last executing test programs: 5m35.557696911s ago: executing program 4 (id=15540): setreuid(0x0, 0xee00) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x6, 0x0, 0xa, 0x0, 0xf1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m35.391008408s ago: executing program 4 (id=15545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000080000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe0000000066090000fdffffffdbaaf0ff50000000bf8600000000000007080000c8070000bfa400000000000007040000f0ffefffd50000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m35.173489006s ago: executing program 4 (id=15547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf25170000000c000680084b"], 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x4000000) 5m34.978485653s ago: executing program 4 (id=15549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x3e, &(0x7f0000000740)={&(0x7f0000000940)={0x24, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER, @TIPC_NLA_NODE_KEY_MASTER, @TIPC_NLA_NODE_ID={0x0, 0x3, "dceefe3cd28c5b918838b9b13664cc7044b98cdc9e84688e729baa10367f67ca51536110bf9ccb6bf871caba1b8692503a11a38252cbe1a6077d2082e96abc1a525b78f9c7bb263765770601477d31081d33e50393a26239e893a9aa75e1"}, @TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_ID={0x0, 0x3, "1952ed41ad9f71aeb7d488079a"}, @TIPC_NLA_NODE_KEY={0x0, 0x4, {'gcm(aes)\x00', 0x0, "8b219926a464178bb4f17e57224c2e059f14de282a998f016b2c44b0178a"}}, @TIPC_NLA_NODE_ID={0x0, 0x3, "578275c436a60160fb1adf39c40e4934d07bf93669cad3111337c4fd79ae7e15e1eb1d62048b1483b6deca4d274cacd5c85a06e6e16c5e60947e3295c27303f6fc38b7ca358102f288ee5d8817cf3c7bc82efda7fbf292a3a16feeab390c0c7c8c3e824f4c0b932b2ddcd9f3d1c327426ddcfe5bc609f235681f218e917756031985966bfcd7d98ae1b64372ea9081b9783b9d0d19e138408900298cfe"}]}, @TIPC_NLA_SOCK={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL]}]}, 0x24}}, 0x0) 5m34.741020191s ago: executing program 4 (id=15553): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5m34.542786837s ago: executing program 4 (id=15557): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r0, 0x80204705, 0xfffffffffffffffe) 5m20.535875795s ago: executing program 32 (id=15557): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r0, 0x80204705, 0xfffffffffffffffe) 2m54.963748531s ago: executing program 3 (id=18497): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='gid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2m54.110921774s ago: executing program 3 (id=18516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m53.990082714s ago: executing program 3 (id=18519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 2m53.835025468s ago: executing program 3 (id=18521): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 2m53.7672592s ago: executing program 3 (id=18522): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000340)="00ad83b4", 0x4) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f00000003c0)=""/17, &(0x7f0000000380)=0x11) 2m53.378560717s ago: executing program 3 (id=18530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2m53.042328247s ago: executing program 33 (id=18530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2m16.373467342s ago: executing program 2 (id=19128): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) 2m16.201771091s ago: executing program 2 (id=19131): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020020000000007b9a00fe00000000b6090800000000007b9af0ff0000000000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182800"/132, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf8f07000000000000080000000000008500000007000000b7"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m16.066962674s ago: executing program 2 (id=19135): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2m16.001342833s ago: executing program 2 (id=19137): unshare(0x20000600) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x7, &(0x7f0000000200)={[0x2000007]}, 0x8) 2m15.903488748s ago: executing program 2 (id=19139): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2b780af2}]}]}], {0x14}}, 0x90}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m15.778951252s ago: executing program 2 (id=19141): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m1.743359953s ago: executing program 34 (id=19141): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2.899290697s ago: executing program 6 (id=21934): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) 2.790895702s ago: executing program 6 (id=21935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 2.790564276s ago: executing program 6 (id=21936): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0aac00000000000000000000000000090002"], 0x20}}, 0x0) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) 2.697801529s ago: executing program 6 (id=21938): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private=0xa010100, 0x4e24, 0x3, 'nq\x00', 0x1d, 0x2, 0x18}, 0x2c) 2.520716253s ago: executing program 6 (id=21942): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) sendmmsg$sock(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@txtime={{0x14, 0x1, 0x41, 0x3}}], 0x14}}], 0x1, 0x20000844) 2.408628605s ago: executing program 6 (id=21945): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x40, 0x30, 0x7, {0x27, 0x1, "a7ea3163fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.032558352s ago: executing program 7 (id=21953): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.963001156s ago: executing program 7 (id=21955): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x4}, 0x10) write(r0, &(0x7f0000000400)="240000001e005f0214f6ffffffddfff80700"/36, 0x24) 1.829617497s ago: executing program 7 (id=21958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0xc0, 0xfffffffd}]}) 1.676334638s ago: executing program 7 (id=21960): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 1.558982569s ago: executing program 7 (id=21962): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = getpgid(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x2d79, r1}) 1.496077733s ago: executing program 7 (id=21965): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x9, "09a72734"}, @main, @local=@item_4={0x3, 0x2, 0x9, "dc370ea4"}]}}, 0x0}, 0x0) 859.533734ms ago: executing program 0 (id=21980): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000007d40)=ANY=[@ANYBLOB="80250000120001002bbd700000000000100000000c0000000000000000000000602536"], 0x2580}], 0x1, 0x0, 0x0, 0x8001}, 0x84800) 794.536025ms ago: executing program 0 (id=21982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000d50b00850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 722.44806ms ago: executing program 0 (id=21984): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0) 655.760518ms ago: executing program 0 (id=21986): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') getdents64(r0, &(0x7f0000002840)=""/4118, 0x1077) mknodat$null(r0, &(0x7f00000001c0)='./file0\x00', 0x800, 0x103) 590.979841ms ago: executing program 0 (id=21988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20) 510.621747ms ago: executing program 0 (id=21990): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 365.979021ms ago: executing program 1 (id=21994): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x40, 0x1, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) 365.236782ms ago: executing program 5 (id=21995): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1) fcntl$notify(r0, 