last executing test programs: 9m53.581708598s ago: executing program 1 (id=18460): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000206a050000000000000001090224000100007008090400fcdf03000300092181003f0122280009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="20082b0000002b21c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9m51.721175163s ago: executing program 1 (id=18479): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) 9m51.602272663s ago: executing program 1 (id=18482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 9m51.405240559s ago: executing program 1 (id=18487): r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='geneve1\x00', 0x10) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0xfff7) 9m51.13271173s ago: executing program 1 (id=18493): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 9m51.028134051s ago: executing program 1 (id=18495): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000140)) 9m34.946521921s ago: executing program 32 (id=18495): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000140)) 6m39.795155623s ago: executing program 0 (id=21669): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) 6m39.649072377s ago: executing program 0 (id=21672): creat(0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x1, 0x81, 0x80001, 0x0}) 6m39.500585862s ago: executing program 0 (id=21681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6m39.254186059s ago: executing program 0 (id=21677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008045}, 0x0) 6m39.154639384s ago: executing program 0 (id=21679): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) 6m39.088370708s ago: executing program 0 (id=21682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x70, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 6m23.002636386s ago: executing program 33 (id=21682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x70, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 3m6.565958111s ago: executing program 2 (id=25083): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) 3m5.603194196s ago: executing program 2 (id=25097): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000018c0)=ANY=[@ANYBLOB="200000004200010a"], 0x20}}, 0x4000000) 3m5.519843881s ago: executing program 2 (id=25100): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000080)) 3m5.459645895s ago: executing program 2 (id=25103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 3m5.310946028s ago: executing program 2 (id=25108): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000002) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x20) 3m5.227740296s ago: executing program 2 (id=25110): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000f80)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x8f8, @mcast2, 0x3}}}, 0xa0) 2m48.962708016s ago: executing program 34 (id=25110): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000f80)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x8f8, @mcast2, 0x3}}}, 0xa0) 2m41.252442995s ago: executing program 3 (id=25411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 2m40.877946671s ago: executing program 3 (id=25417): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xac, 0x2, {0x2, @sliced={0x83d, [0x5, 0x4, 0x200, 0x5, 0x2000, 0x9, 0x100, 0x1, 0x5, 0x9, 0xfff5, 0x1, 0x1, 0x1, 0x3, 0x4, 0x7fff, 0xd6c8, 0x6, 0x4, 0x1, 0xb, 0x3e42, 0x9, 0x1ff, 0xff, 0x6e, 0x9, 0x5, 0x8, 0x4, 0xfa3c, 0x3, 0x7ff, 0x101, 0x3, 0x8000, 0x8, 0xd2b, 0x5, 0xd, 0x8, 0x6, 0x2, 0x0, 0x1, 0x9, 0xc], 0x10}}, 0x7}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000007c0)={0x2, @sdr={0x34343452, 0x4}}) 2m40.756674352s ago: executing program 3 (id=25418): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cb", 0xc, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}) 2m40.560323252s ago: executing program 3 (id=25421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000800)={0x188, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x15c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x59, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'veth0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-/(!%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x44}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xcf}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'xcbc(twofish-generic)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "9bbce13b5a50ea10851a709d3b4831f38cf27ca9a8c35e12a1a0e85c74cee06e43f13c402ff7bef7a64486220eac8c7f510e40c0c161bb893467d0b605b5976d2f586945ff9a5c917059cbb13b1c8196636e517c4c67e6d806ede641dabbdc7bd2d976166dc7bbcc2d31703eeb58048c4dcedb6717e9b10201908d4d84b08d6e803c19a2343b5965e445f7342e477843111e20f8f875"}]}]}, 0x188}}, 0x4040004) 2m38.610978583s ago: executing program 3 (id=25428): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1f6) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) 2m38.532310592s ago: executing program 3 (id=25430): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x3f00) 2m22.421920085s ago: executing program 35 (id=25430): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x3f00) 1.489959611s ago: executing program 7 (id=27821): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) 1.394498809s ago: executing program 7 (id=27822): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) shutdown(r0, 0x1) write$binfmt_elf32(r0, 0x0, 0x3c) 1.339709822s ago: executing program 7 (id=27824): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f00000007c0)="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", 0x1c2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 1.284186471s ago: executing program 7 (id=27826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0xc80a1b85b93b45e2}, 0x24000800) close(0x3) 1.269057266s ago: executing program 6 (id=27827): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)={'a', ' *:* ', 'rw\x00'}, 0x9) 1.191874022s ago: executing program 6 (id=27828): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='add foosyz [2', 0xd) 1.19164474s ago: executing program 7 (id=27829): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x132a}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x80, 0x1, 0x0, 0xfffffffd}) 1.175285765s ago: executing program 6 (id=27830): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x0, r0, 0x0, 0x80000}) 1.031792732s ago: executing program 7 (id=27834): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 715.857952ms ago: executing program 5 (id=27842): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000019c0)={&(0x7f00000009c0)=[0x8000, 0x5, 0xfff, 0x3, 0x9, 0x69be, 0xa, 0x1, 0x4, 0x4, 0x6f, 0x6, 0x9, 0xb, 0x2, 0x4, 0x7, 0x56, 0xb2a, 0x7, 0x2bf, 0x1ff, 0x6, 0xb3, 0x0, 0x8, 0x2, 0x9, 0xfa, 0x3, 0x7, 0xd757, 0x5, 0x400, 0x800, 0x3, 0x81, 0x1, 0x400, 0x2, 0x1, 0x2, 0x2, 0x3, 0x8, 0x9d0, 0x6, 0xc, 0x7, 0x5, 0x2, 0x5, 0x5, 0xe341, 0x40, 0xd, 0x9, 0xfff, 0x2, 0x3, 0x8, 0x1, 0x80, 0xfffffffb, 0x3768c7cc, 0x80000000, 0x16e, 0x1ff, 0x0, 0x6, 0x80000001, 0x58e, 0x9, 0x7fffffff, 0x3, 0x1, 0x80000000, 0x4, 0xa7, 0x3, 0x3, 0xb7ae, 0x0, 0x2, 0x81, 0x4b0, 0x0, 0x1, 0x8, 0x1853, 0x7, 0x6, 0xd95e, 0x6, 0x2bce6b42, 0x40, 0x80000001, 0x88f, 0x9, 0xfffff801, 0x10001, 0x1, 0x3, 0x0, 0xfffffff5, 0xffffff89, 0x9, 0x7, 0xc3ce, 0x7, 0xf7, 0xa47, 0x10, 0x7, 0x2, 0x0, 0x0, 0x8, 0x7, 0x4, 0x3, 0x1, 0x7ff, 0x8, 0x5, 0x8, 0xde9f, 0x0, 0x92b, 0x7f27, 0x7, 0x1, 0x19, 0x74, 0x25c5, 0xb, 0x3, 0x4, 0xe, 0xf, 0x9, 0x7f, 0x21ed6470, 0x8, 0x6, 0x7ff, 0x8, 0x9, 0xfff, 0x3, 0x6, 0x2, 0x1, 0x8e3, 0x6, 0x313e, 0x4, 0x3, 0x0, 0x9, 0x1d5f, 0xfffffffb, 0x2, 0x5, 0x7, 0x8, 0x3, 0xfffffffe, 0x7ff, 0x6, 0x2, 0x5, 0xffffff8c, 0x6, 0xfffffffc, 0x6, 0x37, 0x83, 0xfffffff9, 0x9, 0x3, 0x8, 0xa, 0x6, 0x4, 0x7, 0x5f5, 0xaf44, 0x72, 0x4, 0x0, 0x1, 0x7fffffff, 0x5, 0x40, 0x8000, 0x401, 0x4dd10235, 0x3, 0x81, 0x8897, 0x9, 0x5, 0x0, 0x3, 0xffffffff, 0x9, 0x8, 0x1ff, 0x7fff, 0x4, 0x5, 0xff, 0x1, 0x5, 0x48d8e18b, 0xd732, 0x7, 0x3, 0x3, 0x6, 0x8, 0x7ff, 0xab, 0xffff, 0xdf99, 0xfff, 0x7ff, 0x6, 0x9, 0x1, 0x4, 0xc, 0x1, 0x8, 0x8, 0x4, 0x0, 0x5, 0x5, 0x4, 0x9, 0x3, 0x1, 0xd237, 0xe, 0x1, 0x1ff, 0x7, 0x8, 0x10, 0x40, 0x8, 0xe21, 0x8, 0x6, 0x9, 0x8, 0x800, 0x6, 0x0, 0x7, 0x400, 0x6, 0x284, 0x7, 0x6, 0x6461, 0x9, 0xa, 0xc, 0x0, 0xfff, 0x1, 0x2, 0x5, 0x10, 0x9, 0x6, 0x0, 0x1, 0x9, 0xa1, 0x913d, 0x8, 0x1f08, 0x8, 0x6, 0x80, 0x4, 0x4, 0xc, 0x6, 0x3, 0x1, 0xc90b, 0xa44d, 0x800, 0x9, 0x400, 0x26, 0x6, 0xf, 0x4, 0x8, 0xf7, 0x8f62, 0x0, 0x80, 0xd, 0x8, 0x3ff, 0xa, 0x3, 0x80000001, 0xffffffff, 0x28, 0x3, 0x1, 0x1800000, 0x1, 0x2, 0x9, 0x1, 0x3, 0x1ff, 0x3, 0x5, 0x8001, 0x101, 0x6, 0x2, 0x0, 0x1, 0x8, 0x8, 0x5, 0x8, 0x2, 0x8, 0x5, 0x800, 0xff, 0x8860, 0x6, 0x0, 0xfffffbff, 0x3, 0xba9, 0x5, 0x6, 0x4, 0x7, 0xffffffff, 0x3, 0x4, 0x5, 0x6, 0x2, 0x8, 0x9fe8, 0x40, 0x9, 0x3, 0xfffffff8, 0x6, 0x250, 0x3, 0x7, 0x6, 0x1, 0x6, 0x2, 0x3, 0x7, 0xf, 0x65aa, 0x2, 0x4, 0xa438, 0xd, 0x9, 0x80000000, 0x3, 0xcb, 0x0, 0x7, 0x492, 0x6, 0xfffffff8, 0x2, 0x400, 0xfffff001, 0x8, 0xf, 0x7ff, 0x1d967119, 0x7, 0x2, 0xffffff91, 0x8, 0x5, 0x5, 0xe6, 0x8, 0x0, 0xb, 0x2, 0x2, 0x8, 0x1ff, 0x7, 0x2, 0x6, 0x40, 0x5, 0x2, 0x5, 0x21e84f3, 0x1, 0x5, 0x40, 0x7, 0x1, 0x5, 0x1, 0xe203, 0x30, 0xfffffffd, 0x1, 0x4, 0x3, 0x3, 0xee9a, 0xe, 0x5, 0xf5, 0x4, 0x86, 0xe14d, 0x9, 0x2, 0x1ff, 0x40, 0x3, 0x7, 0x4, 0x9, 0x80000000, 0xfffffffd, 0xffffffff, 0x7, 0x5, 0x9, 0x3, 0x3, 0xfff, 0x1, 0x2, 0x3, 0x4, 0x200, 0x7, 0x7ff, 0x9, 0x0, 0x4c2, 0xc, 0x52f, 0x4, 0x0, 0x4, 0x5, 0x6, 0x80, 0x800, 0x5, 0x2, 0x5, 0x1a0a, 0x6, 0x9, 0x5, 0x81, 0x1, 0x4, 0x2, 0x9, 0x2, 0x5, 0x4, 0xfffffffb, 0x40, 0x8, 0x80, 0xb, 0x0, 0x0, 0xff, 0x9, 0x4, 0x7, 0x0, 0x4, 0x7, 0x7fffffff, 0x9, 0x7fff, 0xf0, 0x10001, 0x12, 0x3, 0x1, 0x99e3, 0x0, 0x457, 0x7, 0x4, 0x101, 0x9, 0xe, 0x7, 0xd31e, 0x8000, 0x3, 0x7, 0x5, 0x2, 0x1, 0x46b, 0x2, 0x8000, 0x5, 0x2, 0x41e2, 0x5, 0x13, 0xff, 0x1, 0x5, 0x1, 0x5, 0xffffffb9, 0x9, 0x2, 0x4, 0x1ff, 0x2, 0x6, 0x5, 0x240000, 0xc, 0x39, 0x4, 0x7fff, 0x68, 0x0, 0x6, 0x2, 0x40, 0xfffff001, 0x9, 0x7, 0x6, 0x0, 0x2, 0x50, 0x8, 0x3, 0xb, 0x3, 0x3, 0x101, 0x80000000, 0xde, 0xe, 0xff, 0x7, 0x4, 0x49, 0x10, 0x7, 0x9, 0x4, 0xfffffff8, 0x0, 0x6, 0x9a, 0x3, 0x0, 0x2, 0x1, 0x8, 0x7, 0xb, 0x6, 0x2, 0x0, 0x9, 0xfffffffc, 0x6, 0x7, 0xa, 0x3, 0x1000, 0x1, 0x33, 0x7, 0x9, 0x5, 0xfffffffb, 0x9, 0x6bbb993, 0x5, 0x8, 0x1000, 0x9, 0x2, 0x859, 0x9fc, 0x7, 0xffff, 0xcb, 0x4, 0x6, 0xfffffffc, 0x80, 0x3, 0x2, 0x200, 0x2d, 0xfffffff7, 0x6, 0xfaa, 0x35c, 0x4, 0x2, 0x0, 0x2a, 0x5, 0x0, 0x6, 0xff, 0xfffffffd, 0x4, 0x9, 0x7, 0x10, 0x0, 0xf, 0x7fff, 0x6, 0xb, 0xfffffffd, 0x6, 0x400000, 0x8, 0xa5, 0x650, 0x4, 0xf, 0x5, 0x3, 0xfffffff7, 0x4, 0x5, 0x3, 0x800, 0x2, 0x9, 0x4, 0x2, 0x3, 0x4, 0x1, 0x4f, 0x4, 0x6, 0x7, 0x4, 0xfff, 0x7fff, 0x7fff, 0x100, 0x9, 0x5, 0xd, 0x4, 0x0, 0xb, 0x80, 0xfffffffd, 0xfffffff9, 0x2, 0x5, 0x9, 0x0, 0x8, 0x6, 0x3, 0x8, 0x9, 0x40, 0x3ff, 0x1000, 0x7fffffff, 0x7, 0x4, 0x0, 0x60000000, 0x1c000, 0x3, 0x7f, 0x1, 0x8000, 0xab, 0x3ff, 0x2169, 0xff, 0xe, 0x8001, 0xd9ef, 0x8, 0x4, 0xe5, 0x5, 0x4, 0x4, 0x10001, 0x6, 0x9, 0x3, 0x7, 0x200, 0x80, 0x9, 0x7fa8, 0x322, 0x4, 0x400, 0x7, 0x3, 0x418, 0x6, 0x7fff, 0x80000000, 0x6, 0x81f, 0x1, 0x0, 0x5, 0x5cb3, 0x6, 0x1, 0x6, 0x80000000, 0x9, 0xfffffffd, 0x29c, 0x7, 0x9ae, 0x9, 0x7, 0x80, 0x1, 0x6, 0x735007bf, 0x79858c48, 0xd, 0x7ff, 0x4, 0x3, 0x800, 0x6, 0x1a0000, 0x0, 0xe, 0x595, 0x2, 0x4, 0x1, 0x5, 0x6a, 0x200, 0x10001, 0xffffffff, 0x8001, 0x9, 0xce2e, 0xf, 0x3b, 0x39, 0x9, 0xfffff0c8, 0x0, 0x3, 0x10000, 0x8, 0x1, 0xea8, 0x9, 0x1aa, 0x1, 0xe, 0xb16, 0x10000, 0x0, 0x1, 0x2, 0x40, 0x9, 0x8001, 0x7, 0x0, 0x1ff, 0xffff0001, 0x7, 0x5, 0x2, 0xa2e, 0xe, 0xfffffc00, 0x1, 0x8, 0x1, 0x7, 0x0, 0x8, 0x8001, 0xb97, 0x5, 0x1, 0x10, 0x6, 0x9, 0x6, 0x0, 0x4, 0x6, 0x1000, 0x6, 0xf, 0x8, 0x7, 0x400, 0xd49, 0x6, 0x24, 0x5, 0x101, 0xb6a, 0x1, 0x3, 0x0, 0x1000, 0x0, 0x34, 0x4, 0x334, 0x101, 0x9, 0x2, 0x1, 0xf2, 0xe, 0x10001, 0x4, 0x5, 0x7, 0x0, 0x7, 0x8, 0x4, 0xffffffff, 0x12beeec6, 0x7, 0x2, 0x8, 0x9, 0x3, 0xfffffff0, 0x1, 0x2c540, 0xae, 0x2, 0x5, 0x1, 0x7c7, 0xffffffff, 0x9ec, 0x9, 0x5, 0x1, 0x6, 0x6, 0x2, 0x2, 0x7, 0x0, 0xf, 0xfffffff8, 0x1ff, 0xa, 0xb, 0x6, 0x8, 0xff, 0xa8, 0x2, 0x2, 0xa, 0x5, 0x5, 0x6, 0x7fff, 0x0, 0x5, 0x85067212, 0xfffffff8, 0x4, 0x80, 0x3, 0xfadf, 0x0, 0x2, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x7f, 0x8, 0x2, 0x5, 0x7, 0xff, 0x9, 0xff, 0x6, 0x1, 0x5, 0x9, 0x3, 0xfffffff7, 0x5, 0x4, 0x7fa1, 0x401, 0x4c, 0x0, 0x1, 0x8, 0x4, 0xff, 0x6, 0x7, 0x9, 0x3, 0x81, 0x9, 0x6, 0x2, 0x101, 0x1, 0x9, 0x7ff, 0xc8f, 0xffffffff, 0x6, 0x7, 0x400, 0x5ed, 0x1, 0x975f, 0x4, 0x400, 0xa2, 0x1, 0xf, 0x4, 0x0, 0xff, 0x9, 0x6, 0x7fffffff, 0x3ff, 0x8, 0x30d00000, 0x1, 0x8c000, 0x5, 0x8, 0x9, 0x401, 0x6e, 0x5, 0x1, 0x3, 0x77, 0x5, 0x3, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, 0xe376, 0x0, 0x8, 0x6, 0x60, 0x800, 0x3, 0x6, 0x3, 0x9, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2], 0x1, 0x400, 0x9}) 682.756164ms ago: executing program 5 (id=27845): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x12c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 599.344436ms ago: executing program 5 (id=27846): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 597.91443ms ago: executing program 4 (id=27847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 555.848584ms ago: executing program 5 (id=27848): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) 551.344613ms ago: executing program 4 (id=27849): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x38c6) 467.279686ms ago: executing program 4 (id=27850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x92258420943190a, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 448.029506ms ago: executing program 5 (id=27851): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x7}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @val={@val={0x88a8, 0x5, 0x1}, {0x8100, 0x0, 0x0, 0x3}}, {@x25={0x805, {0x18caa96a66631902, 0x2, 0x17}}}}}, 0x1d) 371.141044ms ago: executing program 4 (id=27852): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='measure ', 0x8) 260.676937ms ago: executing program 5 (id=27853): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff06, 0x0) 187.36732ms ago: executing program 4 (id=27854): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='external:', 0x9) 187.205219ms ago: executing program 6 (id=27855): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) membarrier(0x10, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) 96.404852ms ago: executing program 4 (id=27856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xda0, 0x0, 0x10000000}]}) 89.542278ms ago: executing program 6 (id=27857): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x6f) keyctl$clear(0x7, r0) 0s ago: executing program 6 (id=27858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)) kernel console output (not intermixed with test programs): 11094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.784499][T11094] bridge_slave_0: entered allmulticast mode [ 1653.791066][T11094] bridge_slave_0: entered promiscuous mode [ 1653.828745][T11094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.830551][T11094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.831293][T11094] bridge_slave_1: entered allmulticast mode [ 1653.852824][ T7483] Bluetooth: hci3: command tx timeout [ 1653.865371][T11094] bridge_slave_1: entered promiscuous mode [ 1653.874728][ T12] ovs-dp0: left promiscuous mode [ 1653.986407][T11094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.034587][T11094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.074319][ T12] tipc: Left network mode [ 1654.226915][T11094] team0: Port device team_slave_0 added [ 1654.235197][T11094] team0: Port device team_slave_1 added [ 1654.312368][T11452] 9p: Unknown access argument 18446744073709551615: -34 [ 