last executing test programs: 1m36.085380122s ago: executing program 1 (id=1499): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') lseek(r1, 0x10001, 0x4) 1m35.986840091s ago: executing program 1 (id=1500): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) listxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=""/4096, 0x1000) 1m35.825018303s ago: executing program 1 (id=1502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000400)={0xeeef0004, 0x2000, 0x1}) 1m35.155143047s ago: executing program 1 (id=1514): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m34.906130686s ago: executing program 1 (id=1516): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000005b00000000000000", @ANYRES32, @ANYBLOB="04"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r3, &(0x7f00000006c0)}, 0x20) 1m34.186383457s ago: executing program 1 (id=1525): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00', 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x3], 0x0, 0x0, 0x2}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) 1m33.624887684s ago: executing program 32 (id=1525): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00', 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x3], 0x0, 0x0, 0x2}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) 45.939134734s ago: executing program 5 (id=1886): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000a00)=""/39, 0x27}], 0x1}, 0x400}], 0x1, 0x11102, 0x0) 45.645766265s ago: executing program 5 (id=1888): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x43000c80) umount2(&(0x7f0000000000)='./file0\x00', 0xa) 45.13373136s ago: executing program 5 (id=1890): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)=""/87, 0x57}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="2670e400a7cd2502df7986430458f68b124c93cfde5e8611861d74a5572162658ecb1f0717e5b2f49b6d2f60797d2975a524be5f71a43b3dadfa6e06f319bf57fb379cf068a0920ef790b0a8c7288632220046ce2922bc20d8f6ec8902c7b2b0a962fe09a3f14946fcd55fcebaa1294cb515cbdb5d25a98010fc3c7e8e6eb254451832f7b5944de95d2b2608b9c4ba8fd75f6c9d98007df452e472f9b1e9d30b90779ee42fcd88e8b4175066b73858f4164bd1bb22ebd829dc8d90fd8516187e40417efc5c759ada70450be2efd08b40ed4e77ea41920c381dcf69fd6a", 0xdd}, {&(0x7f00000001c0)="53812f25b1e42e134f4e75a76aad6ce9d6e1727644d2179fdb23bdb4a90dedb3ddcde79706ee102d63e1589cb57c5d038803359f1e3a928b0a61189782f3b37c9680813d0ab217665df4b2d515c27f4e8df80a0dfee70129ebab9d4779a5ad4260a674b13a1b364ec09325f6a7e51e6a732d376442cba82eed6473ef3c162e12dff86e8ec888be76181667ca6b360f1ae6160f821780abbb17c558d25a1ae439710b5f6d1e8347f52dafe63e88d4ba3b9dbaebc2fcd5b9a3ab53d9", 0xbb}, {&(0x7f00000012c0)="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", 0xe69}], 0x3) 44.745929755s ago: executing program 5 (id=1894): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 44.475653005s ago: executing program 5 (id=1897): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001c00)="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", 0x1015}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x20041000) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4088, 0xff8}, {&(0x7f00000000c0)=""/28, 0x1c}], 0x2}, 0x2) 43.715610213s ago: executing program 5 (id=1902): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0xc080}, 0x0) 43.328252806s ago: executing program 33 (id=1902): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0xc080}, 0x0) 3.803281037s ago: executing program 6 (id=2147): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 3.22796329s ago: executing program 6 (id=2150): r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.891955137s ago: executing program 6 (id=2151): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x9362, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) 2.8632766s ago: executing program 3 (id=2153): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x0, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1200, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x23}, @fda={0x66646185, 0x0, 0x1, 0xd}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000003000040"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.719251647s ago: executing program 6 (id=2154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000280)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x4, r2, 0x1}) 2.548111274s ago: executing program 2 (id=2156): ioperm(0x0, 0x2, 0x7e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0xa8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.547983841s ago: executing program 3 (id=2158): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000001140)=0x10000000) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd2894000000000000010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.547894691s ago: executing program 4 (id=2159): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000600)="f6", 0x1, 0x80c5, &(0x7f00000001c0)={0xa, 0x0, 0x400, @local, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) 2.27435778s ago: executing program 6 (id=2161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xffff}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xe}}]}}]}, 0x38}}, 0x20040054) 2.266308757s ago: executing program 4 (id=2162): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0x2616}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) 1.989807443s ago: executing program 4 (id=2163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) 1.623824816s ago: executing program 4 (id=2165): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 1.509075985s ago: executing program 2 (id=2166): r0 = userfaultfd(0x801) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 1.328171395s ago: executing program 4 (id=2168): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1fff}) 1.307922148s ago: executing program 0 (id=2169): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.216601209s ago: executing program 6 (id=2170): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) 1.190041495s ago: executing program 2 (id=2171): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001811000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 1.107914582s ago: executing program 0 (id=2172): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001540)=""/4131, 0x1023) sendmmsg$alg(r1, &(0x7f00000091c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004840)="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", 0x1000}, {&(0x7f00000000c0)="dd75a7e68f4ef5eabdff29937a621b11d941526bb35c8d71ebb744248afbe5d1e6816b", 0x23}], 0x2}], 0x1, 0x48001) 1.098570249s ago: executing program 4 (id=2173): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 1.036030706s ago: executing program 2 (id=2174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) capset(0x0, &(0x7f0000000000)={0x800009, 0x0, 0x1, 0x4, 0x5}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x4019b06985a57826, 0xa, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x1, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0x10, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0xf, 0x0, 0x4, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000, 0x2}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x1, 0x0, 0x1, 0x401]}) 933.648176ms ago: executing program 0 (id=2175): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 693.52639ms ago: executing program 2 (id=2176): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x20018001) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/257, 0x101}], 0x1}, 0x2) 652.905589ms ago: executing program 0 (id=2177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xffffff7f, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 615.957468ms ago: executing program 3 (id=2178): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 486.37441ms ago: executing program 2 (id=2179): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x109) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tcp_congestion(r0, &(0x7f0000000240)='cdg\x00', 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) 460.884786ms ago: executing program 3 (id=2180): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x1f6}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r0, r1, 0x0) 402.00963ms ago: executing program 0 (id=2181): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 203.68788ms ago: executing program 0 (id=2182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000340)="0fc79fc83766b95e0b000066b813c1000066ba000000000f30f20f2db00000b89c000f00d866b92409000066b89fc9000066ba000000000f300f684b00670fdf12baa000b085ee9ab600640036f30f1efa", 0x51}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 105.741226ms ago: executing program 3 (id=2183): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x8880) 0s ago: executing program 3 (id=2184): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x0, 0xfffffffe, 0x2}) kernel console output (not intermixed with test programs): ] loop2: partition table partially beyond EOD, truncated [ 177.660081][ T7640] loop2: p3 start 335544320 is beyond EOD, truncated [ 177.865864][ T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.020805][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 178.023084][ T44] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 178.023104][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.023124][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.028750][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.028774][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.028791][ T44] usb 4-1: Product: syz [ 178.028803][ T44] usb 4-1: Manufacturer: syz [ 178.028815][ T44] usb 4-1: SerialNumber: syz [ 178.346599][ T5920] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 178.512067][ T5920] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 178.512094][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.554332][ T44] usb 4-1: 0:2 : does not exist [ 178.592189][ T5920] usb 3-1: config 0 descriptor?? [ 179.455989][ T44] usb 4-1: USB disconnect, device number 10 [ 179.554606][ T7672] loop2: detected capacity change from 0 to 7 [ 179.577035][ T7672] Dev loop2: unable to read RDB block 7 [ 179.577066][ T7672] loop2: AHDI p3 p4 [ 179.577092][ T7672] loop2: partition table partially beyond EOD, truncated [ 179.577337][ T7672] loop2: p3 start 1869967406 is beyond EOD, truncated [ 179.935316][ T5920] usb 3-1: Cannot set autoneg [ 179.935584][ T5920] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 179.962280][ T5920] usb 3-1: USB disconnect, device number 9 [ 180.172925][ T37] audit: type=1326 audit(436.008:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68afbebe9 code=0x7ffc0000 [ 180.175391][ T37] audit: type=1326 audit(436.008:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68afbebe9 code=0x7ffc0000 [ 180.220556][ T37] audit: type=1326 audit(436.058:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68afbebe9 code=0x7ffc0000 [ 180.220961][ T37] audit: type=1326 audit(436.058:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68afbebe9 code=0x7ffc0000 [ 180.221181][ T37] audit: type=1326 audit(436.058:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68afbebe9 code=0x7ffc0000 [ 180.221904][ T37] audit: type=1326 audit(436.058:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68afbebe9 code=0x7ffc0000 [ 180.222111][ T37] audit: type=1326 audit(436.058:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68afbebe9 code=0x7ffc0000 [ 180.222330][ T37] audit: type=1326 audit(436.058:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68afbebe9 code=0x7ffc0000 [ 180.222693][ T37] audit: type=1326 audit(436.058:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68afbebe9 code=0x7ffc0000 [ 180.225128][ T37] audit: type=1326 audit(436.058:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68afbebe9 code=0x7ffc0000 [ 181.042714][ T5851] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 181.195841][ T5851] usb 5-1: Using ep0 maxpacket: 16 [ 181.198159][ T5851] usb 5-1: config 0 has no interfaces? [ 181.198192][ T5851] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 181.198212][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.203708][ T5851] usb 5-1: config 0 descriptor?? [ 181.410638][ T5851] usb 5-1: USB disconnect, device number 6 [ 182.325845][ T44] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 182.491416][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.491445][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.491484][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.491504][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.774266][ T44] usb 4-1: usb_control_msg returned -32 [ 182.774310][ T44] usbtmc 4-1:16.0: can't read capabilities [ 183.165777][ T7748] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 183.170437][ T44] usb 4-1: USB disconnect, device number 11 [ 183.405047][ T7756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.877123][ T7766] syzkaller1: entered promiscuous mode [ 183.877148][ T7766] syzkaller1: entered allmulticast mode [ 184.490675][ T7775] delete_channel: no stack [ 185.296141][ T5851] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.460529][ T5851] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.460600][ T5851] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.460638][ T5851] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 185.463648][ T5851] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.463673][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.463690][ T5851] usb 3-1: Product: syz [ 185.463702][ T5851] usb 3-1: Manufacturer: syz [ 185.463722][ T5851] usb 3-1: SerialNumber: syz [ 185.553620][ T5851] cdc_mbim 3-1:1.0: skipping garbage [ 186.568758][ T5851] cdc_mbim 3-1:1.0: bind() failure [ 186.575603][ T5851] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 186.575647][ T5851] cdc_ncm 3-1:1.1: bind() failure [ 186.626340][ T5851] usb 3-1: USB disconnect, device number 10 [ 186.643953][ T6182] udevd[6182]: failed to send result of seq 12990 to main daemon: Connection refused [ 187.140071][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.326172][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.405948][ T5907] IPVS: starting estimator thread 0... [ 187.517724][ T7861] IPVS: using max 7 ests per chain, 16800 per kthread [ 188.059854][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 188.522483][ T7910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.610142][ T7915] Bluetooth: hci0: too big key_count value 39401 [ 189.725911][ T5907] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.877607][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 189.879942][ T5907] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 189.879966][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.885468][ T5907] usb 2-1: config 0 descriptor?? [ 190.112539][ T5907] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 191.138052][ T5907] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 191.138081][ T5907] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 191.138360][ T5907] asix 2-1:0.0: probe with driver asix failed with error -71 [ 191.168366][ T5907] usb 2-1: USB disconnect, device