last executing test programs: 8m48.419965941s ago: executing program 0 (id=1942): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x40, r1, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac05]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac08}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 8m48.26479456s ago: executing program 0 (id=1945): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x670a, 0x13100, 0x0, 0x1000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 8m47.96667651s ago: executing program 0 (id=1950): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a40003006272696467657fc5f71cbc0dcca572a319a2738ad3"], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 8m47.682744456s ago: executing program 0 (id=1952): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 8m47.558465756s ago: executing program 0 (id=1954): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x40, 0x700, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 8m46.664044692s ago: executing program 0 (id=1959): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="202901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8m46.17214795s ago: executing program 32 (id=1959): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="202901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8m17.844831774s ago: executing program 5 (id=2145): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) 8m17.67684008s ago: executing program 5 (id=2148): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x2c020400) r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000000200)) 8m17.359773517s ago: executing program 5 (id=2151): r0 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x21) flock(r0, 0x1) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8m17.20913825s ago: executing program 5 (id=2152): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 8m17.04377086s ago: executing program 5 (id=2155): io_uring_setup(0x6489, &(0x7f0000000240)={0x0, 0x2361, 0x800, 0x1, 0x8d}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x1, 0x7fff7ffd}]}) r1 = epoll_create(0x6) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m16.282644937s ago: executing program 5 (id=2165): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000016c0)=[{0x48, 0xc0, 0x38, 0x9}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x5d) write$ppp(r0, &(0x7f00000001c0)="492d39f11078ebe9a7", 0x9) 8m15.747674337s ago: executing program 33 (id=2165): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000016c0)=[{0x48, 0xc0, 0x38, 0x9}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x5d) write$ppp(r0, &(0x7f00000001c0)="492d39f11078ebe9a7", 0x9) 6m26.999658391s ago: executing program 1 (id=3032): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0xff}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207000000a1"], 0x0}, 0x0) 6m25.008578563s ago: executing program 1 (id=3046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 6m24.753388297s ago: executing program 1 (id=3050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'gre0\x00', 0x200}) 6m24.281151899s ago: executing program 1 (id=3054): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 6m24.061188017s ago: executing program 1 (id=3056): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x8000, 0xffffffff, 0xc3}, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000640)="180c4552c833a71dbd2856acd9e40e8e22e6cd41f172fb718d598a15f9acafc9ecf00db6b389e5c1c20d3980b7cd69ce51177964ed41cd5320877f7032e59091aa83343580c4ec22834b8ad6e92040bbd2467c6b283e2e1976ed46b72c6a61b5eaccf19c45faa2371026c3a4b7ab81e14b3730ad8ca64b196e6e0cee54e9e13fdeea8926bfe689c92087f45af2617790294538d36133a65ebf218a23843a1364b524b53b26612d891344325c9171b9dde02a248572b54964721e3a00dcd42f61f84b3817344f9aeaede2b85fc19802bbf3fc23", 0xd3) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 6m23.758807211s ago: executing program 1 (id=3059): r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000000}) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x100, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m23.062965876s ago: executing program 34 (id=3059): r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000000}) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x100, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.349738465s ago: executing program 7 (id=6231): creat(0x0, 0xd931d3864d39dcdb) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r1, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0xecc87000) 9.057474911s ago: executing program 4 (id=6232): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r0, &(0x7f0000000300)=""/187, 0xbb) 8.258002208s ago: executing program 4 (id=6237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.74150496s ago: executing program 4 (id=6243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x40, 0x0, 0x27) 6.24901176s ago: executing program 4 (id=6244): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0xf, 0xc}, {0x3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002980)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x1c, 0xc}}}, 0x24}}, 0x44050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x4d8}, 0x1, 0x0, 0x0, 0x20040010}, 0x54) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xffff}, {0x10}}}, 0x24}}, 0x20000004) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.705102575s ago: executing program 4 (id=6246): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000006480)) 4.933258364s ago: executing program 7 (id=6250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) dup3(r1, r0, 0x80000) 4.766982435s ago: executing program 3 (id=6252): r0 = syz_io_uring_setup(0x7fbc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2000, 0xf}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.755966356s ago: executing program 2 (id=6253): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0xb}}}, 0x24}}, 0x800) 4.643882185s ago: executing program 7 (id=6254): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 4.446277751s ago: executing program 3 (id=6255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 4.242113184s ago: executing program 6 (id=6257): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 4.022285754s ago: executing program 7 (id=6258): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.907482362s ago: executing program 2 (id=6259): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) 3.565417557s ago: executing program 2 (id=6260): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2.698361476s ago: executing program 4 (id=6261): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 2.697132691s ago: executing program 6 (id=6271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0xa}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @local, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xc, 0x11, 0xff, @empty, @empty, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x5, 0x100, @void}}}}}}}}}, 0x46) 2.69566333s ago: executing program 7 (id=6262): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1.955368362s ago: executing program 2 (id=6263): r0 = socket$inet6(0xa, 0x5, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r0, 0xfffffeff) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0x544}], 0x1, 0x0, 0x0) 1.565007518s ago: executing program 6 (id=6264): creat(&(0x7f0000000080)='./file0\x00', 0xac) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket(0x18, 0x3, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0]) 1.312317019s ago: executing program 3 (id=6265): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x1}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000340)=0x6) 856.793161ms ago: executing program 3 (id=6266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) 784.045244ms ago: executing program 2 (id=6267): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000007000046009d", @ANYBLOB="c770ee18914110e7c19b01ac039e"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 717.548636ms ago: executing program 6 (id=6268): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 452.867927ms ago: executing program 3 (id=6269): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = epoll_create1(0x80000) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa0000004}) r3 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x100, 0x10003, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 443.694971ms ago: executing program 6 (id=6270): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1, 0x3, 0xfffffffe, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x6, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) 195.332468ms ago: executing program 2 (id=6272): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 177.389688ms ago: executing program 6 (id=6273): ioperm(0x0, 0x8, 0x8000000000004) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 112.798013ms ago: executing program 7 (id=6274): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000280)={0x40, 0x8, 0x2, "50c5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 3 (id=6275): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1002}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x0, 0x10, 0x0, '\x00', {0x7ff, 0x7, 0x4, 0x2, r2, 0xffffffffffffffff, 0x1000, '\x00', 0x1, 0x80000002, 0xb4e7, 0x2, {0x80000008103, 0x8}, {0x8, 0x10001}, {0x100000000, 0x7}, {0x9, 0xa82}, 0x8000, 0xb, 0x4, 0x5}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1}, 0x50) kernel console output (not intermixed with test programs): committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 557.674222][T14791] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 558.347615][T14814] 9pnet_fd: Insufficient options for proto=fd [ 558.982193][ T38] audit: type=1400 audit(1758288769.314:1442): lsm=SMACK fn=smk_curacc_msq action=denied subject="w" object="_" requested=rw pid=14834 comm="syz.7.3634" ipc_key=0 [ 559.012947][T14839] 9pnet_fd: Insufficient options for proto=fd [ 559.428392][T14854] netlink: 'syz.3.3642': attribute type 3 has an invalid length. [ 563.433663][ T5849] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 563.597238][ T5849] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 563.597273][ T5849] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.597320][ T5849] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.597345][ T5849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.758294][T14932] binder: 14930:14932 ioctl c0306201 2000000001c0 returned -22 [ 563.867056][ T5849] usb 8-1: usb_control_msg returned -32 [ 563.867107][ T5849] usbtmc 8-1:16.0: can't read capabilities [ 563.962851][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3678'. [ 565.443921][ T5849] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 565.593756][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 565.596579][ T5849] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 565.596609][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 565.599706][ T5849] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 565.599734][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.599755][ T5849] usb 4-1: Product: syz [ 565.599770][ T5849] usb 4-1: Manufacturer: syz [ 565.599802][ T5849] usb 4-1: SerialNumber: syz [ 565.626620][ T5849] usb 4-1: config 0 descriptor?? [ 565.655454][ T5849] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 565.655493][ T5849] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 566.283008][ T5849] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 566.284632][ T5849] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 566.373826][ T1713] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 566.440829][ T6095] usb 8-1: USB disconnect, device number 5 [ 566.505898][ T5849] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 566.505924][ T5849] em28xx 4-1:0.0: No AC97 audio processor [ 566.553295][ T5849] usb 4-1: USB disconnect, device number 32 [ 566.553812][ T1713] usb 3-1: Using ep0 maxpacket: 8 [ 566.584360][ T1713] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 566.584391][ T1713] usb 3-1: config 0 has no interface number 0 [ 566.584427][ T1713] usb 3-1: config 0 interface 38 has no altsetting 0 [ 566.590698][ T5849] em28xx 4-1:0.0: Disconnecting em28xx [ 566.591500][ T1713] usb 3-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 566.591527][ T1713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.591548][ T1713] usb 3-1: Product: syz [ 566.591563][ T1713] usb 3-1: Manufacturer: syz [ 566.591578][ T1713] usb 3-1: SerialNumber: syz [ 566.655865][ T1713] usb 3-1: config 0 descriptor?? [ 566.666714][ T1713] usb-storage 3-1:0.38: USB Mass Storage device detected [ 566.668634][ T5849] em28xx 4-1:0.0: Freeing device [ 566.899432][ T5826] usb 3-1: USB disconnect, device number 40 [ 566.936669][ T6095] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 567.095482][ T6095] usb 8-1: Using ep0 maxpacket: 8 [ 567.105889][ T6095] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 567.105930][ T6095] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.105957][ T6095] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.105984][ T6095] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 567.106011][ T6095] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 567.106057][ T6095] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 567.106083][ T6095] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.126153][ T6095] usb 8-1: config 0 descriptor?? [ 567.305241][ T5851] Bluetooth: hci1: urb ffff88803c800000 submission failed (90) [ 567.358427][T15020] input: syz0 as /devices/virtual/input/input41 [ 567.383748][ T1713] usb 8-1: USB disconnect, device number 6 [ 568.414032][T15046] overlayfs: failed to clone lowerpath [ 568.622713][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.057815][T15068] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 569.186519][T15073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.926114][T15081] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 570.323645][ T1713] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 570.447213][ T38] audit: type=1326 audit(1758288780.794:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15088 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffaa6b6ae09 code=0x7ffc0000 [ 570.447350][ T38] audit: type=1326 audit(1758288780.794:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15088 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 570.450003][ T38] audit: type=1326 audit(1758288780.794:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15088 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 570.450518][ T38] audit: type=1326 audit(1758288780.794:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15088 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffaa6b6ae09 code=0x7ffc0000 [ 570.450932][ T38] audit: type=1326 audit(1758288780.794:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15088 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 570.451720][ T38] audit: type=1326 audit(1758288780.794:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15088 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 570.451770][ T38] audit: type=1326 audit(1758288780.794:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15088 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffaa6b6ae09 code=0x7ffc0000 [ 570.451804][ T38] audit: type=1326 audit(1758288780.794:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15088 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 570.451834][ T38] audit: type=1326 audit(1758288780.794:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15088 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 570.493595][ T1713] usb 4-1: Using ep0 maxpacket: 8 [ 570.533753][ T1713] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 570.533805][ T1713] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 570.533821][ T1713] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 570.533839][ T1713] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 570.533856][ T1713] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.533887][ T1713] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 570.533903][ T1713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.768628][ T38] audit: type=1326 audit(1758288780.794:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15088 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffaa6b6ae09 code=0x7ffc0000 [ 571.096006][ T1713] usb 4-1: usb_control_msg returned -32 [ 571.096042][ T1713] usbtmc 4-1:16.0: can't read capabilities [ 572.689936][T15134] 9pnet: p9_errstr2errno: server reported unknown error l [ 573.201596][ T5905] usb 4-1: USB disconnect, device number 33 [ 574.592691][T15184] netlink: 'syz.7.3784': attribute type 4 has an invalid length. [ 575.253711][ T1713] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 575.419671][ T1713] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 575.419703][ T1713] usb 8-1: config 0 interface 0 has no altsetting 0 [ 575.428839][ T1713] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 575.428874][ T1713] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 575.428897][ T1713] usb 8-1: Product: syz [ 575.428923][ T1713] usb 8-1: Manufacturer: syz [ 575.428940][ T1713] usb 8-1: SerialNumber: syz [ 575.447262][ T1713] usb 8-1: config 0 descriptor?? [ 575.667570][ T1713] usb 8-1: selecting invalid altsetting 0 [ 575.968195][T15228] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3803'. [ 575.995035][ T1713] usb 8-1: USB disconnect, device number 7 [ 576.422373][ T1713] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 576.489474][ T1713] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 576.700395][T15250] Invalid ELF header magic: != ELF [ 577.312918][T15271] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 577.813721][ T38] kauditd_printk_skb: 85 callbacks suppressed [ 577.813736][ T38] audit: type=1326 audit(1758288788.154:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15287 comm="syz.2.3826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f907b69ec29 code=0x0 [ 578.432337][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3829'. [ 578.807367][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.994823][ T5925] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 581.143728][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 581.146611][ T5925] usb 3-1: config 0 has no interfaces? [ 581.152912][ T5925] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 581.152941][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.152964][ T5925] usb 3-1: Product: syz [ 581.152979][ T5925] usb 3-1: Manufacturer: syz [ 581.152995][ T5925] usb 3-1: SerialNumber: syz [ 581.201044][ T5925] usb 3-1: config 0 descriptor?? [ 581.417419][ T5925] usb 3-1: USB disconnect, device number 41 [ 581.967626][T15357] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3853'. [ 582.153791][ T5905] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 582.303581][ T5905] usb 8-1: Using ep0 maxpacket: 16 [ 582.306394][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.306428][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.306452][ T5905] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 582.306496][ T5905] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 582.306521][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.342925][ T5925] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 582.391701][ T5905] usb 8-1: config 0 descriptor?? [ 582.497209][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.497244][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.497266][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 582.497364][ T5925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 582.497389][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.584969][ T5925] usb 3-1: config 0 descriptor?? [ 582.940847][ T5905] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 583.127164][ T5925] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 583.215949][ T5905] shield 0003:0955:7214.0030: Registered Thunderstrike controller [ 583.218163][ T5905] shield 0003:0955:7214.0030: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 583.319034][ T5905] usb 8-1: USB disconnect, device number 8 [ 583.332052][ T5925] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 583.350121][ T5925] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 583.350344][ T5925] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 583.352427][ T5925] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 583.785858][ T5926] usb 3-1: USB disconnect, device number 42 [ 584.084942][T15396] pim6reg1: entered promiscuous mode [ 584.084972][T15396] pim6reg1: entered allmulticast mode [ 584.258256][T15385] kexec: Could not allocate control_code_buffer [ 585.027626][T15408] lo speed is unknown, defaulting to 1000 [ 586.020258][T15429] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3883'. [ 586.830563][T15443] overlayfs: workdir and upperdir must reside under the same mount [ 587.938984][ T8090] Bluetooth: hci1: Frame reassembly failed (-84) [ 587.939595][ T8090] Bluetooth: hci1: Frame reassembly failed (-84) [ 588.111178][T15475] overlayfs: failed to clone lowerpath [ 588.192080][T15478] veth1_to_bond: entered allmulticast mode [ 588.192303][T15478] veth1_to_bond: entered promiscuous mode [ 588.197275][T15476] veth1_to_bond: left promiscuous mode [ 588.197501][T15476] veth1_to_bond: left allmulticast mode [ 588.347146][ T5926] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 588.493723][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 588.516108][ T5926] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 588.516136][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.516155][ T5926] usb 4-1: Product: syz [ 588.516272][ T5926] usb 4-1: Manufacturer: syz [ 588.516559][ T5926] usb 4-1: SerialNumber: syz [ 588.524503][ T5926] usb 4-1: config 0 descriptor?? [ 588.786594][ T5926] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 589.390448][ T5926] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 589.399738][ T5926] usb 4-1: USB disconnect, device number 34 [ 589.933835][ T5851] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 593.217206][ T5851] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 594.070325][T15600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.094333][T15600] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 594.245749][T15603] input: syz0 as /devices/virtual/input/input43 [ 594.823709][ T5849] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 594.983423][ T5849] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 594.983694][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.983718][ T5849] usb 3-1: Product: syz [ 594.983734][ T5849] usb 3-1: Manufacturer: syz [ 594.983750][ T5849] usb 3-1: SerialNumber: syz [ 595.011897][ T5849] usb 3-1: config 0 descriptor?? [ 595.943729][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 596.283379][ T5849] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 596.283413][ T5849] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 596.283926][ T5849] asix 3-1:0.0: probe with driver asix failed with error -71 [ 596.307562][ T5849] usb 3-1: USB disconnect, device number 43 [ 596.385458][ T5905] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 596.543899][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 596.546720][ T5905] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 596.546746][ T5905] usb 4-1: config 0 has no interface number 0 [ 596.546804][ T5905] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.546832][ T5905] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.546873][ T5905] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 596.546896][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.615742][ T5905] usb 4-1: config 0 descriptor?? [ 597.261696][ T5905] uclogic 0003:28BD:0071.0032: pen parameters not found [ 597.261726][ T5905] uclogic 0003:28BD:0071.0032: interface is invalid, ignoring [ 597.318301][T15677] overlayfs: failed to clone upperpath [ 597.488362][ T5905] usb 4-1: USB disconnect, device number 35 [ 598.013794][ T5926] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 598.166440][ T5926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.166492][ T5926] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 598.166516][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.179143][ T5926] usb 8-1: config 0 descriptor?? [ 598.408284][ T5926] usbhid 8-1:0.0: can't add hid device: -71 [ 598.408425][ T5926] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 598.414290][ T5926] usb 8-1: USB disconnect, device number 9 [ 598.894904][ T5925] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 598.936337][T15714] bond0: (slave dummy0): Releasing backup interface [ 599.044548][T15714] bridge_slave_0: left allmulticast mode [ 599.044584][T15714] bridge_slave_0: left promiscuous mode [ 599.045086][T15714] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.073591][ T5925] usb 8-1: Using ep0 maxpacket: 16 [ 599.077180][ T5925] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.077230][ T5925] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 599.077254][ T5925] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.119061][ T5925] usb 8-1: config 0 descriptor?? [ 599.197789][T15714] bridge_slave_1: left allmulticast mode [ 599.197833][T15714] bridge_slave_1: left promiscuous mode [ 599.198123][T15714] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.327595][T15714] bond0: (slave bond_slave_0): Releasing backup interface [ 599.448574][T15714] bond0: (slave bond_slave_1): Releasing backup interface [ 599.548613][ T5925] mcp2221 0003:04D8:00DD.0033: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 599.611988][T15714] team0: Port device team_slave_0 removed [ 599.709610][T15714] team0: Port device team_slave_1 removed [ 599.720056][T15714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.722954][T15714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.776980][T15714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.777015][T15714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.951003][ T5925] usb 8-1: USB disconnect, device number 10 [ 601.017672][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4023'. [ 601.483543][ T8086] nci: nci_rsp_packet: unknown rsp opcode 0x15 [ 601.958221][T15793] netlink: 'syz.4.4032': attribute type 13 has an invalid length. [ 601.958248][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4032'. [ 601.959255][T15793] netlink: 'syz.4.4032': attribute type 13 has an invalid length. [ 601.959286][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4032'. [ 602.393739][ T5826] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 602.553677][ T5826] usb 8-1: Using ep0 maxpacket: 32 [ 602.556731][ T5826] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 602.556760][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.601142][ T5826] usb 8-1: config 0 descriptor?? [ 602.619765][ T5826] gspca_main: sq930x-2.14.0 probing 041e:403c [ 603.933825][ T5826] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 603.933935][ T5826] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 603.937369][ T5826] usb 8-1: USB disconnect, device number 11 [ 604.240906][T15832] netlink: 'syz.4.4048': attribute type 12 has an invalid length. [ 604.240938][T15832] netlink: 'syz.4.4048': attribute type 29 has an invalid length. [ 604.240953][T15832] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4048'. [ 604.240982][T15832] netlink: 'syz.4.4048': attribute type 1 has an invalid length. [ 604.240996][T15832] netlink: 'syz.4.4048': attribute type 2 has an invalid length. [ 604.241009][T15832] netlink: 39 bytes leftover after parsing attributes in process `syz.4.4048'. [ 604.933723][T15854] 9pnet_fd: Insufficient options for proto=fd [ 604.963714][ T5926] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 605.096145][ T38] audit: type=1326 audit(1758288815.444:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15858 comm="syz.4.4062" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffaa6bcec29 code=0x0 [ 605.124885][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 605.127485][ T5926] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 605.127509][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.127529][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.131532][ T5926] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.131559][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.131580][ T5926] usb 3-1: Product: syz [ 605.131594][ T5926] usb 3-1: Manufacturer: syz [ 605.131608][ T5926] usb 3-1: SerialNumber: syz [ 605.628294][ T5926] usb 3-1: 0:2 : does not exist [ 606.399803][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4073'. [ 606.450129][T15886] veth1_macvtap: left promiscuous mode [ 606.488037][ T5926] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 606.568919][ T5926] usb 3-1: USB disconnect, device number 44 [ 607.339765][T15904] kernel read not supported for file /file1 (pid: 15904 comm: syz.2.4082) [ 607.349828][ T38] audit: type=1800 audit(1758288817.684:1540): pid=15904 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.4082" name="file1" dev="mqueue" ino=55873 res=0 errno=0 [ 607.724747][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4087'. [ 608.294031][ T5905] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 608.385080][T15935] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4096'. [ 608.428596][T15935] gretap0: entered promiscuous mode [ 608.453773][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 608.456491][ T5905] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.456522][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 608.456556][ T5905] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 608.456578][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.499417][T15935] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4096'. [ 608.499602][T15935] 0{X: renamed from gretap0 [ 608.531204][ T5905] usb 4-1: config 0 descriptor?? [ 608.559292][T15935] 0{X: left promiscuous mode [ 608.559325][T15935] 0{X: entered allmulticast mode [ 608.562267][T15935] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 609.043851][ T5905] nzxt-smart2 0003:1E71:2009.0034: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 609.420151][ T1713] usb 4-1: USB disconnect, device number 36 [ 609.523962][ T5926] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 609.674037][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 609.676704][ T5926] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 609.676730][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.679684][ T5926] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.679713][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.679734][ T5926] usb 3-1: Product: syz [ 609.679750][ T5926] usb 3-1: Manufacturer: syz [ 609.679764][ T5926] usb 3-1: SerialNumber: syz [ 610.013797][ T5926] usb 3-1: 0:2 : does not exist [ 610.031342][ T5926] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 610.135957][ T5926] usb 3-1: USB disconnect, device number 45 [ 613.607816][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031b8cc00: rx timeout, send abort [ 613.608039][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805edcc400: rx timeout, send abort [ 613.608245][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031b8cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 613.608387][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805edcc400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 613.743644][ T1713] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 613.904058][ T1713] usb 3-1: Using ep0 maxpacket: 16 [ 613.908048][ T1713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.908079][ T1713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.908119][ T1713] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 613.908142][ T1713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.932845][ T1713] usb 3-1: config 0 descriptor?? [ 614.750149][T16058] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4148'. [ 614.802715][ T1713] letsketch 0003:6161:4D15.0035: Device info: ఁ [ 615.005435][ T1713] letsketch 0003:6161:4D15.0035: Device info: 擃 [ 615.233215][ T38] audit: type=1326 audit(1758288825.574:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16069 comm="syz.6.