0x402, 0x0) 323.646154ms ago: executing program 1 (id=21996): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$dsp(r0, 0x0, 0x0) 297.763768ms ago: executing program 5 (id=21997): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r1}) 267.070939ms ago: executing program 1 (id=21998): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200), 0x4) 224.354962ms ago: executing program 5 (id=21999): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 167.061187ms ago: executing program 1 (id=22000): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1, 0x0, 0x7ffffffe}}, 0x20) 166.60861ms ago: executing program 5 (id=22001): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc, 0x1, 0x0, 0xfffffffe}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000020000000000800040001000000", 0x24) 141.516285ms ago: executing program 1 (id=22002): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pread64(r0, 0x0, 0x0, 0x41e) 96.82805ms ago: executing program 5 (id=22003): open(&(0x7f0000000200)='./file0\x00', 0xc0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, 0xffffffffffffffff, 0x0) 87.276879ms ago: executing program 1 (id=22004): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018010000716c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=22005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): nvalid wMaxPacketSize 0 [ 1026.117446][ T5923] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1026.126539][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.157047][ T5923] usb 1-1: config 0 descriptor?? [ 1026.456597][T25304] netlink: 'syz.5.19109': attribute type 3 has an invalid length. [ 1026.557930][ T5923] uclogic 0003:256C:006D.0056: No inputs registered, leaving [ 1026.578873][ T5923] uclogic 0003:256C:006D.0056: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input1 [ 1026.636770][T25321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19114'. [ 1026.702929][T25325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19116'. [ 1026.755258][ T5923] usb 1-1: USB disconnect, device number 83 [ 1027.027890][T25351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19122'. [ 1027.343501][ T30] audit: type=1326 audit(2000000246.620:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25309 comm="syz.1.19112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7fc00000 [ 1027.399470][T25367] netlink: 'syz.2.19128': attribute type 4 has an invalid length. [ 1027.408279][T25367] netlink: 17 bytes leftover after parsing attributes in process `syz.2.19128'. [ 1027.817643][T25391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19139'. [ 1027.830663][T25391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1027.930339][T25395] siw: device registration error -23 [ 1027.938865][T25395] smc: removing ib device syz2 [ 1028.439815][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1028.588293][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1028.595540][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.623111][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1028.638616][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1028.654078][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.672067][ T9] usb 6-1: Product: syz [ 1028.676625][ T9] usb 6-1: Manufacturer: syz [ 1028.681267][ T9] usb 6-1: SerialNumber: syz [ 1028.704427][ T9] usb 6-1: config 0 descriptor?? [ 1028.714175][T25440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19158'. [ 1028.724913][T25440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19158'. [ 1028.888681][ T6074] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1028.907927][ T9] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 1028.918075][ T9] f6 f2 2c fa 89 99 d8 d7 [ 1028.922716][ T9] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1029.057032][ T6074] usb 2-1: config index 0 descriptor too short (expected 126, got 72) [ 1029.073079][ T6074] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1029.082616][ T6074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.090740][ T6074] usb 2-1: Product: syz [ 1029.095485][ T6074] usb 2-1: Manufacturer: syz [ 1029.100211][ T6074] usb 2-1: SerialNumber: syz [ 1029.108814][ T6180] usb 6-1: USB disconnect, device number 32 [ 1029.126178][ T6074] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1029.170080][ T43] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1029.279680][T25469] ptrace attach of "./syz-executor exec"[23081] was attempted by "®"[25469] [ 1029.502616][ T6074] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1029.670408][ T6074] usb 1-1: Using ep0 maxpacket: 16 [ 1029.687886][ T6074] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1029.708885][ T6074] usb 1-1: config 0 has no interface number 0 [ 1029.715169][ T6074] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1029.741499][T25489] netlink: 96 bytes leftover after parsing attributes in process `syz.5.19172'. [ 1029.753409][ T4082] usb 2-1: USB disconnect, device number 99 [ 1029.765721][ T6074] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1029.787077][ T6074] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1029.787609][T25489] vlan3: entered allmulticast mode [ 1029.799943][ T6074] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1029.809757][T25489] gretap0: entered allmulticast mode [ 1029.824207][ T6074] usb 1-1: Product: syz [ 1029.834126][ T6074] usb 1-1: SerialNumber: syz [ 1029.853842][ T6074] usb 1-1: config 0 descriptor?? [ 1029.872891][ T6074] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1029.888905][ T6074] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input145 [ 1029.993642][T25506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19174'. [ 1030.102057][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.109877][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.117062][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.124267][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.131436][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.138686][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.146317][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.153924][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.161354][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.169221][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1030.189657][ T6074] usb 1-1: USB disconnect, device number 84 [ 1030.195889][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1030.208823][ T6074] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1030.395014][ T30] audit: type=1326 audit(2000000249.880:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25534 comm="syz.5.19183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff73238e929 code=0x0 [ 1030.565684][ T43] usb 2-1: Service connection timeout for: 257 [ 1030.574796][ T43] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1030.598931][ T43] ath9k_htc: Failed to initialize the device [ 1030.605778][ T4082] usb 2-1: ath9k_htc: USB layer deinitialized [ 1030.718600][T25558] program syz.0.19192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1030.785799][T25562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19193'. [ 1030.868215][T25566] vivid-000: ================= START STATUS ================= [ 1030.877467][T25566] vivid-000: Radio HW Seek Mode: Bounded [ 1030.886010][T25566] vivid-000: Radio Programmable HW