number 9 [ 192.378323][ T8006] netlink: 64 bytes leftover after parsing attributes in process `syz.0.790'. [ 192.466383][ T8009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.791'. [ 192.466409][ T8009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.791'. [ 192.515842][ T5927] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 192.678528][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.678583][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 192.678608][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.678626][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 192.680163][ T5927] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 192.680185][ T5927] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 192.680202][ T5927] usb 3-1: Manufacturer: syz [ 192.751999][ T5927] usb 3-1: config 0 descriptor?? [ 193.206724][ T5927] rc_core: IR keymap rc-hauppauge not found [ 193.206743][ T5927] Registered IR keymap rc-empty [ 193.206898][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 193.243718][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 193.271210][ T5927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 193.294187][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 193.318928][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 193.336457][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 193.356263][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 193.376257][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 193.395923][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 193.418246][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 193.435914][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 193.455914][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 193.478959][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 193.496050][ T5927] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 193.539605][ T5927] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 193.539686][ T5927] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 193.618343][ T10] usb 3-1: USB disconnect, device number 11 [ 193.878466][ T8034] IPVS: stopping master sync thread 8035 ... [ 193.946743][ T5920] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 194.052216][ T8037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.150344][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.150375][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.150395][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.150434][ T5920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.150454][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.161836][ T5920] usb 2-1: config 0 descriptor?? [ 194.252474][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.252548][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.611235][ T5920] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 194.941391][ T5851] usb 2-1: USB disconnect, device number 10 [ 196.110935][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 196.110968][ T8090] netlink: 'syz.1.823': attribute type 30 has an invalid length. [ 196.154136][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 196.176499][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 196.176530][ T8090] netlink: 'syz.1.823': attribute type 30 has an invalid length. [ 196.489632][ T43] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.622363][ T43] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.623916][ T43] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.623954][ T43] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.848412][ T8116] netlink: 'syz.2.834': attribute type 13 has an invalid length. [ 197.286247][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.288299][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.251035][ T8116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.270257][ T8116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.276121][ T5920] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 198.444361][ T5920] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 198.444394][ T5920] usb 5-1: config 150 has no interface number 0 [ 198.444442][ T5920] usb 5-1: config 150 interface 204 has no altsetting 0 [ 198.444459][ T5920] usb 5-1: config 150 interface 1 has no altsetting 0 [ 198.450363][ T5920] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 198.450388][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.450406][ T5920] usb 5-1: Product: syz [ 198.450418][ T5920] usb 5-1: Manufacturer: syz [ 198.450429][ T5920] usb 5-1: SerialNumber: syz [ 198.672918][ T5920] xr_serial 5-1:150.204: xr_serial converter detected [ 199.317447][ T43] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.448190][ T43] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.448663][ T1165] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.448699][ T1165] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.489488][ T5920] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 199.686891][ T5907] usb 5-1: USB disconnect, device number 7 [ 199.695226][ T5907] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 199.698640][ T5907] xr_serial 5-1:150.204: device disconnected [ 199.858255][ T8177] netlink: 'syz.3.860': attribute type 4 has an invalid length. [ 199.858275][ T8177] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.860'. [ 199.911590][ T8180] loop6: detected capacity change from 0 to 1 [ 199.940159][ T8180] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 199.940284][ T8180] loop6: p1 start 1048576 is beyond EOD, truncated [ 199.940302][ T8180] loop6: p2 size 458752 extends beyond EOD, truncated [ 199.959814][ T8180] loop6: p3 start 12666 is beyond EOD, truncated [ 199.959835][ T8180] loop6: p4 start 16387 is beyond EOD, truncated [ 199.959850][ T8180] loop6: p5 start 2037579777 is beyond EOD, truncated [ 199.959864][ T8180] loop6: p6 start 425986 is beyond EOD, truncated [ 200.369386][ T8199] netlink: 'syz.0.869': attribute type 13 has an invalid length. [ 200.369407][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 200.454848][ T8199] netlink: 'syz.0.869': attribute type 13 has an invalid length. [ 200.454868][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 200.454988][ T1165] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.456484][ T1165] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.456524][ T1165] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.456556][ T1165] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.857769][ T8218] loop7: detected capacity change from 0 to 7 [ 200.878864][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'. [ 200.891531][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.891687][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.893083][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.893120][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.893351][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.893376][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.893552][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.893576][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.895070][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.895098][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.913276][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.913310][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.914831][ T8218] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.914858][ T8218] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.915027][ T8218] ldm_validate_partition_table(): Disk read failed. [ 200.915083][ T8218] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.915104][ T8218] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.915233][ T8218] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.915254][ T8218] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.915371][ T8218] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.915390][ T8218] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.919441][ T8218] Dev loop7: unable to read RDB block 0 [ 200.920006][ T8218] loop7: unable to read partition table [ 200.920243][ T8218] loop7: partition table beyond EOD, truncated [ 200.920259][ T8218] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 201.451026][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 201.451042][ T37] audit: type=1326 audit(457.288:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97cfebe9 code=0x7ffc0000 [ 201.451087][ T37] audit: type=1326 audit(457.288:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97cfebe9 code=0x7ffc0000 [ 201.470433][ T37] audit: type=1326 audit(457.308:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1f97cfebe9 code=0x7ffc0000 [ 201.472368][ T37] audit: type=1326 audit(457.308:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97cfebe9 code=0x7ffc0000 [ 201.479345][ T37] audit: type=1326 audit(457.318:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97cfebe9 code=0x7ffc0000 [ 201.480334][ T37] audit: type=1326 audit(457.318:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1f97cfebe9 code=0x7ffc0000 [ 201.504945][ T37] audit: type=1326 audit(457.338:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97cfebe9 code=0x7ffc0000 [ 201.504993][ T37] audit: type=1326 audit(457.338:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97cfebe9 code=0x7ffc0000 [ 201.511858][ T37] audit: type=1326 audit(457.348:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f1f97cfebe9 code=0x7ffc0000 [ 201.511907][ T37] audit: type=1326 audit(457.348:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97cfebe9 code=0x7ffc0000 [ 201.664509][ T8241] netlink: 'syz.3.886': attribute type 1 has an invalid length. [ 201.875537][ T8241] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.133587][ T8245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.136358][ T8245] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 202.147566][ T8245] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 203.198060][ T8285] veth1_to_bond: entered allmulticast mode [ 203.198270][ T8285] veth1_to_bond: entered promiscuous mode [ 203.199206][ T8284] veth1_to_bond: left promiscuous mode [ 203.199928][ T8284] veth1_to_bond: left allmulticast mode [ 203.479622][ T8288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.561132][ T8295] netlink: 752 bytes leftover after parsing attributes in process `syz.4.910'. [ 204.185747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 204.282235][ T8305] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 204.282254][ T8305] netlink: 'syz.2.914': attribute type 4 has an invalid length. [ 204.282265][ T8305] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.914'. [ 204.925807][ T5851] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 205.079952][ T5851] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.079981][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.080003][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.080020][ T5851] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.080056][ T5851] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.080074][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.085226][ T5851] usb 5-1: config 0 descriptor?? [ 205.487532][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.600808][ T5851] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 205.663153][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.663182][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.663204][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.663223][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.663262][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.663281][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.670596][ T8339] netlink: 'syz.1.928': attribute type 10 has an invalid length. [ 205.696484][ T10] usb 4-1: config 0 descriptor?? [ 205.746163][ T8340] netlink: 'syz.1.928': attribute type 10 has an invalid length. [ 205.800361][ T8339] team0: Port device dummy0 added [ 205.884052][ T8340] team0: Port device dummy0 removed [ 205.949740][ T8340] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 205.966478][ T44] usb 5-1: USB disconnect, device number 8 [ 206.217579][ T10] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 206.247909][ T10] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 207.505875][ T44] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 207.546724][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 207.655801][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 207.680789][ T44] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 207.680816][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.680833][ T44] usb 5-1: Product: syz [ 207.680845][ T44] usb 5-1: Manufacturer: syz [ 207.680858][ T44] usb 5-1: SerialNumber: syz [ 207.719987][ T44] usb 5-1: config 0 descriptor?? [ 208.167624][ T8363] input: syz1 as /devices/virtual/input/input15 [ 208.331953][ T44] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 208.393050][ T10] usb 4-1: USB disconnect, device number 12 [ 208.536287][ T44] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 208.560131][ T44] usb 5-1: USB disconnect, device number 9 [ 209.526837][ T8400] atomic_op ffff888021bbaa18 conn xmit_atomic 0000000000000000 [ 209.748151][ T5836] kernel write not supported for file bpf-prog (pid: 5836 comm: kworker/1:3) [ 211.301076][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880368cd000: rx timeout, send abort [ 211.304591][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cfd0400: rx timeout, send abort [ 211.304787][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880368cd000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 211.306617][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804cfd0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 212.639260][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 212.639278][ T37] audit: type=1326 audit(468.468:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8462 comm="syz.3.981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f930b77ebe9 code=0x0 [ 212.915243][ T8472] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.944973][ T8472] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 213.761528][ T8494] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 213.761565][ T8494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.994'. [ 213.761591][ T8494] netlink: 'syz.2.994': attribute type 2 has an invalid length. [ 213.761602][ T8494] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 214.108357][ T8505] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.998'. [ 214.314488][ T8514] netlink: 'syz.0.1002': attribute type 12 has an invalid length. [ 214.314508][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 214.314758][ T8514] netlink: 'syz.0.1002': attribute type 12 has an invalid length. [ 214.314772][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 214.350940][ T5927] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 214.508204][ T5927] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 214.508228][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.510917][ T5927] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.510941][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.510958][ T5927] usb 4-1: Product: syz [ 214.510970][ T5927] usb 4-1: Manufacturer: syz [ 214.510982][ T5927] usb 4-1: SerialNumber: syz [ 214.788712][ T5927] usb 4-1: 0:2 : does not exist [ 214.808328][ T5927] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 214.869132][ T5927] usb 4-1: USB disconnect, device number 13 [ 214.878627][ T8529] netlink: 'syz.2.1009': attribute type 9 has an invalid length. [ 214.878646][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 214.943346][ T1358] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.943582][ T1358] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.943617][ T1358] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.943650][ T1358] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.943810][ T8529] netlink: 'syz.2.1009': attribute type 9 has an invalid length. [ 214.943823][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 215.245803][ T5851] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 215.397518][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 215.402810][ T5851] usb 2-1: config 0 has an invalid interface number: 38 but max is 0 [ 215.402835][ T5851] usb 2-1: config 0 has no interface number 0 [ 215.402864][ T5851] usb 2-1: config 0 interface 38 has no altsetting 0 [ 215.416418][ T5851] usb 2-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 215.416445][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.416462][ T5851] usb 2-1: Product: syz [ 215.416474][ T5851] usb 2-1: Manufacturer: syz [ 215.416486][ T5851] usb 2-1: SerialNumber: syz [ 215.469263][ T5851] usb 2-1: config 0 descriptor?? [ 215.481727][ T5851] usb-storage 2-1:0.38: USB Mass Storage device detected [ 215.676481][ T5851] usb 2-1: USB disconnect, device number 11 [ 215.738458][ T8556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1020'. [ 215.811798][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 215.811831][ T8561] netlink: 'syz.2.1022': attribute type 30 has an invalid length. [ 215.926246][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1020'. [ 215.926274][ T8562] nbd: device at index 64 is going down [ 216.046947][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 216.046981][ T8561] netlink: 'syz.2.1022': attribute type 30 has an invalid length. [ 216.478842][ T8575] netlink: 'syz.0.1028': attribute type 39 has an invalid length. [ 216.715927][ T5851] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 216.870814][ T5851] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 216.870839][ T5851] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.870853][ T5851] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.870872][ T5851] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 216.870958][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.926949][ T5851] usb 2-1: config 0 descriptor?? [ 216.928852][ T8577] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.197026][ T6033] libceph: connect (1)[c::]:6789 error -101 [ 217.197245][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 217.210858][ T6033] libceph: connect (1)[c::]:6789 error -101 [ 217.211067][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 217.359339][ T5851] kye 0003:0458:5015.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 217.363856][ T5851] kye 0003:0458:5015.0010: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 217.363873][ T5851] kye 0003:0458:5015.0010: tablet-enabling feature report not found [ 217.363879][ T5851] kye 0003:0458:5015.0010: tablet enabling failed [ 217.468075][ T6033] libceph: connect (1)[c::]:6789 error -101 [ 217.468257][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 217.560470][ T5851] usb 2-1: USB disconnect, device number 12 [ 217.976239][ T6033] libceph: connect (1)[c::]:6789 error -101 [ 217.976474][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 218.003697][ T8594] ceph: No mds server is up or the cluster is laggy [ 218.995820][ T5836] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 219.010032][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a40c400: rx timeout, send abort [ 219.145903][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 219.146957][ T5836] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 219.172026][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.176800][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.200946][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.221348][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.244190][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.245155][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.245700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 219.278591][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.298491][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.316940][ T5836] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 219.316966][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 219.316983][ T5836] usb 3-1: SerialNumber: syz [ 219.363636][ T5836] usb 3-1: config 0 descriptor?? [ 219.386584][ T5836] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 219.421571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 219.421827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 219.422002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 219.510114][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a40c400: abort rx timeout. Force session deactivation [ 219.513537][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a40fc00: rx timeout, send abort [ 219.693916][ T6033] usb 3-1: USB disconnect, device number 12 [ 219.715408][ T5190] bcm5974 3-1:0.0: could not read from device [ 219.825686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 220.013621][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a40fc00: abort rx timeout. Force session deactivation [ 220.026790][ T8641] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 220.026808][ T8641] netlink: 'syz.0.1053': attribute type 10 has an invalid length. [ 220.026820][ T8641] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1053'. [ 220.130895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 221.039760][ T8653] batadv_slave_1: entered promiscuous mode [ 221.043442][ T8652] batadv_slave_1: left promiscuous mode [ 222.709255][ T8695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.628269][ T8722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.818378][ T8749] netlink: 'syz.3.1098': attribute type 13 has an invalid length. [ 225.574784][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.577885][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.892589][ T8759] input: syz1 as /devices/virtual/input/input17 [ 226.529222][ T8749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.596268][ T8749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.606266][ T8749] syz_tun: left allmulticast mode [ 227.793353][ T2148] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.796005][ T2148] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.796047][ T2148] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.796080][ T2148] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.169278][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 228.315898][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 228.318420][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 228.318443][ T10] usb 4-1: config 0 has no interface number 0 [ 228.318490][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 228.321987][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 228.322012][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.322039][ T10] usb 4-1: Product: syz [ 228.322051][ T10] usb 4-1: Manufacturer: syz [ 228.322063][ T10] usb 4-1: SerialNumber: syz [ 228.341446][ T10] usb 4-1: config 0 descriptor?? [ 228.351908][ T10] smsc75xx v1.0.0 [ 228.990099][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 228.990127][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 229.074245][ T8818] netlink: 'syz.4.1126': attribute type 4 has an invalid length. [ 229.114622][ T8818] netlink: 'syz.4.1126': attribute type 4 has an invalid length. [ 229.395199][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 229.395246][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 229.395263][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 229.395547][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 229.414901][ T10] usb 4-1: USB disconnect, device number 14 [ 231.638130][ T8881] input: syz0 as /devices/virtual/input/input18 [ 232.030380][ T8901] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1159'. [ 232.491437][ T8921] kvm: MONITOR instruction emulated as NOP! [ 233.128068][ T8934] wg2: entered promiscuous mode [ 233.128097][ T8934] wg2: entered allmulticast mode [ 233.528241][ T37] audit: type=1326 audit(489.368:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8944 comm="syz.1.1179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f670227ebe9 code=0x0 [ 233.905937][ T6033] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 234.085772][ T6033] usb 4-1: Using ep0 maxpacket: 32 [ 234.088740][ T6033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.088770][ T6033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.088807][ T6033] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.088835][ T6033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.103848][ T6033] usb 4-1: config 0 descriptor?? [ 234.113368][ T6033] hub 4-1:0.0: USB hub found [ 234.336227][ T6033] hub 4-1:0.0: 1 port detected [ 234.764980][ T6033] kernel read not supported for file /admmidi2 (pid: 6033 comm: kworker/0:7) [ 234.956596][ T6033] hub 4-1:0.0: activate --> -90 [ 235.359664][ T5836] usb 4-1: USB disconnect, device number 15 [ 235.607606][ T6033] usb 4-1-port1: config error [ 236.385833][ T6033] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 236.561591][ T6033] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.561615][ T6033] usb 2-1: config 0 has no interface number 0 [ 236.561668][ T6033] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 236.561688][ T6033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.579732][ T6033] usb 2-1: config 0 descriptor?? [ 236.596637][ T6033] cp210x 2-1:0.1: cp210x converter detected [ 237.004417][ T6033] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 237.212973][ T6033] usb 2-1: cp210x converter now attached to ttyUSB0 [ 237.414959][ T6033] usb 2-1: USB disconnect, device number 13 [ 237.440842][ T6033] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 237.566211][ T6033] cp210x 2-1:0.1: device disconnected [ 237.950856][ T9051] Illegal XDP return value 1715994659 on prog (id 176) dev N/A, expect packet loss! [ 239.187255][ T9077] block nbd4: shutting down sockets [ 239.546419][ T9084] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 239.815758][ T6033] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 239.985791][ T6033] usb 5-1: Using ep0 maxpacket: 32 [ 239.991656][ T6033] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 239.991681][ T6033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.991755][ T6033] usb 5-1: Product: syz [ 239.991768][ T6033] usb 5-1: Manufacturer: syz [ 239.991780][ T6033] usb 5-1: SerialNumber: syz [ 240.008398][ T6033] usb 5-1: config 0 descriptor?? [ 240.036990][ T6033] as10x_usb: device has been detected [ 240.038705][ T6033] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 240.169916][ T6033] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 240.351454][ T6033] as10x_usb: error during firmware upload part1 [ 240.352176][ T6033] Registered device Abilis Systems DVB-Titan [ 240.375887][ T6033] usb 5-1: USB disconnect, device number 10 [ 240.510218][ T6033] Unregistered device Abilis Systems DVB-Titan [ 240.522454][ T6033] as10x_usb: device has been disconnected [ 240.551213][ T9110] syz.1.1248 (9110): drop_caches: 4 [ 241.347909][ T9121] netlink: 'syz.2.1254': attribute type 1 has an invalid length. [ 241.347930][ T9121] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1254'. [ 241.347944][ T9121] netlink: 'syz.2.1254': attribute type 2 has an invalid length. [ 241.347955][ T9121] netlink: 'syz.2.1254': attribute type 1 has an invalid length. [ 242.468531][ T9126] overlayfs: statfs failed on './file0' [ 242.829337][ T9157] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1267'. [ 243.732519][ T9183] trusted_key: syz.1.1278 sent an empty control message without MSG_MORE. [ 243.930510][ T9187] netlink: 'syz.1.1280': attribute type 11 has an invalid length. [ 244.535767][ T5836] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 244.689331][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.689360][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.689390][ T5836] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 244.689408][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.696796][ T5836] usb 3-1: config 0 descriptor?? [ 245.180312][ T5836] hkems 0003:2006:0118.0011: unbalanced delimiter at end of report description [ 245.184649][ T5836] hkems 0003:2006:0118.0011: parse failed [ 245.184718][ T5836] hkems 0003:2006:0118.0011: probe with driver hkems failed with error -22 [ 245.362225][ T5836] usb 3-1: USB disconnect, device number 13 [ 246.914244][ T9233] syz.4.1295 (9233) used greatest stack depth: 16760 bytes left [ 247.784157][ T9277] vlan2: entered allmulticast mode [ 247.784181][ T9277] dummy0: entered allmulticast mode [ 248.599658][ T9292] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 249.565925][ T6033] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 249.716063][ T6033] usb 4-1: Using ep0 maxpacket: 32 [ 249.721494][ T6033] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 249.721522][ T6033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.757299][ T6033] usb 4-1: config 0 descriptor?? [ 249.987677][ T6033] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 250.030319][ T6033] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.033154][ T6033] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 250.033553][ T6033] usb 4-1: media controller created [ 250.054872][ T9315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.104648][ T6033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.204842][ T6033] az6027: usb out operation failed. (-71) [ 250.205368][ T6033] az6027: usb out operation failed. (-71) [ 250.205380][ T6033] stb0899_attach: Driver disabled by Kconfig [ 250.205388][ T6033] az6027: no front-end attached [ 250.205388][ T6033] [ 250.235884][ T6033] az6027: usb out operation failed. (-71) [ 250.235901][ T6033] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 250.240173][ T6033] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 250.282096][ T6033] dvb-usb: schedule remote query interval to 400 msecs. [ 250.282116][ T6033] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 250.303852][ T6033] usb 4-1: USB disconnect, device number 16 [ 250.385823][ T44] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 