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 615.266250][ T1713] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 615.266341][ T1713] letsketch 0003:6161:4D15.0035: probe with driver letsketch failed with error -71 [ 615.292139][ T1713] usb 3-1: USB disconnect, device number 46 [ 615.295483][ T38] audit: type=1326 audit(1758288825.574:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16069 comm="syz.6.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 615.295545][ T38] audit: type=1326 audit(1758288825.644:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16069 comm="syz.6.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 615.295609][ T38] audit: type=1326 audit(1758288825.644:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16069 comm="syz.6.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 615.295660][ T38] audit: type=1326 audit(1758288825.644:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16069 comm="syz.6.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 615.324919][ T38] audit: type=1326 audit(1758288825.674:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16069 comm="syz.6.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 615.324985][ T38] audit: type=1326 audit(1758288825.674:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16069 comm="syz.6.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 616.001485][ T5849] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 616.001522][ T5849] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 616.001547][ T5849] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 616.001578][ T5849] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 616.001602][ T5849] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 616.001625][ T5849] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 616.001647][ T5849] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 616.001682][ T5849] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 616.001704][ T5849] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 616.001726][ T5849] hid-generic 0003:0004:0000.0036: unknown main item tag 0x0 [ 616.135446][ T5849] hid-generic 0003:0004:0000.0036: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 616.250003][T16095] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4166'. [ 618.243719][ T5826] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 618.424888][ T5826] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 618.424919][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.431741][ T5826] usb 8-1: config 0 descriptor?? [ 618.440907][ T5826] cp210x 8-1:0.0: cp210x converter detected [ 618.856797][ T5826] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 618.914337][ T5826] usb 8-1: cp210x converter now attached to ttyUSB0 [ 619.081881][ T6095] usb 8-1: USB disconnect, device number 12 [ 619.103834][ T6095] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 619.172983][T16150] 9pnet_fd: Insufficient options for proto=fd [ 619.232569][ T6095] cp210x 8-1:0.0: device disconnected [ 620.699705][T16187] kvm: user requested TSC rate below hardware speed [ 621.270266][ T38] audit: type=1326 audit(1758288831.614:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16208 comm="syz.2.4214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f907b69ec29 code=0x0 [ 621.367145][T16215] nbd: device at index 7 is going down [ 622.104851][T16241] overlayfs: failed to clone upperpath [ 622.166875][T16244] overlayfs: failed to clone upperpath [ 622.229222][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4231'. [ 622.414506][ T5905] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 622.573729][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 622.576448][ T5905] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 622.576508][ T5905] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 622.576531][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 622.576557][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 622.576581][ T5905] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.576625][ T5905] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 622.576648][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.876105][ T5905] usb 4-1: usb_control_msg returned -32 [ 622.876148][ T5905] usbtmc 4-1:16.0: can't read capabilities [ 622.913680][ T5826] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 623.086370][ T5826] usb 3-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 623.086402][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.092403][ T5826] usb 3-1: config 0 descriptor?? [ 623.761841][ T5826] usb 3-1: USB disconnect, device number 47 [ 625.208062][ T6095] usb 4-1: USB disconnect, device number 37 [ 625.515116][T16309] bond0: (slave bridge_slave_1): Releasing backup interface [ 625.664629][T16309] bond0: (slave bond_slave_0): Releasing backup interface [ 625.742950][T16309] bond0: (slave bond_slave_1): Releasing backup interface [ 625.875380][T16309] team0: Port device team_slave_0 removed [ 625.911258][T16309] team0: Port device team_slave_1 removed [ 625.912248][T16309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.912278][T16309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.971957][T16309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.971989][T16309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.884771][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.653873][ T6095] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 630.804839][ T6095] usb 8-1: Using ep0 maxpacket: 8 [ 630.830265][ T6095] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.830328][ T6095] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 630.830354][ T6095] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.905689][ T6095] usb 8-1: config 0 descriptor?? [ 630.941035][ T6095] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 631.289721][T16424] netlink: 'syz.4.4305': attribute type 1 has an invalid length. [ 631.290281][T16424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.173752][ T6095] gspca_vc032x: reg_w err -71 [ 632.173852][ T6095] vc032x 8-1:0.0: probe with driver vc032x failed with error -71 [ 632.226479][ T6095] usb 8-1: USB disconnect, device number 13 [ 632.301641][ T38] audit: type=1326 audit(1758288842.644:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16436 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa395ae09 code=0x7ffc0000 [ 632.303281][ T38] audit: type=1326 audit(1758288842.644:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16436 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 632.348183][ T38] audit: type=1326 audit(1758288842.694:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16436 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 632.351386][ T38] audit: type=1326 audit(1758288842.694:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16436 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa395ae09 code=0x7ffc0000 [ 632.353080][ T38] audit: type=1326 audit(1758288842.694:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16436 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa395ae09 code=0x7ffc0000 [ 632.422218][ T38] audit: type=1326 audit(1758288842.764:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16436 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 632.423043][ T38] audit: type=1326 audit(1758288842.764:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16436 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa395ae09 code=0x7ffc0000 [ 632.467093][ T38] audit: type=1326 audit(1758288842.814:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16436 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa395ae09 code=0x7ffc0000 [ 632.468310][ T38] audit: type=1326 audit(1758288842.814:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16436 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 632.494042][ T38] audit: type=1326 audit(1758288842.834:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16436 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa395ae09 code=0x7ffc0000 [ 633.491787][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4324'. [ 633.491826][T16470] netlink: 'syz.4.4324': attribute type 30 has an invalid length. [ 633.570338][ T8089] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.570555][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4324'. [ 633.570587][T16470] netlink: 'syz.4.4324': attribute type 30 has an invalid length. [ 633.570817][ T8089] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.883733][ T8089] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.883806][ T8089] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.811043][T16498] pim6reg: entered allmulticast mode [ 637.798723][T16558] overlayfs: failed to clone lowerpath [ 639.152017][T16592] netlink: 'syz.3.4375': attribute type 1 has an invalid length. [ 639.268313][T16592] bond1: entered promiscuous mode [ 639.268343][T16592] bond1: entered allmulticast mode [ 639.331184][T16594] bridge0: entered promiscuous mode [ 639.331217][T16594] bridge0: entered allmulticast mode [ 639.374773][T16594] bond1: (slave bridge0): making interface the new active one [ 639.375588][T16594] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 639.543812][T13805] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 639.696934][T13805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.696998][T13805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.697027][T13805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.697051][T13805] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.697097][T13805] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 639.697121][T13805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.727145][T13805] usb 3-1: config 0 descriptor?? [ 640.243594][ T5849] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 640.362535][T13805] usb 3-1: string descriptor 0 read error: -71 [ 640.366169][T13805] uclogic 0003:5543:006E.0038: failed retrieving string descriptor #200: -71 [ 640.366243][T13805] uclogic 0003:5543:006E.0038: failed retrieving pen parameters: -71 [ 640.366265][T13805] uclogic 0003:5543:006E.0038: failed probing pen v2 parameters: -71 [ 640.366325][T13805] uclogic 0003:5543:006E.0038: failed probing parameters: -71 [ 640.366472][T13805] uclogic 0003:5543:006E.0038: probe with driver uclogic failed with error -71 [ 640.393702][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 640.397567][ T5849] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.397596][ T5849] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.397618][ T5849] usb 4-1: config 0 interface 0 has no altsetting 0 [ 640.397650][ T5849] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 640.397672][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.413985][T13805] usb 3-1: USB disconnect, device number 48 [ 640.489762][ T5849] usb 4-1: config 0 descriptor?? [ 640.985101][ T5849] hid_parser_main: 8 callbacks suppressed [ 640.985128][ T5849] nzxt-smart2 0003:1E71:2009.0039: unknown main item tag 0x0 [ 640.985162][ T5849] nzxt-smart2 0003:1E71:2009.0039: unknown main item tag 0x0 [ 640.985189][ T5849] nzxt-smart2 0003:1E71:2009.0039: unknown main item tag 0x0 [ 640.985216][ T5849] nzxt-smart2 0003:1E71:2009.0039: unknown main item tag 0x0 [ 640.985243][ T5849] nzxt-smart2 0003:1E71:2009.0039: unknown main item tag 0x0 [ 641.041094][ T5849] nzxt-smart2 0003:1E71:2009.0039: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 641.217744][T13805] usb 4-1: USB disconnect, device number 38 [ 641.851376][T16659] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4402'. [ 642.329945][T16668] lo speed is unknown, defaulting to 1000 [ 643.844593][T16696] overlayfs: failed to clone upperpath [ 644.671695][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4429'. [ 644.742311][T16730] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4431'. [ 645.037098][ T5905] Process accounting resumed [ 645.120469][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4438'. [ 647.704971][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4475'. [ 648.885351][ T5826] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 648.992325][T16870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.048277][ T5826] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 649.048311][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.048332][ T5826] usb 8-1: Product: syz [ 649.048347][ T5826] usb 8-1: Manufacturer: syz [ 649.048425][ T5826] usb 8-1: SerialNumber: syz [ 649.083657][ T5826] usb 8-1: config 0 descriptor?? [ 649.103789][T16872] netlink: 'syz.2.4493': attribute type 1 has an invalid length. [ 649.116424][ T5826] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 649.264925][T16872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 649.490300][T16875] bond1: (slave veth3): Enslaving as an active interface with a down link [ 649.529083][ T38] kauditd_printk_skb: 61 callbacks suppressed [ 649.529103][ T38] audit: type=1326 audit(1758288859.874:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16878 comm="syz.4.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 649.533265][ T38] audit: type=1326 audit(1758288859.874:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16878 comm="syz.4.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 649.584353][ T38] audit: type=1326 audit(1758288859.904:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16878 comm="syz.4.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 649.584411][ T38] audit: type=1326 audit(1758288859.904:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16878 comm="syz.4.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 649.584453][ T38] audit: type=1326 audit(1758288859.904:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16878 comm="syz.4.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 649.598203][ T38] audit: type=1326 audit(1758288859.934:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16878 comm="syz.4.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 649.598344][ T38] audit: type=1326 audit(1758288859.934:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16878 comm="syz.4.