Seek: false [ 1030.893217][T25566] vivid-000: RDS Rx I/O Mode: Block I/O [ 1030.898855][T25566] vivid-000: Generate RBDS Instead of RDS: false [ 1030.905392][T25566] vivid-000: RDS Reception: false [ 1030.917481][T25566] vivid-000: RDS Program Type: 0 inactive [ 1030.923489][T25566] vivid-000: RDS PS Name: inactive [ 1030.935645][T25566] vivid-000: RDS Radio Text: inactive [ 1030.941746][T25566] vivid-000: RDS Traffic Announcement: false inactive [ 1030.951838][T25566] vivid-000: RDS Traffic Program: false inactive [ 1030.958530][T25566] vivid-000: RDS Music: false inactive [ 1030.964129][T25566] vivid-000: ================== END STATUS ================== [ 1031.186229][T25576] netlink: 'syz.1.19200': attribute type 1 has an invalid length. [ 1031.324013][T25584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19204'. [ 1032.085657][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1032.234845][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1032.244786][ T9] usb 2-1: config index 0 descriptor too short (expected 42, got 18) [ 1032.252942][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 1032.263844][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 1032.279533][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 1032.288877][ T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1032.296996][ T9] usb 2-1: Product: syz [ 1032.301243][ T9] usb 2-1: SerialNumber: syz [ 1032.310934][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1032.317281][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 1032.327174][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 1032.333695][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1032.796421][ T9] r8152-cfgselector 2-1: reset high-speed USB device number 100 using dummy_hcd [ 1033.066524][ T30] audit: type=1804 audit(2000000252.754:3376): pid=25650 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.19228" name="/newroot/3881/cgroup.controllers" dev="tmpfs" ino=19508 res=1 errno=0 [ 1033.092083][ T30] audit: type=1800 audit(2000000252.754:3377): pid=25650 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.19228" name="cgroup.controllers" dev="tmpfs" ino=19508 res=0 errno=0 [ 1033.270678][ T43] r8152-cfgselector 2-1: USB disconnect, device number 100 [ 1033.384936][T25675] CUSE: DEVNAME unspecified [ 1034.347888][T25728] tipc: Can't bind to reserved service type 0 [ 1035.902191][T25812] autofs: Bad value for 'fd' [ 1036.022634][ T30] audit: type=1326 audit(2000000255.929:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25817 comm="syz.0.19289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1036.051719][ T30] audit: type=1326 audit(2000000255.929:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25817 comm="syz.0.19289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1036.073733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.086448][ T30] audit: type=1326 audit(2000000255.950:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25817 comm="syz.0.19289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1036.111925][ T30] audit: type=1326 audit(2000000255.950:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25817 comm="syz.0.19289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1036.133671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.147209][ T30] audit: type=1326 audit(2000000255.950:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25817 comm="syz.0.19289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1036.173072][ T30] audit: type=1326 audit(2000000255.950:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25817 comm="syz.0.19289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1036.195109][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.206386][ T30] audit: type=1326 audit(2000000255.950:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25817 comm="syz.0.19289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1036.228146][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.239676][ T30] audit: type=1326 audit(2000000255.950:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25817 comm="syz.0.19289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1036.416725][T25833] netlink: 'syz.1.19295': attribute type 83 has an invalid length. [ 1036.607909][ T4082] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 1036.759315][ T4082] usb 1-1: config 0 has an invalid interface number: 45 but max is 0 [ 1036.768341][ T4082] usb 1-1: config 0 has no interface number 0 [ 1036.774937][ T4082] usb 1-1: config 0 interface 45 altsetting 175 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1036.787746][ T4082] usb 1-1: config 0 interface 45 altsetting 175 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.813095][ T4082] usb 1-1: config 0 interface 45 has no altsetting 0 [ 1036.830048][ T4082] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 1036.849655][ T4082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.873689][ T4082] usb 1-1: config 0 descriptor?? [ 1036.962093][T25864] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19309'. [ 1036.978132][T25864] erspan0: entered promiscuous mode [ 1036.986918][T25864] erspan0: left promiscuous mode [ 1037.263538][ T4082] uclogic 0003:5543:3031.0057: interface is invalid, ignoring [ 1037.363286][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1037.463578][ T4082] usb 1-1: USB disconnect, device number 85 [ 1037.523692][ T9] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.540635][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1037.547320][ T9] usb 6-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1037.574686][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.587981][ T9] usb 6-1: config 0 descriptor?? [ 1037.975170][ T9] elecom 0003:056E:00FB.0058: item fetching failed at offset 5/7 [ 1037.994769][ T9] elecom 0003:056E:00FB.0058: probe with driver elecom failed with error -22 [ 1038.057959][T25937] xt_socket: unknown flags 0xd0 [ 1038.164310][ T6074] usb 6-1: USB disconnect, device number 33 [ 1038.175058][ T4082] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1038.324468][ T4082] usb 2-1: Using ep0 maxpacket: 8 [ 1038.339477][ T4082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.350392][ T4082] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1038.365167][ T4082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.377514][ T4082] usb 2-1: config 0 descriptor?? [ 1038.775925][ T4082] lenovo 0003:17EF:6062.0059: item fetching failed at offset 4/5 [ 1038.803587][ T4082] lenovo 0003:17EF:6062.0059: hid_parse failed [ 1038.810495][ T4082] lenovo 0003:17EF:6062.0059: probe with driver lenovo failed with error -22 [ 1038.960787][ T43] usb 2-1: USB disconnect, device number 101 [ 1039.024342][T26001] netlink: 'syz.0.19349': attribute type 6 has an invalid length. [ 1040.011240][ T6074] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1040.204194][ T6074] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1040.218207][ T6074] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1040.231099][ T6074] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1040.243067][ T6074] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1040.257648][ T6074] usb 2-1: Product: syz [ 1040.261885][ T6074] usb 2-1: Manufacturer: syz [ 1040.268729][ T6074] usb 2-1: SerialNumber: syz [ 1040.281001][ T6074] usb 2-1: config 0 descriptor?? [ 1040.295490][ T6074] usb 2-1: selecting