last executing test programs: 8.654490045s ago: executing program 4 (id=2639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) memfd_create(&(0x7f0000000f40)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\xff\xff\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xab\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A\xc0\x00\x00\x00\xde\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\xff\x0f\x00\x00\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff\x9e\r\xd5w\xebf$>\xfb\xb2\xa0-\xcd\xa5\xbe}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe5\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7>\xfc\xa83\x05\x02+\xfcy\xd87\xd7\xf8\x81\x92\x9b\x86\x11=\xbb\xdf(a~\x7f3\xc4\xcb\xaa\xb9tVu\t\xe7^z\xee\xf9\xb4\r\xc9\xa6\xb7m\xbdY\x8b\xe5\xdf2\xbb\xd4\x05\x90>\x16,m\xebm\xf8g\xe8\bH\x11\xde\t\xd7\xdd\xc5\xc9\x9f\xcft\x9a\xef\xbb\x04%\xd3c\x03\r\aA\x89zg\xf67\xc3\xb9l\x0f\x93\xb8X<\x95\xb3\xfe\x9bfs\x9b\x00\x00', 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x4, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.494927077s ago: executing program 4 (id=2644): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x28b3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r9, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r10, @ANYBLOB="01e99c49fd1f60c0a388f8848ae9c8bcf52b3a92316d43ecb0304377ecab8f4dded5ded91f3acb0b3f0afb0a55f9bf"], 0x24}}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000b19a3640d219751284000002030109022b000207000000090400010079319c000904"], 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 7.095740794s ago: executing program 2 (id=2650): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x9, 0x4e23, 0x96, 0x2, 0x20, 0x20, 0x3b, r4, r5}, {0xafc, 0x0, 0x1, 0xa0a, 0xa, 0x8, 0x5, 0x1}, {0x2, 0x4, 0x3ff, 0xfffffffffffffff8}, 0xc76, 0x6e6bc0, 0x1, 0x0, 0x4}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x3c}, 0xa, @in6=@mcast2, 0x3501, 0x3, 0x0, 0x9, 0x2cd, 0xbba1, 0x1ff}}, 0xe8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r6, 0x4b48, &(0x7f0000000000)) 4.824281335s ago: executing program 2 (id=2662): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xed, 0xe2, 0x75, 0x40, 0x22b8, 0x4234, 0x3284, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xcb, 0x54, 0xdc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) 4.47539859s ago: executing program 4 (id=2664): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300), &(0x7f0000000100), &(0x7f0000000080)) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1c, 0x20000002, r2) 4.277728654s ago: executing program 4 (id=2667): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = dup3(r4, r0, 0x0) r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)) dup2(r5, r2) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r7, 0x5, &(0x7f0000000400)) 4.170339562s ago: executing program 1 (id=2669): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000280)={@dev, @broadcast, @void, {@llc_tr={0x11, {@llc={0x0, 0x0, "ab"}}}}}, 0x0) unshare(0x20600) r1 = timerfd_create(0x9, 0x0) setreuid(0x0, 0xee01) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) setuid(0xee00) add_key$user(&(0x7f0000000000), &(0x7f0000000440), &(0x7f0000000040)="e0", 0x1, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="43dc457d4f458b0d3a165973b5a24e617f6eadfa49b4a50ea5196d9dbfba9b896c07dd78c84bdc644bb719a64f17832d7b83b3dfd531a64df3694b5def33ca", 0x3f}, {&(0x7f00000001c0)="231d5e559454b22192d587e6da5853c43f5b2f4cd9f05ad2b161ed27783e2908012047e90d37e987901646e9b03bbcc79ad0c9388aff160dd6abf57b11f86689086cb6c8b9374b57d230040dce59915818f7a05614be236e997d9ba9aefd29c6bb9b0374395b10d13aa9d7dfbbffc2412013b8f4012af0affcdcf45153ac545d5db0c7cae4b8c3b94168f1f29448629dd608ed9439cd193642f36ae4f0e4ed2e40a7a2f05c4edddb5c641797e54907dba32ee1a720ccfa1a1616bc2b3b8fafcee3f739e86acd0f2a4bdb94ef99139d1b2587a21e7c69367ac0d2168bca89e486a5cbe4ecec5b7f1ec358b5237fad09c19882840686d8ae1dc42f503b30553e5fcc2b186c32fba7261d514125baf592daa29944ca281d57d590b19c566153c1cf5d686bc383491dd207914cc76238762b40be87c82fb155642c79d1e8d21bc95ef77ab2d62b44c55189c81860c73dec77da16869470b2deaeee55b041a3d545b85a2671e12b27b10b31d860378bf37fc11aa607814aa4b9e8c2e401a735d70687621be06541ce36fbf6ec57989f32458fdbb224c7332301268855755e5d8e6943f84c18dbeb3bac41328a87c6a74fbc07c47cd94068a251f522fcfe4660c84527e49a3d5dd667a234a2d33e769186e9ad5b0b7e36c1dd69d6da9395d45bda4d646ee0c0577d6c730c2c35e172fb98e2968515cc4d10f8be41197b6e30593b326be55f8c4b739858dbcb79f071eb1f9e813b12a867b1be08e13c76c4f7c7095712494f948e7ecd2cfdeffd4f5b10fcdc2dd63be1330e60ad698a21389cdfe565f1aef49e5cf9d5fe49cd77d6c11c9c3b838340176f7629ea5b8a8bfb64c7cac90f94386c1be823d37083763c8a9af699851489724bd285f9626d1f00d976b5fb81e1619014b9342b49ff09ceb1e3f19fa0572b536a6457dc0ca7ec68699105bb4efb917bdefe7f7ad4568c6244b8eee7823a98a22c9a0faa46bfcd3435c4d01678a2c7f1129c78748b9efadbba452309663b9d8e3e88c7169e1097249223e5e3465d22d662ee8497ab3ecb85291dbe77246c5b75f92496a2b5ff971ad156e9c7233d2705299beed31aa5301354796017d599c707ad176db36ef288a52b009aed817875fb1334c1e853bcd0665d0a65247d9aec6d10f7b548eccf058919e5f58381f9ba27ce8e8e7e71c23f44b84ae8a7fd7433fa2434a7f2c2781eb206165afb08af9bac496a1d5007adccb1b65a5aa56ba9d902943940f9632220cc9edd5bc5f7ee7f4cf594f05801f4bae76211ede03c3f6829bfc60f9957c2d1f2a0cdac50961b0a027faf2aa865d4bf4d30a67d7c95658226eb90dd2e682a06ce061afea641a9ac7ace534b1adc1e1f05bf294392301ea9493bb655613670a0a110914baa6c811c03d00dbec20c8b682fc4c46975bef882ea0a85efaa1f00b42ae2b88701707085366134d1d8d440865ec12113f08c9f16676ecbede4f616a477741cbf88fb6fd625de14baa1554231ff37b1e947498df6abbcf19e97c3e651a5c13858c9925e5a43eb7c6bc27522b07885b2c88c0897c60838c64cd097ed30709ef37c538c5d017e6ebd8c83be3c688f9e26b4db371b58025e0772ff8c7e71c379bfb16ceebb3d678162653de861717cdd9aba899c32cfb25b564259e2232c57c64876df8e30dec42395c45867cf99920e3c0830d3d7337a78a8998532f1d02414fa6f8c11ced19d0f0f634eb2de669068fcb483bbca1cf74d544dae88fb1ff87c7425c57492afbe0370e29f613f3e51850231ec0297d5866727e9cb6af9f4d1c1ca7fb771507360e989ffc401ac63f9e3d09f093c0813b1d170df1797a274bc2392378c9354902803e63f7882f0f25ebc972625c399fe15ada52b59b2ec67c3221d9430a56b645899418849d68f6b7bc27fb07c36eed35368811f21c10d3c", 0x55a}], 0x2, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) 3.995021147s ago: executing program 4 (id=2670): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000340)=0xc) ptrace$getregs(0xe, r1, 0x2578, &(0x7f00000009c0)=""/231) getpid() openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x103002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x178, 0xc, 0x0, 0x178, 0x220, 0x258, 0x258, 0x220, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x3a}, 0x0, 0x108, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@icmp6={{0x28}, {0x0, "c375", 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1f4f4328b954deca86e41ed96a4ea63033f276cd53571aadaab6f00dbd07"}}}, {{@ipv6={@mcast1, @private1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = eventfd(0x802) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a68da240d35b7c315e04000000010902120001000000000904000002ef0401"], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.933841196s ago: executing program 1 (id=2672): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) dup3(r0, r1, 0x0) 3.914550903s ago: executing program 0 (id=2673): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 3.841873018s ago: executing program 3 (id=2674): syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) 3.789459226s ago: executing program 1 (id=2675): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 3.737671642s ago: executing program 0 (id=2676): prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) truncate(&(0x7f0000000200)='./file1\x00', 0x87e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.674203746s ago: executing program 1 (id=2677): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket(0x3c, 0x2, 0x400) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x2402, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0xee00) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) add_key$user(0x0, 0x0, &(0x7f0000000400)="c218b8fb4f2711662cda1925942565487e7d348d7cb55586a0b8af4c8b0e15dd9b6afd4307000000000000002c14db39ff5a5cc5653035257088df4796548fd6ee87ce1521c1237617d0b64d1df761b1", 0x50, 0x0) r8 = add_key$user(&(0x7f0000000380), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r9}, 0x0, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) fcntl$setsig(r5, 0xa, 0x21) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x2, &(0x7f0000000040)='source', &(0x7f0000000080)='./bus\x00', r5) setreuid(0x0, r2) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000003c80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgid(r11) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020101020002000000000000000004007c00034000f80000"], 0x1c}}, 0x0) 3.57772783s ago: executing program 0 (id=2678): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001a80)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x38) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000010440)=0x0) io_submit(r2, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xfdfe}]) 3.540681416s ago: executing program 2 (id=2679): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x3f}, 0xe) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, &(0x7f00000001c0)=""/57, 0x39}}], 0x1, 0x0, 0x0) 3.329007563s ago: executing program 0 (id=2680): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{}]}) 3.31319187s ago: executing program 2 (id=2681): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="09dea4afb76288fa135537845f3188b4cb061c94084050d49b5f9dc271450ebc85f9479e56e3800f492b76e4254daff0a408", 0x32}, {&(0x7f0000000340)="d5bb69fd2ec3a88c5df48b69469a", 0xe}], 0x2, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000008c0)=""/173, 0xad}], 0x2}}], 0x1, 0x0, 0x0) 3.200734272s ago: executing program 2 (id=2682): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000000c0)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.926850246s ago: executing program 0 (id=2683): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xffffffff}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0) 2.836898209s ago: executing program 0 (id=2684): semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x4041) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xdd86}}}}}}}, 0xfdef) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x911, 0x12) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000080)={'veth0_macvtap\x00', @remote}) semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0xc, 0x1000}, {0x2}], 0x3) 2.485764746s ago: executing program 3 (id=2685): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x0) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f00000003c0)={{{0x3, 0x1}}, 0xd00, 0x9, &(0x7f0000001880)="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"}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000160000005600000025000000190019000400050007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x80, 0x5, 0x0, r3, 0x5fa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRESHEX=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2}, 0x48) 1.374906606s ago: executing program 3 (id=2686): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff19) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 995.189292ms ago: executing program 3 (id=2687): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x5, [{0x0, 0x2, 0x9}]}, @union]}}, &(0x7f0000000080)=""/156, 0x3e, 0x9c, 0x1}, 0x20) 858.759027ms ago: executing program 1 (id=2688): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000001000001801000043646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 856.402016ms ago: executing program 4 (id=2689): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffc98}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='rpc_request\x00'}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee1768814002b000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) unshare(0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "1c09b336a93ac718", "195cb5e380d961e838902e9f761a768ea1ff6504d968d37df1f7a9c900937c6d", "2aa01c10", "7f6e0b58e02bd85e"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195}, 0x48) 826.374984ms ago: executing program 3 (id=2690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 577.495385ms ago: executing program 3 (id=2691): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fstatfs(r1, 0x0) close(r0) 575.496277ms ago: executing program 1 (id=2692): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x2, 0x4e60, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f00000003c0)="ed4e82bdc44b4626f17240da75126c6c124490d6e1b548078f2bfbb3b2144213deecccecf4af153de115e85615196635cc86e4ff71d9588a9cb2aba8fd4b07268cf929808a43aaa7e4b44392d9c67e552eb54fb946da44baf093388610fd928d0798bacc3f33eef8267a318bed8dd50596c299dbc4a80c70d3f13ce3cca7301a10769248fa9347cae6ab712db36abae3dece3acffbb18053b17615661d55ad0fcd4799bdf8b390dd43465bf7840fa33567cd5a94db399d6d6d2c942aecc2714b60634c03e6e02b8f8af3d42e5b512cf459f830cb0b6de118b8ffdff41db05d54e8d56c301df18e88080d8e", 0xeb}, {&(0x7f00000007c0)="b80d8b0089b7cb61da8d5df472181a26b15679ac7f8c78272d864af732b8b28aa0e1a48cbdf44ccb0e4f2112c22ee96f25a9b1119789158355ab025feb9a844f50cd0c85f365ceda583622fc9f84927e238c2c5fab979ce0e9ecfcb11b749e7ebd7d22afb9611270a35da1ea5c669a26a0f70a238ac146a1fe973c084b5dbcf56506997a21a2072f27a03e323520f7b6391eacf105f808ec8557bcc1e5c52e6a6fcf9c072a5527a9f8c7ef28713c6cebccafc270de073f7504c11aea2450", 0xbe}, {&(0x7f0000000600)="7eaf5fb1b36ff33d10c45c93c9ff37ab09bd57dbcc850d56553b3d4acb92e6fb2178dc510264eb4a5608f3f608735ca6d50347c7f2592d2cfc9aec9f5b2ecb156782d6ddb2a0db5c98ef2da4686ce20b30b791a26685e46ef1688c2b38f01eddf912f20a6710605379d66ccb9f54c8a76c038c43cea0067e52c9ed4cbfff8385a6ac2d858aa9effdf04051c7ee95687af2c67c80b626a85e0fb1d88170e92b3df62001a529aea5b6817906b83604d869aacca56c7eac589695cfe1c4d1780693b33c9bf96c778ea88dc338bcfe71fe0944f3666716521d6c09b627884a395deb06a490f077d2617722096769e31036", 0xef}], 0x3}, 0x40040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x50}, {0xb1, 0x0, 0x0, 0xbffff038}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="9d", 0x1}], 0x1}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="189700000000009eb044c4d4240ff0cd3aaaedaed300000000000000000018ea0017202070251a33a5e8bf92000200000701f87d9f00f82e9f913b2ff2c6d8985572a3e24b8caa01d42a0e37"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = open$dir(&(0x7f0000000780)='./file0\x00', 0x44200, 0x54) open_tree(r5, &(0x7f0000000180)='./file0\x00', 0x9001) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)) r8 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x802) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r8, 0x82000000) 0s ago: executing program 2 (id=2693): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TCSETSF(r1, 0x541d, 0x0) close_range(r0, r0, 0x0) kernel console output (not intermixed with test programs): 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 409.516568][ T5218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 409.635710][ T29] audit: type=1326 audit(1722920663.561:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10149 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2411779f9 code=0x7fc00000 [ 409.663863][ T5218] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.374031][ T5218] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.402371][ T5218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.463771][ T5218] usb 5-1: config 0 descriptor?? [ 414.484001][ T5218] usb 5-1: can't set config #0, error -71 [ 414.516583][ T5218] usb 5-1: USB disconnect, device number 32 [ 414.527202][ T29] audit: type=1326 audit(1722920664.160:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10149 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff2411779f9 code=0x7fc00000 [ 414.580967][ T29] audit: type=1326 audit(1722920668.516:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10149 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2411779f9 code=0x7fc00000 [ 415.962653][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 416.018513][T10192] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1502'. [ 416.028048][T10192] openvswitch: netlink: Multiple metadata blocks provided [ 416.162132][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 416.219945][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 