1654.377969][T11094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1654.377988][T11094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1654.378014][T11094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1654.391311][T11094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1654.391327][T11094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1654.391353][T11094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1654.542197][T11094] hsr_slave_0: entered promiscuous mode [ 1654.543114][T11094] hsr_slave_1: entered promiscuous mode [ 1654.543696][T11094] debugfs: 'hsr0' already exists in 'hsr' [ 1654.543711][T11094] Cannot create hsr debugfs directory [ 1655.241338][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1655.866246][T18480] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1656.026299][T18480] usb 7-1: Using ep0 maxpacket: 16 [ 1656.027052][T18480] usb 7-1: New USB device found: idVendor=0403, idProduct=97c1, bcdDevice=0.00 [ 1656.028096][T18480] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 1656.028138][T18480] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.028166][T18480] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1656.028193][T18480] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1656.028224][T18480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.030860][T18480] usb 7-1: config 0 descriptor?? [ 1656.075984][ T7483] Bluetooth: hci3: command tx timeout [ 1656.256077][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1656.269047][T11094] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1656.296415][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1656.327056][T11094] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1656.373955][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1656.375124][T11094] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1656.396496][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1656.474568][T18480] input: Retrode SNES Mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0403:97C1.009E/input/input287 [ 1656.489793][T11094] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1656.510567][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1656.668142][T18480] hid-retrode 0003:0403:97C1.009E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.6-1/input0 [ 1656.712721][T11094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1656.732900][T11094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.750409][T18480] usb 7-1: USB disconnect, device number 6 [ 1656.766060][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.766119][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.864410][T10461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.864515][T10461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.929155][T11671] fido_id[11671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1657.270284][T11706] tmpfs: Cannot disable swap on remount [ 1657.797581][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1658.295718][ T7483] Bluetooth: hci3: command tx timeout [ 1658.384740][T11094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1659.126850][ T12] hsr_slave_1: left promiscuous mode [ 1659.127788][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.127810][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.162429][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.162452][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.184947][ T12] batman_adv: batadv0: Interface deactivated: veth0 [ 1659.184970][ T12] batman_adv: batadv0: Removing interface: veth0 [ 1659.248665][ T12] veth1_vlan: left promiscuous mode [ 1660.041350][ T12] team_slave_0 (unregistering): left promiscuous mode [ 1660.041378][ T12] team_slave_0 (unregistering): left allmulticast mode [ 1660.059679][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1660.369497][ T141] smc: removing ib device syz0 [ 1660.499510][ T141] smbdirect: ib_dev[syz0] removed [ 1660.608890][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1660.627627][T20255] infiniband syz0: ib_query_port failed (-19) [ 1660.782469][T11094] veth0_vlan: entered promiscuous mode [ 1660.832035][T11094] veth1_vlan: entered promiscuous mode [ 1660.895340][T11094] veth0_macvtap: entered promiscuous mode [ 1660.906959][T11094] veth1_macvtap: entered promiscuous mode [ 1660.959955][T11094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1661.022033][T11094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1661.054861][T27735] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.055005][T27735] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.157596][ T42] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.180314][ T42] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.512543][T11875] 9p: p9: multiple sources not supported [ 1661.621325][T27735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.621347][T27735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.751367][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.751388][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.948921][ T993] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1662.012736][ T6069] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1662.119523][ T993] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1662.119574][ T993] usb 6-1: New USB device found: idVendor=17cc, idProduct=1011, bcdDevice=0.40 [ 1662.120596][ T993] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1662.122589][ T993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.122613][ T993] usb 6-1: Product: syz [ 1662.122628][ T993] usb 6-1: Manufacturer: syz [ 1662.122643][ T993] usb 6-1: SerialNumber: syz [ 1662.196709][ T6069] usb 7-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1662.210680][ T6069] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1662.210707][ T6069] usb 7-1: Product: syz [ 1662.210722][ T6069] usb 7-1: Manufacturer: syz [ 1662.210737][ T6069] usb 7-1: SerialNumber: syz [ 1662.248205][ T6069] usb 7-1: config 0 descriptor?? [ 1662.728680][ T6069] usb 7-1: USB disconnect, device number 7 [ 1662.943118][ T993] usb 6-1: unable to issue vendor read request (ret = -71) [ 1662.945840][ T993] usb 6-1: unable to issue vendor read request (ret = -71) [ 1662.950193][ T993] usb 6-1: unable to issue vendor read request (ret = -71) [ 1663.201964][ T993] usb 6-1: USB disconnect, device number 56 [ 1663.245924][T11975] netlink: 24 bytes leftover after parsing attributes in process `syz.6.25741'. [ 1663.344062][T28657] udevd[28657]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1663.435334][T11988] netlink: 'syz.6.25743': attribute type 4 has an invalid length. [ 1663.840380][T12015] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1663.873330][ T12] IPVS: stop unused estimator thread 0... [ 1664.170372][T13136] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1664.351998][T13136] usb 6-1: New USB device found: idVendor=0079, idProduct=0006, bcdDevice=0.00 [ 1664.354553][T13136] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1664.354585][T13136] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 1664.354609][T13136] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1664.354634][T13136] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1664.354667][T13136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.361239][T13136] usb 6-1: config 0 descriptor?? [ 1664.363494][T12021] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1664.808081][T13136] dragonrise 0003:0079:0006.009F: unknown main item tag 0x5 [ 1664.808118][T13136] dragonrise 0003:0079:0006.009F: unknown main item tag 0x0 [ 1664.809246][T13136] dragonrise 0003:0079:0006.009F: no fields in the report [ 1664.828000][T13136] dragonrise 0003:0079:0006.009F: hidraw0: USB HID v0.00 Keyboard [HID 0079:0006] on usb-dummy_hcd.5-1/input0 [ 1664.898272][T12177] netlink: 16 bytes leftover after parsing attributes in process `syz.6.25765'. [ 1665.022823][T18480] usb 6-1: USB disconnect, device number 57 [ 1665.205831][T11864] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1665.365854][T11864] usb 7-1: Using ep0 maxpacket: 32 [ 1665.367683][T11864] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1665.367714][T11864] usb 7-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1665.368692][T11864] usb 7-1: config 14 has an invalid interface number: 57 but max is 0 [ 1665.368718][T11864] usb 7-1: config 14 has no interface number 0 [ 1665.368746][T11864] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1665.370590][T11864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.370613][T11864] usb 7-1: Product: syz [ 1665.370628][T11864] usb 7-1: Manufacturer: syz [ 1665.370642][T11864] usb 7-1: SerialNumber: syz [ 1665.809343][T11864] legousbtower 7-1:14.57: interrupt endpoints not found [ 1665.830464][T11864] usb 7-1: USB disconnect, device number 8 [ 1666.482107][T27748] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1666.663725][T12252] netlink: 16 bytes leftover after parsing attributes in process `syz.7.25787'. [ 1666.772631][T12259] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.25790'. [ 1666.871877][T12265] netlink: 72 bytes leftover after parsing attributes in process `syz.5.25794'. [ 1667.260976][T12297] vivid-003: ================= START STATUS ================= [ 1667.260996][T12297] vivid-003: Radio HW Seek Mode: Bounded [ 1667.261022][T12297] vivid-003: Radio Programmable HW Seek: false [ 1667.261043][T12297] vivid-003: RDS Rx I/O Mode: Block I/O [ 1667.261064][T12297] vivid-003: Generate RBDS Instead of RDS: false [ 1667.261085][T12297] vivid-003: RDS Reception: true [ 1667.261106][T12297] vivid-003: RDS Program Type: 0 inactive [ 1667.261130][T12297] vivid-003: RDS PS Name: inactive [ 1667.261154][T12297] vivid-003: RDS Radio Text: inactive [ 1667.261177][T12297] vivid-003: RDS Traffic Announcement: false inactive [ 1667.261209][T12297] vivid-003: RDS Traffic Program: false inactive [ 1667.264589][T12297] vivid-003: RDS Music: false inactive [ 1667.264617][T12297] vivid-003: ================== END STATUS ================== [ 1667.598278][T12315] support for the xor transformation has been removed. [ 1667.606150][T12316] netlink: 196 bytes leftover after parsing attributes in process `syz.6.25816'. [ 1667.606198][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25816'. [ 1668.228814][ T6069] logitech-hidpp-device 0005:046D:B012.00A0: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 1668.313456][T12366] fido_id[12366]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1668.390092][T11864] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1668.552406][T11864] usb 7-1: Using ep0 maxpacket: 32 [ 1668.553238][T11864] usb 7-1: New USB device found: idVendor=1e7d, idProduct=2d51, bcdDevice=0.00 [ 1668.554537][T11864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.554554][T11864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.554582][T11864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.559832][T11864] usb 7-1: config 0 descriptor?? [ 1669.014249][T11864] koneplus 0003:1E7D:2D51.00A1: unknown main item tag 0x0 [ 1669.014286][T11864] koneplus 0003:1E7D:2D51.00A1: unknown main item tag 0x0 [ 1669.014311][T11864] koneplus 0003:1E7D:2D51.00A1: unknown main item tag 0x0 [ 1669.014339][T11864] koneplus 0003:1E7D:2D51.00A1: unknown main item tag 0x0 [ 1669.014366][T11864] koneplus 0003:1E7D:2D51.00A1: unknown main item tag 0x0 [ 1669.017401][T11864] koneplus 0003:1E7D:2D51.00A1: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 1669.230989][T11864] koneplus 0003:1E7D:2D51.00A1: couldn't init struct koneplus_device [ 1669.231044][T11864] koneplus 0003:1E7D:2D51.00A1: couldn't install mouse [ 1669.235736][T11864] koneplus 0003:1E7D:2D51.00A1: probe with driver koneplus failed with error -71 [ 1669.254617][T11864] usb 7-1: USB disconnect, device number 9 [ 1670.163962][ T993] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1670.346393][ T993] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1670.347352][ T993] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.347397][ T993] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1670.347419][ T993] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1670.347443][ T993] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1670.347484][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.788775][T11864] usb 6-1: USB disconnect, device number 58 [ 1671.239799][T12459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25858'. [ 1671.239837][T12459] net_ratelimit: 13 callbacks suppressed [ 1671.239844][T12459] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1671.361637][T12468] sctp: [Deprecated]: syz.5.25861 (pid 12468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1671.361637][T12468] Use struct sctp_sack_info instead [ 1672.925555][T12551] netlink: 92 bytes leftover after parsing attributes in process `syz.6.25887'. [ 1673.250852][T12569] netlink: 'syz.6.25894': attribute type 12 has an invalid length. [ 1673.284052][T12572] netlink: 'syz.7.25895': attribute type 10 has an invalid length. [ 1673.284081][T12572] netlink: 152 bytes leftover after parsing attributes in process `syz.7.25895'. [ 1673.778798][T12603] program syz.7.25907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1674.023480][T12617] netlink: 40 bytes leftover after parsing attributes in process `syz.7.25915'. [ 1676.134231][T12863] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1676.134252][T12863] overlayfs: missing 'lowerdir' [ 1676.170808][T12865] netlink: 'syz.5.25948': attribute type 22 has an invalid length. [ 1676.170840][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25948'. [ 1676.490730][T12885] Bluetooth: hci0: unsupported parameter 5135 [ 1676.490753][T12885] Bluetooth: hci0: unsupported parameter 8192 [ 1676.490768][T12885] Bluetooth: hci0: unsupported parameter 5135 [ 1676.490780][T12885] Bluetooth: hci0: unsupported parameter 8192 [ 1676.540212][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25955'. [ 1676.992302][ T6292] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1677.032470][T12912] pimreg2: entered allmulticast mode [ 1677.153391][ T6292] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1677.156229][ T6292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.156254][ T6292] usb 6-1: Product: syz [ 1677.156269][ T6292] usb 6-1: Manufacturer: syz [ 1677.156284][ T6292] usb 6-1: SerialNumber: syz [ 1677.323835][ T993] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1677.484570][ T993] usb 7-1: New USB device found: idVendor=0458, idProduct=0153, bcdDevice=0.00 [ 1677.485860][ T993] usb 7-1: too many endpoints for config 0 interface 0 altsetting 255: 223, using maximum allowed: 30 [ 1677.485902][ T993] usb 7-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1677.485929][ T993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1677.485959][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.490534][ T993] usb 7-1: config 0 descriptor?? [ 1677.840714][ T6292] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1677.840766][ T6292] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1677.852064][ T6292] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1677.879026][ T6292] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1677.888505][T12946] program syz.4.25972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1677.903750][ T6292] usb 6-1: USB disconnect, device number 59 [ 1677.974520][ T993] kye 0003:0458:0153.00A2: unknown main item tag 0x0 [ 1677.974555][ T993] kye 0003:0458:0153.00A2: unknown main item tag 0x0 [ 1677.974581][ T993] kye 0003:0458:0153.00A2: unknown main item tag 0x0 [ 1677.974606][ T993] kye 0003:0458:0153.00A2: unknown main item tag 0x0 [ 1677.974632][ T993] kye 0003:0458:0153.00A2: unknown main item tag 0x0 [ 1677.974658][ T993] kye 0003:0458:0153.00A2: unknown main item tag 0x0 [ 1677.974682][ T993] kye 0003:0458:0153.00A2: unknown main item