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 649.598395][ T38] audit: type=1326 audit(1758288859.934:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16878 comm="syz.4.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 649.599901][ T38] audit: type=1326 audit(1758288859.944:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16878 comm="syz.4.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 649.599955][ T38] audit: type=1326 audit(1758288859.944:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16878 comm="syz.4.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 649.823025][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4497'. [ 650.343611][ T1713] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 650.406876][ T5826] gspca_sunplus: reg_r err -71 [ 650.406978][ T5826] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 650.413168][ T5826] usb 8-1: USB disconnect, device number 14 [ 650.496188][ T1713] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.496215][ T1713] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 650.498698][ T1713] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 650.498725][ T1713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 650.498745][ T1713] usb 3-1: SerialNumber: syz [ 650.779684][ T1713] usb 3-1: 0:2 : does not exist [ 650.840713][ T1713] usb 3-1: USB disconnect, device number 49 [ 651.663339][T16914] KVM: debugfs: duplicate directory 16914-4 [ 652.317791][T16927] hsr0: entered promiscuous mode [ 652.320766][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4515'. [ 652.367669][T16927] hsr_slave_0: left promiscuous mode [ 652.414965][T16927] hsr_slave_1: left promiscuous mode [ 652.608838][T16927] hsr0 (unregistering): left promiscuous mode [ 653.496526][T16955] netlink: 'syz.3.4528': attribute type 1 has an invalid length. [ 653.620312][T16955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 653.694117][T16957] bond2: (slave geneve2): making interface the new active one [ 653.701080][T16957] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 653.992640][T16969] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4534'. [ 654.083794][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4533'. [ 654.300941][T16963] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.301955][T16963] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.871738][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4542'. [ 655.183573][T13805] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 655.338714][T13805] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 655.338744][T13805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.341495][T16963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.349168][T13805] usb 4-1: config 0 descriptor?? [ 655.364570][T13805] cp210x 4-1:0.0: cp210x converter detected [ 655.426322][T16963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.793124][T13805] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 655.806917][T13805] usb 4-1: cp210x converter now attached to ttyUSB0 [ 656.005678][ T6095] usb 4-1: USB disconnect, device number 39 [ 656.023185][ T6095] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 656.175072][ T6095] cp210x 4-1:0.0: device disconnected [ 656.913685][ T8090] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.933234][ T8090] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.119804][ T8090] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.119858][ T8090] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.447160][ T5826] kernel read not supported for file /admmidi2 (pid: 5826 comm: kworker/0:3) [ 658.493256][T17071] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4576'. [ 658.537181][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4576'. [ 658.883244][ C0] vkms_vblank_simulate: vblank timer overrun [ 660.867521][T17118] netlink: 208252 bytes leftover after parsing attributes in process `syz.3.4596'. [ 660.867567][T17118] netlink: 'syz.3.4596': attribute type 1 has an invalid length. [ 660.867583][T17118] netlink: 'syz.3.4596': attribute type 2 has an invalid length. [ 660.867597][T17118] netlink: 'syz.3.4596': attribute type 3 has an invalid length. [ 660.867611][T17118] netlink: 'syz.3.4596': attribute type 4 has an invalid length. [ 660.903017][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4597'. [ 661.196799][T17127] 9pnet: p9_errstr2errno: server reported unknown error @cF [ 661.773683][ T6095] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 661.931071][ T6095] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.931108][ T6095] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.931132][ T6095] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 661.931178][ T6095] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 661.931203][ T6095] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.001389][ T6095] usb 8-1: config 0 descriptor?? [ 662.469077][ T6095] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 663.749175][ C0] plantronics 0003:047F:FFFF.003A: usb_submit_urb(ctrl) failed: -1 [ 663.767930][T17186] input: syz0 as /devices/virtual/input/input44 [ 664.535544][ T6095] usb 8-1: USB disconnect, device number 15 [ 665.305706][T17220] input: syz1 as /devices/virtual/input/input45 [ 665.960368][T17235] sg_read: process 611 (syz.7.4642) changed security contexts after opening file descriptor, this is not allowed. [ 666.808907][ T5851] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 666.813920][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 666.829194][ T5826] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 666.829221][ T5826] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 667.119382][ T5851] Bluetooth: hci5: unexpected event for opcode 0x0c13 [ 668.033633][ T5849] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 668.198377][ T5849] usb 4-1: unable to get BOS descriptor or descriptor too short [ 668.200029][ T5849] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.221804][ T5849] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.221831][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.221849][ T5849] usb 4-1: Product: syz [ 668.221862][ T5849] usb 4-1: Manufacturer: syz [ 668.221875][ T5849] usb 4-1: SerialNumber: syz [ 668.607520][ T5849] usb 4-1: USB disconnect, device number 40 [ 668.895285][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 668.895358][ T5826] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 668.895376][ T5826] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 669.722212][T17329] input: syz1 as /devices/virtual/input/input46 [ 670.608565][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4684'. [ 671.003695][ T6095] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 671.164598][ T6095] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 671.164630][ T6095] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.164651][ T6095] usb 8-1: Product: syz [ 671.164668][ T6095] usb 8-1: Manufacturer: syz [ 671.164683][ T6095] usb 8-1: SerialNumber: syz [ 671.220983][ T6095] usb 8-1: config 0 descriptor?? [ 672.489419][ T6095] usb 8-1: f81604_read: reg: 100e failed: -EPROTO [ 672.541684][ T6095] usb 8-1: f81604_read: reg: 200f failed: -EPROTO [ 672.558382][ T6095] usb 8-1: USB disconnect, device number 16 [ 672.606774][ T6095] usb 8-1: f81604_read: reg: 100f failed: -ENODEV [ 672.715553][ T6095] usb 8-1: f81604_read: reg: 200f failed: -ENODEV [ 673.216936][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 673.257756][ T5826] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 673.258087][ T5826] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 674.197743][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4714'. [ 676.848758][ T6066] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.055960][ T6066] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.174260][ T6066] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.174315][ T6066] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.750820][T17496] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4725'. [ 678.894221][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 678.897802][ T5826] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 678.897828][ T5826] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 679.793760][ T5826] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 679.944011][ T5826] usb 3-1: Using ep0 maxpacket: 32 [ 679.947140][ T5826] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 679.947167][ T5826] usb 3-1: config 0 has no interface number 0 [ 679.947219][ T5826] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 679.947249][ T5826] usb 3-1: config 0 interface 85 has no altsetting 0 [ 680.010838][ T5826] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 680.010870][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.010891][ T5826] usb 3-1: Product: syz [ 680.010908][ T5826] usb 3-1: Manufacturer: syz [ 680.010923][ T5826] usb 3-1: SerialNumber: syz [ 680.047861][ T5826] usb 3-1: config 0 descriptor?? [ 680.707955][ T5826] appletouch 3-1:0.85: Geyser mode initialized. [ 680.711332][ T5826] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input47 [ 680.903558][ T5905] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 680.943590][T17455] usb 3-1: USB disconnect, device number 50 [ 680.943780][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 681.056062][ T5905] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 681.056098][ T5905] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 681.056139][ T5905] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 681.056165][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.516783][T17455] appletouch 3-1:0.85: input: appletouch disconnected [ 681.938571][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4755'. [ 682.180837][ T5905] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 682.218261][ T5905] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input48 [ 682.617113][ T5905] input: failed to attach handler kbd to device input48, error: -5 [ 682.761815][ T5905] usb 8-1: USB disconnect, device number 17 [ 682.823792][T17452] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 682.983804][T17452] usb 4-1: Using ep0 maxpacket: 16 [ 682.989417][T17452] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 682.989442][T17452] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.989462][T17452] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.992945][T17452] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 682.992973][T17452] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.992992][T17452] usb 4-1: Product: syz [ 682.993006][T17452] usb 4-1: Manufacturer: syz [ 682.993020][T17452] usb 4-1: SerialNumber: syz [ 683.481539][T17452] usb 4-1: 0:2 : does not exist [ 684.132651][T17452] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 684.242471][T17452] usb 4-1: USB disconnect, device number 41 [ 684.394460][T17649] loop2: detected capacity change from 0 to 7 [ 684.397322][T17649] loop2: [ 684.397355][T17649] loop2: partition table partially beyond EOD, truncated [ 686.756187][T17716] overlayfs: failed to clone upperpath [ 688.055184][T17464] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 688.205752][T17464] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.205806][T17464] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 688.205834][T17464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.230727][T17464] usb 4-1: config 0 descriptor?? [ 688.493351][T17464] usbhid 4-1:0.0: can't add hid device: -71 [ 688.493685][T17464] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 688.501486][T17464] usb 4-1: USB disconnect, device number 42 [ 688.619408][T17764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4824'. [ 688.993849][T17464] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 689.155198][T17464] usb 4-1: Using ep0 maxpacket: 16 [ 689.160352][T17464] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.160402][T17464] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 689.160426][T17464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.173888][T17464] usb 4-1: config 0 descriptor?? [ 689.642356][T17464] kye 0003:0458:5016.003B: control desc unexpectedly large [ 689.704807][T17464] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.003B/input/input49 [ 689.810310][T17464] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.003B/input/input50 [ 690.062960][T17464] kye 0003:0458:5016.003B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 690.420114][T17455] usb 4-1: USB disconnect, device number 43 [ 690.746296][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4842'. [ 690.813607][T17453] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 690.913699][T17809] erspan0: left promiscuous mode [ 690.973870][T17453] usb 8-1: Using ep0 maxpacket: 8 [ 691.472233][T17453] usb 8-1: unable to get BOS descriptor or descriptor too short [ 691.473274][T17453] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 691.473305][T17453] usb 8-1: can't read configurations, error -71 [ 691.665266][T17829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4847'. [ 693.942403][T17845] overlayfs: failed to clone lowerpath [ 694.293111][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4857'. [ 694.634000][T17835] bridge_slave_0: entered promiscuous mode [ 694.634872][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4850'. [ 694.634926][T17836] bridge_slave_0: left promiscuous mode [ 694.635089][ T8090] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.635121][ T8090] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.636414][ T8090] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.636447][ T8090] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.640692][ T8090] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.640725][ T8090] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.640767][ T8090] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.640795][ T8090] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.868205][T17860] netlink: 'syz.2.4859': attribute type 10 has an invalid length. [ 694.889762][T17860] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.896889][T17860] bond0: (slave team0): Enslaving as an active interface with an up link [ 695.347958][T17877] loop6: detected capacity change from 0 to 7 [ 695.356022][T17877] Dev loop6: unable to read RDB block 7 [ 695.356056][T17877] loop6: AHDI p1 p2 p3 p4 [ 695.356084][T17877] loop6: partition table partially beyond EOD, truncated [ 695.356223][T17877] loop6: p1 start 926365495 is beyond EOD, truncated [ 695.356241][T17877] loop6: p2 size 47 extends beyond EOD, truncated [ 695.398824][T17877] loop6: p3 start 1886353253 is beyond EOD, truncated [ 696.243578][ T5845] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 696.403636][ T5845] usb 8-1: Using ep0 maxpacket: 16 [ 696.408312][ T5845] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 696.408338][ T5845] usb 8-1: config 0 has no interface number 0 [ 696.415771][ T5845] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 696.415804][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.415824][ T5845] usb 8-1: Product: syz [ 696.415838][ T5845] usb 8-1: Manufacturer: syz [ 696.415852][ T5845] usb 8-1: SerialNumber: syz [ 696.449578][ T8087] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.453748][ T8090] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.453802][ T8090] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.453847][ T8090] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.454720][ T5845] usb 8-1: config 0 descriptor?? [ 696.469249][ T5845] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 697.485890][T17918] input: syz1 as /devices/virtual/input/input51 [ 697.931435][ T5845] gspca_spca1528: reg_w err -71 [ 697.931617][ T5845] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 697.936603][ T5845] usb 8-1: USB disconnect, device number 20 [ 699.198390][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4900'. [ 699.289608][T17953] 8021q: adding VLAN 0 to HW filter on device bond3 [ 699.472090][T17959] tipc: Failed to remove unknown binding: 66,1,1/0:2791325080/2791325082 [ 699.472137][T17959] tipc: Failed to remove unknown binding: 66,1,1/0:2791325080/2791325082 [ 699.537476][T17957] 8021q: adding VLAN 0 to HW filter on device bond3 [ 699.537997][T17957] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 699.539212][T17957] bond3: (slave vti0): Error -95 calling set_mac_address [ 700.353949][T13805] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 700.506491][T13805] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.506518][T13805] usb 8-1: config 0 has no interface number 0 [ 700.510359][T13805] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 700.510389][T13805] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.510404][T13805] usb 8-1: Product: syz [ 700.510414][T13805] usb 8-1: Manufacturer: syz [ 700.510424][T13805] usb 8-1: SerialNumber: syz [ 700.601516][T13805] usb 8-1: config 0 descriptor?? [ 700.818477][T13805] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 700.839428][T13805] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 700.839841][T13805] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 700.839905][T13805] usb 8-1: media controller created [ 700.928656][T13805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 701.026611][T13805] i2c i2c-3: ec100: i2c rd failed=-32 reg=33 [ 702.288938][T18014] netlink: 'syz.6.4925': attribute type 1 has an invalid length. [ 703.123526][T17465] usb 8-1: USB disconnect, device number 21 [ 703.331272][T18000] veth1_vlan: left allmulticast mode [ 703.989481][T18044] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 704.852145][T18000] bond1: left promiscuous mode [ 704.868804][T18000] bridge0: left promiscuous mode [ 705.091690][ T8087] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.091720][ T8087] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.094178][ T8087] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.094215][ T8087] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.094306][ T8087] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.094334][ T8087] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.094371][ T8087] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.094398][ T8087] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.890090][T18076] netlink: 'syz.3.4950': attribute type 21 has an invalid length. [ 705.890113][T18076] netlink: 'syz.3.4950': attribute type 22 has an invalid length. [ 705.890127][T18076] netlink: 'syz.3.4950': attribute type 23 has an invalid length. [ 705.890142][T18076] netlink: 'syz.3.4950': attribute type 25 has an invalid length. [ 705.890155][T18076] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4950'. [ 706.013607][ T5851] Bluetooth: hci0: command tx timeout [ 707.493575][T17463] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 707.643644][T17463] usb 4-1: Using ep0 maxpacket: 8 [ 707.654989][T17463] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 707.655016][T17463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.655036][T17463] usb 4-1: Product: syz [ 707.655049][T17463] usb 4-1: Manufacturer: syz [ 707.655062][T17463] usb 4-1: SerialNumber: syz [ 707.697463][T17463] usb 4-1: config 0 descriptor?? [ 707.926074][T17463] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 708.634061][T18130] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4973'. [ 708.634259][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4973'. [ 708.707315][T18133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4974'. [ 708.945958][T17463] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 708.969809][T17463] usb 4-1: USB disconnect, device number 44 [ 711.406511][T18200] overlayfs: failed to clone upperpath [ 712.854695][T18228] netlink: 'syz.6.5013': attribute type 1 has an invalid length. [ 712.854719][T18228] netlink: 'syz.6.5013': attribute type 4 has an invalid length. [ 712.854733][T18228] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.5013'. [ 713.143552][ T5845] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 713.303592][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 713.312059][ T5845] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 713.312091][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.340781][ T5845] usb 3-1: config 0 descriptor?? [ 713.350082][ T5845] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 714.092801][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5026'. [ 714.093032][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5026'. [ 714.093286][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5026'. [ 714.093348][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5026'. [ 714.175326][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5025'. [ 714.179243][T18258] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5025'. [ 714.678148][T18272] netlink: 'syz.4.5032': attribute type 12 has an invalid length. [ 714.753882][T18273] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 714.803516][ T5845] gspca_sonixj: i2c_w8 err -71 [ 714.823658][ T5845] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 714.830248][ T5845] usb 3-1: USB disconnect, device number 51 [ 715.273085][T18287] tipc: Started in network mode [ 715.273109][T18287] tipc: Node identity 4, cluster identity 4711 [ 715.273122][T18287] tipc: Node number set to 4 [ 716.879837][T18327] netlink: 452 bytes leftover after parsing attributes in process `syz.6.5055'. [ 719.487954][T18375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.700338][T18404] ALSA: mixer_oss: invalid OSS volume '!' [ 720.700360][T18404] ALSA: mixer_oss: invalid OSS volume '' [ 721.043632][ T38] kauditd_printk_skb: 28 callbacks suppressed [ 721.043652][ T38] audit: type=1326 audit(1758288931.384:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18415 comm="syz.2.5093" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f907b69ec29 code=0x0 [ 721.183188][T18424] overlayfs: failed to clone upperpath [ 721.269379][T18426] netlink: 51 bytes leftover after parsing attributes in process `syz.6.5099'. [ 721.594090][T17463] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 721.743574][T17463] usb 4-1: Using ep0 maxpacket: 32 [ 721.746410][T17463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.746443][T17463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.746483][T17463] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 721.746508][T17463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.755992][T17463] usb 4-1: config 0 descriptor?? [ 722.183359][T17463] usbhid 4-1:0.0: can't add hid device: -71 [ 722.183855][T17463] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 722.188800][T17463] usb 4-1: USB disconnect, device number 45 [ 722.226300][ T5845] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 722.318480][T18458] overlayfs: failed to clone upperpath [ 722.383714][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 722.399026][ T5845] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 722.399053][ T5845] usb 3-1: config 0 has no interface number 0 [ 722.399125][ T5845] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 722.402349][ T5845] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 722.402379][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.402400][ T5845] usb 3-1: Product: syz [ 722.402415][ T5845] usb 3-1: Manufacturer: syz [ 722.402520][ T5845] usb 3-1: SerialNumber: syz [ 722.489267][ T5845] usb 3-1: config 0 descriptor?? [ 722.511705][ T5845] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 722.511744][ T5845] em28xx 3-1:0.132: Video interface 132 found: [ 722.896388][T18468] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5114'. [ 722.903181][ T5845] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 723.305526][ T5845] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 723.305563][ T5845] em28xx 3-1:0.132: board has no eeprom [ 723.383634][ T5845] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 723.383663][ T5845] em28xx 3-1:0.132: analog set to bulk mode. [ 723.385188][T17451] em28xx 3-1:0.132: Registering V4L2 extension [ 723.520938][T17463] usb 3-1: USB disconnect, device number 52 [ 723.528559][T17463] em28xx 3-1:0.132: Disconnecting em28xx [ 723.891800][T17451] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 723.891825][T17451] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 723.891839][T17451] em28xx 3-1:0.132: No AC97 audio processor [ 723.947399][T17451] usb 3-1: Decoder not found [ 723.947424][T17451] em28xx 3-1:0.132: failed to create media graph [ 723.947464][T17451] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 723.963801][T17451] em28xx 3-1:0.132: Remote control support is not available for this card. [ 723.983341][T17463] em28xx 3-1:0.132: Closing input extension [ 724.010899][T17463] em28xx 3-1:0.132: Freeing device [ 724.372918][T18493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5123'. [ 724.372956][T18493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5123'. [ 724.377171][T18495] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 724.401082][T18493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5123'. [ 724.401109][T18493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5123'. [ 724.910982][T18512] netlink: 'syz.2.5131': attribute type 1 has an invalid length. [ 724.979959][T18515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5132'. [ 724.980047][T18515] netlink: 'syz.3.5132': attribute type 18 has an invalid length. [ 725.064835][T18514] bond2: (slave bridge0): making interface the new active one [ 725.076610][T18514] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 725.227158][T18515] vxlan0: entered promiscuous mode [ 725.312177][ T8090] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.312576][ T8090] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.312630][ T8090] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.312670][ T8090] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.351013][T18522] tipc: Enabling of bearer rejected, failed to enable media [ 725.636716][T18528] netlink: 'syz.2.5138': attribute type 1 has an invalid length. [ 725.860240][T18531] bond3: (slave gretap1): making interface the new active one [ 725.875519][T18531] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 726.467710][T18545] netlink: 'syz.3.5145': attribute type 1 has an invalid length. [ 726.872265][T18545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 727.529370][T18558] 9pnet: p9_errstr2errno: server reported unknown error 00000004,group_id= [ 728.421391][T18583] overlayfs: failed to clone upperpath [ 730.108454][T18609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5173'. [ 731.297482][T18634] netlink: 'syz.4.5185': attribute type 12 has an invalid length. [ 731.543664][T18648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5190'. [ 731.596166][T18648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5190'. [ 731.598492][ T8090] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.622079][ T8090] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.622133][ T8090] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.622174][ T8090] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.298387][T18669] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5197'. [ 733.881658][T18687] input: syz0 as /devices/virtual/input/input52 [ 735.038324][T17460] libceph: connect (1)[c::]:6789 error -101 [ 735.038587][T17460] libceph: mon0 (1)[c::]:6789 connect error [ 735.044161][T17460] libceph: connect (1)[c::]:6789 error -101 [ 735.044394][T17460] libceph: mon0 (1)[c::]:6789 connect error [ 735.081932][T18705] ceph: No mds server is up or the cluster is laggy [ 736.343804][T18734] tipc: Started in network mode [ 736.343827][T18734] tipc: Node identity 080211000001, cluster identity 4711 [ 736.344250][T18734] tipc: Enabled bearer , priority 0 [ 736.988435][T18757] netlink: 'syz.3.5230': attribute type 39 has an invalid length. [ 737.338819][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.473612][T17463] tipc: Node number set to 134418688 [ 737.523937][T18774] overlayfs: failed to clone upperpath [ 737.801735][T18789] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 740.493639][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5279'. [ 741.230068][T18874] ceph: No mds server is up or the cluster is laggy [ 741.230975][T17463] libceph: connect (1)[c::]:6789 error -101 [ 741.231205][T17463] libceph: mon0 (1)[c::]:6789 connect error [ 741.526094][T17463] libceph: connect (1)[c::]:6789 error -101 [ 741.526329][T17463] libceph: mon0 (1)[c::]:6789 connect error [ 742.563578][T17451] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 742.726179][T17451] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 742.726216][T17451] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 742.726257][T17451] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 742.726281][T17451] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.760774][T18909] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 742.798395][T17451] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 743.211286][T17451] usb 8-1: USB disconnect, device number 22 [ 744.991665][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.046459][T18982] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5321'. [ 745.858510][T19007] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 746.713788][T17463] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 746.867541][T17463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.867576][T17463] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 746.867619][T17463] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 746.867643][T17463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.895809][T17463] usb 3-1: config 0 descriptor?? [ 747.617000][T17463] a4tech 0003:09DA:000A.003C: unknown main item tag 0x0 [ 747.617043][T17463] a4tech 0003:09DA:000A.003C: unknown main item tag 0x0 [ 747.617084][T17463] a4tech 0003:09DA:000A.003C: unknown main item tag 0x0 [ 747.617112][T17463] a4tech 0003:09DA:000A.003C: unknown main item tag 0x0 [ 747.617140][T17463] a4tech 0003:09DA:000A.003C: unknown main item tag 0x0 [ 747.617167][T17463] a4tech 0003:09DA:000A.003C: unknown main item tag 0x0 [ 747.617194][T17463] a4tech 0003:09DA:000A.003C: item fetching failed at offset 6/7 [ 747.626673][T17463] a4tech 0003:09DA:000A.003C: parse failed [ 747.626815][T17463] a4tech 0003:09DA:000A.003C: probe with driver a4tech failed with error -22 [ 747.844919][T17463] usb 3-1: USB disconnect, device number 53 [ 747.972857][T19041] syz_tun: left promiscuous mode [ 747.980612][T19041] bond1: left promiscuous mode [ 747.980636][T19041] bond2: left promiscuous mode [ 748.152968][ T8087] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.153035][ T8087] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.153076][ T8087] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.153122][ T8087] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.423737][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5355'. [ 749.893598][T19076] overlayfs: failed to clone upperpath [ 750.063872][T17463] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 750.217179][T17463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.217213][T17463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.217253][T17463] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 750.217301][T17463] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 750.217324][T17463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.279244][T17463] usb 3-1: config 0 descriptor?? [ 750.723903][T19085] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 750.759140][T17463] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 751.015475][T17463] usb 3-1: USB disconnect, device number 54 [ 752.069055][T19106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5373'. [ 752.069093][T19106] netlink: 'syz.4.5373': attribute type 20 has an invalid length. [ 752.110672][ T6067] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.110949][ T6067] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.111009][ T6067] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.111049][ T6067] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.111291][T19106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5373'. [ 752.111321][T19106] netlink: 'syz.4.5373': attribute type 20 has an invalid length. [ 753.283590][T17451] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 753.434950][T17451] usb 3-1: Using ep0 maxpacket: 32 [ 753.451267][T17451] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 753.451298][T17451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.451327][T17451] usb 3-1: Product: syz [ 753.451343][T17451] usb 3-1: Manufacturer: syz [ 753.451359][T17451] usb 3-1: SerialNumber: syz [ 753.485307][T17451] usb 3-1: config 0 descriptor?? [ 753.516239][T17451] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 754.974604][T17451] gspca_topro: reg_r err -71 [ 754.974638][T17451] gspca_topro: Sensor soi763a [ 754.997950][T17451] usb 3-1: USB disconnect, device number 55 [ 756.613606][T17463] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 756.763520][T17463] usb 8-1: Using ep0 maxpacket: 16 [ 756.766316][T17463] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 756.769936][T17463] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 756.769965][T17463] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.769986][T17463] usb 8-1: Product: syz [ 756.770002][T17463] usb 8-1: Manufacturer: syz [ 756.770017][T17463] usb 8-1: SerialNumber: syz [ 756.827105][T17463] usb 8-1: config 0 descriptor?? [ 756.840551][T17463] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 756.852582][T17463] usb 8-1: Detected FT232R [ 757.041272][T17463] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 757.264095][T17463] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 757.476859][T17463] usb 8-1: USB disconnect, device number 23 [ 757.605182][T19192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 757.621632][T17463] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 757.622129][T17463] ftdi_sio 8-1:0.0: device disconnected [ 760.526934][T19243] overlayfs: failed to clone upperpath [ 762.895702][ T38] audit: type=1326 audit(1758288973.244:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.6.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 762.895912][ T38] audit: type=1326 audit(1758288973.244:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.6.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 762.897601][ T38] audit: type=1326 audit(1758288973.244:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.6.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 762.898893][ T38] audit: type=1326 audit(1758288973.244:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.6.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 762.901100][ T38] audit: type=1326 audit(1758288973.244:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.6.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 762.902284][ T38] audit: type=1326 audit(1758288973.244:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.6.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 762.906565][ T38] audit: type=1326 audit(1758288973.254:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.6.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 762.908925][ T38] audit: type=1326 audit(1758288973.254:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.6.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 762.908984][ T38] audit: type=1326 audit(1758288973.254:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.6.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 762.911190][ T38] audit: type=1326 audit(1758288973.254:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.6.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8aa39bec29 code=0x7ffc0000 [ 763.467405][T19285] tipc: Enabling of bearer rejected, failed to enable media [ 764.037716][T19290] vlan2: entered allmulticast mode [ 764.037733][T19290] macvtap0: entered allmulticast mode [ 765.080519][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5458'. [ 765.532528][T19315] netlink: 'syz.6.5460': attribute type 16 has an invalid length. [ 765.532568][T19315] netlink: 'syz.6.5460': attribute type 17 has an invalid length. [ 765.575884][T19315] 0{X: left allmulticast mode [ 765.895118][T19315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.902750][T19315] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.977964][T19315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 766.935110][T19343] overlayfs: failed to clone upperpath [ 767.923717][T17460] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 768.146041][T17460] usb 8-1: Using ep0 maxpacket: 32 [ 768.149013][T17460] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.149045][T17460] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.149150][T17460] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 768.149175][T17460] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.171022][T17460] usb 8-1: config 0 descriptor?? [ 768.801738][T17460] savu 0003:1E7D:2D5A.003E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 769.210133][T17460] usb 8-1: USB disconnect, device number 24 [ 770.545198][T19398] netlink: 'syz.4.5492': attribute type 10 has an invalid length. [ 770.575569][T19398] team0: Port device dummy0 added [ 770.579001][T19398] netlink: 'syz.4.5492': attribute type 10 has an invalid length. [ 770.718147][T19398] team0: Port device dummy0 removed [ 770.734491][T19404] block nbd2: NBD_DISCONNECT [ 770.738740][T19404] block nbd2: Send disconnect failed -107 [ 770.745950][T19398] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 770.844847][T19399] vlan3: left allmulticast mode [ 770.844872][T19399] bridge_slave_0: left allmulticast mode [ 770.849969][T19399] hsr1: left allmulticast mode [ 770.849990][T19399] macvlan0: left allmulticast mode [ 770.850012][T19399] batadv0: left allmulticast mode [ 770.850717][T19399] bond1: left allmulticast mode [ 770.851000][T19399] bridge0: left allmulticast mode [ 770.922205][T19402] block nbd2: Send control failed (result -107) [ 770.923754][T19402] block nbd2: Request send failed, requeueing [ 770.923812][T19402] block nbd2: Disconnected due to user request. [ 770.945819][T19399] vxlan0: left promiscuous mode [ 770.972471][ T132] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.054166][ T6054] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.054218][ T6054] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.054258][ T6054] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.054297][ T6054] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.457456][T19435] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5504'. [ 773.061412][ T37] kworker/u8:2 (37) used greatest stack depth: 15816 bytes left [ 774.026736][T19490] syz_tun: entered allmulticast mode [ 774.047712][T19488] syz_tun: left allmulticast mode [ 774.805562][T19518] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5539'. [ 774.805713][T19518] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5539'. [ 774.977268][T19526] lo speed is unknown, defaulting to 1000 [ 775.052576][T19527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.054625][T19527] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.098479][T19527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 775.331287][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 775.331306][ T38] audit: type=1804 audit(1758288985.664:1673): pid=19533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.5543" name="/newroot/1067/file0" dev="tmpfs" ino=5527 res=1 errno=0 [ 776.202291][T19554] netlink: 'syz.6.5552': attribute type 1 has an invalid length. [ 776.498054][T19554] 8021q: adding VLAN 0 to HW filter on device bond3 [ 776.583290][T19559] bond3: (slave gretap0): making interface the new active one [ 776.601591][T19559] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 777.135347][T17452] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 777.283620][T17452] usb 4-1: Using ep0 maxpacket: 32 [ 777.286655][T17452] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 777.286681][T17452] usb 4-1: config 0 has no interface number 0 [ 777.320383][T17452] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 777.320413][T17452] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.320434][T17452] usb 4-1: Product: syz [ 777.320449][T17452] usb 4-1: Manufacturer: syz [ 777.320465][T17452] usb 4-1: SerialNumber: syz [ 777.372744][T17452] usb 4-1: config 0 descriptor?? [ 777.388134][T17452] smsc95xx v2.0.0 [ 777.740499][T19586] kernel read not supported for file /sxt (pid: 19586 comm: syz.7.5561) [ 777.741517][ T38] audit: type=1800 audit(1758288988.084:1674): pid=19586 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.5561" name=A17378741A dev="mqueue" ino=71269 res=0 errno=0 [ 777.811216][T17452] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 777.811248][T17452] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 778.371174][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5569'. [ 778.387903][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5569'. [ 778.648828][T17452] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 778.649204][T17452] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 778.673696][T17451] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 778.678443][T17452] usb 4-1: USB disconnect, device number 46 [ 778.839247][T17451] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 778.839282][T17451] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.871357][T17451] usb 8-1: config 0 descriptor?? [ 779.749768][T19625] netlink: 'syz.4.5578': attribute type 1 has an invalid length. [ 779.937896][T19634] netlink: zone id is out of range [ 780.032082][T19630] bond4: (slave bridge2): making interface the new active one [ 780.049311][T19630] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 780.081928][T19635] netlink: zone id is out of range [ 780.167136][T19635] netlink: del zone limit has 4 unknown bytes [ 780.209772][T19634] netlink: set zone limit has 4 unknown bytes [ 780.320167][T17451] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 780.320198][T17451] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 780.345757][T17451] asix 8-1:0.0: probe with driver asix failed with error -71 [ 780.376529][T17451] usb 8-1: USB disconnect, device number 25 [ 780.847945][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5589'. [ 780.896050][T19653] macvtap1: entered promiscuous mode [ 780.896075][T19653] erspan0: entered promiscuous mode [ 780.896269][T19653] macvtap1: entered allmulticast mode [ 780.896284][T19653] erspan0: entered allmulticast mode [ 781.004404][T19655] erspan0: left allmulticast mode [ 781.004435][T19655] erspan0: left promiscuous mode [ 782.166136][T19684] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5601'. [ 785.209962][T19719] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5614'. [ 785.807587][ T38] audit: type=1326 audit(1758288996.154:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19733 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 785.807645][ T38] audit: type=1326 audit(1758288996.154:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19733 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 785.824412][ T38] audit: type=1326 audit(1758288996.174:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19733 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 785.824501][ T38] audit: type=1326 audit(1758288996.174:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19733 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 785.824553][ T38] audit: type=1326 audit(1758288996.174:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19733 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 785.831216][ T38] audit: type=1326 audit(1758288996.174:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19733 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 785.831271][ T38] audit: type=1326 audit(1758288996.174:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19733 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 785.831318][ T38] audit: type=1326 audit(1758288996.174:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19733 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 785.843620][ T38] audit: type=1326 audit(1758288996.184:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19733 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 785.845826][ T38] audit: type=1326 audit(1758288996.194:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19733 comm="syz.4.5621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6bcec29 code=0x7ffc0000 [ 787.068346][T19768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5634'. [ 788.285658][T19802] loop2: detected capacity change from 0 to 7 [ 788.290744][T19802] loop2: [POWERTEC] p1 p2 p3 p4 [ 788.304023][T19802] loop2: p2 start 4294967287 is beyond EOD, truncated [ 788.304050][T19802] loop2: p3 start 1932423285 is beyond EOD, truncated [ 788.304068][T19802] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 788.769527][T19812] input: syz1 as /devices/virtual/input/input54 [ 790.781283][T19875] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5677'. [ 793.113780][T19919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5693'. [ 793.253636][T19919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 794.593549][T17451] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 794.753689][T17451] usb 8-1: Using ep0 maxpacket: 32 [ 794.759471][T17451] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 794.759498][T17451] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.759518][T17451] usb 8-1: Product: syz [ 794.759532][T17451] usb 8-1: Manufacturer: syz [ 794.759546][T17451] usb 8-1: SerialNumber: syz [ 794.809036][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 794.809053][ T38] audit: type=1326 audit(1758289005.154:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19945 comm="syz.2.5703" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f907b69ec29 code=0x0 [ 794.870012][T17451] usb 8-1: config 0 descriptor?? [ 795.326786][T17451] airspy 