416.373980][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 416.519737][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.678929][ T8] usb 3-1: Product: syz [ 416.745840][ T8] usb 3-1: Manufacturer: syz [ 416.833237][ T8] usb 3-1: SerialNumber: syz [ 416.849033][ T8] usb 3-1: config 0 descriptor?? [ 416.866762][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 416.877843][ T8] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 416.938998][ T29] audit: type=1800 audit(1722920671.235:77): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1500" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 418.118759][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (174) [ 418.267447][ T5267] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 418.378304][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 418.396841][ T8] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 418.436585][ T8] em28xx 3-1:0.0: board has no eeprom [ 418.457944][ T5267] usb 5-1: Using ep0 maxpacket: 8 [ 418.472285][ T5267] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.511991][ T5267] usb 5-1: config 0 has no interfaces? [ 418.529582][ T5267] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 418.559724][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.572328][ T8] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 418.606640][ T8] em28xx 3-1:0.0: dvb set to bulk mode. [ 418.614022][ T5267] usb 5-1: config 0 descriptor?? [ 418.654300][ T9] em28xx 3-1:0.0: Binding DVB extension [ 418.685073][ T8] usb 3-1: USB disconnect, device number 25 [ 419.404829][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 419.413902][T10241] netlink: 'syz.0.1517': attribute type 4 has an invalid length. [ 419.923960][ T8] em28xx 3-1:0.0: Disconnecting em28xx [ 420.084798][ T9] em28xx 3-1:0.0: Registering input extension [ 420.116824][ T8] em28xx 3-1:0.0: Closing input extension [ 420.192864][ T8] em28xx 3-1:0.0: Freeing device [ 424.407125][ T5320] usb 5-1: USB disconnect, device number 33 [ 424.696345][T10272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 425.217959][ T29] audit: type=1400 audit(1722920679.886:78): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=10274 comm="syz.4.1529" [ 426.694187][ T29] audit: type=1400 audit(1722920681.471:79): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=10322 comm="syz.3.1542" dest=20004 [ 426.716532][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 426.907563][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 426.986391][T10333] infiniband syz1: set active [ 427.024561][T10333] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 427.092265][ T5268] lo speed is unknown, defaulting to 1000 [ 427.134515][ T8] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 427.143832][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.152528][ T8] usb 3-1: Product: syz [ 427.157102][ T8] usb 3-1: Manufacturer: syz [ 427.161728][ T8] usb 3-1: SerialNumber: syz [ 427.176176][ T8] usb 3-1: config 0 descriptor?? [ 427.199664][ T8] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 427.223083][ T8] imon 3-1:0.0: unable to initialize intf0, err -19 [ 427.287167][ T8] imon:imon_probe: failed to initialize context! [ 427.416827][ T8] imon 3-1:0.0: unable to register, err -19 [ 427.825421][ T8] usb 3-1: USB disconnect, device number 26 [ 430.035467][T10373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1558'. [ 430.384277][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1561'. [ 432.384855][ T5320] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 432.595421][ T5320] usb 2-1: Using ep0 maxpacket: 16 [ 432.621818][ T5320] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 104 [ 432.647938][ T5320] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 432.670412][ T5320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.687586][ T5320] usb 2-1: Product: syz [ 432.692943][ T5320] usb 2-1: Manufacturer: syz [ 432.697767][ T5320] usb 2-1: SerialNumber: syz [ 432.713292][ T5320] usb 2-1: config 0 descriptor?? [ 432.719703][T10420] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1571'. [ 432.737945][T10392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 432.748588][T10420] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 432.787957][ T5320] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input28 [ 432.876599][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 432.947126][T10417] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 433.012969][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 433.086678][ T29] audit: type=1326 audit(1722920688.190:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10426 comm="syz.3.1574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa3779f9 code=0x0 [ 433.210785][ T5218] usb 2-1: USB disconnect, device number 31 [ 433.710018][ T29] audit: type=1804 audit(1722920688.840:81): pid=10433 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1575" name="/newroot/152/file0/bus" dev="hugetlbfs" ino=29104 res=1 errno=0 [ 433.731414][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.807735][ T29] audit: type=1804 audit(1722920688.872:82): pid=10433 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1575" name="/newroot/152/file0/bus" dev="hugetlbfs" ino=29104 res=1 errno=0 [ 434.048762][ T29] audit: type=1804 audit(1722920688.872:83): pid=10433 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1575" name="/newroot/152/file0/bus" dev="hugetlbfs" ino=29104 res=1 errno=0 [ 438.749067][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.759192][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.973004][T10448] Bluetooth: MGMT ver 1.23 [ 440.228968][ T5269] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 440.976842][ T5269] usb 1-1: Using ep0 maxpacket: 16 [ 440.983744][ T5269] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.032025][ T5269] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.065532][ T5269] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 441.094154][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.305423][ T5269] usb 1-1: Product: syz [ 441.309644][ T5269] usb 1-1: Manufacturer: syz [ 441.315367][ T5269] usb 1-1: SerialNumber: syz [ 442.132013][ T5269] usb 1-1: cannot find UAC_HEADER [ 442.198092][ T5269] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 442.242830][ T5269] usb 1-1: USB disconnect, device number 23 [ 443.191849][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 443.297334][T10169] udevd[10169]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.513507][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 443.522138][T10522] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 443.541305][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 443.597204][ T9] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 443.638090][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.706901][ T9] usb 2-1: Product: syz [ 443.876114][ T9] usb 2-1: Manufacturer: syz [ 443.893073][ T9] usb 2-1: SerialNumber: syz [ 444.181500][ T9] usb 2-1: config 0 descriptor?? [ 444.220328][T10530] erspan0 speed is unknown, defaulting to 1000 [ 444.227393][T10530] lo speed is unknown, defaulting to 1000 [ 444.357640][T10506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 444.366010][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 444.406457][T10525] xt_CT: No such helper "snmp_trap" [ 444.474640][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 444.590333][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input29 [ 444.682544][ T9] usb 2-1: USB disconnect, device number 32 [ 444.688507][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 447.154417][T10558] usb usb8: usbfs: process 10558 (syz.2.1620) did not claim interface 0 before use [ 447.544326][T10566] erspan0 speed is unknown, defaulting to 1000 [ 447.559577][T10566] lo speed is unknown, defaulting to 1000 [ 447.946307][ T25] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 448.191324][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 448.212079][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64 [ 448.254352][ T5268] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 448.309021][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.329991][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.346121][ T25] usb 3-1: Product: и [ 448.356194][T10558] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 448.525651][ T5268] usb 5-1: Using ep0 maxpacket: 8 [ 448.606566][ T5218] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 448.625062][ T5268] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.690003][ T5268] usb 5-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.ab [ 448.726155][ T5268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.784640][ T5268] usb 5-1: Product: syz [ 448.797150][ T5268] usb 5-1: Manufacturer: syz [ 448.806502][ T5268] usb 5-1: SerialNumber: syz [ 448.889835][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.911500][ T5218] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 448.921872][ T5218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.995069][ T5218] usb 4-1: config 0 descriptor?? [ 449.080547][ T5268] usb 5-1: config 0 descriptor?? [ 449.090624][ T5268] usb 5-1: bad CDC descriptors [ 449.118227][ T5268] option 5-1:0.0: GSM modem (1-port) converter detected [ 449.330888][ T25] cdc_ncm 3-1:1.0: bind() failure [ 449.356971][ T5268] usb 5-1: USB disconnect, device number 34 [ 449.369471][ T25] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 449.387092][ T5268] option 5-1:0.0: device disconnected [ 449.446455][ T25] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 449.482911][ T25] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 449.613296][ T5218] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 449.653085][ T25] usb 3-1: USB disconnect, device number 27 [ 449.812717][ T5218] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001D/input/input30 [ 449.984659][T10578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.105471][T10578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.159909][ T5218] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 450.535605][T10578] overlayfs: failed to resolve './file0': -2 [ 450.552664][T10599] ax25_connect(): syz.0.1631 uses autobind, please contact jreuter@yaina.de [ 451.000969][ T5272] usb 4-1: USB disconnect, device number 20 [ 451.794487][T10603] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 451.801055][T10603] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 451.848181][T10603] vhci_hcd vhci_hcd.0: Device attached [ 452.027380][ T5268] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 452.036345][ T5267] vhci_hcd: vhci_device speed not set [ 452.083356][ T5269] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 452.154749][T10615] netlink: 'syz.3.1636': attribute type 4 has an invalid length. [ 452.159652][ T5267] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 452.227556][ T5268] usb 3-1: Using ep0 maxpacket: 32 [ 452.258083][ T5268] usb 3-1: unable to get BOS descriptor or descriptor too short [ 452.274196][T10615] netlink: 'syz.3.1636': attribute type 4 has an invalid length. [ 452.290782][ T5268] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.299426][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.300010][ T5268] usb 3-1: config 0 has no interface number 0 [ 452.320612][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.323588][ T5268] usb 3-1: New USB device found, idVendor=05c6, idProduct=7001, bcdDevice=5f.cd [ 452.343182][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.354308][ T5268] usb 3-1: Product: syz [ 452.358555][ T5268] usb 3-1: Manufacturer: syz [ 452.361810][ T5269] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 452.363815][ T5268] usb 3-1: SerialNumber: syz [ 452.387958][ T5268] usb 3-1: config 0 descriptor?? [ 452.394549][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.542486][ T5269] usb 5-1: config 0 descriptor?? [ 453.072571][ T5268] qmi_wwan 3-1:0.1: probe with driver qmi_wwan failed with error -22 [ 453.104084][ T5268] usb 3-1: USB disconnect, device number 28 [ 453.268578][ T5269] usbhid 5-1:0.0: can't add hid device: -71 [ 453.275387][T10609] vhci_hcd: connection reset by peer [ 453.295147][ T5269] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 453.315170][T10103] vhci_hcd: stop threads [ 453.319827][T10103] vhci_hcd: release socket [ 453.328056][T10103] vhci_hcd: disconnect device [ 453.347079][ T5269] usb 5-1: USB disconnect, device number 35 [ 454.112564][ T29] audit: type=1400 audit(1722920710.256:84): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=10642 comm="syz.2.1646" [ 455.167957][T10656] netlink: 'syz.0.1650': attribute type 9 has an invalid length. [ 455.192916][T10656] netlink: 'syz.0.1650': attribute type 7 has an invalid length. [ 455.210118][T10656] netlink: 'syz.0.1650': attribute type 8 has an invalid length. [ 457.065672][ T5267] vhci_hcd: vhci_device speed not set [ 458.393693][T10700] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1667'. [ 458.769203][T10707] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1671'. [ 459.145147][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 459.154341][T10712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1670'. [ 460.489004][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.499633][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.549646][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.570631][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.594798][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 460.609334][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.755517][T10734] erspan0 speed is unknown, defaulting to 1000 [ 460.787455][T10734] lo speed is unknown, defaulting to 1000 [ 460.915355][T10745] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 462.312818][T10762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1690'. [ 463.028297][ T5228] Bluetooth: hci4: command tx timeout [ 464.991438][ T5228] Bluetooth: hci4: command tx timeout [ 465.185842][ T5268] libceph: connect (1)[c::]:6789 error -101 [ 465.220819][ T5268] libceph: mon0 (1)[c::]:6789 connect error [ 465.228564][T10792] ceph: No mds server is up or the cluster is laggy [ 465.336758][T10734] chnl_net:caif_netlink_parms(): no params data found [ 466.104511][T10734] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.124458][ T5268] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 466.172974][T10734] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.195308][T10734] bridge_slave_0: entered allmulticast mode [ 466.225475][T10734] bridge_slave_0: entered promiscuous mode [ 466.253444][T10734] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.285166][T10734] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.314198][T10734] bridge_slave_1: entered allmulticast mode [ 466.340748][ T5268] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.361073][T10734] bridge_slave_1: entered promiscuous mode [ 466.382260][ T5268] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 466.415675][ T5268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.440165][ T5268] usb 4-1: config 0 descriptor?? [ 466.451409][ T5268] pwc: Askey VC010 type 2 USB webcam detected. [ 466.540925][T10734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.589880][T10734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.731132][ T29] audit: type=1326 audit(1722920723.473:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10819 comm="syz.2.1707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc4c1779f9 code=0x0 [ 466.754942][ T5268] pwc: send_video_command error -71 [ 466.769282][ T5268] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 466.788279][ T5268] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 466.820773][ T5268] usb 4-1: USB disconnect, device number 21 [ 466.972893][ T5228] Bluetooth: hci4: command tx timeout [ 466.993801][T10734] team0: Port device team_slave_0 added [ 467.134770][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.220604][T10734] team0: Port device team_slave_1 added [ 467.378700][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.405520][ T5268] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 467.493930][T10734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.501292][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.536239][T10734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.631256][ T5268] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.653682][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.668083][ T5268] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 467.691020][T10734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.715219][ T5268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.723726][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.769237][ T5268] usb 4-1: config 0 descriptor?? [ 467.786885][ T5268] pwc: Askey VC010 type 2 USB webcam detected. [ 467.824108][T10734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.838442][ T5272] kernel write not supported for file bpf-prog (pid: 5272 comm: kworker/0:7) [ 467.988699][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.181359][ T5268] pwc: recv_control_msg error -32 req 02 val 2b00 [ 468.188509][T10734] hsr_slave_0: entered promiscuous mode [ 468.213273][ T5268] pwc: recv_control_msg error -32 req 02 val 2700 [ 468.230817][ T5268] pwc: recv_control_msg error -32 req 02 val 2c00 [ 468.240079][T10734] hsr_slave_1: entered promiscuous mode [ 468.249262][ T5268] pwc: recv_control_msg error -32 req 04 val 1000 [ 468.255854][T10734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.257163][ T5268] pwc: recv_control_msg error -32 req 04 val 1300 [ 468.272604][ T5268] pwc: recv_control_msg error -32 req 04 val 1400 [ 468.282300][ T5268] pwc: recv_control_msg error -32 req 02 val 2000 [ 468.286576][T10734] Cannot create hsr debugfs directory [ 468.290079][ T5268] pwc: recv_control_msg error -32 req 02 val 2100 [ 468.304028][ T5268] pwc: recv_control_msg error -32 req 04 val 1500 [ 468.314021][ T5268] pwc: recv_control_msg error -32 req 02 val 2500 [ 468.322834][ T5268] pwc: recv_control_msg error -32 req 02 val 2400 [ 468.335143][ T5268] pwc: recv_control_msg error -32 req 02 val 2600 [ 468.344488][ T5267] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 468.353977][ T5268] pwc: recv_control_msg error -32 req 02 val 2900 [ 468.537499][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.566156][ T5268] pwc: recv_control_msg error -71 req 04 val 1100 [ 468.579684][ T5268] pwc: recv_control_msg error -71 req 04 val 1200 [ 468.582279][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.614437][ T5268] pwc: Registered as video71. [ 468.636905][ T5267] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 468.638000][ T5268] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 468.663328][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.699911][ T5268] usb 4-1: USB disconnect, device number 22 [ 468.741288][ T5267] usb 5-1: config 0 descriptor?? [ 468.779809][ T35] bridge_slave_1: left allmulticast mode [ 468.796128][ T35] bridge_slave_1: left promiscuous mode [ 468.815642][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.859183][ T35] bridge_slave_0: left allmulticast mode [ 468.878123][ T35] bridge_slave_0: left promiscuous mode [ 468.894003][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.963148][ T5228] Bluetooth: hci4: command tx timeout [ 469.089597][T10845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.132085][T10845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.380143][ T5267] usbhid 5-1:0.0: can't add hid device: -71 [ 469.389144][ T5267] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 469.426327][ T5267] usb 5-1: USB disconnect, device number 36 [ 470.487819][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.730802][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.776239][ T35] bond0 (unregistering): Released all slaves [ 471.755034][ T29] audit: type=1326 audit(1722920728.722:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.2.1730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc4c1779f9 code=0x0 [ 471.992570][ T29] audit: type=1326 audit(1722920728.953:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10885 comm="syz.2.1730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc4c1779f9 code=0x0 [ 472.271019][T10899] loop0: detected capacity change from 0 to 7 [ 472.294772][ T5216] Dev loop0: unable to read RDB block 7 [ 472.321520][ T5216] loop0: unable to read partition table [ 472.352246][ T5216] loop0: partition table beyond EOD, truncated [ 472.371673][T10899] Dev loop0: unable to read RDB block 7 [ 472.383670][T10899] loop0: unable to read partition table [ 472.410108][T10899] loop0: partition table beyond EOD, truncated [ 472.420623][T10899] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 472.420623][T10899] ) failed (rc=-5) [ 472.442226][ T4669] Dev loop0: unable to read RDB block 7 [ 472.447876][ T4669] loop0: unable to read partition table [ 472.454528][ T4669] loop0: partition table beyond EOD, truncated [ 472.899817][ T35] hsr_slave_0: left promiscuous mode [ 472.945516][ T35] hsr_slave_1: left promiscuous mode [ 472.968615][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.988472][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.007688][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.020904][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.105810][ T35] veth1_macvtap: left promiscuous mode [ 473.117789][ T35] veth0_macvtap: left promiscuous mode [ 473.131362][ T35] veth1_vlan: left promiscuous mode [ 473.150034][ T35] veth0_vlan: left promiscuous mode [ 473.182709][ T5267] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 473.182920][ T5268] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 473.375025][ T5267] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 473.392584][ T5268] usb 5-1: Using ep0 maxpacket: 32 [ 473.420171][ T5267] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 473.438210][ T5268] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 473.452504][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.469261][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.490139][ T5267] usb 3-1: config 0 descriptor?? [ 473.498242][ T5268] usb 5-1: config 0 descriptor?? [ 473.517618][ T5268] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 473.523887][ T5267] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 473.546188][ T5268] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 474.478448][ T5268] usb 3-1: USB disconnect, device number 29 [ 476.010061][T10954] ieee802154 phy0 wpan0: encryption failed: -90 [ 476.051980][ T5228] Bluetooth: hci5: command 0x0406 tx timeout [ 476.085554][ T35] team0 (unregistering): Port device team_slave_1 removed [ 476.188122][ T35] team0 (unregistering): Port device team_slave_0 removed [ 476.992676][T10920] vlan2: entered promiscuous mode [ 477.014816][T10920] bridge0: entered promiscuous mode [ 477.042896][T10920] team0: Port device vlan2 added [ 477.064165][T10956] batman_adv: batadv0: Adding interface: macsec1 [ 477.088374][T10956] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.127601][ T25] usb 5-1: USB disconnect, device number 37 [ 477.128474][T10956] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 477.236925][T10734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 477.281928][ T29] audit: type=1326 audit(1722920734.580:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10960 comm="syz.3.1752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa3779f9 code=0x0 [ 477.367135][T10734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 477.410408][ T29] audit: type=1326 audit(1722920734.717:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10963 comm="syz.4.1753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cc1d779f9 code=0x0 [ 477.564283][T10734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 477.609535][T10734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 478.761405][T10734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.859596][T10734] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.167030][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.174191][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.921451][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.928686][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.945362][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1757'. [ 480.027668][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 480.522662][T11014] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1760'. [ 480.532835][T11014] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 481.311875][T10734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.403218][ T5269] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 481.422166][T10734] veth0_vlan: entered promiscuous mode [ 481.438415][T10734] veth1_vlan: entered promiscuous mode [ 481.460873][ T5272] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 481.552501][T10734] veth0_macvtap: entered promiscuous mode [ 481.582946][T10734] veth1_macvtap: entered promiscuous mode [ 481.597269][ T5269] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.638465][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.674337][ T5269] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 481.678925][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.699268][ T5272] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 481.716394][ T5269] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.716828][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.746826][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.767110][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.787787][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.808314][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.831851][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 481.833038][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.858772][ T5269] usb 1-1: config 1 interface 0 has no altsetting 1 [ 481.861930][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.865484][ T5272] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 481.901329][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.901557][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.918813][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.930932][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.970875][ T5269] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.973503][T10734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.028500][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.034063][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.052530][ T5269] usb 1-1: Product: syz [ 482.053072][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.057684][ T5269] usb 1-1: Manufacturer: syz [ 482.110084][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.113351][ T5272] usb 5-1: config 0 descriptor?? [ 482.130770][ T5269] usb 1-1: SerialNumber: syz [ 482.164016][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.179238][ T5269] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 482.195719][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.208365][ T5269] cdc_ncm 1-1:1.0: bind() failure [ 482.227156][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.240675][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.403030][ T5272] ath6kl: Failed to submit usb control message: -71 [ 482.415959][ T5272] ath6kl: unable to send the bmi data to the device: -71 [ 482.423672][ T5268] usb 1-1: USB disconnect, device number 24 [ 482.427104][ T5272] ath6kl: Unable to send get target info: -71 [ 482.437137][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.551114][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.562064][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.575983][ T5272] ath6kl: Failed to init ath6kl core: -71 [ 482.592336][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.659955][ T5272] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 482.704800][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.811327][ T5272] usb 5-1: USB disconnect, device number 38 [ 482.903014][T10734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.226658][T10734] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.249696][T10734] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.276330][T10734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.337279][T10734] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.530949][T11041] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1767'. [ 483.615847][T11047] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 483.639330][ T2485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.655383][ T2485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.701489][T10109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.736174][T10109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.349422][T11066] mkiss: ax0: crc mode is auto. [ 485.422796][ T5272] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 485.616177][ T5272] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=36.16 [ 485.632524][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.651239][ T5272] usb 4-1: Product: syz [ 485.657268][ T5272] usb 4-1: Manufacturer: syz [ 485.672942][ T5272] usb 4-1: SerialNumber: syz [ 485.703210][ T5272] usb 4-1: config 0 descriptor?? [ 485.744230][ T5272] ttusb_dec_send_command: command bulk message failed: error -22 [ 485.793429][ T5272] ttusb-dec 4-1:0.0: probe with driver ttusb-dec failed with error -22 [ 486.580183][ T5218] usb 4-1: USB disconnect, device number 23 [ 487.302896][T11105] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1789'. [ 487.333053][T11105] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1789'. [ 487.622507][T11111] QAT: Stopping all acceleration devices. [ 487.898578][T11112] program syz.1.1789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.411062][T11120] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 488.658645][T11124] input: syz0 as /devices/virtual/input/input33 [ 489.490214][T11127] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.526550][T11157] Bluetooth: MGMT ver 1.23 [ 491.541980][ T29] audit: type=1326 audit(1722920749.550:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.0.1808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2411779f9 code=0x0 [ 492.187942][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 492.733505][ T5218] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 492.926952][ T5218] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 492.940176][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.951687][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.962303][ T5218] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 492.978956][ T5218] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 493.030598][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.048225][ T5218] usb 2-1: config 0 descriptor?? [ 493.402567][T11198] input: syz0 as /devices/virtual/input/input34 [ 493.676247][ T5218] thrustmaster 0003:044F:B653.001E: unknown main item tag 0x0 [ 493.701316][ T5218] thrustmaster 0003:044F:B653.001E: unknown main item tag 0x0 [ 493.708826][ T5218] thrustmaster 0003:044F:B653.001E: unknown main item tag 0x0 [ 494.391005][ T5218] thrustmaster 0003:044F:B653.001E: unknown main item tag 0x0 [ 494.406058][ T5218] thrustmaster 0003:044F:B653.001E: unknown main item tag 0x0 [ 494.413566][ T5218] thrustmaster 0003:044F:B653.001E: unknown main item tag 0x0 [ 494.421574][ T5218] thrustmaster 0003:044F:B653.001E: unknown main item tag 0x0 [ 494.574345][T11211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.849020][ T5218] thrustmaster 0003:044F:B653.001E: hidraw0: USB HID v0.00 Device [HID 044f:b653] on usb-dummy_hcd.1-1/input0 [ 494.866687][ T5218] thrustmaster 0003:044F:B653.001E: no inputs found [ 495.085097][T11211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.621901][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.628601][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.800775][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1836'. [ 497.054449][ T9] usb 2-1: USB disconnect, device number 33 [ 497.793675][T11258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1849'. [ 497.850501][T11258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1849'. [ 497.865842][T11258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1849'. [ 497.885562][T11258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1849'. [ 499.588810][T11283] syz.2.1850 (11283): /proc/11283/oom_adj is deprecated, please use /proc/11283/oom_score_adj instead. [ 