tag 0x0 [ 1677.974706][ T993] kye 0003:0458:0153.00A2: unknown main item tag 0x0 [ 1677.974731][ T993] kye 0003:0458:0153.00A2: unknown main item tag 0x0 [ 1677.974756][ T993] kye 0003:0458:0153.00A2: unknown main item tag 0x0 [ 1678.047287][ T993] kye 0003:0458:0153.00A2: hidraw0: USB HID v0.81 Device [HID 0458:0153] on usb-dummy_hcd.6-1/input0 [ 1678.193290][ T6292] usb 7-1: USB disconnect, device number 10 [ 1678.622226][T12982] netlink: 480 bytes leftover after parsing attributes in process `syz.5.25978'. [ 1679.049599][T13007] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 1680.102052][T18480] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1680.192893][T13063] netlink: 'syz.4.26015': attribute type 4 has an invalid length. [ 1680.192908][T13063] netlink: 17 bytes leftover after parsing attributes in process `syz.4.26015'. [ 1680.246988][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26016'. [ 1680.283713][T18480] usb 6-1: Using ep0 maxpacket: 32 [ 1680.284555][T18480] usb 6-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1680.285516][T18480] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1680.285539][T18480] usb 6-1: config 0 has no interface number 0 [ 1680.287616][T18480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.287640][T18480] usb 6-1: Product: syz [ 1680.287654][T18480] usb 6-1: Manufacturer: syz [ 1680.287668][T18480] usb 6-1: SerialNumber: syz [ 1680.290519][T18480] usb 6-1: config 0 descriptor?? [ 1680.299546][T18480] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1680.299643][T18480] usb 6-1: selecting invalid altsetting 1 [ 1680.299661][T18480] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1680.309843][T18480] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1680.310201][T18480] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1680.310245][T18480] usb 6-1: media controller created [ 1680.324804][T18480] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1680.512047][T18480] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1680.512080][T18480] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1680.512438][T18480] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1680.570084][T18480] usb 6-1: USB disconnect, device number 60 [ 1680.802554][T13096] netlink: 20 bytes leftover after parsing attributes in process `syz.7.26021'. [ 1681.113453][T13111] sctp: [Deprecated]: syz.5.26027 (pid 13111) Use of int in maxseg socket option. [ 1681.113453][T13111] Use struct sctp_assoc_value instead [ 1681.239565][T13118] can0: slcan on ttyprintk. [ 1681.311558][T13117] can0 (unregistered): slcan off ttyprintk. [ 1681.427953][T18480] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1681.611995][T18480] usb 6-1: New USB device found: idVendor=05ac, idProduct=0241, bcdDevice=0.00 [ 1681.612967][T18480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1681.612986][T18480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1681.613007][T18480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.614791][T18480] usb 6-1: config 0 descriptor?? [ 1681.630169][ T6069] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1681.790308][ T6069] usb 7-1: Using ep0 maxpacket: 8 [ 1681.791413][ T6069] usb 7-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00 [ 1681.792355][ T6069] usb 7-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 1681.792408][ T6069] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1681.792436][ T6069] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1681.792467][ T6069] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.795518][ T6069] usb 7-1: config 0 descriptor?? [ 1682.074470][T18480] apple 0003:05AC:0241.00A3: item fetching failed at offset 21/24 [ 1682.075232][T18480] apple 0003:05AC:0241.00A3: parse failed [ 1682.075330][T18480] apple 0003:05AC:0241.00A3: probe with driver apple failed with error -22 [ 1682.254476][ T6069] lenovo 0003:17EF:6047.00A4: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 1682.295746][ T6292] usb 6-1: USB disconnect, device number 61 [ 1682.465768][ T6069] usb 7-1: USB disconnect, device number 11 [ 1683.286398][ T6069] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1683.447182][ T6069] usb 7-1: Using ep0 maxpacket: 16 [ 1683.447889][ T6069] usb 7-1: New USB device found: idVendor=04d8, idProduct=f372, bcdDevice=0.00 [ 1683.449416][ T6069] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 1683.449460][ T6069] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.452697][ T6069] usb 7-1: config 0 descriptor?? [ 1683.585641][ T993] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1683.745889][ T993] usb 6-1: Using ep0 maxpacket: 16 [ 1683.747019][ T993] usb 6-1: New USB device found: idVendor=046d, idProduct=c287, bcdDevice=0.00 [ 1683.747969][ T993] usb 6-1: config 0 interface 0 altsetting 189 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1683.747998][ T993] usb 6-1: config 0 interface 0 altsetting 189 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1683.748020][ T993] usb 6-1: config 0 interface 0 altsetting 189 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1683.748047][ T993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1683.748078][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.751700][ T993] usb 6-1: config 0 descriptor?? [ 1683.896851][ T6069] hid_parser_main: 45 callbacks suppressed [ 1683.896876][ T6069] hid-led 0003:04D8:F372.00A5: unknown main item tag 0x0 [ 1683.896908][ T6069] hid-led 0003:04D8:F372.00A5: unknown main item tag 0x0 [ 1683.896936][ T6069] hid-led 0003:04D8:F372.00A5: unknown main item tag 0x0 [ 1683.896988][ T6069] hid-led 0003:04D8:F372.00A5: unknown main item tag 0x0 [ 1683.897014][ T6069] hid-led 0003:04D8:F372.00A5: unknown main item tag 0x0 [ 1683.897041][ T6069] hid-led 0003:04D8:F372.00A5: unknown main item tag 0x0 [ 1683.897067][ T6069] hid-led 0003:04D8:F372.00A5: unknown main item tag 0x0 [ 1683.897126][ T6069] hid-led 0003:04D8:F372.00A5: unknown main item tag 0x0 [ 1683.897153][ T6069] hid-led 0003:04D8:F372.00A5: unknown main item tag 0x0 [ 1683.897179][ T6069] hid-led 0003:04D8:F372.00A5: unknown main item tag 0x0 [ 1683.905929][ T6069] hid-led 0003:04D8:F372.00A5: hidraw0: USB HID v7e.ff Device [HID 04d8:f372] on usb-dummy_hcd.6-1/input0 [ 1684.080259][ T6069] hid-led 0003:04D8:F372.00A5: Greynut Luxafor initialized [ 1684.108834][ T6069] usb 7-1: USB disconnect, device number 12 [ 1684.137660][T27748] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1684.150145][ T12] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1684.159725][ T12] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1684.172080][T27735] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1684.191429][T27735] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1684.192751][T27735] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1684.198269][T27748] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1684.208722][T27748] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1684.244511][ T12] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1684.247616][ T12] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1684.253860][T27748] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1684.258630][T27748] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1684.263724][ T12] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1684.267064][ T12] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1684.275540][T27748] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1684.279123][T27748] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1684.288315][T27748] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1684.297074][ T12] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1684.333268][ T993] logitech 0003:046D:C287.00A6: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.5-1/input0 [ 1684.333317][ T993] logitech 0003:046D:C287.00A6: no inputs found [ 1684.497905][T18480] usb 6-1: USB disconnect, device number 62 [ 1684.599681][T13287] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.26047'. [ 1684.600399][T13286] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.26047'. [ 1686.273461][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.7.26084'. [ 1687.325955][T13427] netlink: 'syz.7.26104': attribute type 1 has an invalid length. [ 1687.325979][T13427] netlink: 232 bytes leftover after parsing attributes in process `syz.7.26104'. [ 1687.325996][T13427] netlink: 'syz.7.26104': attribute type 1 has an invalid length. [ 1687.378237][T13429] Bluetooth: hci0: unsupported parameter 5135 [ 1687.378259][T13429] Bluetooth: hci0: invalid length 1, exp 2 for type 11 [ 1687.699717][T13442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.26111'. [ 1687.701878][T13442] xt_LOG: prefix is not null-terminated [ 1687.811729][ T6292] hid-generic 0000:0000:0000.00A7: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1687.906436][T13451] fido_id[13451]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1688.626191][T13512] netlink: 'syz.4.26140': attribute type 27 has an invalid length. [ 1689.179386][T13548] usb usb1: usbfs: process 13548 (syz.7.26156) did not claim interface 0 before use [ 1689.444100][T13566] netlink: 512 bytes leftover after parsing attributes in process `syz.7.26165'. [ 1689.851759][T13594] netlink: 165 bytes leftover after parsing attributes in process `syz.7.26177'. [ 1690.055006][T13609] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 1690.150320][T13616] sg_write: data in/out 414172/80 bytes for SCSI command 0x0-- guessing data in; [ 1690.150320][T13616] program syz.5.26188 not setting count and/or reply_len properly [ 1690.531530][ T6069] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1690.692040][ T6069] usb 6-1: Using ep0 maxpacket: 16 [ 1690.692611][ T6069] usb 6-1: New USB device found: idVendor=056a, idProduct=00c5, bcdDevice=0.00 [ 1690.693758][ T6069] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1690.693788][ T6069] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1690.693820][ T6069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.696946][ T6069] usb 6-1: config 0 descriptor?? [ 1691.139251][ T6069] hid_parser_main: 489 callbacks suppressed [ 1691.139274][ T6069] wacom 0003:056A:00C5.00A8: unknown main item tag 0x6 [ 1691.139341][ T6069] wacom 0003:056A:00C5.00A8: ignoring exceeding usage max [ 1691.165407][ T6069] wacom 0003:056A:00C5.00A8: hidraw0: USB HID v10.05 Device [HID 056a:00c5] on usb-dummy_hcd.5-1/input0 [ 1691.357327][ T6292] usb 6-1: USB disconnect, device number 63 [ 1692.273351][ T6069] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1692.390907][ T993] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1692.434129][ T6069] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1692.435062][ T6069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.437464][ T6069] usb 6-1: config 0 descriptor?? [ 1692.551197][ T993] usb 7-1: Using ep0 maxpacket: 16 [ 1692.551740][ T993] usb 7-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1692.552710][ T993] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 1692.554718][ T993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.554741][ T993] usb 7-1: Product: syz [ 1692.554755][ T993] usb 7-1: Manufacturer: syz [ 1692.554763][ T993] usb 7-1: SerialNumber: syz [ 1692.593767][ T993] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1692.593784][ T993] r8152-cfgselector 7-1: config 0 descriptor?? [ 1692.661975][ T6069] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1692.815999][ T993] r8152-cfgselector 7-1: Needed 1 retries to read version [ 1692.816029][ T993] r8152-cfgselector 7-1: Unknown version 0x28d0 [ 1692.816376][ T993] r8152-cfgselector 7-1: No union descriptors [ 1692.876554][ T6069] [drm:udl_init] *ERROR* Selecting channel failed [ 1692.888241][ T6069] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1692.888265][ T6069] [drm] Initialized udl on minor 1 [ 1692.889366][ T6069] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1692.889766][ T6069] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1692.892344][ T6069] usb 6-1: USB disconnect, device number 64 [ 1692.906396][ T993] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1693.041592][ T993] r8152-cfgselector 7-1: USB disconnect, device number 13 [ 1693.090395][T13710] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl812) [ 1693.512104][T13716] Invalid ELF header magic: != ELF [ 1693.809047][T13734] netlink: 87 bytes leftover after parsing attributes in process `syz.5.26216'. [ 1693.816384][T13736] netlink: 104 bytes leftover after parsing attributes in process `syz.4.26217'. [ 1693.843083][T13738] sg_write: data in/out 286684/136 bytes for SCSI command 0x0-- guessing data in; [ 1693.843083][T13738] program syz.6.26218 not setting count and/or reply_len properly [ 1694.096211][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26227'. [ 1694.625552][T13796] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1694.628077][T13799] netlink: 20 bytes leftover after parsing attributes in process `syz.6.26245'. [ 1694.628124][T13799] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1694.841621][ T993] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1694.841894][ T993] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1694.842159][ T993] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1694.842426][ T993] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1694.842444][ T993] rtc rtc0: __rtc_set_alarm: err=-22 [ 1694.904280][T13815] netlink: 20 bytes leftover after parsing attributes in process `syz.5.26251'. [ 1694.909303][T13816] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl812) [ 1696.734679][ T33] audit: type=1326 audit(2000000102.806:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13906 comm="syz.5.26292" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a5899e159 code=0x0 [ 1696.996134][T13924] netlink: 'syz.6.26300': attribute type 49 has an invalid length. [ 1697.530998][ T993] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1697.646631][T13948] fuse: fd is not a fuse device [ 1697.693569][ T993] usb 7-1: New USB device found: idVendor=04d8, idProduct=c002, bcdDevice=0.00 [ 1697.694548][ T993] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.694593][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.144098][ T993] hid-picolcd 0003:04D8:C002.00A9: unknown main item tag 0x0 [ 1698.144144][ T993] hid-picolcd 0003:04D8:C002.00A9: unknown main item tag 0x0 [ 1698.144171][ T993] hid-picolcd 0003:04D8:C002.00A9: unknown main item tag 0x0 [ 1698.144196][ T993] hid-picolcd 0003:04D8:C002.00A9: unknown main item tag 0x0 [ 1698.144221][ T993] hid-picolcd 0003:04D8:C002.00A9: unknown main item tag 0x0 [ 1698.144245][ T993] hid-picolcd 0003:04D8:C002.00A9: unknown main item tag 0x0 [ 1698.144272][ T993] hid-picolcd 0003:04D8:C002.00A9: unknown main item tag 0x0 [ 1698.144299][ T993] hid-picolcd 0003:04D8:C002.00A9: unknown main item tag 0x0 [ 1698.144323][ T993] hid-picolcd 0003:04D8:C002.00A9: unknown main item tag 0x0 [ 1698.144347][ T993] hid-picolcd 0003:04D8:C002.00A9: unknown main item tag 0x0 [ 1698.146695][ T993] hid-picolcd 0003:04D8:C002.00A9: unbalanced collection at end of report description [ 1698.147431][ T993] hid-picolcd 0003:04D8:C002.00A9: device report parse failed [ 1698.147531][ T993] hid-picolcd 0003:04D8:C002.00A9: probe with driver hid-picolcd failed with error -22 [ 1698.167136][T11864] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1698.343029][T11864] usb 6-1: Using ep0 maxpacket: 32 [ 1698.343806][T11864] usb 6-1: New USB device found: idVendor=046d, idProduct=c20e, bcdDevice=0.00 [ 1698.344919][T11864] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1698.344951][T11864] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1698.344978][T11864] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1698.345015][T11864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.347745][T11864] usb 