with error -5 [ 466.577657][ T5923] usbhid 4-1:0.128: couldn't find an input interrupt endpoint [ 466.653247][ T5916] usb 5-1: USB disconnect, device number 50 [ 466.740737][T16592] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4936'. [ 466.740758][T16592] tipc: Invalid UDP bearer configuration [ 466.740798][T16592] tipc: Enabling of bearer rejected, failed to enable media [ 466.769069][ T5923] usb 4-1: USB disconnect, device number 50 [ 467.622335][T16612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4946'. [ 468.100496][ T37] audit: type=1326 audit(1756668874.602:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16629 comm="syz.4.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2a60ebe9 code=0x7ffc0000 [ 468.100549][ T37] audit: type=1326 audit(1756668874.602:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16629 comm="syz.4.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2a60ebe9 code=0x7ffc0000 [ 468.116628][ T37] audit: type=1326 audit(1756668874.622:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16629 comm="syz.4.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f0e2a60ebe9 code=0x7ffc0000 [ 468.325102][ T1236] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 468.475393][ T1236] usb 4-1: Using ep0 maxpacket: 16 [ 468.478075][ T1236] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.478098][ T1236] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.511103][ T1236] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.511130][ T1236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.511147][ T1236] usb 4-1: Product: syz [ 468.511160][ T1236] usb 4-1: Manufacturer: syz [ 468.511173][ T1236] usb 4-1: SerialNumber: syz [ 468.787643][ T1236] usb 4-1: USB disconnect, device number 51 [ 469.527103][T16685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.229548][T16719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.492916][T16777] syz.3.5024 (16777): drop_caches: 2 [ 473.605543][ T1215] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 473.761503][ T1215] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 473.761531][ T1215] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 473.761581][ T1215] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 473.761601][ T1215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.806122][ T1215] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 474.006863][ T1215] gspca_sn9c2028: read1 error -71 [ 474.007862][ T1215] gspca_sn9c2028: read1 error -71 [ 474.008334][ T1215] gspca_sn9c2028: read1 error -71 [ 474.008422][ T1215] sn9c2028 5-1:220.0: probe with driver sn9c2028 failed with error -71 [ 474.012491][ T1215] usb 5-1: USB disconnect, device number 51 [ 474.015102][ T1236] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 474.187081][ T1236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.187107][ T1236] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 474.187157][ T1236] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 474.187179][ T1236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.193030][ T1236] usb 4-1: config 0 descriptor?? [ 474.198861][ T1236] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 474.198907][ T1236] dvb-usb: bulk message failed: -22 (3/0) [ 474.216272][ T1236] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 474.217585][ T1236] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 474.217650][ T1236] usb 4-1: media controller created [ 474.220108][ T1236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.237020][ T1236] dvb-usb: bulk message failed: -22 (6/0) [ 474.237099][ T1236] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 474.241186][ T1236] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 474.248572][ T1236] dvb-usb: schedule remote query interval to 150 msecs. [ 474.248591][ T1236] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 474.409777][ T1236] dvb-usb: bulk message failed: -22 (1/0) [ 474.409841][ T1236] dvb-usb: error while querying for an remote control event. [ 474.413901][T16804] dvb-usb: bulk message failed: -22 (2/0) [ 474.417743][ T45] usb 4-1: USB disconnect, device number 52 [ 474.529112][ T45] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 475.205656][T16843] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 