499.695157][T11280] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 499.898998][T11280] kvm: pic: non byte read [ 499.917455][T11280] kvm: pic: non byte read [ 499.929937][T11280] kvm: pic: non byte read [ 501.306966][T11280] kvm: pic: non byte read [ 501.318462][T11280] kvm: pic: non byte read [ 501.327399][T11280] kvm: pic: single mode not supported [ 501.327685][T11280] kvm: pic: level sensitive irq not supported [ 501.343237][T11280] kvm: pic: non byte read [ 502.445960][T11318] mkiss: ax0: crc mode is auto. [ 503.178966][T11303] Bluetooth: hci1: command 0x2016 tx timeout [ 503.185382][T11303] Bluetooth: hci4: command 0x0405 tx timeout [ 503.433855][T11293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 503.440986][T11293] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 503.780783][T11333] erspan0 speed is unknown, defaulting to 1000 [ 503.789210][T11333] lo speed is unknown, defaulting to 1000 [ 506.475083][T11343] ptrace attach of "./syz-executor exec"[10734] was attempted by "./syz-executor exec"[11343] [ 507.084554][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 508.341051][T10580] kernel write not supported for file /stat (pid: 10580 comm: kworker/1:7) [ 508.642944][T11372] atomic_op ffff88807a9ae198 conn xmit_atomic 0000000000000000 [ 509.072423][T11391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1875'. [ 509.105268][T10580] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 509.801717][T11293] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 509.807712][T11293] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 509.817333][T10580] usb 2-1: Using ep0 maxpacket: 8 [ 509.838773][T10580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.901373][T10580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.991315][T10580] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.018011][T10580] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 510.027313][T10580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.041698][T10580] usb 2-1: config 0 descriptor?? [ 510.214177][T11293] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 510.265737][T11293] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 510.445466][T11293] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 510.476163][T11293] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 510.490101][T10580] sunplus 0003:04FC:05D8.001F: item fetching failed at offset 5/7 [ 510.573427][T10580] sunplus 0003:04FC:05D8.001F: probe with driver sunplus failed with error -22 [ 510.602229][T11412] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 510.705840][T11412] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1881'. [ 511.336027][T10580] usb 2-1: USB disconnect, device number 34 [ 511.665598][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.697036][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.706990][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.731092][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.741369][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 511.749652][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 511.936604][ T5228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.968451][ T5228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.987649][ T5228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 512.005196][ T5228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 512.013144][ T5228] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 512.020674][ T5228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 512.644197][T11422] erspan0 speed is unknown, defaulting to 1000 [ 512.701699][T11422] lo speed is unknown, defaulting to 1000 [ 513.247425][ T5272] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 513.643584][ T5272] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 513.652791][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.661326][ T5272] usb 5-1: Product: syz [ 513.665573][ T5272] usb 5-1: Manufacturer: syz [ 513.670468][ T2485] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.670847][ T5272] usb 5-1: SerialNumber: syz [ 513.688974][ T5272] usb 5-1: config 0 descriptor?? [ 513.802227][T11469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1895'. [ 513.825512][T11469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1895'. [ 513.853203][T11469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1895'. [ 513.909541][ T5272] mos7840 5-1:0.0: required endpoints missing [ 513.988598][ T2485] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.000093][ T54] Bluetooth: hci3: command tx timeout [ 514.069017][T11474] 9pnet_fd: Insufficient options for proto=fd [ 514.103655][ T25] usb 5-1: USB disconnect, device number 39 [ 514.144190][ T2485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.232315][T11479] Non-string source [ 514.353363][ T2485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.778955][T11422] chnl_net:caif_netlink_parms(): no params data found [ 514.865879][T11493] ptrace attach of "./syz-executor exec"[7800] was attempted by " %F9c6\x0d \x07BD'HɧR^a\x07|QO JyE~>ZYW<\x0b\x09ީNCJR,pfm< /a~Un~Mݾ1U[.^t߷+ʟ&&Y1d#&nPBVXZ1T\x22J;\x0d/Ȗ·#5H}n: ۆRs4erI=뾌¹lj^-A*gm}؁3\x0c\x0bv1*`^MJA\x09 _6%1ۜ)A yz*\x22rU5{XÅs >\x0aH*`~Lj!"[11493] [ 515.502933][ T2485] bridge_slave_1: left allmulticast mode [ 515.756973][ T2485] bridge_slave_1: left promiscuous mode [ 516.055435][ T54] Bluetooth: hci3: command tx timeout [ 516.126766][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.137704][T11479] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 516.162495][T11479] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 516.189751][ T2485] bridge_slave_0: left allmulticast mode [ 516.218579][ T2485] bridge_slave_0: left promiscuous mode [ 516.224510][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.575355][ T12] tipc: Subscription rejected, illegal request [ 516.856420][ T29] audit: type=1326 audit(1722920776.121:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11522 comm="syz.4.1908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cc1d779f9 code=0x0 [ 517.000889][T10580] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 517.193049][T10580] usb 2-1: Using ep0 maxpacket: 32 [ 517.200839][T10580] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 517.229426][T10580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.259695][T10580] usb 2-1: config 0 descriptor?? [ 517.267776][T10580] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 517.503494][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.605419][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.662176][ T2485] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 517.686190][ T2485] bond0 (unregistering): Released all slaves [ 517.704173][ T2485] bond1 (unregistering): Released all slaves [ 518.256665][T10580] gspca_vc032x: reg_w err -71 [ 518.282976][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.412199][ T29] audit: type=1400 audit(1722920777.769:92): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=11542 comm="syz.0.1913" dest=20000 [ 518.461270][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.475894][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.505149][T11422] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.516819][T11422] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.531273][T11422] bridge_slave_0: entered allmulticast mode [ 518.555988][T11422] bridge_slave_0: entered promiscuous mode [ 518.576593][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.116083][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.121422][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.196922][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.214121][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.219522][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.272132][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.337473][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.393747][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.448865][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.454284][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.495941][T11422] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.565677][T11422] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.581865][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.607331][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.639552][T11422] bridge_slave_1: entered allmulticast mode [ 519.665333][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.692989][T10580] gspca_vc032x: I2c Bus Busy Wait 00 [ 519.700047][T11422] bridge_slave_1: entered promiscuous mode [ 519.751491][T10580] gspca_vc032x: Unknown sensor... [ 519.772973][T10580] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 519.813033][T11565] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 519.839294][T10580] usb 2-1: USB disconnect, device number 35 [ 520.129296][T11422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.462774][T11422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.766213][T11593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1919'. [ 520.833363][T11422] team0: Port device team_slave_0 added [ 520.864031][T11596] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (65537) [ 520.894441][T11596] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 520.978455][T11422] team0: Port device team_slave_1 added [ 521.847193][T11422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.874243][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.943743][T11422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.009297][ T2485] hsr_slave_0: left promiscuous mode [ 522.177465][ T2485] hsr_slave_1: left promiscuous mode [ 522.201263][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.210294][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.219967][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.378929][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.722041][ T2485] veth0_macvtap: left promiscuous mode [ 522.752257][ T2485] veth1_vlan: left promiscuous mode [ 522.925906][ T2485] veth0_vlan: left promiscuous mode [ 523.373369][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 523.554149][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 523.561669][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 523.573498][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 523.585156][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 523.601899][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 141, changing to 11 [ 523.613743][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33843, setting to 1024 [ 523.637120][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 523.652769][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8218, bcdDevice=9d.58 [ 523.668111][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.706392][ T9] usb 3-1: config 0 descriptor?? [ 523.737273][T11621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 524.000027][ T5218] usb 3-1: USB disconnect, device number 30 [ 524.116895][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 524.171090][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 524.757403][T11422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.781547][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.882734][T11422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.927043][T11623] hsr0: entered promiscuous mode [ 524.933411][T11629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1934'. [ 525.058130][T11634] netlink: 105108 bytes leftover after parsing attributes in process `syz.1.1936'. [ 525.083747][T11634] netlink: 'syz.1.1936': attribute type 1 has an invalid length. [ 525.103287][T11634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1936'. [ 525.154393][ T5267] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 525.272615][T11422] hsr_slave_0: entered promiscuous mode [ 525.285646][T11422] hsr_slave_1: entered promiscuous mode [ 525.330726][T11422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.363894][ T5267] usb 1-1: Using ep0 maxpacket: 32 [ 525.384329][T11422] Cannot create hsr debugfs directory [ 525.401106][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 525.424527][ T5267] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 525.436616][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.459009][ T5267] usb 1-1: Product: syz [ 525.466296][ T5267] usb 1-1: Manufacturer: syz [ 525.471515][ T5267] usb 1-1: SerialNumber: syz [ 525.498877][ T5267] usb 1-1: config 0 descriptor?? [ 525.558974][ T5267] pvrusb2: Hardware description: Terratec Grabster AV400 [ 525.592367][ T5267] pvrusb2: ********** [ 525.622118][ T5267] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 525.661116][ T5267] pvrusb2: Important functionality might not be entirely working. [ 525.703479][ T5267] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 525.775453][ T5267] pvrusb2: ********** [ 525.809884][ T2036] pvrusb2: Invalid write control endpoint [ 525.982859][ T2036] pvrusb2: Invalid write control endpoint [ 526.013390][ T2036] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 526.032174][ T2036] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 526.077776][ T2036] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 526.103669][ T5267] usb 1-1: USB disconnect, device number 25 [ 526.116990][ T2036] pvrusb2: Device being rendered inoperable [ 526.135006][ T2036] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 526.148060][ T2036] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 526.202343][ T2036] pvrusb2: Attached sub-driver cx25840 [ 526.218076][ T2036] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 526.269574][ T2036] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 526.790423][T11669] hub 9-0:1.0: USB hub found [ 526.800407][T11669] hub 9-0:1.0: 8 ports detected [ 527.073770][T11670] xt_connbytes: Forcing CT accounting to be enabled [ 527.080689][T11670] No such timeout policy "syz0" [ 527.669415][ T5272] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 528.807042][ T5272] usb 2-1: Using ep0 maxpacket: 8 [ 529.013337][ T5272] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 529.031979][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.815243][ T5272] usb 2-1: config 0 descriptor?? [ 529.853750][ T5272] usb 2-1: can't set config #0, error -71 [ 529.881496][ T5272] usb 2-1: USB disconnect, device number 36 [ 530.164680][T11422] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 530.248079][T11422] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 530.255086][T10580] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 530.341206][T11422] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 530.386542][T11422] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 530.511926][T10580] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 530.556469][T10580] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.592597][T10580] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 530.619211][T10580] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 530.642256][T10580] usb 5-1: Manufacturer: syz [ 530.656874][T10580] usb 5-1: SerialNumber: syz [ 530.828091][T11422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.934278][T11422] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.017055][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.024199][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.101143][T10580] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 531.138367][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.145480][ T5218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.190494][T10580] usb 5-1: USB disconnect, device number 40 [ 531.671607][ T29] audit: type=1800 audit(1722920791.679:93): pid=11725 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.1956" name="/" dev="sockfs" ino=34499 res=0 errno=0 [ 531.778665][T11422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.861383][T10580] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 531.895525][T11422] veth0_vlan: entered promiscuous mode [ 531.937699][ T5218] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 531.959658][T11422] veth1_vlan: entered promiscuous mode [ 532.023592][T11422] veth0_macvtap: entered promiscuous mode [ 532.042381][T11422] veth1_macvtap: entered promiscuous mode [ 532.068311][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.080710][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.092016][T10580] usb 