6-1: config 0 descriptor?? [ 1698.362624][ T6069] usb 7-1: USB disconnect, device number 14 [ 1698.790908][T11864] logitech 0003:046D:C20E.00AA: rdesc size test failed for formula gp [ 1698.805362][T11864] logitech 0003:046D:C20E.00AA: hidraw0: USB HID v80.00 Device [HID 046d:c20e] on usb-dummy_hcd.5-1/input0 [ 1698.848922][T14022] netlink: 260 bytes leftover after parsing attributes in process `syz.4.26333'. [ 1699.033406][ T6069] usb 6-1: USB disconnect, device number 65 [ 1699.292539][T14059] tipc: Enabling of bearer rejected, failed to enable media [ 1699.717675][T14075] syz.7.26351 (14075): drop_caches: 2 [ 1699.773051][ T33] audit: type=1800 audit(2000000105.651:1422): pid=14086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.26355" name="dummy_udc" dev="gadgetfs" ino=8851 res=0 errno=-16 [ 1700.487673][T14139] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:16x16 (0x38414761, 8, 0, 0, 0) [ 1700.727928][T14153] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1700.727971][T14153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1700.955231][T13848] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1701.271690][ T6292] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1701.296193][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26403'. [ 1701.432103][ T6292] usb 6-1: New USB device found: idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1701.433279][ T6292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.435176][ T6292] usb 6-1: config 0 descriptor?? [ 1701.465068][ T6292] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1701.509708][T14210] xt_l2tp: wrong L2TP version: 150 [ 1701.872901][ T6292] gspca_cpia1: usb_control_msg 03, error -32 [ 1701.873262][ T6292] gspca_cpia1: usb_control_msg 03, error -71 [ 1701.873607][ T6292] gspca_cpia1: usb_control_msg 01, error -71 [ 1701.873621][ T6292] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1701.903346][ T6292] usb 6-1: USB disconnect, device number 66 [ 1701.970104][T14233] netlink: 60 bytes leftover after parsing attributes in process `syz.6.26416'. [ 1701.970766][T14233] netlink: 60 bytes leftover after parsing attributes in process `syz.6.26416'. [ 1702.011033][T14235] tmpfs: Cannot change global quota limit on remount [ 1702.081035][T14237] sg_write: data in/out 410076/64 bytes for SCSI command 0x0-- guessing data in; [ 1702.081035][T14237] program syz.6.26418 not setting count and/or reply_len properly [ 1702.149454][T14241] netlink: 76 bytes leftover after parsing attributes in process `syz.6.26420'. [ 1702.440105][T13136] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1702.596314][T13136] usb 7-1: Using ep0 maxpacket: 8 [ 1702.597142][T13136] usb 7-1: New USB device found: idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1702.598237][T13136] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.598283][T13136] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1702.598316][T13136] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1702.600998][T13136] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1702.601014][T13136] usb 7-1: Product: syz [ 1702.601022][T13136] usb 7-1: Manufacturer: syz [ 1702.601030][T13136] usb 7-1: SerialNumber: syz [ 1702.606129][T13136] usb 7-1: config 0 descriptor?? [ 1702.688380][T14270] syz.5.26430 (14270): drop_caches: 2 [ 1702.767728][T14277] block nbd0: not configured, cannot reconfigure [ 1702.799284][T13136] rc_core: IR keymap rc-imon-rsc not found [ 1702.799296][T13136] Registered IR keymap rc-empty [ 1702.800021][T13136] rc rc0: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1702.804460][T13136] input: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input293 [ 1702.928267][T11864] usb 7-1: USB disconnect, device number 15 [ 1703.065922][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26438'. [ 1703.422656][T14326] x_tables: ip6_tables: CHECKSUM target: only valid in mangle table, not syz1 [ 1703.510732][T14328] devpts: Bad value for 'max' [ 1704.251738][ T6292] kernel write not supported for file /admmidi2 (pid: 6292 comm: kworker/0:7) [ 1704.712107][ T6069] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1704.896922][ T6069] usb 7-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1704.903428][ T6069] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.903459][ T6069] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1704.903486][ T6069] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1704.903519][ T6069] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.931086][ T6069] usb 7-1: config 0 descriptor?? [ 1705.105973][T14441] program syz.5.26495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1705.371228][ T6069] smartjoyplus 0003:0B43:0003.00AB: implement() called with too large value 1 (n: 0)! (kworker/1:3) [ 1705.377328][ T6069] input: HID 0b43:0003 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0B43:0003.00AB/input/input294 [ 1705.388827][ T6069] smartjoyplus 0003:0B43:0003.00AB: input,hidraw0: USB HID v0.00 Joystick [HID 0b43:0003] on usb-dummy_hcd.6-1/input0 [ 1705.584762][ T6292] usb 7-1: USB disconnect, device number 16 [ 1705.830065][T14484] tipc: Disabling bearer [ 1706.272160][ T6292] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1706.434492][ T6292] usb 6-1: New USB device found: idVendor=13ec, idProduct=0006, bcdDevice=0.00 [ 1706.436872][ T6292] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1706.436896][ T6292] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1706.436910][ T6292] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1706.436924][ T6292] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1706.436942][ T6292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.438692][ T6292] usb 6-1: config 0 descriptor?? [ 1706.441397][T14490] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1706.574230][T14511] netlink: 108 bytes leftover after parsing attributes in process `syz.6.26516'. [ 1706.883661][ T6292] input: HID 13ec:0006 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:13EC:0006.00AC/input/input295 [ 1706.966589][ T6292] zydacron 0003:13EC:0006.00AC: input,hidraw0: USB HID v0.00 Joystick [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 1707.098743][ T6292] usb 6-1: USB disconnect, device number 67 [ 1707.468917][T11864] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1707.629740][T11864] usb 7-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 1707.632301][T11864] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.632345][T11864] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1707.632386][T11864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.636056][T11864] usb 7-1: config 0 descriptor?? [ 1707.695722][T11864] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1707.875795][ T6069] usb 7-1: USB disconnect, device number 17 [ 1708.006824][T14608] block nbd7: shutting down sockets [ 1708.207364][ T6292] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1708.345187][ T6069] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1708.378283][ T6292] usb 6-1: New USB device found: idVendor=20d6, idProduct=cb17, bcdDevice=0.00 [ 1708.379241][ T6292] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.379272][ T6292] usb 6-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1708.379299][ T6292] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1708.379322][ T6292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.381062][ T6292] usb 6-1: config 0 descriptor?? [ 1708.506074][ T6069] usb 7-1: New USB device found: idVendor=0c98, idProduct=1140, bcdDevice=0.00 [ 1708.507032][ T6069] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.507083][ T6069] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1708.507124][ T6069] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.509882][ T6069] usb 7-1: config 0 descriptor?? [ 1708.514271][ T6069] pcwd_usb: This driver only supports 1 device [ 1708.514555][ T6069] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1708.728341][T11864] usb 7-1: USB disconnect, device number 18 [ 1708.815957][ T6292] hid-udraw 0003:20D6:CB17.00AD: item 0 1 0 9 parsing failed [ 1708.816665][ T6292] hid-udraw 0003:20D6:CB17.00AD: parse failed [ 1708.816776][ T6292] hid-udraw 0003:20D6:CB17.00AD: probe with driver hid-udraw failed with error -22 [ 1709.029152][T11864] usb 6-1: USB disconnect, device number 68 [ 1709.866089][T14670] netlink: Setting conntrack mark requires 'commit' flag. [ 1709.866111][T14670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1710.035559][T14680] netlink: 16 bytes leftover after parsing attributes in process `syz.5.26563'. [ 1710.094725][T14684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26565'. [ 1710.179303][T14690] overlayfs: failed to resolve '/G+5wdywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1717.330319][T15063] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1717.330345][T15063] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1717.330356][T15063] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1717.330403][T15063] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1717.330531][T15063] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1717.330551][T15063] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1717.330559][T15063] [U] 22Ʃx?0;3u [ 1717.330587][T15063] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1717.330604][T15063] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1717.330616][T15063] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1717.330624][T15063] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1717.330638][T15063] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1717.330678][T15063] [U] ec [ 1717.330685][T15063] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1717.332475][T15062] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1717.706884][ T32] cp2112 0003:10C4:EA90.00B1: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1717.869162][ T32] cp2112 0003:10C4:EA90.00B1: error requesting version [ 1717.875513][ T32] cp2112 0003:10C4:EA90.00B1: probe with driver cp2112 failed with error -71 [ 1717.903367][ T32] usb 7-1: USB disconnect, device number 22 [ 1717.917339][T13136] usb 6-1: failed to restore interface 165 altsetting 7 (error=-71) [ 1717.920298][T13136] ueagle-atm 6-1:1.165: usbatm_usb_probe: bind failed: -19! [ 1717.946340][T13136] usb 6-1: [UEAGLE-ATM] interface 1 not found [ 1717.946367][T13136] ueagle-atm 6-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1717.951164][T13136] usb 6-1: USB disconnect, device number 71 [ 1718.025010][T15105] CUSE: unknown device info "" [ 1718.025743][T15105] CUSE: unknown device info "" [ 1718.025754][T15105] CUSE: unknown device info "w" [ 1718.025778][T15105] CUSE: zero length info key specified [ 1719.120064][T15164] netlink: 188 bytes leftover after parsing attributes in process `syz.6.26675'. [ 1719.437352][T18480] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1719.600975][T18480] usb 6-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 1719.603707][T18480] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1719.603735][T18480] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1719.605706][T18480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.605731][T18480] usb 6-1: Product: syz [ 1719.605747][T18480] usb 6-1: Manufacturer: syz [ 1719.605762][T18480] usb 6-1: SerialNumber: syz [ 1719.830946][T18480] usb 6-1: Limiting number of CPorts to U8_MAX [ 1720.046983][ C0] usb 6-1: short aprc response received [ 1720.268226][T18480] usb 6-1: failed to set cport flags for port 0 [ 1720.268456][T18480] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 1720.291894][T18480] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1720.342678][T18480] usb 6-1: USB disconnect, device number 72 [ 1720.821196][T15243] nbd: must specify at least one socket [ 1720.924400][T18480] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1721.084435][T18480] usb 7-1: Using ep0 maxpacket: 32 [ 1721.085351][T18480] usb 7-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1721.090372][T18480] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.090399][T18480] usb 7-1: Product: syz [ 1721.090413][T18480] usb 7-1: Manufacturer: syz [ 1721.090428][T18480] usb 7-1: SerialNumber: syz [ 1721.101345][T18480] usb 7-1: config 0 descriptor?? [ 1721.113981][T18480] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1721.176774][T15260] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.26709'. [ 1721.307453][ T33] audit: type=1326 audit(2000000125.799:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.4.26713" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f0dd9e159 code=0x0 [ 1721.649306][T15290] sg_write: data in/out 452058/40 bytes for SCSI command 0x0-- guessing data in; [ 1721.649306][T15290] program syz.5.26722 not setting count and/or reply_len properly [ 1721.672152][T15292] syz_tun: entered allmulticast mode [ 1721.674770][T15292] syz_tun: left allmulticast mode [ 1721.755944][T15296] netlink: 5 bytes leftover after parsing attributes in process `syz.7.26725'. [ 1721.756558][T15296] xt_IDLETIMER: label is empty or not nul-terminated [ 1721.772953][T18480] gspca_ov534_9: reg_w failed -71 [ 1722.076764][T18480] gspca_ov534_9: Unknown sensor 0000 [ 1722.076849][T18480] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1722.080382][T18480] usb 7-1: USB disconnect, device number 23 [ 1722.130203][ T32] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1722.301269][ T32] usb 6-1: Using ep0 maxpacket: 16 [ 1722.302003][ T32] usb 6-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1722.302986][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.303014][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1722.303035][ T32] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1722.303073][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.306080][ T32] usb 6-1: config 0 descriptor?? [ 1722.758102][ T32] hid_parser_main: 30 callbacks suppressed [ 1722.758128][ T32] microsoft 0003:045E:07DA.00B2: unknown main item tag 0x0 [ 1722.758162][ T32] microsoft 0003:045E:07DA.00B2: unknown main item tag 0x0 [ 1722.758185][ T32] microsoft 0003:045E:07DA.00B2: unknown main item tag 0x0 [ 1722.758208][ T32] microsoft 0003:045E:07DA.00B2: unknown main item tag 0x0 [ 1722.758231][ T32] microsoft 0003:045E:07DA.00B2: unknown main item tag 0x0 [ 1722.758255][ T32] microsoft 0003:045E:07DA.00B2: unknown main item tag 0x0 [ 1722.758279][ T32] microsoft 0003:045E:07DA.00B2: unknown main item tag 0x0 [ 1722.758302][ T32] microsoft 0003:045E:07DA.00B2: unknown main item tag 0x0 [ 1722.758326][ T32] microsoft 0003:045E:07DA.00B2: unknown main item tag 0x0 [ 1722.758349][ T32] microsoft 0003:045E:07DA.00B2: unknown main item tag 0x0 [ 1722.809647][ T32] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.00B2/input/input300 [ 1722.861805][ T32] microsoft 0003:045E:07DA.00B2: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1722.993540][T13136] usb 6-1: USB disconnect, device number 73 [ 1723.563344][T15416] sg_write: data in/out 399324/22 bytes for SCSI command 0x0-- guessing data in; [ 1723.563344][T15416] program syz.6.26755 not setting count and/or reply_len properly [ 1723.732499][T15426] devpts: Bad value for 'uid' [ 1723.732520][T15426] devpts: Bad value for 'uid' [ 1724.261240][T15464] netlink: 'syz.6.26770': attribute type 1 has an invalid length. [ 1724.261256][T15464] netlink: 200 bytes leftover after parsing attributes in process `syz.6.26770'. [ 1724.261264][T15464] netlink: 'syz.6.26770': attribute type 1 has an invalid length. [ 1724.261271][T15464] netlink: 29 bytes leftover after parsing attributes in process `syz.6.26770'. [ 1724.737573][T13136] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1724.900923][T13136] usb 