invalid altsetting 0 [ 1040.458978][ T30] audit: type=1326 audit(2000000260.679:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26100 comm="syz.6.19387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8b8e929 code=0x7ffc0000 [ 1040.490319][ T30] audit: type=1326 audit(2000000260.679:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26100 comm="syz.6.19387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8b8e929 code=0x7ffc0000 [ 1040.520323][ T30] audit: type=1326 audit(2000000260.701:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26100 comm="syz.6.19387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fdff8b8e929 code=0x7ffc0000 [ 1040.522355][ T6074] usb 2-1: USB disconnect, device number 102 [ 1040.547690][ T30] audit: type=1326 audit(2000000260.701:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26100 comm="syz.6.19387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8b8e929 code=0x7ffc0000 [ 1040.578979][ T30] audit: type=1326 audit(2000000260.701:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26100 comm="syz.6.19387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8b8e929 code=0x7ffc0000 [ 1040.653078][ T30] audit: type=1326 audit(2000000260.712:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26100 comm="syz.6.19387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fdff8b8e929 code=0x7ffc0000 [ 1040.679907][ T30] audit: type=1326 audit(2000000260.712:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26100 comm="syz.6.19387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8b8e929 code=0x7ffc0000 [ 1041.166926][T26148] netlink: 47 bytes leftover after parsing attributes in process `syz.5.19401'. [ 1041.371275][T26168] netlink: 'syz.5.19409': attribute type 30 has an invalid length. [ 1041.680633][ T4082] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1041.838975][ T4082] usb 1-1: Using ep0 maxpacket: 8 [ 1041.845758][ T4082] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1041.875599][ T4082] usb 1-1: config 0 has no interface number 0 [ 1041.884144][ T4082] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1041.897015][ T4082] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1041.910925][ T4082] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1041.926596][ T4082] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1041.988504][ T4082] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1041.997835][ T4082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.052546][ T4082] usb 1-1: config 0 descriptor?? [ 1042.097213][ T4082] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1042.288692][ T6074] usb 1-1: USB disconnect, device number 86 [ 1042.310274][ T6074] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1042.439787][T26263] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.19432'. [ 1042.477322][T26263] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1042.505343][T26263] openvswitch: netlink: Message has 8454 unknown bytes. [ 1042.673193][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1042.695867][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1042.705501][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1042.716943][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1042.727350][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1043.246086][T26309] program syz.1.19449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1043.479906][T26325] netlink: 220 bytes leftover after parsing attributes in process `syz.5.19454'. [ 1043.500615][T26325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19454'. [ 1043.907108][T26274] chnl_net:caif_netlink_parms(): no params data found [ 1044.348864][T26274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.356110][T26274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.384822][T26274] bridge_slave_0: entered allmulticast mode [ 1044.399327][T26274] bridge_slave_0: entered promiscuous mode [ 1044.429628][T26274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.446614][T26274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.458737][T26274] bridge_slave_1: entered allmulticast mode [ 1044.475008][T26274] bridge_slave_1: entered promiscuous mode [ 1044.536832][T26532] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 1044.598946][T26274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.644877][T26274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.730558][T23551] Bluetooth: hci5: command tx timeout [ 1044.836396][ T30] audit: type=1400 audit(2000000265.366:3393): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=26577 comm="syz.1.19479" daddr=::ffff:172.20.20.0 [ 1044.902383][T26274] team0: Port device team_slave_0 added [ 1044.948545][ T30] audit: type=1326 audit(2000000265.494:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26589 comm="syz.1.19482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a1ff8e929 code=0x0 [ 1044.991772][T26274] team0: Port device team_slave_1 added [ 1045.047675][T26592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1045.099822][T26274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.117796][T26274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.152735][T26274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.171248][ T30] audit: type=1326 audit(2000000265.730:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26616 comm="syz.5.19485" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff73238e929 code=0x0 [ 1045.201104][T26274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.210829][T26274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.246441][T26274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.395040][T26274] hsr_slave_0: entered promiscuous mode [ 1045.403591][T26274] hsr_slave_1: entered promiscuous mode [ 1045.410186][T26274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1045.419188][T26663] netlink: 'syz.0.19489': attribute type 2 has an invalid length. [ 1045.424983][T26274] Cannot create hsr debugfs directory [ 1045.951008][T26745] program syz.6.19499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1046.005836][T26274] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1046.044202][T26274] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1046.091647][T26274] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1046.114762][T26274] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1046.195245][ C1] sd 0:0:1:0: [sda] tag#1618 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1046.205766][ C1] sd 0:0:1:0: [sda] tag#1618 CDB: Write(6) 0a 00 00 00 00 00 [ 1046.343542][T26274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.423603][T26274] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.468263][T18575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.475516][T18575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.513021][T18575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.520215][T18575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.683086][T23551] Bluetooth: hci5: command tx timeout [ 1047.052291][T26807] devtmpfs: Too few inodes for current use [ 1047.064467][T26274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.120169][T26811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19520'. [ 1047.262380][T26818] overlayfs: conflicting options: nfs_export=on,index=off [ 1047.299783][T26819] sp0: Synchronizing with TNC [ 1047.710217][T26836] pim6reg: entered allmulticast