3-1: Using ep0 maxpacket: 8 [ 532.100627][ T29] audit: type=1326 audit(1722920792.130:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11753 comm="syz.1.1962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8a71779f9 code=0x0 [ 532.121895][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.129331][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.144070][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.155199][T10580] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 532.166358][ T5218] usb 1-1: Using ep0 maxpacket: 32 [ 532.173059][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.184835][T10580] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 532.197681][ T5218] usb 1-1: New USB device found, idVendor=a97a, idProduct=5131, bcdDevice=c0.00 [ 532.211645][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.221892][T10580] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 532.232098][ T5218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.240108][ T5218] usb 1-1: Product: syz [ 532.242763][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.247273][ T5270] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 532.265434][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.270208][T10580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.284198][ T5218] usb 1-1: Manufacturer: syz [ 532.288821][ T5218] usb 1-1: SerialNumber: syz [ 532.304294][ T5218] usb 1-1: config 0 descriptor?? [ 532.308511][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.318869][ T5218] usb-storage 1-1:0.0: USB Mass Storage device detected [ 532.334061][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.363152][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.376095][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.388878][T11422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.401228][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.417599][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.429616][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.440899][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.465865][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.486885][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.489015][ T5270] usb 5-1: Using ep0 maxpacket: 16 [ 532.498430][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.523387][T10580] usb 3-1: string descriptor 0 read error: -71 [ 532.541812][T10580] hub 3-1:32.0: USB hub found [ 532.550843][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.560847][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.563651][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.583510][T10580] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 532.592117][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.596521][ T5270] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 532.614963][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.621184][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.639849][ T5270] usb 5-1: config 0 descriptor?? [ 532.668001][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.671939][T10580] usb 3-1: USB disconnect, device number 31 [ 532.706344][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.745834][T11422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.813430][ T5218] usb 1-1: USB disconnect, device number 26 [ 532.827816][T11422] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.889316][T11422] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.919896][T11422] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.937281][T11422] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.068945][ T5270] mcp2200 0003:04D8:00DF.0020: item fetching failed at offset 0/2 [ 533.090597][ T5270] mcp2200 0003:04D8:00DF.0020: can't parse reports [ 533.107236][ T5270] mcp2200 0003:04D8:00DF.0020: probe with driver mcp2200 failed with error -22 [ 533.291194][T10109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.326760][T10109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.367034][T10096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.409328][T10580] usb 5-1: USB disconnect, device number 41 [ 533.521136][T10096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.521320][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 535.686408][T11799] openvswitch: netlink: IP tunnel dst address not specified [ 537.218435][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 538.014464][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.041462][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.072742][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 538.093195][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.129936][ T9] usb 2-1: config 0 descriptor?? [ 538.261786][T10580] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 538.301119][T11830] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 538.324152][T11830] kvm: pic: non byte read [ 538.334409][T11830] kvm: pic: non byte read [ 538.357764][T11830] kvm: pic: non byte read [ 538.371681][T11830] kvm: pic: non byte read [ 538.405140][T11830] kvm: pic: non byte read [ 538.420357][T11830] kvm: pic: non byte read [ 538.442069][T11830] kvm: pic: non byte read [ 538.461911][T11830] kvm: pic: single mode not supported [ 538.461931][T11830] kvm: pic: level sensitive irq not supported [ 538.466484][T10580] usb 3-1: Using ep0 maxpacket: 8 [ 538.468592][T11830] kvm: pic: non byte read [ 538.492179][T10580] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 538.502452][T10580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.515080][T10580] usb 3-1: Product: syz [ 538.540519][T10580] usb 3-1: Manufacturer: syz [ 538.550815][T10580] usb 3-1: SerialNumber: syz [ 538.577746][T10580] usb 3-1: config 0 descriptor?? [ 538.593866][T10580] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 538.692814][ T5270] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 538.761062][ T9] usb 2-1: string descriptor 0 read error: -71 [ 538.774833][ T9] uclogic 0003:256C:006D.0021: failed retrieving string descriptor #200: -71 [ 538.794261][ T9] uclogic 0003:256C:006D.0021: failed retrieving pen parameters: -71 [ 538.802752][ T9] uclogic 0003:256C:006D.0021: failed probing pen v2 parameters: -71 [ 538.823616][ T9] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 538.842767][ T9] uclogic 0003:256C:006D.0021: probe with driver uclogic failed with error -71 [ 538.877212][ T9] usb 2-1: USB disconnect, device number 37 [ 538.907048][ T5270] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.924559][ T5270] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 538.939820][ T5270] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.966480][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.990887][ T5270] usb 1-1: Product: syz [ 539.010633][ T5270] usb 1-1: Manufacturer: syz [ 539.023779][ T5270] usb 1-1: SerialNumber: syz [ 539.193212][T10580] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 539.231095][T10580] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 539.299136][T10580] usb 3-1: USB disconnect, device number 32 [ 540.025639][ T5270] cdc_ncm 1-1:1.0: bind() failure [ 540.058629][ T5270] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 540.113185][ T5270] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 540.178662][ T5270] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 540.237443][ T5270] usb 1-1: USB disconnect, device number 27 [ 540.278155][T11874] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1995'. [ 540.804097][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'. [ 541.368282][T11883] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 542.329461][T10580] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 542.589912][T10580] usb 4-1: config 250 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 543.502692][T10580] usb 4-1: language id specifier not provided by device, defaulting to English [ 543.530429][T10580] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 543.542112][T10580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.553790][T10580] usb 4-1: Product: syz [ 543.569089][T10580] usb 4-1: Manufacturer: 靰ﻥ傖ᅅ㞴岼먊ߧᚨ筨鴴㝮렃舊陌睬ٶ寥淴駖켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱 [ 543.613359][T10580] usb 4-1: SerialNumber: syz [ 543.646637][T10580] usbhid 4-1:250.0: couldn't find an input interrupt endpoint [ 544.036571][T11889] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.195552][T11941] xt_CT: You must specify a L4 protocol and not use inversions on it [ 545.901921][ T9] usb 4-1: USB disconnect, device number 24 [ 546.001166][T11967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2028'. [ 546.418482][ T29] audit: type=1800 audit(1722920807.163:95): pid=11987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2036" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 546.572612][T11992] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 547.592927][T12003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.759283][ T5267] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 547.823565][T12015] sp0: Synchronizing with TNC [ 548.538687][T12012] [U] [ 550.154234][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.191232][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.224680][ T5267] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.266654][ T5267] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 550.306397][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.324253][T12030] tmpfs: Bad value for 'mpol' [ 550.342572][ T5267] usb 3-1: config 0 descriptor?? [ 550.404566][ T5267] usb 3-1: can't set config #0, error -71 [ 550.426064][ T5267] usb 3-1: USB disconnect, device number 33 [ 550.632554][T10096] Bluetooth: (null): Invalid header checksum [ 550.640189][T10096] Bluetooth: (null): Invalid header checksum [ 550.789955][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 551.413179][ T11] Bluetooth: (null): Invalid header checksum [ 551.485263][T12047] netlink: 'syz.0.2054': attribute type 8 has an invalid length. [ 551.500159][T12045] nbd: must specify a size in bytes for the device [ 551.502868][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'. [ 551.663178][T12052] netlink: 'syz.2.2058': attribute type 2 has an invalid length. [ 551.900208][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2062'. [ 551.910239][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2062'. [ 551.921386][T10580] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 551.932895][T12060] netlink: 'syz.0.2062': attribute type 11 has an invalid length. [ 551.942251][T12060] netlink: 'syz.0.2062': attribute type 1 has an invalid length. [ 551.951779][T12060] netlink: 191384 bytes leftover after parsing attributes in process `syz.0.2062'. [ 552.121385][T10580] usb 5-1: Using ep0 maxpacket: 8 [ 552.132365][T10580] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 552.172439][T10580] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 552.199254][T10580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.222973][T10580] usb 5-1: Product: syz [ 552.242860][T10580] usb 5-1: Manufacturer: syz [ 552.265084][T10580] usb 5-1: SerialNumber: syz [ 552.617845][ T5270] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 552.656084][ T29] audit: type=1400 audit(1722920813.714:96): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12075 comm="syz.2.2068" [ 552.747894][T12054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.770054][T12054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.836393][ T8] usb 5-1: USB disconnect, device number 42 [ 552.981029][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 552.998157][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 553.010536][ T5270] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 553.021855][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.268093][ T5270] usb 2-1: config 0 descriptor?? [ 553.489657][T10580] usb 2-1: USB disconnect, device number 38 [ 553.729098][T12092] netlink: 'syz.3.2072': attribute type 33 has an invalid length. [ 553.875286][T12094] syz.2.2075 (12094) used greatest stack depth: 17336 bytes left [ 555.146602][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.153025][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 555.334104][T12147] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2096'. [ 555.530706][T12149] fuse: Bad value for 'group_id' [ 555.542806][T12149] fuse: Bad value for 'group_id' [ 557.717808][T12167] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2103'. [ 557.969247][T12175] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2106'. [ 558.906855][T12186] erspan0 speed is unknown, defaulting to 1000 [ 558.915362][T12186] lo speed is unknown, defaulting to 1000 [ 559.526049][T12188] fuse: Unknown parameter 'fd0x0000000000000007' [ 559.823182][ T29] audit: type=1326 audit(1722920821.231:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12190 comm="syz.3.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 559.885055][ T29] audit: type=1326 audit(1722920821.231:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12190 comm="syz.3.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 559.961043][ T29] audit: type=1326 audit(1722920821.262:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12190 comm="syz.3.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 560.101416][ T29] audit: type=1326 audit(1722920821.262:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12190 comm="syz.3.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 560.207488][ T29] audit: type=1326 audit(1722920821.262:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12190 comm="syz.3.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 560.289585][ T29] audit: type=1326 audit(1722920821.273:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12190 comm="syz.3.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 561.046387][ T29] audit: type=1326 audit(1722920821.273:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12190 comm="syz.3.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 561.211856][ T29] audit: type=1326 audit(1722920821.273:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12190 comm="syz.3.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 561.303884][ T29] audit: type=1326 audit(1722920821.273:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12190 comm="syz.3.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 561.352057][ T29] audit: type=1326 audit(1722920821.273:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12190 comm="syz.3.