7-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 1724.901945][T13136] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1724.901978][T13136] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1724.902002][T13136] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1724.902016][T13136] usb 7-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1724.902043][T13136] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.906761][T15477] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1725.150695][T13136] usbhid 7-1:2.0: can't add hid device: -71 [ 1725.150804][T13136] usbhid 7-1:2.0: probe with driver usbhid failed with error -71 [ 1725.166631][T13136] usb 7-1: USB disconnect, device number 24 [ 1725.482051][T11913] hid-generic 0000:47A1:0001.00B3: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1725.596821][T15522] fido_id[15522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1725.710077][T13136] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1725.893044][T13136] usb 7-1: not running at top speed; connect to a high speed hub [ 1725.893081][T13136] usb 7-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=1.00 [ 1725.894330][T13136] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1725.894367][T13136] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1725.894394][T13136] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1725.894420][T13136] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1725.894458][T13136] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.902909][T15477] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1725.911065][T13136] ums-onetouch 7-1:1.0: USB Mass Storage device detected [ 1726.132476][T13136] usb 7-1: USB disconnect, device number 25 [ 1726.371041][T15585] xt_socket: unknown flags 0x30 [ 1726.821449][T15627] xt_LOG: level 115 >= 8 [ 1727.035013][ T6069] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1727.196020][ T6069] usb 6-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 1727.197008][ T6069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.197038][ T6069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.197075][ T6069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.199686][ T6069] usb 6-1: config 0 descriptor?? [ 1727.261269][T15642] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 1727.261269][T15642] program syz.6.26829 not setting count and/or reply_len properly [ 1727.569338][T11864] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1727.635517][ T6069] pyra 0003:1E7D:2CF6.00B4: item fetching failed at offset 5/7 [ 1727.636141][ T6069] pyra 0003:1E7D:2CF6.00B4: parse failed [ 1727.636204][ T6069] pyra 0003:1E7D:2CF6.00B4: probe with driver pyra failed with error -22 [ 1727.740982][T11864] usb 7-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1727.741964][T11864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1727.741994][T11864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1727.742016][T11864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1727.742038][T11864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1727.743897][T11864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.743920][T11864] usb 7-1: Product: syz [ 1727.743935][T11864] usb 7-1: Manufacturer: syz [ 1727.743950][T11864] usb 7-1: SerialNumber: syz [ 1727.745860][T11864] usb 7-1: config 0 descriptor?? [ 1727.848993][T11913] usb 6-1: USB disconnect, device number 74 [ 1727.967226][T11864] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1728.184972][T11913] usb 7-1: USB disconnect, device number 26 [ 1728.502937][T15680] __vm_enough_memory: pid: 15680, comm: syz.5.26834, bytes: 21200656859136 not enough memory for the allocation [ 1729.295028][T15698] netlink: 'syz.5.26843': attribute type 1 has an invalid length. [ 1729.295071][T15698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1730.053547][T15760] vivid-000: disconnect [ 1730.053870][T15758] vivid-000: reconnect [ 1730.540034][T11913] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 1730.701077][T11913] usb 6-1: New USB device found: idVendor=056a, idProduct=0034, bcdDevice=0.00 [ 1730.702056][T11913] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1730.702086][T11913] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.702109][T11913] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1730.702141][T11913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.713891][T11913] usb 6-1: config 0 descriptor?? [ 1731.164994][T11913] wacom 0003:056A:0034.00B5: hidraw0: USB HID v0.00 Joystick [HID 056a:0034] on usb-dummy_hcd.5-1/input0 [ 1731.377808][T11864] usb 6-1: USB disconnect, device number 75 [ 1732.023595][T15802] netlink: 60 bytes leftover after parsing attributes in process `syz.5.26877'. [ 1732.024392][T15802] netlink: 60 bytes leftover after parsing attributes in process `syz.5.26877'. [ 1732.122444][T15808] netlink: 60 bytes leftover after parsing attributes in process `syz.5.26880'. [ 1732.123052][T15808] netlink: 60 bytes leftover after parsing attributes in process `syz.5.26880'. [ 1733.334657][T15837] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 1733.427824][T15841] netlink: 60 bytes leftover after parsing attributes in process `syz.4.26893'. [ 1733.428811][T15841] netlink: 60 bytes leftover after parsing attributes in process `syz.4.26893'. [ 1733.484864][T15844] CIFS mount error: No usable UNC path provided in device string! [ 1733.484864][T15844] [ 1733.484887][T15844] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1733.626343][T15853] netlink: 24 bytes leftover after parsing attributes in process `syz.6.26899'. [ 1733.881694][T15868] netlink: 'syz.7.26907': attribute type 4 has an invalid length. [ 1733.881718][T15868] netlink: 240 bytes leftover after parsing attributes in process `syz.7.26907'. [ 1733.971852][T15876] netlink: 'syz.4.26908': attribute type 3 has an invalid length. [ 1733.971877][T15876] netlink: 'syz.4.26908': attribute type 1 has an invalid length. [ 1733.971891][T15876] netlink: 610 bytes leftover after parsing attributes in process `syz.4.26908'. [ 1734.106026][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1734.313625][T11913] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1734.440702][ T6069] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1734.483900][T11913] usb 6-1: Using ep0 maxpacket: 8 [ 1734.484619][T11913] usb 6-1: New USB device found: idVendor=146b, idProduct=0902, bcdDevice=0.00 [ 1734.485612][T11913] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 1734.485646][T11913] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.485659][T11913] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1734.485674][T11913] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1734.485693][T11913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.489040][T11913] usb 6-1: config 0 descriptor?? [ 1734.644228][ T6069] usb 7-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1734.645768][ T6069] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.648982][ T6069] usb 7-1: config 0 descriptor?? [ 1734.935112][T11913] bigben 0003:146B:0902.00B6: unexpected rdesc, please submit for review [ 1734.939386][T11913] bigben 0003:146B:0902.00B6: missing HID_OUTPUT_REPORT 0 [ 1734.939409][T11913] bigben 0003:146B:0902.00B6: no output report found [ 1734.973022][T11913] bigben 0003:146B:0902.00B6: hidraw0: USB HID v0.00 Joystick [HID 146b:0902] on usb-dummy_hcd.5-1/input0 [ 1735.064283][T15953] netlink: 'syz.7.26936': attribute type 4 has an invalid length. [ 1735.064307][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26936'. [ 1735.144734][T11913] usb 6-1: USB disconnect, device number 76 [ 1735.321646][ T6069] usb 7-1: Cannot set autoneg [ 1735.321884][ T6069] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1735.325887][ T6069] usb 7-1: USB disconnect, device number 27 [ 1735.651630][T15995] netlink: 'syz.4.26947': attribute type 4 has an invalid length. [ 1737.262239][T18480] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1737.321843][T16070] tipc: Enabling of bearer rejected, media not registered [ 1737.367773][T16072] sg_write: data in/out 426460/128 bytes for SCSI command 0x0-- guessing data in; [ 1737.367773][T16072] program syz.6.26965 not setting count and/or reply_len properly [ 1737.428115][T16074] tipc: Enabling of bearer rejected, failed to enable media [ 1737.432639][T18480] usb 6-1: Using ep0 maxpacket: 8 [ 1737.435557][T18480] usb 6-1: New USB device found: idVendor=056a, idProduct=0325, bcdDevice=0.00 [ 1737.440356][T18480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.440385][T18480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1737.440407][T18480] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1737.440446][T18480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.447016][T18480] usb 6-1: config 0 descriptor?? [ 1737.908985][T18480] wacom 0003:056A:0325.00B7: hidraw0: USB HID v0.00 Joystick [HID 056a:0325] on usb-dummy_hcd.5-1/input0 [ 1738.099958][T18480] usb 6-1: USB disconnect, device number 77 [ 1738.440075][T16133] __nla_validate_parse: 3 callbacks suppressed [ 1738.440090][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26983'. [ 1738.532478][T16140] IPVS: Error connecting to the multicast addr [ 1739.485886][T18480] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1739.658686][T18480] usb 7-1: New USB device found: idVendor=045e, idProduct=0775, bcdDevice=1.00 [ 1739.659892][T18480] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1739.661671][T18480] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1739.661694][T18480] usb 7-1: Product: syz [ 1739.661709][T18480] usb 7-1: Manufacturer: syz [ 1740.120138][T16194] tipc: Enabling of bearer rejected, failed to enable media [ 1740.341009][T18480] input: Samsung SUR40 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input308 [ 1740.383976][T18480] usb 7-1: USB disconnect, device number 28 [ 1741.461498][ T6069] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1741.645437][ T6069] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 1741.646455][ T6069] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1741.646482][ T6069] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.646501][ T6069] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1741.646543][ T6069] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1741.648175][ T6069] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1741.648200][ T6069] usb 7-1: Product: syz [ 1741.648216][ T6069] usb 7-1: Manufacturer: syz [ 1741.699585][ T6069] cdc_wdm 7-1:1.0: skipping garbage [ 1741.699608][ T6069] cdc_wdm 7-1:1.0: skipping garbage [ 1741.699704][ T6069] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1741.921496][T16283] netlink: 36 bytes leftover after parsing attributes in process `syz.5.27035'. [ 1742.214477][T16303] netlink: 176 bytes leftover after parsing attributes in process `syz.7.27044'. [ 1742.680743][ T33] audit: type=1326 audit(2000000145.807:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16330 comm="syz.5.27056" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a5899e159 code=0x0 [ 1743.871996][T16346] XFS (mtdblock0): Invalid superblock magic number [ 1744.293611][ T6292] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1744.417787][T18480] usb 7-1: USB disconnect, device number 29 [ 1744.454028][ T6292] usb 6-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1744.455790][ T6292] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.455814][ T6292] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1744.455861][ T6292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.459253][ T6292] usb 6-1: config 0 descriptor?? [ 1744.479015][ T6292] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1744.479057][ T6292] dvb-usb: bulk message failed: -22 (3/0) [ 1744.529123][ T6292] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1744.538467][ T6292] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1744.538518][ T6292] usb 6-1: media controller created [ 1744.552619][ T6292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1744.556343][ T6292] dvb-usb: bulk message failed: -22 (6/0) [ 1744.556423][ T6292] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1744.583129][ T6292] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input309 [ 1744.586500][ T6292] dvb-usb: schedule remote query interval to 150 msecs. [ 1744.586522][ T6292] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1744.649739][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27069'. [ 1744.650016][T16392] xt_cgroup: path and classid specified [ 1744.721439][ T6069] usb 6-1: USB disconnect, device number 78 [ 1744.761007][T16398] netlink: 'syz.6.27070': attribute type 2 has an invalid length. [ 1744.794615][ T6069] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1745.297533][ T6069] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1745.468464][ T6069] usb 7-1: Using ep0 maxpacket: 32 [ 1745.469053][ T6069] usb 7-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1745.471859][ T6069] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.471882][ T6069] usb 7-1: Product: syz [ 1745.471892][ T6069] usb 7-1: Manufacturer: syz [ 1745.471899][ T6069] usb 7-1: SerialNumber: syz [ 1745.474518][ T6069] usb 7-1: config 0 descriptor?? [ 1745.915687][ T6069] airspy 7-1:0.0: Board ID: 00 [ 1745.915703][ T6069] airspy 7-1:0.0: Firmware version: [ 1746.066889][T18480] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1746.131153][ T6069] airspy 7-1:0.0: usb_control_msg() failed -71 request 11 [ 1746.138380][ T6069] airspy 7-1:0.0: Registered as swradio24 [ 1746.138402][ T6069] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1746.146735][ T6069] usb 7-1: USB disconnect, device number 30 [ 1746.249584][T18480] usb 6-1: Using ep0 maxpacket: 16 [ 1746.250315][T18480] usb 6-1: New USB device found: idVendor=04d8, idProduct=c002, bcdDevice=0.00 [ 1746.252832][T18480] usb 6-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 1746.252881][T18480] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1746.252909][T18480] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1746.252934][T18480] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1746.252953][T18480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.254723][T18480] usb 6-1: config 0 descriptor?? [ 1746.601535][T13845] wlan0: Trigger new scan to find an IBSS to join [ 1746.761810][T18480] hid-picolcd 0003:04D8:C002.00B8: No report with id 0x11 found [ 1746.912325][T18480] usb 6-1: USB disconnect, device number 79 [ 1747.135704][ T6069] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1747.307477][ T6069] usb 7-1: New USB device found: idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1747.308595][ T6069] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1747.308611][ T6069] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1747.308621][ T6069] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.308632][ T6069] usb 7-1: config 220 has no interface number 2 [ 1747.308667][ T6069] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1747.308681][ T6069] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1747.308690][ T6069] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1747.308700][ T6069] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1747.310263][ T6069] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.310276][ T6069] usb 7-1: Product: syz [ 1747.310284][ T6069] usb 7-1: Manufacturer: syz [ 1747.310292][ T6069] usb 7-1: SerialNumber: syz [ 1747.542545][ T6069] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1747.542582][ T6069] uvcvideo 7-1:220.0: No valid video chain found. [ 1747.542636][ T6069] usb 7-1: selecting invalid altsetting 0 [ 1747.574050][ T6069] usb 7-1: selecting invalid altsetting 0 [ 