mode [ 1048.154185][T26274] veth0_vlan: entered promiscuous mode [ 1048.188781][T26274] veth1_vlan: entered promiscuous mode [ 1048.323229][T26274] veth0_macvtap: entered promiscuous mode [ 1048.362338][T26274] veth1_macvtap: entered promiscuous mode [ 1048.439271][T26274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.502394][T26274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.524764][T26274] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.551319][T26274] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.563561][T26274] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.576096][T26274] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.618386][T23551] Bluetooth: hci5: command tx timeout [ 1048.712058][ T5923] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1048.829679][T18584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.852965][T18584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.889723][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 1048.904264][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1048.929998][ T5923] usb 2-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1048.956968][T18584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.969868][ T5923] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1048.977546][T18584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.995587][ T5923] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.40 [ 1049.000737][T26897] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 1049.021985][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.051105][ T5923] usb 2-1: Product: syz [ 1049.067808][ T5923] usb 2-1: Manufacturer: syz [ 1049.073070][ T5923] usb 2-1: SerialNumber: syz [ 1049.319934][ T5923] usbhid 2-1:1.0: can't add hid device: -71 [ 1049.326039][ T5923] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1049.353873][ T5923] usb 2-1: USB disconnect, device number 103 [ 1050.061124][T26953] mkiss: ax0: crc mode is auto. [ 1050.068639][T26962] mkiss: ax1: crc mode is auto. [ 1050.243796][T26981] netlink: 'syz.7.19572': attribute type 1 has an invalid length. [ 1050.252243][T26981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.375415][T26987] netlink: 'syz.5.19575': attribute type 5 has an invalid length. [ 1050.558033][T23551] Bluetooth: hci5: command tx timeout [ 1050.644985][T27007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19586'. [ 1050.860541][T27021] devtmpfs: Too few inodes for current use [ 1050.931351][T23551] Bluetooth: hci3: command tx timeout [ 1051.325669][ T30] audit: type=1326 audit(2000000272.336:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27044 comm="syz.5.19603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73238e929 code=0x7ffc0000 [ 1051.353633][T27048] nbd: couldn't find a device at index 135 [ 1051.392961][ T30] audit: type=1326 audit(2000000272.369:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27044 comm="syz.5.19603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7ff73238e929 code=0x7ffc0000 [ 1051.454742][ T30] audit: type=1326 audit(2000000272.369:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27044 comm="syz.5.19603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73238e929 code=0x7ffc0000 [ 1051.514950][ T30] audit: type=1326 audit(2000000272.369:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27044 comm="syz.5.19603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73238e929 code=0x7ffc0000 [ 1051.614810][ T30] audit: type=1326 audit(2000000272.369:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27044 comm="syz.5.19603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7ff73238e929 code=0x7ffc0000 [ 1051.614861][ T30] audit: type=1326 audit(2000000272.369:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27044 comm="syz.5.19603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73238e929 code=0x7ffc0000 [ 1051.614901][ T30] audit: type=1326 audit(2000000272.369:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27044 comm="syz.5.19603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73238e929 code=0x7ffc0000 [ 1051.674923][ C1] vkms_vblank_simulate: vblank timer overrun [ 1051.722037][ C1] vkms_vblank_simulate: vblank timer overrun [ 1051.738266][T27083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19613'. [ 1052.320305][ T6180] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1052.350449][ T30] audit: type=1326 audit(2000000273.430:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.5.19629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73238e929 code=0x7ffc0000 [ 1052.436130][ T30] audit: type=1326 audit(2000000273.430:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.5.19629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73238e929 code=0x7ffc0000 [ 1052.503709][ T30] audit: type=1326 audit(2000000273.441:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27124 comm="syz.5.19629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff73238e929 code=0x7ffc0000 [ 1052.560842][ T6180] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.593541][ T6180] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1052.625762][ T6180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.641496][ T6180] usb 2-1: Product: syz [ 1052.648706][ T6180] usb 2-1: Manufacturer: syz [ 1052.665897][ T6180] usb 2-1: SerialNumber: syz [ 1052.692343][ T6180] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1052.809435][T27153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19640'. [ 1052.909383][T27159] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1052.919424][T27159] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1052.928944][T27159] overlayfs: missing 'lowerdir' [ 1053.279943][ T6180] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1053.327700][ T6180] usb 2-1: USB disconnect, device number 104 [ 1053.762490][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.989247][T27335] support for cryptoloop has been removed. Use dm-crypt instead. [ 1056.619100][T27379] QAT: Invalid ioctl 1075883590 [ 1056.624130][T27379] QAT: Invalid ioctl 1075883590 [ 1056.643836][T27379] QAT: Invalid ioctl 1075883590 [ 1056.658756][T27379] QAT: Invalid ioctl 1075883590 [ 1056.663793][T27379] QAT: Invalid ioctl 1075883590 [ 1056.684391][T27379] QAT: Invalid ioctl 1075883590 [ 1056.694010][T27379] QAT: Invalid ioctl 1075883590 [ 1056.701506][T27379] QAT: Invalid ioctl 1075883590 [ 1056.722142][T27379] QAT: Invalid ioctl 1075883590 [ 1056.727286][T27379] QAT: Invalid ioctl 1075883590 [ 1056.996950][T27402] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19742'. [ 1057.029328][ T5923] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1057.031331][T27402] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19742'. [ 1057.192903][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1057.223151][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1057.278176][ T5923] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 1057.297897][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.328769][ T5923] usb 2-1: config 0 descriptor?? [ 1057.340470][T27387] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1057.771547][ T5923] apple 0003:05AC:0264.005A: unknown main item tag 0x6 [ 1057.799505][ T5923] apple 0003:05AC:0264.005A: hidraw0: USB HID vff.fa Device [HID 05ac:0264] on usb-dummy_hcd.1-1/input0 [ 1057.960441][T18725] usb 2-1: USB disconnect, device