250.503678][ T6033] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 250.545132][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 250.547700][ T44] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 250.547722][ T44] usb 3-1: config 0 has no interface number 0 [ 250.547767][ T44] usb 3-1: config 0 interface 12 has no altsetting 0 [ 250.584803][ T44] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 250.584829][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.584846][ T44] usb 3-1: Product: syz [ 250.584858][ T44] usb 3-1: Manufacturer: syz [ 250.584870][ T44] usb 3-1: SerialNumber: syz [ 250.598314][ T44] usb 3-1: config 0 descriptor?? [ 250.917837][ T9334] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 250.917863][ T9334] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.130615][ T9337] input: syz0 as /devices/virtual/input/input20 [ 251.870317][ T44] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 251.870369][ T44] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 251.870384][ T44] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 251.870483][ T44] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 251.915547][ T44] usb 3-1: USB disconnect, device number 14 [ 251.956768][ T37] audit: type=1326 audit(507.788:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9351 comm="syz.1.1346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f670227ebe9 code=0x0 [ 252.432538][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1353'. [ 252.566222][ T6033] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 252.715789][ T6033] usb 5-1: Using ep0 maxpacket: 32 [ 252.718212][ T6033] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 252.718237][ T6033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.751238][ T6033] usb 5-1: config 0 descriptor?? [ 252.955926][ T6033] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 252.986613][ T6033] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.991081][ T6033] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 252.991135][ T6033] usb 5-1: media controller created [ 253.044947][ T6033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.157490][ T6033] az6027: usb out operation failed. (-71) [ 253.157896][ T6033] az6027: usb out operation failed. (-71) [ 253.157908][ T6033] stb0899_attach: Driver disabled by Kconfig [ 253.157917][ T6033] az6027: no front-end attached [ 253.157917][ T6033] [ 253.158307][ T6033] az6027: usb out operation failed. (-71) [ 253.158319][ T6033] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 253.161257][ T6033] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 253.214471][ T6033] dvb-usb: schedule remote query interval to 400 msecs. [ 253.214491][ T6033] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 253.232222][ T6033] usb 5-1: USB disconnect, device number 11 [ 253.414413][ T6033] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 253.519378][ T9387] Invalid ELF header magic: != ELF [ 254.297394][ T44] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 254.465867][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 254.483663][ T44] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 254.483691][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.483707][ T44] usb 2-1: Product: syz [ 254.483719][ T44] usb 2-1: Manufacturer: syz [ 254.483732][ T44] usb 2-1: SerialNumber: syz [ 254.498950][ T44] usb 2-1: config 0 descriptor?? [ 254.527805][ T44] as10x_usb: device has been detected [ 254.528642][ T44] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 254.578426][ T44] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 254.597205][ T44] as10x_usb: error during firmware upload part1 [ 254.597912][ T44] Registered device Abilis Systems DVB-Titan [ 254.735570][ T44] usb 2-1: USB disconnect, device number 14 [ 254.813496][ T44] Unregistered device Abilis Systems DVB-Titan [ 254.868288][ T44] as10x_usb: device has been disconnected [ 255.482253][ T37] audit: type=1326 audit(511.318:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9448 comm="syz.2.1389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f97cfebe9 code=0x0 [ 255.695554][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.696716][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.910681][ T9461] netlink: 'syz.4.1393': attribute type 22 has an invalid length. [ 255.910699][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 256.043812][ T9461] netlink: 'syz.4.1393': attribute type 22 has an invalid length. [ 256.043827][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 256.438586][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'. [ 256.456701][ T9471] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 256.456723][ T9471] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 258.930618][ T9544] block nbd1: shutting down sockets [ 259.320680][ T9558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.345823][ T5907] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 259.508265][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.508290][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.509812][ T5907] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 259.509836][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 259.509854][ T5907] usb 4-1: SerialNumber: syz [ 259.535854][ T5836] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 259.698122][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 259.700455][ T5836] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.700484][ T5836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 259.700515][ T5836] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 259.700536][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.710146][ T5836] usb 3-1: config 0 descriptor?? [ 259.793524][ T5907] usb 4-1: 0:2 : does not exist [ 259.838373][ T5907] usb 4-1: USB disconnect, device number 17 [ 260.013076][ T9580] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 260.136861][ T5836] nzxt-smart2 0003:1E71:2009.0012: unknown main item tag 0x0 [ 260.136895][ T5836] nzxt-smart2 0003:1E71:2009.0012: unknown main item tag 0x0 [ 260.136920][ T5836] nzxt-smart2 0003:1E71:2009.0012: unknown main item tag 0x0 [ 260.136944][ T5836] nzxt-smart2 0003:1E71:2009.0012: unknown main item tag 0x0 [ 260.136967][ T5836] nzxt-smart2 0003:1E71:2009.0012: unknown main item tag 0x0 [ 260.146133][ T5836] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 260.255909][ T6033] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 260.365374][ T5836] usb 3-1: USB disconnect, device number 15 [ 260.415909][ T6033] usb 5-1: Using ep0 maxpacket: 16 [ 260.423245][ T6033] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 260.423271][ T6033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.423289][ T6033] usb 5-1: Product: syz [ 260.423301][ T6033] usb 5-1: Manufacturer: syz [ 260.423314][ T6033] usb 5-1: SerialNumber: syz [ 260.474898][ T6033] usb 5-1: config 0 descriptor?? [ 260.905254][ T9583] No source specified [ 260.910328][ T9601] block nbd3: NBD_DISCONNECT [ 260.914718][ T6033] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 260.929466][ T9601] block nbd3: Send disconnect failed -22 [ 260.933180][ T9598] block nbd3: Disconnected due to user request. [ 260.933199][ T9598] block nbd3: shutting down sockets [ 260.966362][ T6033] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.967341][ T6033] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 260.967396][ T6033] usb 5-1: media controller created [ 261.038073][ T6033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.654696][ T6033] zl10353_read_register: readreg error (reg=127, ret==0) [ 261.654715][ T9583] dtv5100: wlen = 0, aborting. [ 261.654757][ T6033] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 261.654769][ T6033] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 261.718066][ T5836] usb 5-1: USB disconnect, device number 12 [ 261.871992][ T5836] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 262.041256][ T9621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.240510][ T9638] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 265.022048][ T37] audit: type=1400 audit(520.828:64): lsm=SMACK fn=smk_curacc_msq action=denied subject="w" object="_" requested=rw pid=9664 comm="syz.3.1479" ipc_key=0 [ 265.446332][ T6033] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 265.618467][ T6033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.618496][ T6033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.618515][ T6033] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.618553][ T6033] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.618573][ T6033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.678997][ T6033] usb 4-1: config 0 descriptor?? [ 266.150325][ T6033] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 266.324995][ T9682] loop8: detected capacity change from 0 to 7 [ 266.360286][ T9682] Dev loop8: unable to read RDB block 7 [ 266.360330][ T9682] loop8: unable to read partition table [ 266.360562][ T9682] loop8: partition table beyond EOD, truncated [ 266.360579][ T9682] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 266.471599][ T9682] Dev loop8: unable to read RDB block 7 [ 266.471653][ T9682] loop8: unable to read partition table [ 266.496215][ T9682] loop8: partition table beyond EOD, truncated [ 266.496237][ T9682] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 267.782049][ T9701] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 267.782049][ T9701] Q [ 268.045506][ T9708] syzkaller1: entered promiscuous mode [ 268.045534][ T9708] syzkaller1: entered allmulticast mode [ 268.103567][ T44] usb 4-1: USB disconnect, device number 18 [ 268.309270][ T9717] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1501'. [ 268.718089][ T9733] netlink: 'syz.0.1508': attribute type 12 has an invalid length. [ 268.718108][ T9733] netlink: 'syz.0.1508': attribute type 29 has an invalid length. [ 268.718120][ T9733] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1508'. [ 268.718159][ T9733] netlink: 'syz.0.1508': attribute type 2 has an invalid length. [ 268.718171][ T9733] netlink: 'syz.0.1508': attribute type 3 has an invalid length. [ 268.718182][ T9733] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1508'. [ 268.810097][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 268.954693][ T9742] netlink: 'syz.2.1511': attribute type 1 has an invalid length. [ 269.107202][ T9749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.112396][ T9749] bond2: (slave bond3): making interface the new active one [ 269.112884][ T9749] bond2: (slave bond3): Enslaving as an active interface with an up link [ 269.774396][ T5927] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 269.785927][ T5927] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.955261][ T1165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.955293][ T1165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.218205][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.242481][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.244985][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.263076][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.264210][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.307140][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.309393][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.309974][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.312397][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.315538][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.547786][ T1165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.547817][ T1165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.312804][ T1165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.312838][ T1165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.395793][ T5927] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 272.548331][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.548362][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.548382][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.548421][ T5927] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.548441][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.554099][ T5927] usb 3-1: config 0 descriptor?? [ 272.749287][ T1165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.749320][ T1165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.000272][ T5927] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 273.262229][ T6033] usb 3-1: USB disconnect, device number 16 [ 273.365857][ T59] Bluetooth: hci0: command tx timeout [ 273.584455][ T9804] chnl_net:caif_netlink_parms(): no params data found [ 273.609266][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1555'. [ 273.609290][ T9868] bridge: RTM_NEWNEIGH with invalid ether address [ 273.609518][ T1165] bridge_slave_1: left allmulticast mode [ 273.609714][ T1165] bridge_slave_1: left promiscuous mode [ 273.614052][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.748714][ T1165] bridge_slave_0: left allmulticast mode [ 273.748746][ T1165] bridge_slave_0: left promiscuous mode [ 273.749002][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.943945][ T9877] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1559'. [ 274.458086][ T9892] Bluetooth: MGMT ver 1.23 [ 275.445908][ T59] Bluetooth: hci0: command tx timeout [ 277.406761][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.478206][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.525836][ T59] Bluetooth: hci0: command tx timeout [ 277.555229][ T1165] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 277.676131][ T1165] bond0 (unregistering): Released all slaves [ 278.546604][ T1165] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 278.546631][ T1165] vxcan3: left promiscuous mode [ 278.612062][ T1165] bond1 (unregistering): Released all slaves [ 279.161579][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1584'. [ 279.455839][ T44] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 279.607880][ T59] Bluetooth: hci0: command tx timeout [ 279.625744][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 279.630748][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.630801][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 279.630821][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.677774][ T44] usb 5-1: config 0 descriptor?? [ 279.687354][ T37] audit: type=1326 audit(792.523:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9945 comm="syz.3.1588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f930b77ebe9 code=0x0 [ 279.721545][ T44] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 280.195911][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.196048][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.196270][ T9804] bridge_slave_0: entered allmulticast mode [ 280.204654][ T9804] bridge_slave_0: entered promiscuous mode [ 280.218076][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.218230][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.218414][ T9804] bridge_slave_1: entered allmulticast mode [ 280.225778][ T9804] bridge_slave_1: entered promiscuous mode [ 280.481554][ T1165] hsr_slave_0: left promiscuous mode [ 280.482815][ T9963] input: syz1 as /devices/virtual/input/input22 [ 280.516323][ T1165] hsr_slave_1: left promiscuous mode [ 280.524025][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.524152][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.580605][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.580638][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.778193][ T1165] veth1_macvtap: left promiscuous mode [ 280.778525][ T1165] veth0_macvtap: left promiscuous mode [ 280.781320][ T1165] veth1_vlan: left promiscuous mode [ 280.784497][ T1165] veth0_vlan: left promiscuous mode [ 280.896733][ T44] gspca_vc032x: reg_w err -71 [ 280.896822][ T44] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 280.901730][ T44] usb 5-1: USB disconnect, device number 13 [ 283.007750][ T5920] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 283.167730][ T5920] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 283.167773][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.167785][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.167801][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 283.168982][ T5920] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 283.169007][ T5920] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 283.169025][ T5920] usb 5-1: Manufacturer: syz [ 283.172212][ T5920] usb 5-1: config 0 descriptor?? [ 283.597167][ T5920] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 283.603895][ T5920] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 283.872303][ T5920] usb 5-1: USB disconnect, device number 14 [ 284.071930][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 284.286603][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 284.759363][T10003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.175926][ T44] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 285.325856][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 285.327296][ T44] usb 5-1: too many configurations: 120, using maximum allowed: 8 [ 285.365422][ T44] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 285.365449][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 285.365467][ T44] usb 5-1: Product: syz [ 285.365480][ T44] usb 5-1: Manufacturer: syz [ 285.365492][ T44] usb 5-1: SerialNumber: syz [ 285.401526][ T44] usb 5-1: config 0 descriptor?? [ 285.405099][ T44] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 285.405137][ T44] usb 5-1: setting power ON [ 285.424447][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 285.436076][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.437018][ T44] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 285.437073][ T44] usb 5-1: media controller created [ 285.463073][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.509241][ T44] usb 5-1: selecting invalid altsetting 6 [ 285.509262][ T44] usb 5-1: digital interface selection failed (-22) [ 285.509275][ T44] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 285.510522][ T44] usb 5-1: setting power OFF [ 285.512735][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 285.512747][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 285.512754][ T44] (NULL device *): no alternate interface [ 285.552854][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 285.633811][ T5920] usb 5-1: USB disconnect, device number 15 [ 286.228456][T10015] ======================================================= [ 286.228456][T10015] WARNING: The mand mount option has been deprecated and [ 286.228456][T10015] and is ignored by this kernel. Remove the mand [ 286.228456][T10015] option from the mount to silence this warning. [ 286.228456][T10015] ======================================================= [ 287.323131][ T9804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.332751][ T9804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.649305][ T9804] team0: Port device team_slave_0 added [ 287.658599][ T9804] team0: Port device team_slave_1 added [ 287.942849][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.942864][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.942883][ T9804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.944907][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.944916][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.944930][ T9804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.995754][ T44] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 288.180973][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.181003][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.181023][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.181062][ T44] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.181082][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.197455][ T44] usb 3-1: config 0 descriptor?? [ 288.457255][ T9804] hsr_slave_0: entered promiscuous mode [ 288.458571][ T9804] hsr_slave_1: entered promiscuous mode [ 288.679891][ T44] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 289.208904][ T9804] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 289.251427][ T9804] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 289.269958][ C1] plantronics 0003:047F:FFFF.0017: hid_field_extract() called with n (132) > 32! (ktimers/1) [ 289.290193][ T9804] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 289.340206][ T9804] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 289.473156][ T5920] usb 3-1: USB disconnect, device number 17 [ 289.537909][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.588235][ T9804] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.617011][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.617246][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.649363][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.649597][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.717334][ T37] audit: type=1326 audit(802.553:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10053 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930b77ebe9 code=0x7fc00000 [ 289.935370][T10069] input: syz0 as /devices/virtual/input/input24 [ 290.357130][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.432233][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 290.450882][T10088] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl [ 290.605766][T10087] vxlan0: entered promiscuous mode [ 291.440649][ T9804] veth0_vlan: entered promiscuous mode [ 291.474443][ T9804] veth1_vlan: entered promiscuous mode [ 291.748707][ T9804] veth0_macvtap: entered promiscuous mode [ 291.801000][ T9804] veth1_macvtap: entered promiscuous mode [ 291.973494][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.012502][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 292.020735][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 292.020756][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 292.049394][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.084755][ T2148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.107598][ T2148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.113511][ T2148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.114394][ T2148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.299868][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 292.698868][ T2148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.698888][ T2148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.853758][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.853776][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.218474][T10151] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1669'. [ 293.904131][T10174] netlink: 'syz.4.1678': attribute type 1 has an invalid length. [ 293.904154][T10174] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1678'. [ 295.376271][T10209] loop6: detected capacity change from 0 to 7 [ 295.385924][T10209] Dev loop6: unable to read RDB block 7 [ 295.385955][T10209] loop6: AHDI p3 p4 [ 295.385981][T10209] loop6: partition table partially beyond EOD, truncated [ 295.386080][T10209] loop6: p3 start 1886353253 is beyond EOD, truncated [ 295.853838][ T5927] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 296.049360][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.049391][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.049411][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.049452][ T5927] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.049473][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.110955][ T5927] usb 6-1: config 0 descriptor?? [ 296.335902][ T5907] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 296.491145][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 296.499868][ T5907] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 296.499894][ T5907] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 296.499912][ T5907] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 296.499929][ T5907] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 296.499946][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 296.499963][ T5907] usb 5-1: config 0 has no interface number 0 [ 296.500008][ T5907] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 296.500031][ T5907] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 296.500051][ T5907] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 296.500088][ T5907] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.500111][ T5907] usb 5-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 296.500149][ T5907] usb 5-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 296.500173][ T5907] usb 5-1: config 0 interface 125 has no altsetting 0 [ 296.500189][ T5907] usb 5-1: config 0 interface 125 has no altsetting 2 [ 296.507196][ T5907] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 296.507220][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.507237][ T5907] usb 5-1: Product: syz [ 296.507249][ T5907] usb 5-1: Manufacturer: syz [ 296.507261][ T5907] usb 5-1: SerialNumber: syz [ 296.528538][ T5907] usb 5-1: config 0 descriptor?? [ 296.559863][ T5907] usb 5-1: selecting invalid altsetting 2 [ 296.743026][ T5927] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 296.769377][ C0] usb 5-1: async_complete: urb error -71 [ 296.769744][ C0] usb 5-1: async_complete: urb error -71 [ 296.769850][ C0] usb 5-1: async_complete: urb error -71 [ 296.769954][ C0] usb 5-1: async_complete: urb error -71 [ 296.772714][ T5907] get_1284_register: usb error -71 [ 296.772864][ T5907] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 296.834653][ T5907] usb 5-1: USB disconnect, device number 16 [ 297.451527][ T44] usb 6-1: USB disconnect, device number 2 [ 297.572139][T10254] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 297.635803][ T5927] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 297.650812][T10254] bond2: entered promiscuous mode [ 297.651328][T10254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.769148][T10256] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.769647][T10256] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 297.769668][T10256] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 297.804774][ T5927] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 297.804799][ T5927] usb 3-1: config 0 has no interface number 0 [ 297.825099][ T5927] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 297.825125][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.825143][ T5927] usb 3-1: Product: syz [ 297.825155][ T5927] usb 3-1: Manufacturer: syz [ 297.825166][ T5927] usb 3-1: SerialNumber: syz [ 297.825227][T10256] bond2: (slave vxcan3): making interface the new active one [ 297.825245][T10256] vxcan3: entered promiscuous mode [ 297.830004][T10256] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 297.890574][ T5927] usb 3-1: config 0 descriptor?? [ 298.917282][ T5927] usb 3-1: non-Atmel transceiver xxxxe3e1 [ 299.121611][ T5927] usb 3-1: Firmware version (0.0) predates our first public release. [ 299.121636][ T5927] usb 3-1: Please update to version 0.2 or newer [ 299.122229][ T5927] usb 3-1: atusb_probe: initialization failed, error = -19 [ 299.149863][ T5927] usb 3-1: USB disconnect, device number 18 [ 299.179738][ T5907] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 299.333907][ T5907] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 299.333933][ T5907] usb 4-1: config 0 has no interface number 0 [ 299.333963][ T5907] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 299.334000][ T5907] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 299.334025][ T5907] usb 4-1: config 0 interface 255 has no altsetting 0 [ 299.334057][ T5907] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 299.334077][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.345233][ T5907] usb 4-1: config 0 descriptor?? [ 299.349798][ T5907] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 299.570716][ T5907] usb 4-1: USB disconnect, device number 19 [ 300.494013][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1751'. [ 300.494055][T10341] netlink: 'syz.3.1751': attribute type 1 has an invalid length. [ 300.494068][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1751'. [ 300.696151][ T44] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 300.848267][ T44] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 300.848295][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.880675][ T44] usb 6-1: config 0 descriptor?? [ 301.073772][T10358] netlink: 'syz.3.1757': attribute type 1 has an invalid length. [ 301.103905][T10358] bond3: entered promiscuous mode [ 301.104366][T10358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.248776][T10358] bond3: (slave bridge1): making interface the new active one [ 301.248798][T10358] bridge1: entered promiscuous mode [ 301.252682][T10358] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 301.715020][T10372] input: syz0 as /devices/virtual/input/input26 [ 301.905782][ T5920] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 302.069901][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.069932][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.069951][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.069987][ T5920] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.070006][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.075163][ T5920] usb 4-1: config 0 descriptor?? [ 302.142453][ T44] pegasus 6-1:0.0: can't reset MAC [ 302.142784][ T44] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 302.164190][ T44] usb 6-1: USB disconnect, device number 3 [ 302.425772][ T5907] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 302.526361][ T5920] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 302.575846][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 302.588360][ T5907] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 302.588385][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.588403][ T5907] usb 3-1: Product: syz [ 302.588415][ T5907] usb 3-1: Manufacturer: syz [ 302.588428][ T5907] usb 3-1: SerialNumber: syz [ 302.602878][ T5907] usb 3-1: config 0 