8-1:0.0: Board ID: 00 [ 795.326809][T17451] airspy 8-1:0.0: Firmware version: [ 796.360875][T17451] airspy 8-1:0.0: usb_control_msg() failed -71 request 10 [ 796.389704][T17451] airspy 8-1:0.0: Registered as swradio24 [ 796.389727][T17451] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 796.392591][T17451] usb 8-1: USB disconnect, device number 26 [ 796.866944][T19979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5715'. [ 797.313652][T17463] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 797.473797][T17463] usb 3-1: Using ep0 maxpacket: 32 [ 797.476268][T17463] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 797.476296][T17463] usb 3-1: config 0 has no interface number 0 [ 797.476346][T17463] usb 3-1: config 0 interface 89 has no altsetting 0 [ 797.479570][T17463] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 797.479600][T17463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.479621][T17463] usb 3-1: Product: syz [ 797.479637][T17463] usb 3-1: Manufacturer: syz [ 797.479653][T17463] usb 3-1: SerialNumber: syz [ 797.495975][T17463] usb 3-1: config 0 descriptor?? [ 797.508755][T17463] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 797.508791][T17463] em28xx 3-1:0.89: Video interface 89 found: bulk [ 798.172621][T20007] overlayfs: failed to clone upperpath [ 798.175406][T17463] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 798.426920][T20014] 9pnet_fd: Insufficient options for proto=fd [ 798.597389][T20019] netlink: 'syz.4.5733': attribute type 2 has an invalid length. [ 798.600317][T20019] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5733'. [ 798.613814][T17463] em28xx 3-1:0.89: AC97 command still being executed: not handled properly! [ 798.763551][T20019] bond0: (slave dummy0): Releasing backup interface [ 798.768139][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5734'. [ 798.768162][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5734'. [ 798.797037][T17463] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 798.797070][T17463] em28xx 3-1:0.89: board has no eeprom [ 798.853610][T17463] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 798.853641][T17463] em28xx 3-1:0.89: analog set to bulk mode. [ 798.855981][T17460] em28xx 3-1:0.89: Registering V4L2 extension [ 798.860497][T17463] usb 3-1: USB disconnect, device number 56 [ 798.863266][T17463] em28xx 3-1:0.89: Disconnecting em28xx [ 798.953557][ T5849] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 798.957622][T17460] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 798.957645][T17460] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 798.957660][T17460] em28xx 3-1:0.89: No AC97 audio processor [ 798.960145][T17460] usb 3-1: Decoder not found [ 798.960161][T17460] em28xx 3-1:0.89: failed to create media graph [ 798.960192][T17460] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 798.968982][T17460] em28xx 3-1:0.89: Registering snapshot button... [ 799.042462][T17460] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input55 [ 799.071160][T17460] em28xx 3-1:0.89: Remote control support is not available for this card. [ 799.071225][T17463] em28xx 3-1:0.89: Closing input extension [ 799.072577][T17463] em28xx 3-1:0.89: Deregistering snapshot button [ 799.130398][ T5849] usb 4-1: unable to get BOS descriptor or descriptor too short [ 799.142491][ T5849] usb 4-1: not running at top speed; connect to a high speed hub [ 799.151645][ T5849] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 799.175924][ T5849] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.175956][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.175976][ T5849] usb 4-1: Product: syz [ 799.175990][ T5849] usb 4-1: Manufacturer: syz [ 799.176004][ T5849] usb 4-1: SerialNumber: syz [ 799.321697][T17463] em28xx 3-1:0.89: Freeing device [ 799.491391][T20024] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 800.178663][ T5849] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 800.198637][ T5849] cdc_ncm 4-1:1.0: bind() failure [ 800.219134][ T5849] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 800.219200][ T5849] cdc_ncm 4-1:1.1: bind() failure [ 800.239426][ T5849] usb 4-1: USB disconnect, device number 47 [ 801.183729][T17463] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 801.337163][T17463] usb 8-1: config 0 has an invalid interface number: 28 but max is 0 [ 801.337190][T17463] usb 8-1: config 0 has no interface number 0 [ 801.337237][T17463] usb 8-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.337268][T17463] usb 8-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.337324][T17463] usb 8-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 801.337348][T17463] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.405786][T17463] usb 8-1: config 0 descriptor?? [ 801.783725][T17460] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 801.846380][T17463] logitech-djreceiver 0003:046D:C534.003F: unknown main item tag 0x0 [ 801.846419][T17463] logitech-djreceiver 0003:046D:C534.003F: unknown main item tag 0x0 [ 801.846448][T17463] logitech-djreceiver 0003:046D:C534.003F: unknown main item tag 0x0 [ 801.846476][T17463] logitech-djreceiver 0003:046D:C534.003F: unknown main item tag 0x0 [ 801.910332][T17463] logitech-djreceiver 0003:046D:C534.003F: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.7-1/input28 [ 801.964780][T17460] usb 4-1: Using ep0 maxpacket: 32 [ 801.967283][T17460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.967350][T17460] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 801.967374][T17460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.021428][T17460] usb 4-1: config 0 descriptor?? [ 802.035877][T17460] hub 4-1:0.0: USB hub found [ 802.083710][ T5849] usb 8-1: USB disconnect, device number 27 [ 802.182113][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5767'. [ 802.182779][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5767'. [ 802.228066][T17460] hub 4-1:0.0: 1 port detected [ 802.883888][T20128] netlink: 'syz.4.5779': attribute type 3 has an invalid length. [ 802.883911][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5779'. [ 803.251308][ T5849] usb 4-1: USB disconnect, device number 48 [ 803.293340][T20138] overlayfs: failed to clone upperpath [ 803.473936][T17460] usb 4-1-port1: config error [ 803.976356][T20154] batadv_slave_0: entered promiscuous mode [ 804.374866][T20169] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 804.486618][T20172] loop2: detected capacity change from 0 to 7 [ 804.509945][T20172] Dev loop2: unable to read RDB block 7 [ 804.510008][T20172] loop2: unable to read partition table [ 804.510254][T20172] loop2: partition table beyond EOD, truncated [ 804.510273][T20172] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 805.057385][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5803'. [ 805.087947][T20188] 9pnet_fd: Insufficient options for proto=fd [ 805.263546][ T5849] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 805.423588][ T5849] usb 8-1: Using ep0 maxpacket: 32 [ 805.428007][ T5849] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.428043][ T5849] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.428084][ T5849] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 805.428109][ T5849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.443660][ T5849] usb 8-1: config 0 descriptor?? [ 805.463796][ T5849] hub 8-1:0.0: USB hub found [ 805.594915][T20202] lo speed is unknown, defaulting to 1000 [ 805.706657][ T5849] hub 8-1:0.0: 1 port detected [ 806.279601][T17460] IPVS: starting estimator thread 0... [ 806.333615][ T5849] hub 8-1:0.0: activate --> -90 [ 806.359285][T20221] netlink: 'syz.4.5816': attribute type 1 has an invalid length. [ 806.374136][T20219] IPVS: using max 7 ests per chain, 16800 per kthread [ 806.724458][T20223] bond5: (slave geneve2): making interface the new active one [ 806.742298][T20223] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 806.742833][ T8088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 806.770720][ T8088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 806.770769][ T8088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 806.770801][ T8088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 807.015972][ T5849] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 807.063296][T17460] usb 8-1: USB disconnect, device number 28 [ 807.078093][ T5849] usb 8-1: Failed to suspend device, error -71 [ 807.278485][ T6067] IPVS: stop unused estimator thread 0... [ 808.731370][ T5849] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 808.757059][ T5849] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 809.067530][T20267] netlink: 'syz.4.5836': attribute type 1 has an invalid length. [ 809.161085][T20267] bond6: (slave gretap1): making interface the new active one [ 809.162971][T20267] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 810.583643][T17452] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 810.745904][T17452] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 810.745938][T17452] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 810.745959][T17452] usb 3-1: Product: syz [ 810.745992][T17452] usb 3-1: SerialNumber: syz [ 810.793622][T17452] usb 3-1: config 0 descriptor?? [ 811.065894][T17452] hso 3-1:0.0: Failed to find BULK IN ep [ 811.262739][T17460] usb 3-1: USB disconnect, device number 57 [ 812.815918][T20329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.096764][T20336] loop3: detected capacity change from 0 to 1 [ 813.152885][ T5841] Dev loop3: unable to read RDB block 1 [ 813.152940][ T5841] loop3: unable to read partition table [ 813.153222][ T5841] loop3: partition table beyond EOD, truncated [ 813.203830][T20336] Dev loop3: unable to read RDB block 1 [ 813.203886][T20336] loop3: unable to read partition table [ 813.204128][T20336] loop3: partition table beyond EOD, truncated [ 813.204173][T20336] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 813.298134][T20338] Dev loop3: unable to read RDB block 1 [ 813.298191][T20338] loop3: unable to read partition table [ 813.298447][T20338] loop3: partition table beyond EOD, truncated [ 814.085661][T20362] overlayfs: failed to clone upperpath [ 814.565852][ T38] audit: type=1326 audit(1758289024.914:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20369 comm="syz.2.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907b69ec29 code=0x7ffc0000 [ 814.565911][ T38] audit: type=1326 audit(1758289024.914:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20369 comm="syz.2.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907b69ec29 code=0x7ffc0000 [ 814.571736][ T38] audit: type=1326 audit(1758289024.914:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20369 comm="syz.2.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f907b69ec29 code=0x7ffc0000 [ 814.572018][ T38] audit: type=1326 audit(1758289024.914:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20369 comm="syz.2.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907b69ec29 code=0x7ffc0000 [ 814.572061][ T38] audit: type=1326 audit(1758289024.914:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20369 comm="syz.2.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907b69ec29 code=0x7ffc0000 [ 815.037911][T20379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 815.037925][T20379] IPv6: NLM_F_CREATE should be set when creating new route [ 815.604029][T20389] overlayfs: failed to clone upperpath [ 816.135304][T20408] Invalid ELF header magic: != ELF [ 816.150484][T20410] overlayfs: failed to clone upperpath [ 816.719335][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.744867][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5901'. [ 816.745302][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5901'. [ 816.841423][T20432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5902'. [ 819.866393][T20509] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 819.900784][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.003997][T20535] netlink: 'syz.6.5937': attribute type 4 has an invalid length. [ 821.129432][T20540] netlink: 'syz.6.5937': attribute type 17 has an invalid length. [ 822.042709][ T5849] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 822.066186][ T5849] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 823.483686][T17460] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 823.663793][T17460] usb 4-1: Using ep0 maxpacket: 16 [ 823.667464][T17460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.667498][T17460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.667522][T17460] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 823.667568][T17460] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 823.667592][T17460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.751796][T17460] usb 4-1: config 0 descriptor?? [ 824.234403][T17460] hid-multitouch 0003:0457:07DA.0042: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 824.300031][T20597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5962'. [ 824.300318][T20597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5962'. [ 824.523883][T12343] usb 4-1: USB disconnect, device number 49 [ 825.883952][T12343] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 826.049131][T12343] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 826.049164][T12343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.049184][T12343] usb 3-1: Product: syz [ 826.049200][T12343] usb 3-1: Manufacturer: syz [ 826.049215][T12343] usb 3-1: SerialNumber: syz [ 826.116439][T12343] usb 3-1: config 0 descriptor?? [ 826.139381][T20642] 8021q: adding VLAN 0 to HW filter on device bond4 [ 826.142157][T20642] bridge0: port 1(bond4) entered blocking state [ 826.142410][T20642] bridge0: port 1(bond4) entered disabled state [ 826.142740][T20642] bond4: entered allmulticast mode [ 826.186011][T20642] bond4: entered promiscuous mode [ 826.196111][T20642] bridge0: port 1(bond4) entered blocking state [ 826.196272][T20642] bridge0: port 1(bond4) entered forwarding state [ 826.313313][ T6067] bridge0: port 1(bond4) entered disabled state [ 827.542919][T12343] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 827.558651][T12343] usb 3-1: USB disconnect, device number 58 [ 827.625930][T12343] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 827.860934][T12343] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 828.533673][T12343] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 828.703762][T12343] usb 3-1: Using ep0 maxpacket: 16 [ 828.706043][T12343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.706088][T12343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 828.706112][T12343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 828.706130][T12343] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 828.706148][T12343] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.709381][T12343] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 828.709407][T12343] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 828.709428][T12343] usb 3-1: Manufacturer: syz [ 828.804730][T12343] usb 3-1: config 0 descriptor?? [ 829.134601][T12343] rc_core: IR keymap rc-hauppauge not found [ 829.134622][T12343] Registered IR keymap rc-empty [ 829.135435][T12343] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 829.154093][T12343] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 829.177872][T12343] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 