number 105 [ 1058.025495][T27473] netlink: 76 bytes leftover after parsing attributes in process `syz.6.19767'. [ 1058.700593][ T6180] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1058.870965][ T6180] usb 1-1: Using ep0 maxpacket: 8 [ 1058.887066][ T6180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.916546][ T6180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.932039][ T6180] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 1058.954709][ T6180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.973875][ T6180] usb 1-1: config 0 descriptor?? [ 1059.289390][T27552] usb usb8: usbfs: process 27552 (syz.6.19801) did not claim interface 0 before use [ 1059.390327][ T6180] logitech 0003:046D:C626.005B: unknown main item tag 0x0 [ 1059.403934][ T6180] logitech 0003:046D:C626.005B: unknown main item tag 0x0 [ 1059.412112][ T6180] logitech 0003:046D:C626.005B: unknown main item tag 0x0 [ 1059.423340][ T6180] logitech 0003:046D:C626.005B: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.0-1/input0 [ 1059.583602][ T6180] usb 1-1: USB disconnect, device number 87 [ 1059.732269][T27586] vivid-002: disconnect [ 1059.739248][T27585] vivid-002: reconnect [ 1059.962993][T27598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19816'. [ 1060.665429][T27638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19836'. [ 1060.678260][T27638] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19836'. [ 1060.721389][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1060.721408][ T30] audit: type=1326 audit(2000000282.406:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.6.19837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8b8e929 code=0x7ffc0000 [ 1060.807187][ T30] audit: type=1326 audit(2000000282.406:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.6.19837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8b8e929 code=0x7ffc0000 [ 1060.832736][ T30] audit: type=1326 audit(2000000282.449:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.6.19837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fdff8b8e929 code=0x7ffc0000 [ 1060.876219][ T30] audit: type=1326 audit(2000000282.449:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.6.19837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8b8e929 code=0x7ffc0000 [ 1061.002117][ T30] audit: type=1326 audit(2000000282.449:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.6.19837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8b8e929 code=0x7ffc0000 [ 1061.366625][ T30] audit: type=1326 audit(2000000283.093:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27674 comm="syz.1.19850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x50000 [ 1061.438020][ T30] audit: type=1326 audit(2000000283.093:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27674 comm="syz.1.19850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x50000 [ 1061.471545][ T30] audit: type=1326 audit(2000000283.093:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27674 comm="syz.1.19850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x50000 [ 1061.532475][T27685] tipc: Started in network mode [ 1061.553656][T27685] tipc: Node identity bafc7e5a45e4, cluster identity 4711 [ 1061.558839][ T30] audit: type=1326 audit(2000000283.093:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27674 comm="syz.1.19850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x50000 [ 1061.563561][T27685] tipc: Enabled bearer , priority 10 [ 1061.656766][ T30] audit: type=1326 audit(2000000283.093:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27674 comm="syz.1.19850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x50000 [ 1062.606376][T18725] tipc: Node number set to 4279795290 [ 1062.852308][T27743] veth0_to_batadv: entered promiscuous mode [ 1062.864266][T27743] veth0_to_batadv: left promiscuous mode [ 1064.107003][T27782] tipc: Failed to obtain node identity [ 1064.112554][T27782] tipc: Enabling of bearer rejected, failed to enable media [ 1064.137506][T27784] sg_write: data in/out 209152/4 bytes for SCSI command 0x89-- guessing data in; [ 1064.137506][T27784] program syz.5.19898 not setting count and/or reply_len properly [ 1064.660443][T27815] netlink: 'syz.1.19912': attribute type 1 has an invalid length. [ 1065.651360][T27872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19934'. [ 1065.683376][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1065.831989][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1065.873505][ T10] usb 6-1: config 64 has an invalid interface number: 13 but max is 0 [ 1065.889407][ T10] usb 6-1: config 64 has no interface number 0 [ 1065.895684][ T10] usb 6-1: config 64 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1065.934473][ T10] usb 6-1: config 64 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 1065.965064][ T10] usb 6-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 1065.976195][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.000319][ T10] usb 6-1: Product: syz [ 1066.013979][ T10] usb 6-1: Manufacturer: syz [ 1066.018634][ T10] usb 6-1: SerialNumber: syz [ 1066.053116][ T10] option 6-1:64.13: GSM modem (1-port) converter detected [ 1066.273521][ T10] usb 6-1: USB disconnect, device number 34 [ 1066.295176][ T10] option 6-1:64.13: device disconnected [ 1066.717819][ T6180] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1066.804570][T27960] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19961'. [ 1066.869182][ T6180] usb 6-1: config 0 has an invalid interface number: 229 but max is 0 [ 1066.891037][ T6180] usb 6-1: config 0 has no interface number 0 [ 1066.928913][ T6180] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 1066.947776][ T6180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.957935][ T6180] usb 6-1: Product: syz [ 1066.966319][ T6180] usb 6-1: Manufacturer: syz [ 1066.972497][ T6180] usb 6-1: SerialNumber: syz [ 1066.983392][ T6180] usb 6-1: config 0 descriptor?? [ 1066.996898][T27968] program syz.1.19965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1067.194707][ T6180] qcserial 6-1:0.229: Qualcomm USB modem converter detected [ 1067.220666][ T6180] usb 6-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1067.256529][ T6180] usb 6-1: USB disconnect, device number 35 [ 1067.287421][ T6180] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1067.317562][ T6180] qcserial 6-1:0.229: device disconnected [ 1068.641095][ T10] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1068.811961][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.838161][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1068.859651][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1068.881868][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1068.908408][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1068.928399][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1068.937284][ T10] usb 2-1: Manufacturer: syz [ 1068.947499][ T10] usb 2-1: config 0 descriptor?? [ 1069.238534][ T10] rc_core: IR keymap rc-hauppauge not found [ 1069.244524][ T10] Registered IR keymap rc-empty [ 1069.253388][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.273378][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.302263][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1069.322677][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input149 [ 