descriptor?? [ 302.627495][ T5907] gspca_main: sq905-2.14.0 probing 2770:9120 [ 303.729957][ T5907] gspca_sq905: bulk read fail (-22) len 0/4 [ 303.730057][ T5907] sq905 3-1:0.0: probe with driver sq905 failed with error -5 [ 303.866960][T10410] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.944957][ T5927] usb 3-1: USB disconnect, device number 19 [ 304.582489][ T44] usb 4-1: USB disconnect, device number 20 [ 305.049390][ T44] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 305.080500][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1797'. [ 305.135805][ T5920] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 305.198140][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.198171][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.198191][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.198230][ T44] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.198335][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.204001][ T44] usb 4-1: config 0 descriptor?? [ 305.288484][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.288513][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.288533][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.288571][ T5920] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.288591][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.299688][ T5920] usb 6-1: config 0 descriptor?? [ 305.698798][ T44] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 305.724518][ T5920] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 305.757588][ T5920] plantronics 0003:047F:FFFF.001B: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 305.982732][ T44] usb 6-1: USB disconnect, device number 4 [ 306.569344][ T5920] usb 4-1: USB disconnect, device number 21 [ 306.860516][ T37] audit: type=1400 audit(819.693:67): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="w" requested=x pid=10474 comm="syz.0.1808" name="fd" dev="proc" ino=31288 [ 307.202247][T10491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.225730][ T5836] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 307.378436][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.378466][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.378486][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.378525][ T5836] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.378545][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.384557][ T5836] usb 5-1: config 0 descriptor?? [ 307.960754][ T5836] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 308.214966][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1815'. [ 308.765926][ T5836] usb 5-1: USB disconnect, device number 17 [ 312.607347][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'. [ 312.716247][T10529] netlink: 'syz.4.1828': attribute type 25 has an invalid length. [ 312.716269][T10529] netlink: 'syz.4.1828': attribute type 7 has an invalid length. [ 312.791934][T10534] netlink: 'syz.4.1828': attribute type 25 has an invalid length. [ 312.791955][T10534] netlink: 'syz.4.1828': attribute type 7 has an invalid length. [ 313.151262][ T5836] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 313.325724][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 313.344455][ T5836] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 313.344484][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.344503][ T5836] usb 6-1: Product: syz [ 313.344516][ T5836] usb 6-1: Manufacturer: syz [ 313.344530][ T5836] usb 6-1: SerialNumber: syz [ 313.379955][ T5836] usb 6-1: config 0 descriptor?? [ 313.604379][ T5836] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 314.611314][ T5836] gspca_sunplus: reg_w_riv err -71 [ 314.611432][ T5836] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 314.637860][ T5836] usb 6-1: USB disconnect, device number 5 [ 314.942719][T10593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.966626][T10593] bond0: (slave rose0): Enslaving as an active interface with an up link [ 316.124953][T10636] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1868'. [ 317.155987][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.156060][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.824496][T10705] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1889'. [ 318.875800][ T5962] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 319.081718][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.081763][ T5962] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 319.081784][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.095232][ T5962] usb 5-1: config 0 descriptor?? [ 319.317477][ T5962] usbhid 5-1:0.0: can't add hid device: -71 [ 319.317595][ T5962] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 319.385721][ T5962] usb 5-1: USB disconnect, device number 18 [ 319.394509][T10723] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1893'. [ 319.865769][ T5962] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 320.015792][ T5962] usb 5-1: Using ep0 maxpacket: 16 [ 320.022434][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.022587][ T5962] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 320.022608][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.029238][ T5962] usb 5-1: config 0 descriptor?? [ 320.090405][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.452026][ T5962] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 320.929540][ T44] usb 5-1: USB disconnect, device number 19 [ 321.423936][ T43] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.788356][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.813423][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.814915][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.834548][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.835399][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.975395][ T5962] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 322.006083][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.020532][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 322.103404][ T43] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.132537][ T5962] usb 4-1: Using ep0 maxpacket: 8 [ 322.133620][ T5962] usb 4-1: too many configurations: 120, using maximum allowed: 8 [ 322.185796][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 322.188654][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.188678][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.188713][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 322.188734][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.211206][ T10] usb 5-1: config 0 descriptor?? [ 322.281506][ T5962] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 322.281533][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 322.281551][ T5962] usb 4-1: Product: syz [ 322.281564][ T5962] usb 4-1: Manufacturer: syz [ 322.281576][ T5962] usb 4-1: SerialNumber: syz [ 322.316108][ T5962] usb 4-1: config 0 descriptor?? [ 322.347785][ T5962] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 322.347840][ T5962] usb 4-1: setting power ON [ 322.347857][ T5962] dvb-usb: bulk message failed: -22 (2/0) [ 322.397640][ T5962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 322.398495][ T5962] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 322.398549][ T5962] usb 4-1: media controller created [ 322.556449][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.583477][T10755] dvb-usb: bulk message failed: -22 (3/0) [ 322.583501][T10755] dvb-usb: bulk message failed: -22 (3/0) [ 322.584071][T10755] dvb-usb: bulk message failed: -22 (4/0) [ 322.605345][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.716514][ T43] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.779933][ T5962] usb 4-1: selecting invalid altsetting 6 [ 322.779954][ T5962] usb 4-1: digital interface selection failed (-22) [ 322.779968][ T5962] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 322.784096][ T5962] usb 4-1: setting power OFF [ 322.784117][ T5962] dvb-usb: bulk message failed: -22 (2/0) [ 322.784134][ T5962] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 322.784145][ T5962] (NULL device *): no alternate interface [ 322.868216][ T5920] usb 5-1: USB disconnect, device number 20 [ 323.000930][ T5962] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 323.022673][ T5962] usb 4-1: USB disconnect, device number 22 [ 323.068154][ T44] IPVS: starting estimator thread 0... [ 323.175932][T10772] IPVS: using max 8 ests per chain, 19200 per kthread [ 323.835917][ T5962] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 323.872208][ T43] bridge_slave_1: left allmulticast mode [ 323.872242][ T43] bridge_slave_1: left promiscuous mode [ 323.881861][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.926020][ T5840] Bluetooth: hci0: command tx timeout [ 324.011409][ T43] bridge_slave_0: left allmulticast mode [ 324.011441][ T43] bridge_slave_0: left promiscuous mode [ 324.011682][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.039311][ T5962] usb 3-1: Using ep0 maxpacket: 32 [ 324.041894][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.041923][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.041959][ T5962] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 324.041980][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.093008][ T5962] usb 3-1: config 0 descriptor?? [ 324.102987][ T5962] hub 3-1:0.0: USB hub found [ 324.289223][T10801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.331951][ T5962] hub 3-1:0.0: 1 port detected [ 324.439943][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'. [ 324.453388][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'. [ 324.971857][ T5962] hub 3-1:0.0: activate --> -90 [ 325.176510][ T5962] usb 3-1-port1: config error [ 325.417827][ T5962] usb 3-1-port1: cannot disable (err = -71) [ 325.423809][ T5907] usb 3-1: USB disconnect, device number 20 [ 325.425585][ T5962] usb 3-1-port1: cannot reset (err = -71) [ 325.443861][ T5962] usb 3-1-port1: attempt power cycle [ 325.684209][ T5836] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 325.839842][ T5836] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 325.839869][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.845530][ T5836] usb 4-1: config 0 descriptor?? [ 325.854151][ T5836] cp210x 4-1:0.0: cp210x converter detected [ 326.017198][ T5840] Bluetooth: hci0: command tx timeout [ 326.278534][ T5836] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 326.289611][ T5836] usb 4-1: cp210x converter now attached to ttyUSB0 [ 326.506066][ T5907] usb 4-1: USB disconnect, device number 23 [ 326.514039][ T5907] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 326.682037][ T5907] cp210x 4-1:0.0: device disconnected [ 326.749302][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.813353][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.831100][ T43] bond0 (unregistering): Released all slaves [ 326.887075][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 326.903256][T10831] syzkaller1: entered promiscuous mode [ 326.903284][T10831] syzkaller1: entered allmulticast mode [ 327.107478][ T10] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 327.107504][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.112611][ T10] usb 5-1: config 0 descriptor?? [ 327.194072][T10840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.357295][T10842] input: syz1 as /devices/virtual/input/input28 [ 327.775900][T10850] Bluetooth: MGMT ver 1.23 [ 327.816268][T10760] chnl_net:caif_netlink_parms(): no params data found [ 328.087915][ T5840] Bluetooth: hci0: command tx timeout [ 328.348025][ T10] usb 5-1: Cannot set autoneg [ 328.348286][ T10] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 328.394538][ T10] usb 5-1: USB disconnect, device number 21 [ 328.435930][ T5907] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 328.596219][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 328.599821][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.599963][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 328.600001][ T5907] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 328.600019][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.671929][ T5907] usb 4-1: config 0 descriptor?? [ 328.697904][T10870] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 329.136185][ T5907] HID 045e:07da: Invalid code 65791 type 1 [ 329.143218][ T5907] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001E/input/input29 [ 329.168711][ T43] hsr_slave_0: left promiscuous mode [ 329.236744][ T5907] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 329.262579][ T43] hsr_slave_1: left promiscuous mode [ 329.281591][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.281986][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.332999][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.335155][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.844601][ T37] audit: type=1326 audit(842.673:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10887 comm="syz.0.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb953ebe9 code=0x7fc00000 [ 329.875954][ T43] veth1_macvtap: left promiscuous mode [ 329.876062][ T43] veth0_macvtap: left promiscuous mode [ 329.876353][ T43] veth1_vlan: left promiscuous mode [ 329.876528][ T43] veth0_vlan: left promiscuous mode [ 330.026449][ T5927] usb 4-1: USB disconnect, device number 24 [ 330.165817][ T5840] Bluetooth: hci0: command tx timeout [ 330.424382][ T5836] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 330.424529][ T37] audit: type=1326 audit(843.243:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10887 comm="syz.0.