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 561.876413][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 562.723677][ T25] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 562.915955][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 562.953345][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.967574][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.007508][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.038036][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 563.058145][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.084933][ T25] usb 5-1: config 0 descriptor?? [ 564.120097][ T25] ryos 0003:1E7D:31CE.0022: unknown main item tag 0x0 [ 564.188348][ T25] ryos 0003:1E7D:31CE.0022: unbalanced collection at end of report description [ 564.241711][ T25] ryos 0003:1E7D:31CE.0022: parse failed [ 564.269873][ T25] ryos 0003:1E7D:31CE.0022: probe with driver ryos failed with error -22 [ 564.486034][T10580] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 564.504908][ T25] usb 5-1: USB disconnect, device number 43 [ 564.612746][T12266] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 564.627898][T12266] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 564.645537][T12266] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 564.686187][T10580] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 564.703133][T12265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.710055][T10580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.741322][T10580] usb 2-1: config 0 descriptor?? [ 564.989183][T10580] usb 2-1: USB disconnect, device number 39 [ 566.305517][T12286] hub 9-0:1.0: USB hub found [ 566.400769][T12286] hub 9-0:1.0: 8 ports detected [ 566.966502][T12284] xt_connbytes: Forcing CT accounting to be enabled [ 566.975538][T12284] No such timeout policy "syz0" [ 567.172551][T10169] udevd[10169]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.321550][T12298] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2148'. [ 569.915376][T10580] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 572.154262][T12339] xt_connbytes: Forcing CT accounting to be enabled [ 572.160936][T12339] No such timeout policy "syz0" [ 573.596219][T10580] usb 3-1: device not accepting address 34, error -71 [ 576.260531][T12404] netlink: 'syz.2.2183': attribute type 14 has an invalid length. [ 577.625624][ T5267] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 578.726892][ T5267] usb 1-1: Using ep0 maxpacket: 8 [ 578.796808][ T5267] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 578.834609][ T5267] usb 1-1: config 0 has no interface number 0 [ 578.840749][ T5267] usb 1-1: config 0 interface 168 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 578.936046][ T5267] usb 1-1: config 0 interface 168 has no altsetting 0 [ 578.994335][ T5267] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=f9.c4 [ 579.029634][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.075726][ T5267] usb 1-1: config 0 descriptor?? [ 579.238566][T12446] ebt_limit: overflow, try lower: 12058624/0 [ 579.397498][ T5267] usb 1-1: string descriptor 0 read error: -71 [ 579.426536][ T5267] cytherm 1-1:0.168: Cypress thermometer device now attached [ 579.466080][ T5267] usb 1-1: USB disconnect, device number 28 [ 579.492596][ T5267] cytherm 1-1:0.168: Cypress thermometer now disconnected [ 580.392316][T12463] erspan0 speed is unknown, defaulting to 1000 [ 580.400800][T12463] lo speed is unknown, defaulting to 1000 [ 582.101168][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 582.101186][ T29] audit: type=1326 audit(1722920844.620:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.2.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4c1779f9 code=0x7ffc0000 [ 582.214244][ T29] audit: type=1326 audit(1722920844.662:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.2.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4c1779f9 code=0x7ffc0000 [ 582.239132][ T29] audit: type=1326 audit(1722920844.662:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.2.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc4c179817 code=0x7ffc0000 [ 583.508976][ T29] audit: type=1326 audit(1722920844.662:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.2.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4c1779f9 code=0x7ffc0000 [ 583.622628][ T29] audit: type=1326 audit(1722920844.662:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.2.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4c1779f9 code=0x7ffc0000 [ 583.752302][ T29] audit: type=1326 audit(1722920844.662:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.2.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc4c1779f9 code=0x7ffc0000 [ 583.831554][ T29] audit: type=1326 audit(1722920844.662:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.2.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4c1779f9 code=0x7ffc0000 [ 583.856034][ T29] audit: type=1326 audit(1722920844.662:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.2.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4c1779f9 code=0x7ffc0000 [ 583.914337][ T29] audit: type=1326 audit(1722920844.662:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.2.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc4c1779f9 code=0x7ffc0000 [ 584.058661][ T29] audit: type=1326 audit(1722920844.662:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.2.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4c1779f9 code=0x7ffc0000 [ 584.129727][T12501] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2220'. [ 584.399826][T12504] binder: BINDER_SET_CONTEXT_MGR already set [ 584.408265][T12504] binder: 12499:12504 ioctl 4018620d 20000040 returned -16 [ 584.937419][ T5268] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 585.292468][ T5268] usb 1-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 585.314241][T12513] btrfs: Unknown parameter '(/%' [ 585.320345][T12515] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2224'. [ 585.341163][T12515] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2224'. [ 585.343655][ T5268] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 585.379364][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.404996][ T5268] usb 1-1: config 0 descriptor?? [ 585.414453][ T5268] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 585.442629][ T5268] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 585.473543][ T5268] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 585.745055][ T5268] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 586.788270][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2232'. [ 587.620067][ T5218] usb 1-1: USB disconnect, device number 29 [ 589.615652][ T5218] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 589.959221][ T5218] usb 1-1: Using ep0 maxpacket: 16 [ 589.994128][ T5218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.188246][ T5218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.200673][ T5218] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 590.210474][ T5218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.228071][ T5218] usb 1-1: config 0 descriptor?? [ 590.958905][T12588] ax25_connect(): syz.3.2247 uses autobind, please contact jreuter@yaina.de [ 591.074181][ T5218] waltop 0003:172F:0037.0023: item fetching failed at offset 4/6 [ 591.095802][ T5218] waltop 0003:172F:0037.0023: probe with driver waltop failed with error -22 [ 591.340274][ T8] usb 1-1: USB disconnect, device number 30 [ 591.462312][ T5267] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 592.513781][ T5267] usb 5-1: Using ep0 maxpacket: 16 [ 592.546760][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.596315][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.634872][ T5267] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 592.662563][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.696189][ T5267] usb 5-1: config 0 descriptor?? [ 592.843572][T12617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.864767][T12617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.881079][T12617] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 593.972939][ T5267] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 593.980040][ T5267] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 594.001906][ T5267] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 594.025455][ T5267] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 594.032445][ T5267] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 594.068763][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2259'. [ 594.098840][ T5267] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 594.214447][ T5267] cp2112 0003:10C4:EA90.0024: Part Number: 0x00 Device Version: 0x00 [ 594.390987][T12634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 595.185294][T12639] netlink: 'syz.0.2265': attribute type 6 has an invalid length. [ 595.496539][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2268'. [ 595.703641][ T8] usb 5-1: reset high-speed USB device number 44 using dummy_hcd [ 597.129983][ T5269] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 597.530002][ T5269] usb 4-1: Using ep0 maxpacket: 8 [ 597.545689][ T5269] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 597.562331][ T5267] usb 5-1: USB disconnect, device number 44 [ 597.578123][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.597461][ T5269] usb 4-1: Product: syz [ 597.606521][ T5269] usb 4-1: Manufacturer: syz [ 597.616045][ T5269] usb 4-1: SerialNumber: syz [ 597.636177][ T5269] usb 4-1: config 0 descriptor?? [ 597.656498][ T5269] gspca_main: sq905-2.14.0 probing 2770:9120 [ 599.081560][T12710] syz.1.2289 (12710): drop_caches: 2 [ 599.222060][ T5269] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 599.318543][ T5269] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 599.480047][ T5269] usb 4-1: USB disconnect, device number 26 [ 599.495714][T12714] netlink: 'syz.4.2293': attribute type 9 has an invalid length. [ 599.765259][T12721] netlink: 'syz.1.2294': attribute type 3 has an invalid length. [ 599.773988][T12721] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2294'. [ 602.051951][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 602.051969][ T29] audit: type=1326 audit(1722920865.564:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12738 comm="syz.2.2303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc4c1779f9 code=0x0 [ 602.363448][T12766] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2308'. [ 602.726941][T12789] netlink: 'syz.1.2319': attribute type 1 has an invalid length. [ 602.734899][T12789] netlink: 'syz.1.2319': attribute type 4 has an invalid length. [ 602.743370][T12789] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.2319'. [ 602.807208][T12786] netlink: 'syz.1.2319': attribute type 1 has an invalid length. [ 602.817183][ T5269] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 602.831573][T12786] netlink: 'syz.1.2319': attribute type 4 has an invalid length. [ 602.851184][T12786] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.2319'. [ 603.026904][ T5269] usb 3-1: Using ep0 maxpacket: 16 [ 603.045488][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.076894][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.110890][ T5269] usb 3-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 603.140504][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.160818][ T5269] usb 3-1: config 0 descriptor?? [ 604.273845][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 604.295340][ T5269] wacom 0003:056A:0300.0025: unknown main item tag 0x0 [ 604.321534][ T5269] wacom 0003:056A:0300.0025: unknown main item tag 0x0 [ 604.342893][T12814] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2327'. [ 604.344877][ T5269] wacom 0003:056A:0300.0025: unknown main item tag 0x0 [ 604.381156][ T5269] wacom 0003:056A:0300.0025: unknown main item tag 0x0 [ 604.399631][ T5269] wacom 0003:056A:0300.0025: unknown main item tag 0x0 [ 604.429431][ T5269] wacom 0003:056A:0300.0025: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 604.464681][ T5270] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 604.483642][ T5269] wacom 0003:056A:0300.0025: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.2-1/input0 [ 604.535983][ T5269] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0300.0025/input/input36 [ 604.640793][ T5269] usb 3-1: USB disconnect, device number 36 [ 604.665060][ T5270] usb 4-1: Using ep0 maxpacket: 32 [ 604.715420][ T5270] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 604.762964][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 604.802585][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 604.841210][ T5270] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 604.869826][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.905699][ T5270] usb 4-1: config 0 descriptor?? [ 604.924932][T12810] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 604.956153][ T5270] hub 4-1:0.0: USB hub found [ 605.178795][ T5270] hub 4-1:0.0: 2 ports detected [ 605.194667][T12837] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2324085397/2324085399 [ 605.204913][T12837] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2324085397/2324085399 [ 606.088101][T12850] No buffer was provided with the request [ 606.760523][ T5269] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 606.962500][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.980494][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.996909][ T5269] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 607.006180][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.298103][ T5269] usb 1-1: config 0 descriptor?? [ 607.733030][ T5269] usbhid 1-1:0.0: can't add hid device: -71 [ 607.739092][ T5269] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 607.743072][T12869] kernel read not supported for file /eth0 (pid: 12869 comm: syz.2.2348) [ 607.803777][ T5269] usb 1-1: USB disconnect, device number 31 [ 607.822256][ T29] audit: type=1800 audit(1722920872.623:271): pid=12869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2348" name="eth0" dev="mqueue" ino=36627 res=0 errno=0 [ 607.873534][ T5270] usb 4-1: USB disconnect, device number 27 [ 607.950396][T12873] Bluetooth: MGMT ver 1.23 [ 607.968270][T12873] Bluetooth: hci3: invalid length 0, exp 2 for type 19 [ 608.256017][ T8] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 608.460126][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 608.490880][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.530840][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.562888][ T8] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 608.595142][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.651046][ T8] usb 5-1: config 0 descriptor?? [ 608.783758][T12901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2360'. [ 608.878651][T10580] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 609.079945][T10580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.082918][T12875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.121942][T12875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.123419][T10580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.174139][T10580] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 609.178038][ T8] konepure 0003:1E7D:2DB4.0026: item fetching failed at offset 0/2 [ 609.203308][T10580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.222638][ T8] konepure 0003:1E7D:2DB4.0026: parse failed [ 609.229985][T10580] usb 1-1: config 0 descriptor?? [ 609.250984][ T8] konepure 0003:1E7D:2DB4.0026: probe with driver konepure failed with error -22 [ 609.370938][ T8] usb 5-1: USB disconnect, device number 45 [ 609.554409][T10580] usbhid 1-1:0.0: can't add hid device: -71 [ 609.561159][T10580] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 609.603851][T10580] usb 1-1: USB disconnect, device number 32 [ 610.399237][ T5267] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 610.425136][T12928] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 610.595016][T12935] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38415261, 8, 0, 0, 0) [ 610.619895][ T5267] usb 2-1: config index 0 descriptor too short (expected 65191, got 72) [ 610.630494][ T5267] usb 2-1: config index 1 descriptor too short (expected 65191, got 72) [ 610.641096][ T5267] usb 2-1: config index 2 descriptor too short (expected 65191, got 72) [ 610.658641][ T5267] usb 2-1: config index 3 descriptor too short (expected 65191, got 72) [ 610.671410][ T5267] usb 2-1: config index 4 descriptor too short (expected 65191, got 72) [ 610.683033][ T5267] usb 2-1: config index 5 descriptor too short (expected 65191, got 72) [ 610.700487][ T5267] usb 2-1: config index 6 descriptor too short (expected 65191, got 72) [ 610.716487][ T5267] usb 2-1: config index 7 descriptor too short (expected 65191, got 72) [ 610.757710][ T5267] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 610.777399][ T5267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.843179][ T5267] usb 2-1: Product: syz [ 610.875619][ T5267] usb 2-1: Manufacturer: syz [ 610.890444][ T5267] usb 2-1: SerialNumber: syz [ 611.557181][T12948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2377'. [ 611.633739][ T5267] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 611.660477][ T5272] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 612.166036][ T5267] usb 2-1: USB disconnect, device number 40 [ 612.712342][ T5272] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 612.719672][ T5272] ath9k_htc: Failed to initialize the device [ 612.899699][ T5267] usb 2-1: ath9k_htc: USB layer deinitialized [ 613.276154][T10580] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 613.686124][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 613.692460][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 613.761795][T10580] usb 1-1: Using ep0 maxpacket: 32 [ 613.777166][T10580] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 613.838857][T10580] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 613.868366][T10580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.901045][T10580] usb 1-1: Product: syz [ 613.907380][T10580] usb 1-1: Manufacturer: syz [ 613.912003][T10580] usb 1-1: SerialNumber: syz [ 613.932320][T10580] usb 1-1: config 0 descriptor?? [ 613.945544][T12969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 613.957214][T10580] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 614.142061][ T29] audit: type=1800 audit(1722920879.258:272): pid=12975 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2385" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 614.421881][T12994] fuse: Unknown parameter '2[u$!