829.202310][T12343] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input56 [ 829.239045][T12343] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 829.253917][T12343] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 829.284144][T12343] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 829.304448][T12343] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 829.323779][T12343] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 829.353788][T12343] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 829.373890][T12343] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 829.393933][T12343] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 829.424079][T12343] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 829.454410][T12343] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 829.508217][T12343] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 829.508445][T12343] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 829.532785][T12343] usb 3-1: USB disconnect, device number 59 [ 829.983707][T20743] netlink: 'syz.4.6023': attribute type 1 has an invalid length. [ 830.040684][T20743] 8021q: adding VLAN 0 to HW filter on device bond7 [ 830.217091][T17460] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 830.403650][T17460] usb 4-1: Using ep0 maxpacket: 32 [ 830.422780][T17460] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 830.422810][T17460] usb 4-1: config 0 has no interface number 0 [ 830.440254][T17460] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 830.440285][T17460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.440307][T17460] usb 4-1: Product: syz [ 830.440322][T17460] usb 4-1: Manufacturer: syz [ 830.440337][T17460] usb 4-1: SerialNumber: syz [ 830.477127][T17460] usb 4-1: config 0 descriptor?? [ 830.480880][T17460] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 830.697562][T17451] usb 4-1: USB disconnect, device number 50 [ 831.243763][T20782] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6040'. [ 831.989582][T20805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6049'. [ 832.378247][T20815] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 833.168917][T20836] netlink: 'syz.3.6061': attribute type 58 has an invalid length. [ 834.481597][T20874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6075'. [ 834.688377][T20880] overlayfs: failed to clone upperpath [ 836.310867][T20918] overlayfs: failed to clone upperpath [ 838.323549][T20944] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6104'. [ 838.647226][T20948] comedi comedi0: pcmmio: I/O port conflict (0x4f27,32) [ 839.530324][ T38] audit: type=1326 audit(1758289049.874:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.6113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975374ec29 code=0x7ffc0000 [ 839.530384][ T38] audit: type=1326 audit(1758289049.874:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.6113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975374ec29 code=0x7ffc0000 [ 839.530432][ T38] audit: type=1326 audit(1758289049.874:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.6113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f975374ec29 code=0x7ffc0000 [ 839.633624][ T38] audit: type=1326 audit(1758289049.974:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.6113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975374ec29 code=0x7ffc0000 [ 839.633696][ T38] audit: type=1326 audit(1758289049.974:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.6113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f975374ec29 code=0x7ffc0000 [ 839.633743][ T38] audit: type=1326 audit(1758289049.974:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.6113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975374ec29 code=0x7ffc0000 [ 839.803793][T17460] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 839.963704][T17460] usb 8-1: Using ep0 maxpacket: 32 [ 839.967975][T17460] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 839.968003][T17460] usb 8-1: config 0 has no interface number 0 [ 840.005286][T17460] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 840.005319][T17460] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.005342][T17460] usb 8-1: Product: syz [ 840.005356][T17460] usb 8-1: Manufacturer: syz [ 840.005370][T17460] usb 8-1: SerialNumber: syz [ 840.017152][T17460] usb 8-1: config 0 descriptor?? [ 840.031252][T17460] smsc95xx v2.0.0 [ 840.031272][T17460] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 840.031577][T17460] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 840.377864][T20984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6121'. [ 840.778481][T20988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6123'. [ 841.049976][T17451] usb 8-1: USB disconnect, device number 29 [ 841.731296][T17451] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 841.745569][T17451] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 841.896728][T21016] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6134'. [ 841.897158][T21016] unsupported nlmsg_type 40 [ 842.363563][T17451] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 842.519573][T17451] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 842.519606][T17451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.519628][T17451] usb 4-1: Product: syz [ 842.519644][T17451] usb 4-1: Manufacturer: syz [ 842.519659][T17451] usb 4-1: SerialNumber: syz [ 843.674097][T17451] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 843.674127][T17451] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 844.143958][T17451] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 844.193168][T17451] usb 4-1: USB disconnect, device number 51 [ 844.203311][T17451] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 844.491533][T21057] binder: 21054:21057 unknown command 0 [ 844.491555][T21057] binder: 21054:21057 ioctl c0306201 200000000640 returned -22 [ 846.031890][T21090] netlink: 'syz.7.6161': attribute type 13 has an invalid length. [ 846.031916][T21090] netlink: 'syz.7.6161': attribute type 17 has an invalid length. [ 846.674870][T21090] 0{X: left allmulticast mode [ 847.201485][T21101] netlink: 'syz.4.6166': attribute type 3 has an invalid length. [ 847.213413][T21101] netlink: 'syz.4.6166': attribute type 8 has an invalid length. [ 847.213433][T21101] netlink: 'syz.4.6166': attribute type 10 has an invalid length. [ 847.213447][T21101] netlink: 'syz.4.6166': attribute type 11 has an invalid length. [ 847.213460][T21101] netlink: 201148 bytes leftover after parsing attributes in process `syz.4.6166'. [ 847.285492][T21090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.295257][T21090] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.373672][T21090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 847.613982][T17463] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 847.779933][T17463] usb 4-1: config 0 has no interfaces? [ 847.791778][T17463] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 847.791810][T17463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.791831][T17463] usb 4-1: Product: syz [ 847.791846][T17463] usb 4-1: Manufacturer: syz [ 847.791862][T17463] usb 4-1: SerialNumber: syz [ 847.844621][T17463] usb 4-1: config 0 descriptor?? [ 848.068966][T17463] usb 4-1: USB disconnect, device number 52 [ 849.885371][T21158] netlink: 51 bytes leftover after parsing attributes in process `syz.6.6184'. [ 849.943775][T12343] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 850.037005][T21160] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6185'. [ 850.103743][T12343] usb 8-1: Using ep0 maxpacket: 32 [ 850.112679][T12343] usb 8-1: config 0 has no interfaces? [ 850.112720][T12343] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 850.112745][T12343] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.147091][T12343] usb 8-1: config 0 descriptor?? [ 850.358433][T21156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.359235][T21156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.681908][T17451] usb 8-1: USB disconnect, device number 30 [ 851.527920][T21193] overlayfs: failed to clone upperpath [ 851.683857][ T5849] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 851.841065][ T5849] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 851.841099][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.841121][ T5849] usb 3-1: Product: syz [ 851.841137][ T5849] usb 3-1: Manufacturer: syz [ 851.841153][ T5849] usb 3-1: SerialNumber: syz [ 851.869189][ T5849] usb 3-1: config 0 descriptor?? [ 851.888303][ T5849] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 853.333323][T12343] usb 3-1: USB disconnect, device number 60 [ 854.362564][T21241] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6214'. [ 854.923863][T21246] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6216'. [ 856.831526][T21279] overlayfs: failed to clone upperpath [ 858.893623][T12343] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 859.028074][T21306] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6243'. [ 859.044058][T12343] usb 4-1: Using ep0 maxpacket: 16 [ 859.046679][T12343] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 859.046703][T12343] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 859.046723][T12343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 859.046775][T12343] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 859.050082][T12343] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 859.050109][T12343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.050131][T12343] usb 4-1: Product: syz [ 859.050146][T12343] usb 4-1: Manufacturer: syz [ 859.050163][T12343] usb 4-1: SerialNumber: syz [ 859.574546][T12343] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 859.574570][T12343] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 859.574613][T12343] cdc_ncm 4-1:1.0: bind() failure [ 859.610203][T12343] usb 4-1: USB disconnect, device number 53 [ 860.900052][T21328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6253'. [ 861.318380][ T6067] Bluetooth: hci1: Frame reassembly failed (-84) [ 861.484686][T21341] netlink: 'syz.6.6257': attribute type 4 has an invalid length. [ 861.544017][T21342] netlink: 'syz.6.6257': attribute type 4 has an invalid length. [ 861.838958][T21346] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 863.374872][ T5851] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 864.940938][T21373] 9pnet: p9_errstr2errno: server reported unknown error pA [ 865.672655][T21390] Oops: general protection fault, probably for non-canonical address 0xdffffc000000014d: 0000 [#1] SMP KASAN PTI [ 865.672682][T21390] KASAN: null-ptr-deref in range [0x0000000000000a68-0x0000000000000a6f] [ 865.672704][T21390] CPU: 0 UID: 0 PID: 21390 Comm: syz.2.6272 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 865.672728][T21390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 865.672746][T21390] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 865.672782][T21390] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 865.672801][T21390] RSP: 0018:ffffc900120577e0 EFLAGS: 00010006 [ 865.672820][T21390] RAX: dffffc0000000000 RBX: ffffffff8afa7087 RCX: e28bd6b231155c00 [ 865.672836][T21390] RDX: 0000000000000000 RSI: ffffffff8afa7087 RDI: 000000000000014d [ 865.672850][T21390] RBP: ffffffff819094a7 R08: 0000000000000001 R09: 0000000000000000 [ 865.672864][T21390] R10: dffffc0000000000 R11: fffffbfff1e3ac27 R12: 0000000000000000 [ 865.672877][T21390] R13: 0000000000000a69 R14: 0000000000000a69 R15: 0000000000000001 [ 865.672889][T21390] FS: 00007f90798e56c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 865.672906][T21390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.672920][T21390] CR2: 0000001b31c20ff8 CR3: 0000000037a1c000 CR4: 00000000003526f0 [ 865.672937][T21390] Call Trace: [ 865.672946][T21390] [ 865.672953][T21390] __kasan_check_byte+0x12/0x40 [ 865.672982][T21390] lock_acquire+0x8d/0x360 [ 865.673010][T21390] ? preempt_schedule_common+0x83/0xd0 [ 865.673045][T21390] _raw_spin_lock_irqsave+0xa7/0xf0 [ 865.673074][T21390] ? try_to_wake_up+0x67/0x12b0 [ 865.673102][T21390] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 865.673143][T21390] ? rcuwait_wake_up+0x1c/0x230 [ 865.673166][T21390] try_to_wake_up+0x67/0x12b0 [ 865.673194][T21390] ? rcuwait_wake_up+0x1c/0x230 [ 865.673212][T21390] ? rcuwait_wake_up+0x1c/0x230 [ 865.673229][T21390] ? rcuwait_wake_up+0x1c/0x230 [ 865.673249][T21390] requeue_pi_wake_futex+0x24b/0x2f0 [ 865.673277][T21390] ? __task_pid_nr_ns+0x398/0x470 [ 865.673306][T21390] ? __task_pid_nr_ns+0x28/0x470 [ 865.673340][T21390] ? __pfx_requeue_pi_wake_futex+0x10/0x10 [ 865.673389][T21390] futex_requeue+0x135f/0x1870 [ 865.673419][T21390] ? css_rstat_updated+0x23a/0x4f0 [ 865.673457][T21390] ? __pfx_css_rstat_updated+0x10/0x10 [ 865.673491][T21390] ? __pfx_futex_requeue+0x10/0x10 [ 865.673521][T21390] ? count_memcg_event_mm+0x21/0x260 [ 865.673555][T21390] ? count_memcg_event_mm+0x21/0x260 [ 865.673585][T21390] ? count_memcg_event_mm+0x21/0x260 [ 865.673619][T21390] ? handle_mm_fault+0x30eb/0x3400 [ 865.673649][T21390] ? reacquire_held_locks+0x127/0x1d0 [ 865.673686][T21390] do_futex+0x362/0x420 [ 865.673716][T21390] ? __pfx_do_futex+0x10/0x10 [ 865.673740][T21390] ? lock_vma_under_rcu+0xdf/0x3d0 [ 865.673766][T21390] __se_sys_futex+0x36f/0x400 [ 865.673794][T21390] ? __pfx___se_sys_futex+0x10/0x10 [ 865.673835][T21390] ? __x64_sys_futex+0x21/0xf0 [ 865.673860][T21390] do_syscall_64+0xfa/0x3b0 [ 865.673878][T21390] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.673907][T21390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.673927][T21390] ? clear_bhb_loop+0x60/0xb0 [ 865.673949][T21390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.673968][T21390] RIP: 0033:0x7f907b69ec29 [ 865.673985][T21390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.674003][T21390] RSP: 002b:00007f90798e5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 865.674024][T21390] RAX: ffffffffffffffda RBX: 00007f907b8e6090 RCX: 00007f907b69ec29 [ 865.674039][T21390] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 865.674052][T21390] RBP: 00007f907b721e41 R08: 0000200000048000 R09: 0000000000000000 [ 865.674066][T21390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.674077][T21390] R13: 00007f907b8e6128 R14: 00007f907b8e6090 R15: 00007ffdcd1fb198 [ 865.674101][T21390] [ 865.674116][T21390] Modules linked in: [ 865.674144][T21390] ---[ end trace 0000000000000000 ]--- [ 865.674155][T21390] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 865.674184][T21390] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 865.674220][T21390] RSP: 0018:ffffc900120577e0 EFLAGS: 00010006 [ 865.674238][T21390] RAX: dffffc0000000000 RBX: ffffffff8afa7087 RCX: e28bd6b231155c00 [ 865.674255][T21390] RDX: 0000000000000000 RSI: ffffffff8afa7087 RDI: 000000000000014d [ 865.674269][T21390] RBP: ffffffff819094a7 R08: 0000000000000001 R09: 0000000000000000 [ 865.674283][T21390] R10: dffffc0000000000 R11: fffffbfff1e3ac27 R12: 0000000000000000 [ 865.674297][T21390] R13: 0000000000000a69 R14: 0000000000000a69 R15: 0000000000000001 [ 865.674310][T21390] FS: 00007f90798e56c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 865.674329][T21390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.674344][T21390] CR2: 0000001b31c20ff8 CR3: 0000000037a1c000 CR4: 00000000003526f0 [ 865.674365][T21390] Kernel panic - not syncing: Fatal exception [ 865.674705][T21390] Kernel Offset: disabled