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdb953ebe9 code=0x7fc00000 [ 330.575774][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 330.591461][ T5836] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 330.591487][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.591504][ T5836] usb 5-1: Product: syz [ 330.591516][ T5836] usb 5-1: Manufacturer: syz [ 330.591528][ T5836] usb 5-1: SerialNumber: syz [ 330.625841][ T5836] usb 5-1: config 0 descriptor?? [ 330.814334][T10908] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 330.846063][ T5836] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 331.405731][ T5907] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 331.568882][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.568913][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.568948][ T5907] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 331.568968][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.574826][ T5907] usb 3-1: config 0 descriptor?? [ 331.673346][ T5836] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 331.678419][ T5836] usb 5-1: USB disconnect, device number 22 [ 332.071296][ T5907] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 332.071427][ T5907] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 332.093125][ T5907] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.001F/input/input30 [ 332.161013][ T5907] cm6533_jd 0003:0D8C:0022.001F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 332.317453][ T5836] usb 3-1: USB disconnect, device number 25 [ 333.528626][T10945] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 333.746463][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1985'. [ 334.964198][ T43] team0 (unregistering): Port device team_slave_1 removed [ 335.226569][ T43] team0 (unregistering): Port device team_slave_0 removed [ 335.610526][T10974] input: syz0 as /devices/virtual/input/input31 [ 336.878136][T11003] loop2: detected capacity change from 0 to 7 [ 336.917771][T11003] Dev loop2: unable to read RDB block 7 [ 336.917830][T11003] loop2: unable to read partition table [ 336.918054][T11003] loop2: partition table beyond EOD, truncated [ 336.918070][T11003] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 337.277916][T11009] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 337.373024][T11012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2011'. [ 338.262319][T10940] bridge0: entered allmulticast mode [ 338.267065][T10946] bridge0: left allmulticast mode [ 338.304938][T10948] : entered promiscuous mode [ 338.311861][T11012] netlink: 'syz.2.2011': attribute type 3 has an invalid length. [ 338.311879][T11012] netlink: 'syz.2.2011': attribute type 1 has an invalid length. [ 338.311891][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 338.527770][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a8d2800: rx timeout, send abort [ 338.527999][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804a8d2800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 338.668812][T10760] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.669033][T10760] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.669263][T10760] bridge_slave_0: entered allmulticast mode [ 338.674815][T10760] bridge_slave_0: entered promiscuous mode [ 338.709754][T10760] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.710568][T10760] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.710758][T10760] bridge_slave_1: entered allmulticast mode [ 338.737911][T10760] bridge_slave_1: entered promiscuous mode [ 339.255064][T10760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.279614][T10760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.248262][T10760] team0: Port device team_slave_0 added [ 340.253364][T10760] team0: Port device team_slave_1 added [ 341.064087][T10760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.064104][T10760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.064129][T10760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.127164][T10760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.127179][T10760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.127200][T10760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.536726][T10760] hsr_slave_0: entered promiscuous mode [ 341.538074][T10760] hsr_slave_1: entered promiscuous mode [ 341.886987][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.987801][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.009629][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.011160][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.012430][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.013932][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.266302][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'. [ 342.267336][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'. [ 342.889753][T10760] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 343.032574][T10760] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 343.173419][T10760] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 343.269125][T10760] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.085853][ T59] Bluetooth: hci1: command tx timeout [ 344.301868][T11120] netlink: 'syz.0.2046': attribute type 1 has an invalid length. [ 344.388637][ T5920] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 344.536688][T11120] bond2: entered promiscuous mode [ 344.537312][T11120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.566060][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 344.582043][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 344.596317][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 344.596345][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.596363][ T5920] usb 4-1: Product: syz [ 344.596375][ T5920] usb 4-1: Manufacturer: syz [ 344.596387][ T5920] usb 4-1: SerialNumber: syz [ 344.601493][ T5920] usb 4-1: config 0 descriptor?? [ 344.619607][ T5920] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 344.619641][ T5920] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 344.663925][T11121] bond2: (slave bridge2): making interface the new active one [ 344.663946][T11121] bridge2: entered promiscuous mode [ 344.664739][T11121] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 344.933472][T11077] chnl_net:caif_netlink_parms(): no params data found [ 345.230474][ T5920] em28xx 4-1:0.0: chip ID is em2710/2820 [ 345.795328][T11077] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.795511][T11077] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.810500][T11077] bridge_slave_0: entered allmulticast mode [ 345.813013][T11077] bridge_slave_0: entered promiscuous mode [ 345.892069][ T5920] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 345.892109][ T5920] em28xx 4-1:0.0: board has no eeprom [ 345.907634][T11077] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.907766][T11077] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.908043][T11077] bridge_slave_1: entered allmulticast mode [ 345.916940][T11077] bridge_slave_1: entered promiscuous mode [ 345.995809][ T5920] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 345.995833][ T5920] em28xx 4-1:0.0: dvb set to bulk mode. [ 346.007969][ T5920] usb 4-1: USB disconnect, device number 25 [ 346.010240][ T5920] em28xx 4-1:0.0: Disconnecting em28xx [ 346.017189][ T10] em28xx 4-1:0.0: Binding DVB extension [ 346.133679][ T10] em28xx 4-1:0.0: Registering input extension [ 346.136651][ T5920] em28xx 4-1:0.0: Closing input extension [ 346.165849][ T59] Bluetooth: hci1: command tx timeout [ 346.321403][ T5920] em28xx 4-1:0.0: Freeing device [ 346.390805][T11077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.438212][T11077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.535861][ T5836] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 346.673205][T11077] team0: Port device team_slave_0 added [ 346.685157][T11077] team0: Port device team_slave_1 added [ 346.685738][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 346.693733][ T5836] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.693754][ T5836] usb 3-1: config 0 has no interface number 0 [ 346.699397][ T5836] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 346.699422][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.699440][ T5836] usb 3-1: Product: syz [ 346.699452][ T5836] usb 3-1: Manufacturer: syz [ 346.699464][ T5836] usb 3-1: SerialNumber: syz [ 346.745063][ T5836] usb 3-1: config 0 descriptor?? [ 346.756117][ T5836] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 346.785964][ T5920] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 346.945308][T11077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.945324][T11077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.945347][T11077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.956468][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 346.964775][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.964803][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.964823][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 346.964861][ T5920] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 346.964881][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.972047][ T5920] usb 4-1: config 0 descriptor?? [ 346.993037][T11077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.993052][T11077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.993076][T11077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.410371][ T5920] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 347.410407][ T5920] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 347.410434][ T5920] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 347.410458][ T5920] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 347.410483][ T5920] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 347.414934][ T5920] input: HID 0955:7214 Haptics as /devices/virtual/input/input33 [ 347.501764][ T5920] shield 0003:0955:7214.0020: Registered Thunderstrike controller [ 347.502122][ T5920] shield 0003:0955:7214.0020: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 347.722287][T11149] random: crng reseeded on system resumption [ 347.752458][T11077] hsr_slave_0: entered promiscuous mode [ 347.763903][T11077] hsr_slave_1: entered promiscuous mode [ 347.767610][T11077] debugfs: 'hsr0' already exists in 'hsr' [ 347.767851][T11077] Cannot create hsr debugfs directory [ 347.867454][T10760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.000005][ T10] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 348.000367][ T10] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 348.002210][ T10] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 348.002594][ T10] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 348.004133][ T5927] usb 4-1: USB disconnect, device number 26 [ 348.076018][ T5836] gspca_spca1528: reg_w err -71 [ 348.076123][ T5836] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 348.118355][ T5836] usb 3-1: USB disconnect, device number 26 [ 348.245799][ T59] Bluetooth: hci1: command tx timeout [ 348.388474][T10760] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.430322][ T2148] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.430464][ T2148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.548413][ T2148] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.548544][ T2148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.972738][T11077] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.972771][T11077] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.492200][T11077] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.492233][T11077] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.890471][T11077] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.890504][T11077] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.251670][T11077] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.251703][T11077] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.325850][ T59] Bluetooth: hci1: command tx timeout [ 350.594573][T10760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.001808][T11077] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.034045][T11077] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.095825][T11077] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.157468][T11077] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 351.428829][T11226] Invalid ELF header magic: != ELF [ 351.463866][T10760] veth0_vlan: entered promiscuous mode [ 351.504081][T10760] veth1_vlan: entered promiscuous mode [ 351.706373][T10760] veth0_macvtap: entered promiscuous mode [ 351.719995][T10760] veth1_macvtap: entered promiscuous mode [ 351.781817][T11077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.842221][T11077] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.855293][T10760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.883437][T10760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.915328][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.915830][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.937739][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.937859][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.969923][ T1165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.984435][ T1165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.995245][ T1165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.007416][ T1165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.541469][T11241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.616292][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.616311][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.861050][T11245] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2091'. [ 352.912261][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.912280][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.466290][T11077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.825885][ T5851] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 353.895899][ T989] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 353.975729][ T5851] usb 7-1: Using ep0 maxpacket: 32 [ 353.983042][ T5851] usb 7-1: unable to get BOS descriptor or descriptor too short [ 354.000750][ T5851] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 354.000781][ T5851] usb 7-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.000805][ T5851] usb 7-1: config 1 interface 0 has no altsetting 0 [ 354.004628][ T5851] usb 7-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 354.004653][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.004672][ T5851] usb 7-1: Product: syz [ 354.004684][ T5851] usb 7-1: Manufacturer: syz [ 354.004697][ T5851] usb 7-1: SerialNumber: syz [ 354.055990][ T989] usb 3-1: Using ep0 maxpacket: 16 [ 354.058344][ T989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.058371][ T989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.058390][ T989] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 354.058428][ T989] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 354.058448][ T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.164358][T11258] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 354.202524][ T989] usb 3-1: config 0 descriptor?? [ 354.411537][T11258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.412233][T11258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.450665][ T5851] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input34 [ 354.464625][ T5190] bcm5974 7-1:1.0: could not read from device [ 354.480366][T11077] veth0_vlan: entered promiscuous mode [ 354.521716][ T5851] usb 7-1: USB disconnect, device number 2 [ 354.539694][T11077] veth1_vlan: entered promiscuous mode [ 354.711350][ T989] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 354.724610][T11077] veth0_macvtap: entered promiscuous mode [ 354.742784][T11280] input: syz1 as /devices/virtual/input/input36 [ 354.763694][T11077] veth1_macvtap: entered promiscuous mode [ 354.830251][T11077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.851771][ T989] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 354.862107][ T989] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 354.880009][T11077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.900907][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.900952][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.943849][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.944153][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.967139][ T989] usb 3-1: USB disconnect, device number 27 [ 355.000210][ T5920] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 