(V] _ /G7#GV0;i8m_lOθG@H 20jMd[M@6' [ 614.469014][T12986] erspan0 speed is unknown, defaulting to 1000 [ 614.476957][T12986] lo speed is unknown, defaulting to 1000 [ 614.708916][T12996] xt_CT: No such helper "syz0" [ 615.238507][T10580] usb 1-1: USB disconnect, device number 33 [ 615.333837][ T5267] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 615.543406][ T5267] usb 4-1: Using ep0 maxpacket: 8 [ 615.565385][ T5267] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.593359][ T5267] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 615.624141][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.992042][ T5267] usb 4-1: config 0 descriptor?? [ 616.151420][ T5267] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 616.389683][T13032] VFS: could not find a valid V7 on nullb0. [ 616.419083][ T5267] usb 4-1: USB disconnect, device number 28 [ 616.443084][T13032] vxfs: WRONG superblock magic 00000000 at 1 [ 616.492997][T13032] vxfs: WRONG superblock magic 00000000 at 8 [ 616.517194][T13037] dccp_close: ABORT with 20 bytes unread [ 616.528810][T13032] vxfs: can't find superblock. [ 616.566505][T13013] netlink: 'syz.0.2398': attribute type 1 has an invalid length. [ 616.601054][T13013] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2398'. [ 617.828272][T13059] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 618.438198][T13059] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 618.546194][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2415'. [ 619.449958][T13072] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 619.490256][T13072] erspan0 speed is unknown, defaulting to 1000 [ 619.497903][T13072] lo speed is unknown, defaulting to 1000 [ 620.281612][T13059] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 620.369801][T13059] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 621.578214][T13092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2423'. [ 621.724738][T13095] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 621.831688][T13097] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2425'. [ 622.343884][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 623.387145][T13140] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 623.440481][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2440'. [ 623.708961][T13156] overlay: Unknown parameter 'y^\@\+\' [ 624.058818][ T5218] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 624.579089][ T5218] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 624.741957][ T5218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.764555][ T5218] usb 3-1: Product: syz [ 624.768762][ T5218] usb 3-1: Manufacturer: syz [ 624.773374][ T5218] usb 3-1: SerialNumber: syz [ 624.782755][ T5218] usb 3-1: config 0 descriptor?? [ 625.735871][ T5218] mos7840 3-1:0.0: required endpoints missing [ 626.152803][ T5218] usb 3-1: USB disconnect, device number 37 [ 626.272670][T13184] devtmpfs: Cannot enable quota on remount [ 626.915982][T13210] sp0: Synchronizing with TNC [ 626.936809][ T5218] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 627.509405][T13202] [U] [ 631.341430][T13216] vlan2: entered promiscuous mode [ 634.044277][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'. [ 634.492640][T13229] syzkaller0: entered promiscuous mode [ 634.514481][T13229] syzkaller0: entered allmulticast mode [ 635.137447][T10580] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 635.575721][T10580] usb 3-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 635.602080][T10580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.622914][T10580] usb 3-1: Product: syz [ 635.627080][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2485'. [ 635.656208][T10580] usb 3-1: Manufacturer: syz [ 635.666076][T10580] usb 3-1: SerialNumber: syz [ 635.688902][T10580] usb 3-1: config 0 descriptor?? [ 635.712625][T10580] usb 3-1: Found UVC 0.00 device syz (468c:90ea) [ 635.756653][T10580] usb 3-1: No valid video chain found. [ 636.116021][T13277] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 637.462020][ T5269] usb 3-1: USB disconnect, device number 38 [ 637.523156][ T25] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 637.711042][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 637.727064][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 637.743109][ T25] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 637.757225][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.779496][ T25] usb 5-1: Product: syz [ 637.783761][ T25] usb 5-1: Manufacturer: syz [ 637.793620][ T25] usb 5-1: SerialNumber: syz [ 637.825428][ T25] usb 5-1: config 0 descriptor?? [ 637.851249][ T25] hub 5-1:0.0: bad descriptor, ignoring hub [ 637.865187][ T25] hub 5-1:0.0: probe with driver hub failed with error -5 [ 637.876615][ T25] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input39 [ 637.924148][ T25] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 638.003688][ T25] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 638.435380][ T25] usb 5-1: USB disconnect, device number 46 [ 639.887497][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2489'. [ 639.949480][T13317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2505'. [ 640.075334][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'. [ 640.284340][ T29] audit: type=1400 audit(1722920906.700:273): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=13324 comm="syz.0.2508" [ 640.530013][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 640.723339][ T25] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 640.768383][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.819064][ T25] usb 4-1: config 0 descriptor?? [ 640.845750][ T25] usb 4-1: bad CDC descriptors [ 641.173900][ T5269] usb 4-1: USB disconnect, device number 30 [ 642.153491][T10580] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 642.419699][T13374] netlink: 'syz.3.2524': attribute type 4 has an invalid length. [ 642.764910][T13385] IPVS: Error joining to the multicast group [ 643.269696][T10580] usb 1-1: Using ep0 maxpacket: 8 [ 643.378150][T10580] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 643.977071][T10580] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 644.013492][T10580] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 644.063445][T10580] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 644.090131][T10580] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.142052][T10580] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 644.171828][T10580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.339051][T13403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 644.644126][T10580] usb 1-1: can't set config #16, error -71 [ 644.660584][T10580] usb 1-1: USB disconnect, device number 34 [ 646.006073][ T5269] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 646.206721][ T5269] usb 3-1: Using ep0 maxpacket: 16 [ 646.221175][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 646.272680][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 646.340463][ T5269] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=7c.b1 [ 646.365006][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.377438][ T5269] usb 3-1: Product: syz [ 646.383161][ T5269] usb 3-1: Manufacturer: syz [ 646.407971][ T5269] usb 3-1: SerialNumber: syz [ 646.455619][ T5269] usb 3-1: config 0 descriptor?? [ 646.488701][ T5269] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 646.720218][ T25] usb 3-1: USB disconnect, device number 39 [ 646.781837][T13449] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2551'. [ 646.789787][ T29] audit: type=1326 audit(1722920913.523:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13450 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a71779f9 code=0x7ffc0000 [ 646.938090][T13453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 647.187166][ T29] audit: type=1326 audit(1722920913.555:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13450 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a71779f9 code=0x7ffc0000 [ 647.768967][ T5269] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 647.815698][ T29] audit: type=1326 audit(1722920913.922:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13450 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8a71779f9 code=0x7ffc0000 [ 647.878449][ T29] audit: type=1326 audit(1722920913.922:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13450 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a71779f9 code=0x7ffc0000 [ 648.064169][ T29] audit: type=1326 audit(1722920913.922:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13450 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a71779f9 code=0x7ffc0000 [ 648.093326][ T5269] usb 4-1: Using ep0 maxpacket: 32 [ 648.134316][ T5269] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 648.336507][ T5269] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 648.450559][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.534764][T13463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2556'. [ 648.563390][ T5269] usb 4-1: Product: syz [ 648.579687][ T29] audit: type=1326 audit(1722920913.922:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13450 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8a71779f9 code=0x7ffc0000 [ 648.617659][ T5269] usb 4-1: Manufacturer: syz [ 648.685820][ T29] audit: type=1326 audit(1722920913.922:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13450 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a71779f9 code=0x7ffc0000 [ 648.707924][ T5269] usb 4-1: SerialNumber: syz [ 648.742982][ T29] audit: type=1326 audit(1722920913.922:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13450 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a71779f9 code=0x7ffc0000 [ 648.779026][ T5269] usb 4-1: config 0 descriptor?? [ 648.810053][T13446] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 648.849901][ T29] audit: type=1326 audit(1722920913.933:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13450 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8a71779f9 code=0x7ffc0000 [ 648.871928][ T29] audit: type=1326 audit(1722920913.933:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13450 comm="syz.1.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a71779f9 code=0x7ffc0000 [ 648.873955][ T5269] hub 4-1:0.0: bad descriptor, ignoring hub [ 648.929577][ T5269] hub 4-1:0.0: probe with driver hub failed with error -5 [ 648.981260][ T5269] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 649.168815][T13446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.199502][T13446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.277603][ T5269] usb 4-1: USB disconnect, device number 31 [ 649.277653][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 649.493143][T13492] dccp_invalid_packet: P.CsCov 3 exceeds packet length 256 [ 649.890848][T13508] libceph: resolve 'c' (ret=-3): failed [ 650.422884][T13530] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 651.207094][T13535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 651.296219][ T5272] IPVS: starting estimator thread 0... [ 651.339612][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2584'. [ 651.397643][T13537] IPVS: using max 31 ests per chain, 74400 per kthread [ 651.799668][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2582'. [ 652.583117][T13551] block nbd2: NBD_DISCONNECT [ 652.597922][T13551] block nbd2: Disconnected due to user request. [ 652.616035][T13551] block nbd2: shutting down sockets [ 653.915168][T13571] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 654.090628][T13567] fuse: Unknown parameter '.K0OΏNA-IeKm' [ 654.750697][T13573] syzkaller1: entered promiscuous mode [ 654.952078][T13573] syzkaller1: entered allmulticast mode [ 655.449543][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2601'. [ 655.483995][T13589] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2601'. [ 655.511039][T13591] netlink: 'syz.3.2600': attribute type 29 has an invalid length. [ 655.537182][T13594] netlink: 'syz.3.2600': attribute type 29 has an invalid length. [ 655.593214][T13591] netlink: 'syz.3.2600': attribute type 29 has an invalid length. [ 655.626937][T13591] netlink: 'syz.3.2600': attribute type 29 has an invalid length. [ 655.662990][T13591] netlink: 'syz.3.2600': attribute type 29 has an invalid length. [ 655.699712][T13591] netlink: 'syz.3.2600': attribute type 29 has an invalid length. [ 655.893759][ T5272] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 656.002341][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2604'. [ 656.019544][T13602] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 656.070475][T13602] x_tables: unsorted underflow at hook 2 [ 656.105345][ T5272] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 656.122334][ T5272] usb 5-1: config 0 has no interface number 0 [ 656.136044][ T5272] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.188712][ T5272] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.245651][ T5272] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 656.283493][ T5272] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 656.302945][ T5272] usb 5-1: Manufacturer: syz [ 656.333728][ T5272] usb 5-1: config 0 descriptor?? [ 656.551322][T13592] QAT: Device 0 not found [ 656.583605][ T5269] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 656.630649][ T5269] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz0] on syz1 [ 656.854782][ T5272] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.0028/input/input41 [ 656.896680][T13609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.943663][ T5272] sony 0003:054C:03D5.0028: input,hidraw1: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18 [ 657.036535][ T25] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 657.229443][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 657.289154][ T25] usb 1-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=bd.3b [ 657.306130][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.362954][ T25] usb 1-1: config 0 descriptor?? [ 657.652954][ T5267] usb 1-1: USB disconnect, device number 35 [ 658.008234][ T5272] usb 5-1: reset high-speed USB device number 47 using dummy_hcd [ 661.264855][T13668] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 661.274651][T13668] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 662.038043][T13679] netlink: 'syz.0.2623': attribute type 10 has an invalid length. [ 662.058643][T13679] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 662.066342][T13679] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 662.080194][T13679] team0: Port device netdevsim0 added [ 662.093396][ T5269] usb 5-1: USB disconnect, device number 47 [ 662.171634][ T5270] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 662.262499][T13682] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2630'. [ 662.352993][ T5270] usb 3-1: Using ep0 maxpacket: 32 [ 662.387418][ T5270] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 662.436372][ T5270] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a7.3a [ 662.481504][ T5270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.525689][ T5270] usb 3-1: Product: syz [ 662.551048][ T5270] usb 3-1: Manufacturer: syz [ 662.566258][ T5270] usb 3-1: SerialNumber: syz [ 662.581833][ T5270] usb 3-1: config 0 descriptor?? [ 662.634409][T13691] 9pnet_fd: Insufficient options for proto=fd [ 662.686883][T13698] netlink: 'syz.1.2636': attribute type 2 has an invalid length. [ 662.820107][ T5270] usb 3-1: unknown interface protocol 0x71, assuming v1 [ 662.827106][ T5270] usb 3-1: 0:2 : does not exist [ 662.892645][ T5270] usb 3-1: USB disconnect, device number 40 [ 662.961857][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 662.961875][ T29] audit: type=1326 audit(1722920930.509:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13707 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 