1747.574079][ T6069] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1747.576394][ T6069] usb 7-1: USB disconnect, device number 31 [ 1747.837962][T16541] sg_write: data in/out 335836/136 bytes for SCSI command 0x0-- guessing data in; [ 1747.837962][T16541] program syz.5.27104 not setting count and/or reply_len properly [ 1748.134043][T16559] scsi_nl_rcv_msg: discarding partial message [ 1748.299875][T16571] netlink: 64 bytes leftover after parsing attributes in process `syz.5.27119'. [ 1748.299900][T16571] netlink: 64 bytes leftover after parsing attributes in process `syz.5.27119'. [ 1748.299914][T16571] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 1748.393861][T16580] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 1749.069691][T18480] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1749.231605][T18480] usb 7-1: Using ep0 maxpacket: 8 [ 1749.232361][T18480] usb 7-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1749.233350][T18480] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1749.233370][T18480] usb 7-1: config 0 has no interface number 0 [ 1749.233402][T18480] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1749.233426][T18480] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1749.233450][T18480] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1749.233476][T18480] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1749.233516][T18480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.236778][T18480] usb 7-1: config 0 descriptor?? [ 1749.336515][T18480] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1749.437662][T16631] netlink: 44 bytes leftover after parsing attributes in process `syz.5.27140'. [ 1749.437689][T16631] netlink: 43 bytes leftover after parsing attributes in process `syz.5.27140'. [ 1749.437705][T16631] netlink: 'syz.5.27140': attribute type 5 has an invalid length. [ 1749.437719][T16631] netlink: 43 bytes leftover after parsing attributes in process `syz.5.27140'. [ 1749.479029][ T6069] usb 7-1: USB disconnect, device number 32 [ 1749.493770][ T6069] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1749.765569][T13845] wlan0: Trigger new scan to find an IBSS to join [ 1750.384194][T18480] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1750.501674][ T6292] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1750.544322][T18480] usb 7-1: Using ep0 maxpacket: 8 [ 1750.544812][T18480] usb 7-1: New USB device found: idVendor=12ab, idProduct=0004, bcdDevice=0.00 [ 1750.545626][T18480] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1750.545640][T18480] usb 7-1: config 179 has no interface number 0 [ 1750.545665][T18480] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1750.545679][T18480] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1750.545693][T18480] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1750.545707][T18480] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1750.545721][T18480] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1750.545740][T18480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.650736][T18480] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input310 [ 1750.707882][ T6292] usb 6-1: New USB device found: idVendor=044e, idProduct=1215, bcdDevice=0.00 [ 1750.708890][ T6292] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1750.708921][ T6292] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1750.708942][ T6292] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1750.708961][ T6292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.715921][ T4963] input input310: unable to receive magic message: -110 [ 1750.716443][ T6292] usb 6-1: config 0 descriptor?? [ 1750.791374][ T4963] input input310: unable to receive magic message: -32 [ 1750.877583][ T4963] input input310: unable to receive magic message: -32 [ 1750.940396][ T4963] input input310: unable to receive magic message: -32 [ 1751.005000][ T6069] usb 7-1: USB disconnect, device number 33 [ 1751.005008][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1751.169049][ T6292] hid_parser_main: 84 callbacks suppressed [ 1751.169073][ T6292] hid-alps 0003:044E:1215.00B9: unknown main item tag 0x0 [ 1751.169105][ T6292] hid-alps 0003:044E:1215.00B9: unknown main item tag 0x0 [ 1751.169131][ T6292] hid-alps 0003:044E:1215.00B9: unknown main item tag 0x0 [ 1751.169158][ T6292] hid-alps 0003:044E:1215.00B9: unknown main item tag 0x0 [ 1751.169184][ T6292] hid-alps 0003:044E:1215.00B9: unknown main item tag 0x0 [ 1751.169210][ T6292] hid-alps 0003:044E:1215.00B9: unknown main item tag 0x0 [ 1751.169236][ T6292] hid-alps 0003:044E:1215.00B9: unknown main item tag 0x0 [ 1751.169261][ T6292] hid-alps 0003:044E:1215.00B9: unknown main item tag 0x0 [ 1751.169287][ T6292] hid-alps 0003:044E:1215.00B9: unknown main item tag 0x0 [ 1751.169327][ T6292] hid-alps 0003:044E:1215.00B9: unknown main item tag 0x0 [ 1751.172370][ T6292] hid-alps 0003:044E:1215.00B9: hidraw0: USB HID v0.13 Device [HID 044e:1215] on usb-dummy_hcd.5-1/input0 [ 1751.379650][ T6069] usb 6-1: USB disconnect, device number 80 [ 1752.108296][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27165'. [ 1752.108313][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27165'. [ 1752.655334][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.27177'. [ 1752.655368][T16770] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 1752.887514][T16784] xt_hashlimit: size too large, truncated to 1048576 [ 1753.023665][ T61] wlan0: Trigger new scan to find an IBSS to join [ 1753.040927][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27188'. [ 1753.258230][T16807] netlink: 'syz.4.27194': attribute type 29 has an invalid length. [ 1753.268232][T16807] netlink: 'syz.4.27194': attribute type 29 has an invalid length. [ 1753.822353][T16836] netlink: 10 bytes leftover after parsing attributes in process `syz.6.27206'. [ 1753.982806][T27748] wlan0: Creating new IBSS network, BSSID 62:36:cd:b5:4c:ad [ 1754.240613][T27748] IPVS: starting estimator thread 0... [ 1754.241221][T16855] IPVS: ip_vs_add_dest(): server weight less than zero [ 1754.329078][T16858] IPVS: using max 29 ests per chain, 69600 per kthread [ 1755.748557][ T7483] Bluetooth: hci2: command 0x0406 tx timeout [ 1755.790225][T16938] netlink: 36 bytes leftover after parsing attributes in process `syz.5.27250'. [ 1755.843466][T16941] netlink: 'syz.7.27252': attribute type 10 has an invalid length. [ 1756.262094][T13136] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1756.376647][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.7.27259'. [ 1756.376673][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.7.27259'. [ 1756.422373][T13136] usb 7-1: New USB device found: idVendor=28de, idProduct=1142, bcdDevice=0.00 [ 1756.425526][T13136] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1756.425556][T13136] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1756.425594][T13136] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.443695][T13136] usb 7-1: config 0 descriptor?? [ 1756.582177][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27260'. [ 1756.582220][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27260'. [ 1756.965156][T13136] hid_parser_main: 30 callbacks suppressed [ 1756.965190][T13136] hid-steam 0003:28DE:1142.00BA: unknown main item tag 0x0 [ 1756.965221][T13136] hid-steam 0003:28DE:1142.00BA: unknown main item tag 0x0 [ 1756.965249][T13136] hid-steam 0003:28DE:1142.00BA: unknown main item tag 0x0 [ 1756.965277][T13136] hid-steam 0003:28DE:1142.00BA: unknown main item tag 0x0 [ 1756.965303][T13136] hid-steam 0003:28DE:1142.00BA: unknown main item tag 0x0 [ 1756.980755][T13136] hid-steam 0003:28DE:1142.00BA: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 1757.229875][T13136] usb 7-1: USB disconnect, device number 34 [ 1757.765653][T17042] program syz.5.27281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1758.222471][T17072] program syz.5.27293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1759.746349][T18480] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1759.905296][T18480] usb 6-1: Using ep0 maxpacket: 16 [ 1759.905815][T18480] usb 6-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00 [ 1759.906687][T18480] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.906706][T18480] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1759.906720][T18480] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1759.906738][T18480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.909319][T18480] usb 6-1: config 0 descriptor?? [ 1760.347193][T18480] lg-g15 0003:046D:C222.00BB: unknown main item tag 0x0 [ 1760.347230][T18480] lg-g15 0003:046D:C222.00BB: unknown main item tag 0x0 [ 1760.347258][T18480] lg-g15 0003:046D:C222.00BB: unknown main item tag 0x0 [ 1760.347285][T18480] lg-g15 0003:046D:C222.00BB: unknown main item tag 0x0 [ 1760.347311][T18480] lg-g15 0003:046D:C222.00BB: unknown main item tag 0x0 [ 1760.355836][T18480] lg-g15 0003:046D:C222.00BB: hidraw0: USB HID v80.00 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 1760.544268][T17174] netlink: 20 bytes leftover after parsing attributes in process `syz.6.27326'. [ 1760.563326][T13136] usb 6-1: USB disconnect, device number 81 [ 1761.195279][T17209] netlink: 'syz.5.27337': attribute type 2 has an invalid length. [ 1761.826396][T17253] sd 0:0:1:0: PR command failed: 1026 [ 1761.826447][T17253] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1761.826488][T17253] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1762.068483][T17266] tap0: tun_chr_ioctl cmd 1074025672 [ 1762.068506][T17266] tap0: ignored: set checksum disabled [ 1762.399951][T27748] IPVS: starting estimator thread 0... [ 1762.492446][T17286] IPVS: using max 43 ests per chain, 103200 per kthread [ 1762.914180][T17309] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 1762.974388][T17311] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1763.318922][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27384'. [ 1763.890340][T17346] netlink: 'syz.4.27393': attribute type 1 has an invalid length. [ 1764.079954][T17354] netlink: 'syz.5.27395': attribute type 83 has an invalid length. [ 1765.411129][T17412] i2c i2c-0: new_device: Instantiated device isp1301 at 0x29 [ 1765.738477][T17445] netlink: 32 bytes leftover after parsing attributes in process `syz.6.27432'. [ 1765.739395][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27432'. [ 1765.739432][T17445] netlink: 24 bytes leftover after parsing attributes in process `syz.6.27432'. [ 1765.872658][T17453] team0: No ports can be present during mode change [ 1765.925931][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27438'. [ 1766.359688][ T32] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1766.524878][ T32] usb 6-1: New USB device found: idVendor=056a, idProduct=037b, bcdDevice=0.00 [ 1766.525798][ T32] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1766.525818][ T32] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1766.525832][ T32] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1766.525879][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.527761][ T32] usb 6-1: config 0 descriptor?? [ 1766.529783][T17469] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1766.967428][ T32] wacom 0003:056A:037B.00BC: Unknown device_type for 'HID 056a:037b'. Assuming pen. [ 1766.979988][ T32] wacom 0003:056A:037B.00BC: hidraw0: USB HID v4.01 Device [HID 056a:037b] on usb-dummy_hcd.5-1/input0 [ 1766.983709][ T32] input: Wacom One by Wacom M Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:037B.00BC/input/input312 [ 1767.185491][ T6069] usb 6-1: USB disconnect, device number 82 [ 1767.261945][T13845] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1767.364355][ T32] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1767.535620][ T32] usb 7-1: New USB device found: idVendor=1020, idProduct=0006, bcdDevice=0.00 [ 1767.536531][ T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1767.536560][ T32] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1767.536600][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.539040][ T32] usb 7-1: config 0 descriptor?? [ 1767.979034][ T32] belkin 0003:1020:0006.00BD: global environment stack underflow [ 1767.979058][ T32] belkin 0003:1020:0006.00BD: item 0 0 1 11 parsing failed [ 1767.980799][ T32] belkin 0003:1020:0006.00BD: parse failed [ 1767.980866][ T32] belkin 0003:1020:0006.00BD: probe with driver belkin failed with error -22 [ 1768.190394][T18480] usb 7-1: USB disconnect, device number 35 [ 1769.322895][T17607] kAFS: bad VL server IP address [ 1770.020693][T17651] usbcore.quirks: string doesn't fit in 127 chars. [ 1770.093394][T17655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xde17 instead [ 1770.093432][T17655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x724a instead [ 1770.093633][T17655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 1770.093651][T17655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 1770.093669][T17655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 1770.094077][T17655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 1770.094096][T17655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 1770.094115][T17655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 1770.136264][T17655] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1770.136293][T17655] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1770.231881][T17659] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1770.394904][T17664] binder: Write failure EFAULT in pid:1296 [ 1770.525892][T17676] netlink: 'syz.6.27498': attribute type 27 has an invalid length. [ 1770.751815][T18480] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1770.923305][T18480] usb 6-1: New USB device found: idVendor=1e7d, idProduct=2d50, bcdDevice=0.00 [ 1770.924305][T18480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1770.924336][T18480] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1770.924376][T18480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.926970][T18480] usb 6-1: config 0 descriptor?? [ 1771.195432][T18480] usbhid 6-1:0.0: can't add hid device: -71 [ 1771.195535][T18480] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1771.214544][T18480] usb 6-1: USB disconnect, device number 83 [ 1771.487431][T17728] MTRR 1 not used [ 1771.495028][T17731] i2c i2c-0: new_device: Extra parameters [ 1772.023462][T17766] kAFS: bad VL server IP address [ 1772.755062][T17814] netlink: 11 bytes leftover after parsing attributes in process `syz.6.27556'. [ 1772.898998][T17824] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1772.970462][T17828] netlink: 36 bytes leftover after parsing attributes in process `syz.7.27564'. [ 1772.971604][T17828] netlink: 36 bytes leftover after parsing attributes in process `syz.7.27564'. [ 1773.395700][T17858] bonding: no command found in bonding_masters - use +ifname or -ifname [ 1773.508636][ T6292] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1773.528745][T17867] binder: Write failure EFAULT in pid:3610 [ 1773.680158][ T6292] usb 7-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1773.681102][ T6292] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.683451][ T6292] usb 7-1: config 0 descriptor?? [ 1773.687169][ T6292] cp210x 7-1:0.0: cp210x converter detected [ 1774.116573][T17849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.117075][T17849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.146842][ T6292] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1774.338571][ T32] usb 7-1: USB disconnect, device number 36 [ 1774.464875][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1774.465468][ T32] cp210x 7-1:0.0: device disconnected [ 1774.929958][T18467] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1775.102064][T18467] usb 6-1: New USB device found: idVendor=145f, idProduct=0212, bcdDevice=0.00 [ 1775.103161][T18467] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1775.103185][T18467] usb 6-1: config 0 has no interface number 0 [ 1775.103225][T18467] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1775.103247][T18467] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.103259][T18467] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1775.103273][T18467] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1775.105016][T18467] usb 6-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 1775.105039][T18467] usb 6-1: Manufacturer: syz [ 1775.107622][T18467] usb 6-1: config 0 descriptor?? [ 1775.222781][T17976] kvm [17975]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7ca5 [ 1775.560531][ T6292] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1775.721391][ T6292] usb 7-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1775.722518][ T6292] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.724676][ T6292] usb 7-1: config 0 descriptor?? [ 1775.783753][T18467] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:145F:0212.00BE/input/input315 [ 1775.865876][T18467] input: syz Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:145F:0212.00BE/input/input316 [ 1775.887048][T18467] uclogic 0003:145F:0212.00BE: input,hidraw0: USB HID v4.06 Keypad [syz] on usb-dummy_hcd.5-1/input1 [ 1775.990743][ T6292] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1776.001631][ T32] usb 6-1: USB disconnect, device number 84 [ 1776.061988][T18000] fido_id[18000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1776.205462][ T6292] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 1776.205487][ T6292] [drm] Initialized udl on minor 1 [ 1776.412565][ T6292] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1776.412827][ T6292] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1776.627839][ T6292] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1776.631107][T18467] usb 7-1: USB disconnect, device number 37 [ 1776.638662][ T6292] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1776.864783][ T32] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1776.976222][T18024] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input318 [ 1777.035236][ T32] usb 6-1: Using ep0 maxpacket: 8 [ 1777.037393][ T32] usb 6-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1777.038422][ T32] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1777.038447][ T32] usb 6-1: config 179 has no interface number 0 [ 1777.038486][ T32] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1777.038512][ T32] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1777.038538][ T32] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1777.038563][ T32] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1777.038588][ T32] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1777.038626][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.042742][T18026] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1777.382755][T13845] Bluetooth: hci1: Frame reassembly failed (-84) [ 1777.383250][T18061] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1777.383521][T13845] Bluetooth: hci1: Frame reassembly failed (-84) [ 1777.383595][T13845] Bluetooth: hci1: Frame reassembly failed (-84) [ 1777.383663][ T146] Bluetooth: hci1: Frame reassembly failed (-84) [ 1777.446212][ T32] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input319 [ 1777.549728][T18480] usb 6-1: USB disconnect, device number 85 [ 1777.549827][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1777.549870][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1778.879547][T18159] kvm: user requested TSC rate below hardware speed [ 1778.986551][T18163] team0: entered allmulticast mode [ 1778.986575][T18163] team_slave_0: entered allmulticast mode [ 1778.986591][T18163] team_slave_1: entered allmulticast mode [ 1779.037763][T18165] netlink: 'syz.5.27659': attribute type 2 has an invalid length. [ 1779.074683][T18167] netlink: 'syz.5.27660': attribute type 8 has an invalid length. [ 1779.377507][T18183] loop9: detected capacity change from 0 to 7 [ 1779.411932][T18183] Dev loop9: unable to read RDB block 7 [ 1779.411962][T18183] loop9: unable to read partition table [ 1779.412085][T18183] loop9: partition table beyond EOD, truncated [ 1779.412109][T18183] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 1779.439951][ C0] blk_print_req_error: 10 callbacks suppressed [ 1779.439971][ C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 1779.440042][ C0] buffer_io_error: 6 callbacks suppressed [ 1779.440054][ C0] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1779.472264][T18186] input: syz0 as /devices/virtual/input/input320 [ 1779.514546][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1779.585410][T18194] netlink: 60 bytes leftover after parsing attributes in process `syz.5.27670'. [ 1779.898932][ T6069] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1780.060040][ T6069] usb 6-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1780.062610][ T6069] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.062626][ T6069] usb 6-1: Product: syz [ 1780.062633][ T6069] usb 6-1: Manufacturer: syz [ 1780.062641][ T6069] usb 6-1: SerialNumber: syz [ 1780.066367][ T6069] usb 6-1: config 0 descriptor?? [ 1780.106912][ T6069] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1780.219600][T18467] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1780.363629][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27684'. [ 1780.381063][T18467] usb 7-1: New USB device found: idVendor=1e7d, idProduct=2d50, bcdDevice=0.00 [ 1780.382413][T18467] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1780.382444][T18467] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1780.382485][T18467] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.386875][T18467] usb 7-1: config 0 descriptor?? [ 1780.611973][ T54] Bluetooth: hci2: Unknown advertising packet type: 0x30 [ 1780.612008][ T54] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1780.619083][T18467] usbhid 7-1:0.0: can't add hid device: -71 [ 1780.619186][T18467] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1780.623867][T18467] usb 7-1: USB disconnect, device number 38 [ 1780.937548][ T6069] gspca_sunplus: reg_w_riv err -71 [ 1780.937602][ T6069] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1780.959712][ T6069] usb 6-1: USB disconnect, device number 86 [ 1781.391240][T18269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.571447][T13846] IPVS: stopping estimator thread 0... [ 1781.600098][T13846] IPVS: starting estimator thread 0... [ 1781.696454][T18276] IPVS: using max 59 ests per chain, 141600 per kthread [ 1781.718377][T18269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.187056][T18269] bond0: (slave netdevsim1): Releasing backup interface [ 1782.219599][T18269] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 1782.219641][T18269] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 1782.235611][T18269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.403934][ T33] audit: type=1400 audit(2000000694.984:1425): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=18312 comm="syz.7.27705" name="foo" offset=76 [ 1782.481444][T18317] openvswitch: netlink: IP tunnel dst address not specified [ 1782.481473][T18317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1782.649670][T18269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.739885][T18334] program syz.5.27712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1783.457478][ T32] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1783.617623][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 1783.618314][ T32] usb 6-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1783.619315][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.621352][ T32] usb 6-1: config 0 descriptor?? [ 1783.846011][ T32] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1783.850437][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1783.852988][ T32] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1783.853036][ T32] usb 6-1: media controller created [ 1783.883976][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1784.082296][T18388] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.27727'. [ 1784.299299][T18398] loop7: detected capacity change from 0 to 7 [ 1784.313521][T13136] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1784.314209][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.314281][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1784.315590][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.315664][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1784.316384][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.316452][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1784.316629][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.316693][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1784.316843][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.316935][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1784.317077][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.317145][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1784.317275][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.317332][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1784.317370][T18398] ldm_validate_partition_table(): Disk read failed. [ 1784.317628][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.317694][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1784.317822][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1784.317882][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1784.318254][T18398] Dev loop7: unable to read RDB block 0 [ 1784.318898][T18398] loop7: unable to read partition table [ 1784.319177][T18398] loop7: partition table beyond EOD, truncated [ 1784.319217][T18398] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1784.481247][T13136] usb 7-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 1784.487139][T13136] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1784.487165][T13136] usb 7-1: config 1 has no interface number 0 [ 1784.487203][T13136] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1784.487228][T13136] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1784.487252][T13136] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.492945][T13136] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.492970][T13136] usb 7-1: Product: syz [ 1784.492984][T13136] usb 7-1: Manufacturer: syz [ 1784.492999][T13136] usb 7-1: SerialNumber: syz [ 1784.500989][ T32] az6027: usb out operation failed. (-71) [ 1784.501004][ T32] stb0899_attach: Driver disabled by Kconfig [ 1784.501015][ T32] az6027: no front-end attached [ 1784.501015][ T32] [ 1784.501379][ T32] az6027: usb out operation failed. (-71) [ 1784.501391][ T32] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1784.509727][T18383] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1784.513881][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input321 [ 1784.526613][ T32] dvb-usb: schedule remote query interval to 400 msecs. [ 1784.526635][ T32] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1784.532972][T18398] ldm_validate_partition_table(): Disk read failed. [ 1784.548723][T18398] Dev loop7: unable to read RDB block 0 [ 1784.554376][ T32] usb 6-1: USB disconnect, device number 87 [ 1784.559962][T18398] loop7: unable to read partition table [ 1784.560246][T18398] loop7: partition table beyond EOD, truncated [ 1784.641519][T18414] sd 0:0:1:0: PR command failed: 1026 [ 1784.641580][T18414] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1784.641646][T18414] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1784.755991][T18383] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1784.937776][ T32] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1784.955679][T18431] sd 0:0:1:0: PR command failed: 1026 [ 1784.955753][T18431] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1784.955791][T18431] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1785.377340][T13136] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:03:07 [ 1785.377615][ C1] sierra_net 7-1:1.7 wwan0: : unexpected notification bd! [ 1785.377859][ C1] sierra_net 7-1:1.7 wwan0: : unexpected notification 8c! [ 1785.378078][ C1] sierra_net 7-1:1.7 wwan0: : unexpected notification 3d! [ 1785.378307][ C1] sierra_net 7-1:1.7 wwan0: : unexpected notification d2! [ 1785.378503][ C1] sierra_net 7-1:1.7 wwan0: : unexpected notification fa! [ 1785.378704][ C1] sierra_net 7-1:1.7 wwan0: : unexpected notification 8d! [ 1785.378907][ C1] sierra_net 7-1:1.7 wwan0: : unexpected notification e6! [ 1785.379111][ C1] sierra_net 7-1:1.7 wwan0: : unexpected notification 2b! [ 1785.379317][ C1] sierra_net 7-1:1.7 wwan0: : unexpected notification c0! [ 1785.601916][T13136] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 1785.601946][T13136] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 1785.608861][T13136] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 1785.608887][T13136] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 1785.629526][T18480] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1785.629955][T13136] usb 7-1: USB disconnect, device number 39 [ 1785.631946][ T32] sierra_net 7-1:1.7 wwan0: usb_control_msg failed, status -71 [ 1785.639671][T13136] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem [ 1785.971200][T13136] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1786.010574][T18480] usb 6-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1786.010619][T18480] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1786.132649][T18480] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1786.132680][T18480] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1786.132695][T18480] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1786.133555][T18480] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1786.133597][T18480] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1786.133611][T18480] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1786.134387][T18480] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1786.134424][T18480] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1786.134438][T18480] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1786.135239][T18480] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1786.135265][T18480] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1786.135279][T18480] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1786.136082][T18480] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1786.136108][T18480] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1786.136122][T18480] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1786.136877][T18480] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1786.136919][T18480] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1786.136944][T18480] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1786.137735][T18480] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1786.137761][T18480] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1786.137775][T18480] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1786.138590][T18480] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1786.138616][T18480] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1786.138630][T18480] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1786.140944][T18480] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1786.140967][T18480] usb 6-1: Product: syz [ 1786.140982][T18480] usb 6-1: Manufacturer: syz [ 1786.140997][T18480] usb 6-1: SerialNumber: syz [ 1786.163243][T18480] usb 6-1: config 0 descriptor?? [ 1786.185929][T18480] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1786.471362][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 1786.471723][ T32] usb 6-1: USB disconnect, device number 88 [ 1786.501073][ T32] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1786.893217][T18534] netlink: 'syz.4.27764': attribute type 9 has an invalid length. [ 1787.047852][T13136] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1787.208785][T13136] usb 7-1: Using ep0 maxpacket: 16 [ 1787.210704][T13136] usb 7-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1787.211639][T13136] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.211669][T13136] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.211692][T13136] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1787.211729][T13136] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.214759][T13136] usb 7-1: config 0 descriptor?? [ 1787.313927][T18543] netlink: 64 bytes leftover after parsing attributes in process `syz.7.27766'. [ 1787.537859][T18555] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.27772'. [ 1787.549057][T18555] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.27772'. [ 1787.664228][T13136] microsoft 0003:045E:07DA.00BF: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1787.870180][T18480] usb 7-1: USB disconnect, device number 40 [ 1788.059954][T18600] netlink: 76 bytes leftover after parsing attributes in process `syz.7.27785'. [ 1788.416227][T18480] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1788.466623][T18621] loop7: detected capacity change from 0 to 7 [ 1788.474957][ C1] blk_print_req_error: 26 callbacks suppressed [ 1788.474976][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1788.475041][ C1] buffer_io_error: 26 callbacks suppressed [ 1788.475053][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1788.478079][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1788.478161][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1788.478309][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1788.478366][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1788.478492][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1788.478556][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1788.478709][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1788.478764][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1788.478909][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1788.478964][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1788.479097][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1788.479153][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1788.479197][T18621] ldm_validate_partition_table(): Disk read failed. [ 1788.479383][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1788.479438][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1788.479602][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1788.479705][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1788.482085][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1788.482161][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1788.483963][T18621] Dev loop7: unable to read RDB block 0 [ 1788.484617][T18621] loop7: unable to read partition table [ 1788.484807][T18621] loop7: partition table beyond EOD, truncated [ 1788.484837][T18621] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1788.549344][T18621] ldm_validate_partition_table(): Disk read failed. [ 1788.550035][T18621] Dev loop7: unable to read RDB block 0 [ 1788.552486][T18621] loop7: unable to read partition table [ 1788.552710][T18621] loop7: partition table beyond EOD, truncated [ 1788.590621][T18480] usb 6-1: Using ep0 maxpacket: 16 [ 1788.609049][T18480] usb 6-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 1788.689874][T18480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.689921][T18480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.772125][T18480] usb 6-1: config 0 descriptor?? [ 1788.841975][ T6292] kernel read not supported for file /media6 (pid: 6292 comm: kworker/0:7) [ 1789.085959][T18651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1789.213990][T18480] mcp2221 0003:04D8:00DD.00C0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1789.590956][T18690] loop5: detected capacity change from 0 to 7 [ 1789.606673][T18690] Dev loop5: unable to read RDB block 7 [ 1789.606703][T18690] loop5: AHDI p1 [ 1789.606724][T18690] loop5: partition table partially beyond EOD, truncated [ 1789.649532][T11913] usb 6-1: USB disconnect, device number 89 [ 1790.133287][T18737] kAFS: bad VL server IP address [ 1790.623193][T18773] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1790.884815][ T7483] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1790.884873][ T7483] Bluetooth: hci3: Injecting HCI hardware error event [ 1790.897728][ T7483] Bluetooth: hci3: hardware error 0x00 [ 1791.035202][ T33] audit: type=1807 audit(2000000703.050:1426): action=measure res=1 [ 1791.036178][T18794] ima: policy update completed [ 1791.036342][ T33] audit: type=1802 audit(2000000703.060:1427): pid=18794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.4.27852" res=1 errno=0 [ 1791.196104][ T33] audit: type=1800 audit(2000000703.200:1428): pid=18804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.27854" name="metadata_version" dev="sysfs" ino=308610 res=0 errno=-22 [ 1791.356453][ T4978] [ 1791.358835][ T4978] ====================================================== [ 1791.365856][ T4978] WARNING: possible circular locking dependency detected [ 1791.372901][ T4978] syzkaller #0 Tainted: G L [ 1791.378972][ T4978] ------------------------------------------------------ [ 1791.386073][ T4978] udevd/4978 is trying to acquire lock: [ 1791.391602][ T4978] ffff8880259602d8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1791.400059][ T4978] [ 1791.400059][ T4978] but task is already holding lock: [ 1791.407407][ T4978] ffff88807ee57480 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 1791.418076][ T4978] [ 1791.418076][ T4978] which lock already depends on the new lock. [ 1791.418076][ T4978] [ 1791.428571][ T4978] [ 1791.428571][ T4978] the existing dependency chain (in reverse order) is: [ 1791.437588][ T4978] [ 1791.437588][ T4978] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1791.446194][ T4978] __mutex_lock+0x197/0x15a0 [ 1791.451315][ T4978] process_measurement+0x7d0/0x1c10 [ 1791.457036][ T4978] ima_file_check+0xdc/0x130 [ 1791.462138][ T4978] security_file_post_open+0xb3/0x260 [ 1791.468031][ T4978] path_openat+0x14e9/0x1da0 [ 1791.473141][ T4978] do_file_open+0x23e/0x4a0 [ 1791.478163][ T4978] filp_open+0x16d/0x1d0 [ 1791.482925][ T4978] kernel_read_file_from_path_initns+0xde/0x1e0 [ 1791.489779][ T4978] _request_firmware+0xa2b/0x1750 [ 1791.495389][ T4978] request_firmware+0x36/0x50 [ 1791.500579][ T4978] reg_reload_regdb+0x95/0x490 [ 1791.505936][ T4978] genl_family_rcv_msg_doit+0x233/0x340 [ 1791.512041][ T4978] genl_rcv_msg+0x614/0x7a0 [ 1791.517055][ T4978] netlink_rcv_skb+0x226/0x4a0 [ 1791.522370][ T4978] genl_rcv+0x28/0x40 [ 1791.526864][ T4978] netlink_unicast+0x7bd/0x940 [ 1791.532154][ T4978] netlink_sendmsg+0x7c3/0xae0 [ 1791.537434][ T4978] sock_sendmsg_nosec+0x13a/0x180 [ 1791.543024][ T4978] ____sys_sendmsg+0x54e/0x850 [ 1791.548298][ T4978] ___sys_sendmsg+0x2a5/0x360 [ 1791.553492][ T4978] __x64_sys_sendmsg+0x1b1/0x290 [ 1791.558946][ T4978] do_syscall_64+0x166/0x520 [ 1791.564063][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.570468][ T4978] [ 1791.570468][ T4978] -> #3 (cb_lock){++++}-{4:4}: [ 1791.577407][ T4978] down_read+0x45/0x320 [ 1791.582077][ T4978] genl_release+0x89/0x1e0 [ 1791.587004][ T4978] netlink_release+0xe94/0x1a80 [ 1791.592369][ T4978] __sock_release+0xa0/0x1f0 [ 1791.597551][ T4978] sock_close+0x1c/0x30 [ 1791.602221][ T4978] __fput+0x413/0xa50 [ 1791.606714][ T4978] fput_close_sync+0x11f/0x240 [ 1791.611987][ T4978] __se_sys_close+0xa2/0x160 [ 1791.617087][ T4978] do_syscall_64+0x166/0x520 [ 1791.622196][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.628601][ T4978] [ 1791.628601][ T4978] -> #2 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 1791.637285][ T4978] down_write+0x91/0x200 [ 1791.642051][ T4978] __sock_release+0x7a/0x1f0 [ 1791.647163][ T4978] sock_close+0x1c/0x30 [ 1791.651855][ T4978] __fput+0x413/0xa50 [ 1791.656365][ T4978] nvme_tcp_alloc_queue+0x17ba/0x1e30 [ 1791.662378][ T4978] nvme_tcp_configure_admin_queue+0x23/0x3f0 [ 1791.668882][ T4978] nvme_tcp_setup_ctrl+0xba/0x1880 [ 1791.674524][ T4978] nvme_tcp_create_ctrl+0x85f/0xc60 [ 1791.680261][ T4978] nvmf_dev_write+0x24ca/0x2d90 [ 1791.685748][ T4978] vfs_write+0x296/0xba0 [ 1791.690513][ T4978] ksys_write+0x150/0x270 [ 1791.695358][ T4978] do_syscall_64+0x166/0x520 [ 1791.700466][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.706876][ T4978] [ 1791.706876][ T4978] -> #1 (nvmf_dev_mutex){+.+.}-{4:4}: [ 1791.714429][ T4978] __mutex_lock+0x197/0x15a0 [ 1791.719538][ T4978] nvmf_dev_show+0x2c/0x180 [ 1791.724562][ T4978] traverse+0x229/0x620 [ 1791.729271][ T4978] seq_read_iter+0xb6a/0xca0 [ 1791.734385][ T4978] seq_read+0x367/0x480 [ 1791.739057][ T4978] vfs_readv+0x57c/0x850 [ 1791.743825][ T4978] __x64_sys_preadv+0x19c/0x2b0 [ 1791.749190][ T4978] do_syscall_64+0x166/0x520 [ 1791.754296][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.760700][ T4978] [ 1791.760700][ T4978] -> #0 (&p->lock){+.+.}-{4:4}: [ 1791.767733][ T4978] __lock_acquire+0x164c/0x2de0 [ 1791.773104][ T4978] lock_acquire+0x115/0x350 [ 1791.778131][ T4978] __mutex_lock+0x197/0x15a0 [ 1791.783257][ T4978] seq_read_iter+0xa4/0xca0 [ 1791.788290][ T4978] __kernel_read+0x4ca/0x960 [ 1791.793416][ T4978] integrity_kernel_read+0x89/0xd0 [ 1791.799136][ T4978] ima_calc_file_hash+0x451/0x890 [ 1791.804680][ T4978] ima_collect_measurement+0x51b/0xa00 [ 1791.810669][ T4978] process_measurement+0x1272/0x1c10 [ 1791.816471][ T4978] ima_file_check+0xdc/0x130 [ 1791.821574][ T4978] security_file_post_open+0xb3/0x260 [ 1791.827462][ T4978] path_openat+0x14e9/0x1da0 [ 1791.832605][ T4978] do_file_open+0x23e/0x4a0 [ 1791.837747][ T4978] do_sys_openat2+0x115/0x200 [ 1791.842957][ T4978] __x64_sys_openat+0x138/0x170 [ 1791.848338][ T4978] do_syscall_64+0x166/0x520 [ 1791.853459][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.859868][ T4978] [ 1791.859868][ T4978] other info that might help us debug this: [ 1791.859868][ T4978] [ 1791.870094][ T4978] Chain exists of: [ 1791.870094][ T4978] &p->lock --> cb_lock --> &ima_iint_mutex_key[depth] [ 1791.870094][ T4978] [ 1791.882786][ T4978] Possible unsafe locking scenario: [ 1791.882786][ T4978] [ 1791.890236][ T4978] CPU0 CPU1 [ 1791.895599][ T4978] ---- ---- [ 1791.900957][ T4978] lock(&ima_iint_mutex_key[depth]); [ 1791.906329][ T4978] lock(cb_lock); [ 1791.912565][ T4978] lock(&ima_iint_mutex_key[depth]); [ 1791.920452][ T4978] lock(&p->lock); [ 1791.924254][ T4978] [ 1791.924254][ T4978] *** DEADLOCK *** [ 1791.924254][ T4978] [ 1791.932383][ T4978] locks held by udevd/4978: 1, last CPU#1: [ 1791.938176][ T4978] #0: ffff88807ee57480 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 1791.949225][ T4978] [ 1791.949225][ T4978] stack backtrace: [ 1791.955107][ T4978] CPU: 1 UID: 0 PID: 4978 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1791.965598][ T4978] Tainted: [L]=SOFTLOCKUP [ 1791.969913][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1791.979959][ T4978] Call Trace: [ 1791.983234][ T4978] [ 1791.986163][ T4978] dump_stack_lvl+0xe8/0x150 [ 1791.990762][ T4978] print_circular_bug+0x2e2/0x300 [ 1791.995791][ T4978] check_noncircular+0x12f/0x150 [ 1792.000731][ T4978] __lock_acquire+0x164c/0x2de0 [ 1792.005575][ T4978] ? lock_acquire+0x115/0x350 [ 1792.010251][ T4978] ? lock_acquire+0x115/0x350 [ 1792.014924][ T4978] lock_acquire+0x115/0x350 [ 1792.019422][ T4978] ? seq_read_iter+0xa4/0xca0 [ 1792.024100][ T4978] __mutex_lock+0x197/0x15a0 [ 1792.028690][ T4978] ? seq_read_iter+0xa4/0xca0 [ 1792.033372][ T4978] ? __kernel_text_address+0xd/0x30 [ 1792.038685][ T4978] ? unwind_get_return_address+0x4d/0x90 [ 1792.044314][ T4978] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1792.050462][ T4978] ? arch_stack_walk+0xfb/0x150 [ 1792.055303][ T4978] ? seq_read_iter+0xa4/0xca0 [ 1792.059979][ T4978] ? __pfx___mutex_lock+0x10/0x10 [ 1792.065001][ T4978] ? stack_trace_save+0xa9/0x100 [ 1792.069941][ T4978] ? stack_depot_save_flags+0x33/0x7f0 [ 1792.075404][ T4978] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1792.081245][ T4978] seq_read_iter+0xa4/0xca0 [ 1792.085749][ T4978] ? ima_calc_file_hash+0x40f/0x890 [ 1792.090940][ T4978] ? ima_collect_measurement+0x51b/0xa00 [ 1792.096567][ T4978] ? process_measurement+0x1272/0x1c10 [ 1792.102031][ T4978] ? ima_file_check+0xdc/0x130 [ 1792.106791][ T4978] ? __asan_memset+0x22/0x50 [ 1792.111376][ T4978] ? kernfs_fop_read_iter+0x144/0x6a0 [ 1792.116842][ T4978] __kernel_read+0x4ca/0x960 [ 1792.121428][ T4978] ? __pfx___kernel_read+0x10/0x10 [ 1792.126539][ T4978] ? rcu_is_watching+0x16/0xb0 [ 1792.131297][ T4978] integrity_kernel_read+0x89/0xd0 [ 1792.136407][ T4978] ? __pfx_integrity_kernel_read+0x10/0x10 [ 1792.142224][ T4978] ? __kmalloc_cache_noprof+0x148/0x600 [ 1792.147779][ T4978] ? ima_calc_file_hash+0x40f/0x890 [ 1792.152981][ T4978] ? ima_calc_file_hash+0x40f/0x890 [ 1792.158187][ T4978] ima_calc_file_hash+0x451/0x890 [ 1792.163217][ T4978] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 1792.168774][ T4978] ? kernfs_iop_getattr+0x320/0x450 [ 1792.173977][ T4978] ima_collect_measurement+0x51b/0xa00 [ 1792.179438][ T4978] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1792.185419][ T4978] ? kernfs_root+0x1c/0x230 [ 1792.189916][ T4978] ? kernfs_root+0x1c/0x230 [ 1792.194420][ T4978] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1792.199961][ T4978] process_measurement+0x1272/0x1c10 [ 1792.205245][ T4978] ? __pfx_process_measurement+0x10/0x10 [ 1792.210874][ T4978] ? rcu_is_watching+0x16/0xb0 [ 1792.215634][ T4978] ? trace_contention_end+0x3d/0x140 [ 1792.220927][ T4978] ? kernfs_fop_open+0xb0b/0xd20 [ 1792.225936][ T4978] ima_file_check+0xdc/0x130 [ 1792.230522][ T4978] ? file_ra_state_init+0x3d/0xc0 [ 1792.235541][ T4978] ? __pfx_ima_file_check+0x10/0x10 [ 1792.240736][ T4978] security_file_post_open+0xb3/0x260 [ 1792.246111][ T4978] path_openat+0x14e9/0x1da0 [ 1792.250704][ T4978] do_file_open+0x23e/0x4a0 [ 1792.255203][ T4978] ? __pfx_do_file_open+0x10/0x10 [ 1792.260229][ T4978] ? _raw_spin_unlock+0x28/0x50 [ 1792.265073][ T4978] ? alloc_fd+0x6af/0x760 [ 1792.269400][ T4978] do_sys_openat2+0x115/0x200 [ 1792.274078][ T4978] ? __pfx_do_sys_openat2+0x10/0x10 [ 1792.279273][ T4978] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 1792.284747][ T4978] __x64_sys_openat+0x138/0x170 [ 1792.289597][ T4978] do_syscall_64+0x166/0x520 [ 1792.294182][ T4978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.300238][ T4978] ? clear_bhb_loop+0x70/0xc0 [ 1792.304908][ T4978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.310794][ T4978] RIP: 0033:0x7fd76b8a7407 [ 1792.315203][ T4978] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1792.334803][ T4978] RSP: 002b:00007ffc79948b50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1792.343220][ T4978] RAX: ffffffffffffffda RBX: 00007fd76c00e880 RCX: 00007fd76b8a7407 [ 1792.351181][ T4978] RDX: 0000000000080000 RSI: 00007ffc79948cd0 RDI: ffffffffffffff9c [ 1792.359317][ T4978] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1792.367277][ T4978] R10: 0000000000000000 R11: 0000000000000202 R12: 00005619c451a7f5 [ 1792.375238][ T4978] R13: 00005619c451a7f5 R14: 0000000000000001 R15: 0000000000000000 [ 1792.383208][ T4978] [ 1792.415271][ T33] audit: type=1800 audit(2000000704.351:1429): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4847 res=0 errno=-22 [ 1792.509286][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1793.288596][ T7483] Bluetooth: hci3: Opcode 0x0c03 failed: -110