475.205680][T16843] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 475.205714][T16843] CPU: 0 UID: 0 PID: 16843 Comm: syz.7.5057 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 475.205736][T16843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 475.205751][T16843] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 475.205786][T16843] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c9 3f b3 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 a8 3f b3 f9 4d 8b 24 24 48 83 c3 [ 475.205802][T16843] RSP: 0018:ffffc90005ad7a60 EFLAGS: 00010206 [ 475.205827][T16843] RAX: 0000000000000005 RBX: ffff88802c0bf680 RCX: 0000000000080000 [ 475.205840][T16843] RDX: ffffc9000e1d2000 RSI: 00000000000003c4 RDI: 00000000000003c5 [ 475.205852][T16843] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 475.205863][T16843] R10: dffffc0000000000 R11: ffffffff886a3050 R12: 0000000000000028 [ 475.205875][T16843] R13: dffffc0000000000 R14: ffff88814d0c8800 R15: dffffc0000000000 [ 475.205890][T16843] FS: 00007fc19562e6c0(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 475.205905][T16843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.205918][T16843] CR2: 0000001b34623ffc CR3: 0000000049794000 CR4: 00000000003526f0 [ 475.205934][T16843] Call Trace: [ 475.205942][T16843] [ 475.205951][T16843] pcl818_detach+0x66/0xd0 [ 475.205978][T16843] comedi_device_detach_locked+0x175/0x750 [ 475.206003][T16843] comedi_unlocked_ioctl+0xce4/0x1020 [ 475.206025][T16843] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 475.206050][T16843] ? __pfx_smack_log+0x10/0x10 [ 475.206073][T16843] ? smk_access+0x14c/0x4e0 [ 475.206099][T16843] ? smk_tskacc+0x2fc/0x370 [ 475.206123][T16843] ? smack_file_ioctl+0x24d/0x340 [ 475.206142][T16843] ? __pfx_smack_file_ioctl+0x10/0x10 [ 475.206163][T16843] ? __fget_files+0x2a/0x420 [ 475.206186][T16843] ? __fget_files+0x3a6/0x420 [ 475.206207][T16843] ? __fget_files+0x2a/0x420 [ 475.206230][T16843] ? bpf_lsm_file_ioctl+0x9/0x20 [ 475.206249][T16843] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 475.206267][T16843] __se_sys_ioctl+0xfc/0x170 [ 475.206286][T16843] do_syscall_64+0xfa/0x3b0 [ 475.206308][T16843] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.206329][T16843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.206347][T16843] ? clear_bhb_loop+0x60/0xb0 [ 475.206367][T16843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.206384][T16843] RIP: 0033:0x7fc1973cebe9 [ 475.206409][T16843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.206424][T16843] RSP: 002b:00007fc19562e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.206443][T16843] RAX: ffffffffffffffda RBX: 00007fc197605fa0 RCX: 00007fc1973cebe9 [ 475.206456][T16843] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 475.206467][T16843] RBP: 00007fc197451e19 R08: 0000000000000000 R09: 0000000000000000 [ 475.206479][T16843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.206490][T16843] R13: 00007fc197606038 R14: 00007fc197605fa0 R15: 00007ffc0af230e8 [ 475.206511][T16843] [ 475.206521][T16843] Modules linked in: [ 475.206537][T16843] ---[ end trace 0000000000000000 ]--- [ 475.206548][T16843] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 475.206570][T16843] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c9 3f b3 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 a8 3f b3 f9 4d 8b 24 24 48 83 c3 [ 475.206585][T16843] RSP: 0018:ffffc90005ad7a60 EFLAGS: 00010206 [ 475.206600][T16843] RAX: 0000000000000005 RBX: ffff88802c0bf680 RCX: 0000000000080000 [ 475.206612][T16843] RDX: ffffc9000e1d2000 RSI: 00000000000003c4 RDI: 00000000000003c5 [ 475.206624][T16843] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 475.206635][T16843] R10: dffffc0000000000 R11: ffffffff886a3050 R12: 0000000000000028 [ 475.206649][T16843] R13: dffffc0000000000 R14: ffff88814d0c8800 R15: dffffc0000000000 [ 475.206663][T16843] FS: 00007fc19562e6c0(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 475.206680][T16843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.206693][T16843] CR2: 0000001b34623ffc CR3: 0000000049794000 CR4: 00000000003526f0 [ 475.206710][T16843] Kernel panic - not syncing: Fatal exception [ 475.206981][T16843] Kernel Offset: disabled