663.067265][ T29] audit: type=1326 audit(1722920930.509:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13707 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 663.089231][T10580] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 663.111661][ T29] audit: type=1326 audit(1722920930.509:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13707 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 663.169052][T13287] udevd[13287]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.223203][ T29] audit: type=1326 audit(1722920930.509:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13707 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 663.276225][T10580] usb 2-1: Using ep0 maxpacket: 16 [ 663.291022][T10580] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 663.405926][T13715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 663.517012][ T29] audit: type=1326 audit(1722920930.509:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13707 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755e1779f9 code=0x7ffc0000 [ 663.847784][T13711] [U]  [ 663.872949][T10580] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 663.914299][T10580] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 663.948582][T10580] usb 2-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 663.988412][T10580] usb 2-1: config 1 interface 0 has no altsetting 0 [ 664.010730][T10580] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.025204][T10580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 664.040483][T10580] usb 2-1: SerialNumber: syz [ 664.316187][T10580] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 664.379582][T10580] usb 2-1: USB disconnect, device number 41 [ 664.763186][ T25] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 664.992995][ T25] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 665.025609][ T25] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 665.053517][ T25] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 665.103262][ T25] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 665.122990][ T25] usb 5-1: Product: syz [ 665.148290][ T25] usb 5-1: SerialNumber: syz [ 665.203566][ T25] option 5-1:7.0: GSM modem (1-port) converter detected [ 665.753275][ T29] audit: type=1800 audit(1722920933.449:306): pid=13748 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2651" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 665.952551][ T5218] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 666.157086][ T5218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 666.193550][ T5218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 666.207327][ T5218] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 666.217129][ T5218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.244253][ T5218] usb 1-1: config 0 descriptor?? [ 666.261512][ T5218] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 666.273248][ T5218] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 666.462590][ T9] usb 1-1: USB disconnect, device number 36 [ 666.934010][ T5269] usb 5-1: USB disconnect, device number 48 [ 666.940570][ T5269] option 5-1:7.0: device disconnected [ 666.952967][ T5218] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 667.146443][ T5218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 667.146473][ T5218] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 667.146497][ T5218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 667.146519][ T5218] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 667.148722][ T5218] usb 3-1: New USB device found, idVendor=22b8, idProduct=4234, bcdDevice=32.84 [ 667.148750][ T5218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.148771][ T5218] usb 3-1: Product: syz [ 667.148786][ T5218] usb 3-1: Manufacturer: syz [ 667.148800][ T5218] usb 3-1: SerialNumber: syz [ 667.150869][ T5218] usb 3-1: config 0 descriptor?? [ 667.164311][ T5218] ipaq 3-1:0.0: PocketPC PDA converter detected [ 667.164737][ T5218] usb 3-1: active config #0 != 1 ?? [ 667.355732][ T5218] usb 3-1: USB disconnect, device number 41 [ 667.886118][ T5269] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 667.963165][ T9] libceph: connect (1)[c::]:6789 error -101 [ 667.977724][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 667.989410][ T9] libceph: connect (1)[c::]:6789 error -101 [ 667.995605][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 668.076929][ T5272] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 668.116249][ T5269] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 668.128886][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.150291][ T5269] usb 4-1: config 0 descriptor?? [ 668.177890][ T5269] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 668.204090][ T5269] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 668.260730][ T5269] libceph: connect (1)[c::]:6789 error -101 [ 668.273660][ T5272] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 668.305728][ T5269] libceph: mon0 (1)[c::]:6789 connect error [ 668.337550][ T5272] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 668.369470][ T5269] usb 4-1: USB disconnect, device number 32 [ 668.376344][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.395567][T13822] overlayfs: missing 'lowerdir' [ 668.423047][ T5272] usb 5-1: config 0 descriptor?? [ 668.436674][ T5272] usb 5-1: bad CDC descriptors [ 668.610578][ T5218] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 668.617176][T13809] ceph: No mds server is up or the cluster is laggy [ 668.846089][ T5218] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 668.871158][ T5218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.907289][ T5218] usb 3-1: Product: syz [ 668.911575][ T5218] usb 3-1: Manufacturer: syz [ 668.927555][ T5218] usb 3-1: SerialNumber: syz [ 668.989883][ T5218] usb 3-1: config 0 descriptor?? [ 670.259140][ T5218] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 670.288003][ T5218] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 670.317707][ T5218] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 670.437701][ T5218] usb 3-1: USB disconnect, device number 42 [ 670.485745][ T5270] usb 5-1: USB disconnect, device number 49 [ 670.646160][T13826] syz.0.2684: attempt to access beyond end of device [ 670.646160][T13826] md17: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 771.830065][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 771.837063][ C1] rcu: 0-...!: (0 ticks this GP) idle=7914/1/0x4000000000000000 softirq=45314/45314 fqs=0 [ 771.848899][ C1] rcu: (detected by 1, t=10502 jiffies, g=59913, q=171 ncpus=2) [ 771.856629][ C1] Sending NMI from CPU 1 to CPUs 0: [ 771.861865][ C0] NMI backtrace for cpu 0 [ 771.861889][ C0] CPU: 0 UID: 0 PID: 13850 Comm: syz.1.2692 Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 [ 771.861907][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 771.861917][ C0] RIP: 0010:__lock_acquire+0x1400/0x2040 [ 771.861942][ C0] Code: b6 04 10 84 c0 0f 85 b1 09 00 00 41 8b 45 00 ff c0 41 89 45 00 83 f8 30 0f 83 5e 02 00 00 3b 05 e6 17 df 11 0f 87 bd 02 00 00 <41> be 01 00 00 00 44 89 f0 48 81 c4 90 00 00 00 5b 41 5c 41 5d 41 [ 771.861955][ C0] RSP: 0018:ffffc900000077f0 EFLAGS: 00000097 [ 771.861970][ C0] RAX: 0000000000000002 RBX: ffff88802b9bc6d0 RCX: e3bcc02f69772500 [ 771.861981][ C0] RDX: dffffc0000000000 RSI: ffff88802b9bc708 RDI: ffff88802b9bbc00 [ 771.861993][ C0] RBP: 71a5d68fa1cc311c R08: ffffffff934ee807 R09: 1ffffffff269dd00 [ 771.862004][ C0] R10: dffffc0000000000 R11: fffffbfff269dd01 R12: 0000000000000000 [ 771.862015][ C0] R13: ffff88802b9bc6d8 R14: 0000000000000000 R15: ffff88802b9bc728 [ 771.862026][ C0] FS: 00007fd8a7e686c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 771.862040][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.862050][ C0] CR2: 0000000020003c80 CR3: 000000002c7e8000 CR4: 00000000003506f0 [ 771.862064][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 771.862073][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 771.862083][ C0] Call Trace: [ 771.862090][ C0] [ 771.862099][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 771.862121][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 771.862141][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 771.862164][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 771.862181][ C0] ? nmi_handle+0x14f/0x5a0 [ 771.862195][ C0] ? nmi_handle+0x2a/0x5a0 [ 771.862210][ C0] ? __lock_acquire+0x1400/0x2040 [ 771.862228][ C0] ? default_do_nmi+0x63/0x160 [ 771.862250][ C0] ? exc_nmi+0x123/0x1f0 [ 771.862266][ C0] ? end_repeat_nmi+0xf/0x53 [ 771.862287][ C0] ? __lock_acquire+0x1400/0x2040 [ 771.862305][ C0] ? __lock_acquire+0x1400/0x2040 [ 771.862324][ C0] ? __lock_acquire+0x1400/0x2040 [ 771.862343][ C0] [ 771.862348][ C0] [ 771.862360][ C0] lock_acquire+0x1ed/0x550 [ 771.862378][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 771.862398][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 771.862416][ C0] ? __lock_acquire+0x137a/0x2040 [ 771.862439][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 771.862456][ C0] debug_objects_fill_pool+0x9f/0x9b0 [ 771.862471][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 771.862487][ C0] ? __lock_acquire+0x137a/0x2040 [ 771.862509][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 771.862529][ C0] ? advance_sched+0xa02/0xca0 [ 771.862550][ C0] debug_object_activate+0x135/0x510 [ 771.862567][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 771.862584][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 771.862598][ C0] ? advance_sched+0xa02/0xca0 [ 771.862616][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 771.862633][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 771.862652][ C0] enqueue_hrtimer+0x30/0x3c0 [ 771.862670][ C0] __hrtimer_run_queues+0x6cb/0xd50 [ 771.862686][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 771.862712][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 771.862728][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 771.862749][ C0] hrtimer_interrupt+0x396/0x990 [ 771.862775][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 771.862797][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 771.862817][ C0] [ 771.862822][ C0] [ 771.862828][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 771.862844][ C0] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 771.862860][ C0] Code: c9 50 e8 d9 b6 0b 00 48 83 c4 08 4c 89 f7 e8 7d 38 00 00 e9 de 04 00 00 4c 89 f7 e8 20 4a 53 0a e8 0b d7 36 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 771.862873][ C0] RSP: 0018:ffffc9000a777628 EFLAGS: 00000282 [ 771.862886][ C0] RAX: e3bcc02f69772500 RBX: ffff88802b9bbc00 RCX: ffffffff94ce6903 [ 771.862897][ C0] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: ffffffff8c3f8940 [ 771.862908][ C0] RBP: ffffc9000a777670 R08: ffffffff8ff6956f R09: 1ffffffff1fed2ad [ 771.862920][ C0] R10: dffffc0000000000 R11: fffffbfff1fed2ae R12: 1ffff11017247eeb [ 771.862931][ C0] R13: dffffc0000000000 R14: ffff8880b923e9c0 R15: ffff8880b923f758 [ 771.862950][ C0] ? finish_task_switch+0x1e5/0x870 [ 771.862968][ C0] __schedule+0x17b6/0x4a10 [ 771.862993][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 771.863012][ C0] ? __pfx___schedule+0x10/0x10 [ 771.863031][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 771.863054][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 771.863073][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 771.863091][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 771.863116][ C0] irqentry_exit+0x5e/0x90 [ 771.863134][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 771.863149][ C0] RIP: 0010:__memcg_slab_post_alloc_hook+0x279/0x7e0 [ 771.863167][ C0] Code: 3d f6 42 ff 49 89 c6 49 c1 ee 06 49 83 e6 c0 48 b8 00 00 00 00 00 ea ff ff 4a 8d 5c 30 08 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 bd cd f7 ff 48 8b 03 a8 01 0f 85 e0 02 00 00 48 [ 771.863180][ C0] RSP: 0018:ffffc9000a777a00 EFLAGS: 00000246 [ 771.863192][ C0] RAX: 1ffffd4000121441 RBX: ffffea000090a208 RCX: 0000000000040000 [ 771.863203][ C0] RDX: ffffc9000c37e000 RSI: 0000000000000683 RDI: 0000000000000684 [ 771.863213][ C0] RBP: ffffc9000a777aa8 R08: ffffffff8142b2ec R09: 1ffffffff1fed2ad [ 771.863225][ C0] R10: dffffc0000000000 R11: fffffbfff1fed2ae R12: ffffc9000a777aa8 [ 771.863236][ C0] R13: 1ffff920014eef55 R14: 000000000090a200 R15: dffffc0000000000 [ 771.863255][ C0] ? __phys_addr+0xac/0x170 [ 771.863275][ C0] ? kasan_unpoison+0x46/0x70 [ 771.863291][ C0] ? bpf_prog_alloc_no_stats+0xd8/0x4b0 [ 771.863309][ C0] __kmalloc_cache_noprof+0x1f4/0x2c0 [ 771.863331][ C0] bpf_prog_alloc_no_stats+0xd8/0x4b0 [ 771.863348][ C0] ? bpf_prog_alloc+0x28/0x1b0 [ 771.863366][ C0] bpf_prog_alloc+0x3a/0x1b0 [ 771.863384][ C0] bpf_prog_load+0x7f7/0x20f0 [ 771.863409][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 771.863433][ C0] ? _copy_from_user+0x5b/0xe0 [ 771.863450][ C0] ? _copy_from_user+0x6d/0xe0 [ 771.863469][ C0] ? bpf_lsm_bpf+0x9/0x10 [ 771.863483][ C0] ? security_bpf+0x87/0xb0 [ 771.863503][ C0] __sys_bpf+0x4ee/0x810 [ 771.863520][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 771.863536][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 771.863563][ C0] ? __secure_computing+0x125/0x370 [ 771.863581][ C0] __x64_sys_bpf+0x7c/0x90 [ 771.863597][ C0] do_syscall_64+0xf3/0x230 [ 771.863617][ C0] ? clear_bhb_loop+0x35/0x90 [ 771.863634][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.863655][ C0] RIP: 0033:0x7fd8a71779f9 [ 771.863674][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.863687][ C0] RSP: 002b:00007fd8a7e68048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 771.863702][ C0] RAX: ffffffffffffffda RBX: 00007fd8a7306058 RCX: 00007fd8a71779f9 [ 771.863713][ C0] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 771.863723][ C0] RBP: 00007fd8a71e58ee R08: 0000000000000000 R09: 0000000000000000 [ 771.863733][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.863742][ C0] R13: 000000000000006e R14: 00007fd8a7306058 R15: 00007ffd941ca7c8 [ 771.863760][ C0] [ 771.863853][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g59913 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 772.599611][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=44736 [ 772.607509][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g59913 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 772.618880][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 772.628848][ C1] rcu: RCU grace-period kthread stack dump: [ 772.634738][ C1] task:rcu_preempt state:I stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 772.644911][ C1] Call Trace: [ 772.648193][ C1] [ 772.651143][ C1] __schedule+0x17ae/0x4a10 [ 772.655688][ C1] ? __pfx___schedule+0x10/0x10 [ 772.660545][ C1] ? __pfx_lock_release+0x10/0x10 [ 772.665579][ C1] ? __asan_memset+0x23/0x50 [ 772.670177][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 772.675991][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 772.682328][ C1] ? schedule+0x90/0x320 [ 772.686576][ C1] schedule+0x14b/0x320 [ 772.690741][ C1] schedule_timeout+0x1be/0x310 [ 772.695596][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 772.700973][ C1] ? __pfx_process_timeout+0x10/0x10 [ 772.706270][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 772.711829][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 772.716689][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 772.721900][ C1] ? rcu_gp_init+0x1256/0x1630 [ 772.726676][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 772.731616][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 772.737688][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 772.742978][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 772.748883][ C1] ? finish_swait+0xd4/0x1e0 [ 772.753483][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 772.758081][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 772.763283][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 772.769188][ C1] ? __kthread_parkme+0x169/0x1d0 [ 772.774222][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 772.779433][ C1] kthread+0x2f0/0x390 [ 772.783508][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 772.788709][ C1] ? __pfx_kthread+0x10/0x10 [ 772.793305][ C1] ret_from_fork+0x4b/0x80 [ 772.797728][ C1] ? __pfx_kthread+0x10/0x10 [ 772.802327][ C1] ret_from_fork_asm+0x1a/0x30 [ 772.807114][ C1]