355.001005][ T5920] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 355.001073][ T5920] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 355.001138][ T5920] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 355.192456][T11286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.608007][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.608025][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.756243][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.756264][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.118692][T11320] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2115'. [ 356.261746][T11324] loop9: detected capacity change from 0 to 7 [ 356.274246][T11324] Dev loop9: unable to read RDB block 7 [ 356.274295][T11324] loop9: unable to read partition table [ 356.274526][T11324] loop9: partition table beyond EOD, truncated [ 356.274544][T11324] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 356.336738][ T989] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 356.523142][ T989] usb 4-1: config 0 has no interfaces? [ 356.523180][ T989] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 356.523199][ T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.527038][ T989] usb 4-1: config 0 descriptor?? [ 356.771716][ T989] usb 4-1: USB disconnect, device number 27 [ 357.665908][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2130'. [ 357.665941][T11351] netlink: 'syz.6.2130': attribute type 1 has an invalid length. [ 357.665953][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2130'. [ 357.666279][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2130'. [ 357.666298][T11351] netlink: 'syz.6.2130': attribute type 1 has an invalid length. [ 357.666311][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2130'. [ 358.287017][ T5927] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 358.448204][ T5927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.448229][ T5927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.449793][ T5927] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 358.449816][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 358.449832][ T5927] usb 3-1: SerialNumber: syz [ 358.740602][ T5927] usb 3-1: 0:2 : does not exist [ 358.806511][ T5927] usb 3-1: USB disconnect, device number 28 [ 359.538711][T11294] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 359.579161][T11379] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 359.660040][T11379] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 359.709440][T11294] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 359.709500][T11294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.709523][T11294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.709543][T11294] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 359.711211][T11294] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 359.711235][T11294] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 359.711253][T11294] usb 5-1: Manufacturer: syz [ 359.728782][T11294] usb 5-1: config 0 descriptor?? [ 359.895840][ T5906] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 360.058066][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 360.066363][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.066447][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.066467][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 360.066506][ T5906] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 360.066526][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.091608][ T5906] usb 3-1: config 0 descriptor?? [ 360.210444][T11294] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 360.285766][T11294] appleir 0003:05AC:8243.0022: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 360.548097][T11294] usb 5-1: USB disconnect, device number 23 [ 360.619605][ T5906] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 360.619641][ T5906] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 360.619665][ T5906] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 360.619688][ T5906] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 360.619712][ T5906] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 360.623929][ T5906] input: HID 0955:7214 Haptics as /devices/virtual/input/input37 [ 360.729896][T11385] random: crng reseeded on system resumption [ 360.872315][ T5906] shield 0003:0955:7214.0023: Registered Thunderstrike controller [ 360.872669][ T5906] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 360.953299][ T5920] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 360.956773][ T5920] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 360.957117][ T5920] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 360.957470][ T5920] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 360.973559][ T5906] usb 3-1: USB disconnect, device number 29 [ 362.026079][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 362.175767][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 362.178310][ T31] usb 4-1: config 0 has no interfaces? [ 362.178343][ T31] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 362.178364][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.237243][ T31] usb 4-1: config 0 descriptor?? [ 362.727874][T11294] usb 4-1: USB disconnect, device number 28 [ 363.195784][ T5927] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 363.365877][ T5927] usb 7-1: Using ep0 maxpacket: 16 [ 363.368226][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.368255][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.368276][ T5927] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.368322][ T5927] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 363.368342][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.373668][ T5927] usb 7-1: config 0 descriptor?? [ 363.828929][ T5927] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 363.828966][ T5927] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 363.828991][ T5927] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 363.829015][ T5927] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 363.879623][ T5927] input: HID 0955:7214 Haptics as /devices/virtual/input/input38 [ 363.915339][ T5927] shield 0003:0955:7214.0024: Registered Thunderstrike controller [ 363.923959][ T5927] shield 0003:0955:7214.0024: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 364.044636][T11450] random: crng reseeded on system resumption [ 364.166772][ T31] shield 0003:0955:7214.0024: Failed to output Thunderstrik[ 364.166772][ T31] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 364.167121][ T31] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 364.167435][ T31] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 364.167753][ T31] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 364.168043][ T989] usb 7-1: USB disconnect, device number 3 [ 364.177778][ T989] ------------[ cut here ]------------ [ 364.177791][ T989] workqueue: work disable count underflowed [ 364.177869][ T989] WARNING: CPU: 0 PID: 989 at kernel/workqueue.c:4326 enable_work+0x2b1/0x2c0 [ 364.177909][ T989] Modules linked in: [ 364.177934][ T989] CPU: 0 UID: 0 PID: 989 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 364.177955][ T989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.177967][ T989] Workqueue: usb_hub_wq hub_event [ 364.177993][ T989] RIP: 0010:enable_work+0x2b1/0x2c0 [ 364.178016][ T989] Code: 41 5e 41 5f 5d c3 cc cc cc cc cc e8 69 0e 6c 09 e8 04 fa 33 00 c6 05 a1 f0 7c 0d 01 90 48 c7 c7 00 f2 09 8b e8 80 cc f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 364.178033][ T989] RSP: 0018:ffffc9000468f060 EFLAGS: 00010046 [ 364.178047][ T989] RAX: e133360f74e88600 RBX: ffff888032546818 RCX: 0000000000100000 [ 364.178060][ T989] RDX: ffffc9001b846000 RSI: 00000000000068dd RDI: 00000000000068de [ 364.178072][ T989] RBP: ffffc9000468f118 R08: 0000000000000000 R09: 0000000000000000 [ 364.178084][ T989] R10: dffffc0000000000 R11: ffffed1017104863 R12: 1ffff920008d1e10 [ 364.178097][ T989] R13: dffffc0000000000 R14: 0000000000000000 R15: 001fffffffc00001 [ 364.178109][ T989] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 364.178124][ T989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.178136][ T989] CR2: 000000110c2e2090 CR3: 000000005bb8c000 CR4: 00000000003526f0 [ 364.178152][ T989] Call Trace: [ 364.178159][ T989] [ 364.178172][ T989] ? __pfx_enable_work+0x10/0x10 [ 364.178211][ T989] __cancel_work_sync+0xf7/0x110 [ 364.178238][ T989] thermal_zone_device_unregister+0x23e/0x3f0 [ 364.178268][ T989] power_supply_unregister+0xf9/0x140 [ 364.178291][ T989] ? __pfx_shield_remove+0x10/0x10 [ 364.178313][ T989] shield_remove+0x72/0x120 [ 364.178338][ T989] hid_device_remove+0x22b/0x370 [ 364.178364][ T989] ? __pfx_hid_device_remove+0x10/0x10 [ 364.178391][ T989] device_release_driver_internal+0x46f/0x800 [ 364.178425][ T989] bus_remove_device+0x355/0x420 [ 364.178453][ T989] device_del+0x515/0x8e0 [ 364.178488][ T989] ? __pfx_device_del+0x10/0x10 [ 364.178522][ T989] hid_destroy_device+0x6b/0x1b0 [ 364.178549][ T989] usbhid_disconnect+0x9f/0xc0 [ 364.178569][ T989] usb_unbind_interface+0x26e/0x910 [ 364.178601][ T989] ? __pfx_usb_unbind_interface+0x10/0x10 [ 364.178622][ T989] device_release_driver_internal+0x4d6/0x800 [ 364.178654][ T989] bus_remove_device+0x355/0x420 [ 364.178682][ T989] device_del+0x515/0x8e0 [ 364.178710][ T989] ? kfree+0x195/0x550 [ 364.178733][ T989] ? __pfx_device_del+0x10/0x10 [ 364.178763][ T989] ? kobject_put+0x446/0x480 [ 364.178800][ T989] usb_disable_device+0x3e9/0x8a0 [ 364.178830][ T989] usb_disconnect+0x316/0x940 [ 364.178867][ T989] hub_event+0x1cf5/0x4a20 [ 364.178917][ T989] ? do_raw_spin_lock+0x121/0x290 [ 364.178940][ T989] ? register_lock_class+0x51/0x320 [ 364.178981][ T989] ? __pfx_hub_event+0x10/0x10 [ 364.178999][ T989] ? process_scheduled_works+0x9ef/0x17b0 [ 364.179027][ T989] ? _raw_spin_unlock_irq+0x23/0x50 [ 364.179049][ T989] ? process_scheduled_works+0x9ef/0x17b0 [ 364.179069][ T989] ? process_scheduled_works+0x9ef/0x17b0 [ 364.179092][ T989] process_scheduled_works+0xade/0x17b0 [ 364.179147][ T989] ? __pfx_process_scheduled_works+0x10/0x10 [ 364.179188][ T989] worker_thread+0x8a0/0xda0 [ 364.179241][ T989] kthread+0x711/0x8a0 [ 364.179269][ T989] ? __pfx_worker_thread+0x10/0x10 [ 364.179290][ T989] ? __pfx_kthread+0x10/0x10 [ 364.179319][ T989] ? __pfx_kthread+0x10/0x10 [ 364.179345][ T989] ret_from_fork+0x3f9/0x770 [ 364.179370][ T989] ? __pfx_ret_from_fork+0x10/0x10 [ 364.179399][ T989] ? __switch_to_asm+0x39/0x70 [ 364.179415][ T989] ? __switch_to_asm+0x33/0x70 [ 364.179429][ T989] ? __pfx_kthread+0x10/0x10 [ 364.179454][ T989] ret_from_fork_asm+0x1a/0x30 [ 364.179490][ T989] [ 364.179498][ T989] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 364.179512][ T989] CPU: 0 UID: 0 PID: 989 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 364.179532][ T989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.179544][ T989] Workqueue: usb_hub_wq hub_event [ 364.179561][ T989] Call Trace: [ 364.179569][ T989] [ 364.179576][ T989] dump_stack_lvl+0x99/0x250 [ 364.179601][ T989] ? __asan_memcpy+0x40/0x70 [ 364.179620][ T989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.179644][ T989] ? __pfx__printk+0x10/0x10 [ 364.179681][ T989] vpanic+0x281/0x750 [ 364.179704][ T989] ? __pfx__printk+0x10/0x10 [ 364.179722][ T989] ? __pfx_vpanic+0x10/0x10 [ 364.179751][ T989] ? is_bpf_text_address+0x26/0x2b0 [ 364.179788][ T989] panic+0xb9/0xc0 [ 364.179812][ T989] ? __pfx_panic+0x10/0x10 [ 364.179855][ T989] __warn+0x31b/0x4b0 [ 364.179878][ T989] ? enable_work+0x2b1/0x2c0 [ 364.179907][ T989] ? enable_work+0x2b1/0x2c0 [ 364.179930][ T989] report_bug+0x2be/0x4f0 [ 364.179951][ T989] ? enable_work+0x2b1/0x2c0 [ 364.179975][ T989] ? enable_work+0x2b1/0x2c0 [ 364.179998][ T989] ? enable_work+0x2b3/0x2c0 [ 364.180020][ T989] handle_bug+0x84/0x160 [ 364.180045][ T989] exc_invalid_op+0x1a/0x50 [ 364.180070][ T989] asm_exc_invalid_op+0x1a/0x20 [ 364.180086][ T989] RIP: 0010:enable_work+0x2b1/0x2c0 [ 364.180107][ T989] Code: 41 5e 41 5f 5d c3 cc cc cc cc cc e8 69 0e 6c 09 e8 04 fa 33 00 c6 05 a1 f0 7c 0d 01 90 48 c7 c7 00 f2 09 8b e8 80 cc f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 364.180121][ T989] RSP: 0018:ffffc9000468f060 EFLAGS: 00010046 [ 364.180135][ T989] RAX: e133360f74e88600 RBX: ffff888032546818 RCX: 0000000000100000 [ 364.180149][ T989] RDX: ffffc9001b846000 RSI: 00000000000068dd RDI: 00000000000068de [ 364.180160][ T989] RBP: ffffc9000468f118 R08: 0000000000000000 R09: 0000000000000000 [ 364.180172][ T989] R10: dffffc0000000000 R11: ffffed1017104863 R12: 1ffff920008d1e10 [ 364.180186][ T989] R13: dffffc0000000000 R14: 0000000000000000 R15: 001fffffffc00001 [ 364.180226][ T989] ? __pfx_enable_work+0x10/0x10 [ 364.180264][ T989] __cancel_work_sync+0xf7/0x110 [ 364.180291][ T989] thermal_zone_device_unregister+0x23e/0x3f0 [ 364.180320][ T989] power_supply_unregister+0xf9/0x140 [ 364.180343][ T989] ? __pfx_shield_remove+0x10/0x10 [ 364.180364][ T989] shield_remove+0x72/0x120 [ 364.180390][ T989] hid_device_remove+0x22b/0x370 [ 364.180417][ T989] ? __pfx_hid_device_remove+0x10/0x10 [ 364.180443][ T989] device_release_driver_internal+0x46f/0x800 [ 364.180477][ T989] bus_remove_device+0x355/0x420 [ 364.180504][ T989] device_del+0x515/0x8e0 [ 364.180539][ T989] ? __pfx_device_del+0x10/0x10 [ 364.180573][ T989] hid_destroy_device+0x6b/0x1b0 [ 364.180601][ T989] usbhid_disconnect+0x9f/0xc0 [ 364.180621][ T989] usb_unbind_interface+0x26e/0x910 [ 364.180652][ T989] ? __pfx_usb_unbind_interface+0x10/0x10 [ 364.180673][ T989] device_release_driver_internal+0x4d6/0x800 [ 364.180708][ T989] bus_remove_device+0x355/0x420 [ 364.180737][ T989] device_del+0x515/0x8e0 [ 364.180776][ T989] ? kfree+0x195/0x550 [ 364.180801][ T989] ? __pfx_device_del+0x10/0x10 [ 364.180825][ T989] ? kobject_put+0x446/0x480 [ 364.180859][ T989] usb_disable_device+0x3e9/0x8a0 [ 364.180889][ T989] usb_disconnect+0x316/0x940 [ 364.180925][ T989] hub_event+0x1cf5/0x4a20 [ 364.180974][ T989] ? do_raw_spin_lock+0x121/0x290 [ 364.180998][ T989] ? register_lock_class+0x51/0x320 [ 364.181038][ T989] ? __pfx_hub_event+0x10/0x10 [ 364.181057][ T989] ? process_scheduled_works+0x9ef/0x17b0 [ 364.181085][ T989] ? _raw_spin_unlock_irq+0x23/0x50 [ 364.181106][ T989] ? process_scheduled_works+0x9ef/0x17b0 [ 364.181126][ T989] ? process_scheduled_works+0x9ef/0x17b0 [ 364.181150][ T989] process_scheduled_works+0xade/0x17b0 [ 364.181205][ T989] ? __pfx_process_scheduled_works+0x10/0x10 [ 364.181247][ T989] worker_thread+0x8a0/0xda0 [ 364.181300][ T989] kthread+0x711/0x8a0 [ 364.181328][ T989] ? __pfx_worker_thread+0x10/0x10 [ 364.181349][ T989] ? __pfx_kthread+0x10/0x10 [ 364.181379][ T989] ? __pfx_kthread+0x10/0x10 [ 364.181404][ T989] ret_from_fork+0x3f9/0x770 [ 364.181429][ T989] ? __pfx_ret_from_fork+0x10/0x10 [ 364.181457][ T989] ? __switch_to_asm+0x39/0x70 [ 364.181473][ T989] ? __switch_to_asm+0x33/0x70 [ 364.181488][ T989] ? __pfx_kthread+0x10/0x10 [ 364.181514][ T989] ret_from_fork_asm+0x1a/0x30 [ 364.181549][ T989] [ 364.181789][ T989] Kernel Offset: disabled