1069.345468][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.384758][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.412689][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.440958][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.472621][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.507083][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.534174][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.552629][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.590471][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.646500][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.683256][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1069.718152][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1069.745210][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1069.779051][ T10] usb 2-1: USB disconnect, device number 106 [ 1069.847050][ T30] kauditd_printk_skb: 4546 callbacks suppressed [ 1069.847068][ T30] audit: type=1800 audit(2000000292.197:7967): pid=28155 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.20028" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1069.964518][T23935] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1070.129146][T23935] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 1070.138778][T23935] usb 1-1: config 0 has no interface number 0 [ 1070.145004][T23935] usb 1-1: config 0 interface 98 has no altsetting 0 [ 1070.156708][T23935] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1070.166106][T23935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.177376][T23935] usb 1-1: Product: syz [ 1070.181704][T23935] usb 1-1: Manufacturer: syz [ 1070.186345][T23935] usb 1-1: SerialNumber: syz [ 1070.206364][T23935] usb 1-1: config 0 descriptor?? [ 1070.412210][T23935] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1070.627583][ T6074] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1070.769390][ T6074] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1070.778782][ T6074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.789881][ T6074] usb 6-1: config 0 descriptor?? [ 1070.797732][ T6074] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1071.003720][T23935] usb 1-1: reset high-speed USB device number 88 using dummy_hcd [ 1071.356758][T23935] usb 1-1: failed to restore interface 98 altsetting 4 (error=-71) [ 1071.373281][ T6074] gp8psk: usb out operation failed. [ 1071.388289][T23935] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1071.389048][ T6074] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1071.398172][T23935] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1071.410546][ T6074] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1071.429283][ T6074] usb 6-1: USB disconnect, device number 36 [ 1071.441662][ T5923] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1071.451818][ T5923] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1071.463030][T23935] usb 1-1: USB disconnect, device number 88 [ 1072.075297][T28266] bridge0: entered promiscuous mode [ 1072.082085][T28266] macsec0: entered promiscuous mode [ 1072.094303][T28266] bridge0: port 1(macsec0) entered blocking state [ 1072.101421][T28266] bridge0: port 1(macsec0) entered disabled state [ 1072.108846][T28266] macsec0: entered allmulticast mode [ 1072.114186][T28266] bridge0: entered allmulticast mode [ 1072.123957][T28266] macsec0: left allmulticast mode [ 1072.129655][T28266] bridge0: left allmulticast mode [ 1072.136673][T28266] bridge0: left promiscuous mode [ 1072.528108][T28288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1073.306098][ T30] audit: type=1326 audit(2000000295.908:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28332 comm="syz.5.20088" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff73238e929 code=0x0 [ 1073.524992][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1073.596923][ T30] audit: type=1326 audit(2000000296.219:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.7.20096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1073.618672][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.640574][ T30] audit: type=1326 audit(2000000296.219:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.7.20096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1073.662330][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.673849][ T30] audit: type=1326 audit(2000000296.219:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.7.20096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1073.674288][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1073.695550][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.714214][ T30] audit: type=1326 audit(2000000296.219:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.7.20096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1073.741927][ T30] audit: type=1326 audit(2000000296.219:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.7.20096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1073.745440][ T10] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1073.765339][ T30] audit: type=1326 audit(2000000296.219:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.7.20096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1073.778785][ T10] usb 1-1: config 0 has no interface number 0 [ 1073.797755][T28357] netlink: 'syz.7.20097': attribute type 1 has an invalid length. [ 1073.804225][ T10] usb 1-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.820472][ T10] usb 1-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.830744][ T10] usb 1-1: config 0 interface 8 has no altsetting 0 [ 1073.837568][ T30] audit: type=1326 audit(2000000296.219:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.7.20096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1073.859918][T28357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20097'. [ 1073.870030][ T10] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1073.902737][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.928021][ T10] usb 1-1: config 0 descriptor?? [ 1074.329009][ T10] uclogic 0003:5543:0522.005C: item fetching failed at offset 2/5 [ 1074.339144][ T10] uclogic 0003:5543:0522.005C: parse failed [ 1074.345247][ T10] uclogic 0003:5543:0522.005C: probe with driver uclogic failed with error -22 [ 1074.409306][T28396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.513181][ T10] usb 1-1: USB disconnect, device number 89 [ 1074.693253][ T10] kernel write not supported for file /input/mouse0 (pid: 10 comm: kworker/0:1) [ 1074.696678][T28423] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1075.455132][ T6074] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1075.464445][T18725] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1075.623060][ T6074] usb 1-1: Using ep0 maxpacket: 8 [ 1075.628725][T18725] usb 6-1: Using ep0 maxpacket: 16 [ 1075.642933][ T6074] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.654884][ T6074] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.665027][ T6074] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1075.674199][T18725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.685548][ T6074] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 1075.695540][T18725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.705394][ T6074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.716257][T18725] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1075.725381][T18725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.740819][ T6074] usb 1-1: config 0 descriptor?? [ 1075.753392][T18725] usb 6-1: config 0 descriptor?? [ 1075.774387][T28467] binder_alloc: binder_alloc_mmap_handler: 28466 2000003d8000-2000003d9000 already mapped failed -16 [ 1076.133421][ T6074] a4tech 0003:09DA:000A.005D: unbalanced collection at end of report description [ 1076.149291][T18725] gt683r_led 0003:1770:FF00.005E: unbalanced collection at end of report description [ 1076.164400][ T6074] a4tech 0003:09DA:000A.005D: parse failed [ 1076.170317][ T6074] a4tech 0003:09DA:000A.005D: probe with driver a4tech failed with error -22 [ 1076.183249][T18725] gt683r_led 0003:1770:FF00.005E: hid parsing failed [ 1076.190825][T18725] gt683r_led 0003:1770:FF00.005E: probe with driver gt683r_led failed with error -22 [ 1076.321671][T18725] usb 1-1: USB disconnect, device number 90 [ 1076.335607][T23935] usb 6-1: USB disconnect, device number 37 [ 1076.655088][T28521] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20146'. [ 1076.745181][T28525] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20148'. [ 1077.414491][ T30] audit: type=1326 audit(2000000300.315:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.7.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1077.509066][ T30] audit: type=1326 audit(2000000300.315:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.7.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1077.530830][ C1] vkms_vblank_simulate: vblank timer overrun [ 1077.609035][ T30] audit: type=1326 audit(2000000300.337:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.7.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1077.671258][ T30] audit: type=1326 audit(2000000300.337:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.7.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1077.734192][ T30] audit: type=1326 audit(2000000300.337:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.7.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1077.794806][ T30] audit: type=1326 audit(2000000300.347:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.7.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1077.859934][ T30] audit: type=1326 audit(2000000300.347:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28559 comm="syz.7.20160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1078.005379][T28580] netlink: 'syz.5.20168': attribute type 1 has an invalid length. [ 1078.033367][T28580] netlink: 208 bytes leftover after parsing attributes in process `syz.5.20168'. [ 1078.053022][T28580] netlink: 'syz.5.20168': attribute type 1 has an invalid length. [ 1078.075859][T28580] netlink: 'syz.5.20168': attribute type 2 has an invalid length. [ 1078.241759][T28591] sp0: Synchronizing with TNC [ 1078.410030][T28608] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.20178'. [ 1078.594322][T28618] netlink: 'syz.0.20184': attribute type 1 has an invalid length. [ 1079.026135][T28640] binder: 28639:28640 ioctl c0306201 2000000001c0 returned -22 [ 1079.832200][T28693] fuse: Invalid rootmode [ 1080.040216][T28708] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 1080.136196][ T6074] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1080.286438][ T6074] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1080.303449][ T6074] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.312778][ T6074] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.325317][ T6074] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1080.342652][ T6074] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.352082][ T6074] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.366451][ T6074] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1080.379940][ T6074] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.389707][ T6074] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.401657][ T6074] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1080.419240][ T6074] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.434922][ T6074] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.458160][ T6074] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1080.476447][ T6074] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.496289][ T6074] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.537597][ T6074] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1080.553140][ T6074] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.575634][ T6074] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.616475][ T6074] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1080.640702][ T6074] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.650008][ T6074] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.662786][ T6074] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1080.690677][ T6074] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.705791][ T6074] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.733076][ T6074] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1080.742016][ T6074] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1080.751626][ T6074] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1080.760009][ T6074] usb 1-1: Product: syz [ 1080.779501][ T6074] usb 1-1: Manufacturer: syz [ 1080.784295][ T6074] usb 1-1: SerialNumber: syz [ 1080.798436][ T6074] usb 1-1: config 0 descriptor?? [ 1080.812600][ T6074] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1080.840789][T28750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20239'. [ 1080.851530][T28750] tipc: Started in network mode [ 1080.857301][T28750] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 1080.867645][T28750] tipc: Enabling of bearer rejected, failed to enable media [ 1080.873244][T23935] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1080.910577][ T43] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1081.006507][T28756] ubi31: attaching mtd0 [ 1081.014550][T28756] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 1024 [ 1081.024333][T28756] ubi31 error: validate_ec_hdr: bad EC header [ 1081.024826][ T6074] usb 1-1: USB disconnect, device number 91 [ 1081.030441][T28756] Erase counter header dump: [ 1081.030476][T28756] magic 0x55424923 [ 1081.050547][T23935] usb 6-1: Using ep0 maxpacket: 16 [ 1081.052948][ T6074] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1081.063346][T28756] version 1 [ 1081.063365][T28756] ec 1 [ 1081.063374][T28756] vid_hdr_offset 64 [ 1081.063384][T28756] data_offset 128 [ 1081.063392][T28756] image_seq 1501370925 [ 1081.063402][T28756] hdr_crc 0x208e40bf [ 1081.063412][T28756] erase counter header hexdump: [ 1081.063488][T28756] CPU: 0 UID: 0 PID: 28756 Comm: syz.7.20242 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 1081.063510][T28756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1081.063521][T28756] Call Trace: [ 1081.063529][T28756] [ 1081.063537][T28756] dump_stack_lvl+0x189/0x250 [ 1081.063566][T28756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1081.063591][T28756] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 1081.063615][T28756] ? kernel_fpu_end+0xd2/0x120 [ 1081.063641][T28756] validate_ec_hdr+0x20d/0x340 [ 1081.063665][T28756] ubi_io_read_ec_hdr+0x1a5/0x630 [ 1081.063686][T28756] ubi_attach+0x77c/0x5be0 [ 1081.063741][T28756] ? __pfx_ubi_attach+0x10/0x10 [ 1081.063760][T28756] ? __raw_spin_lock_init+0x45/0x100 [ 1081.063785][T28756] ? vmalloc_noprof+0xb2/0xf0 [ 1081.063811][T28756] ubi_attach_mtd_dev+0x1b75/0x37e0 [ 1081.063861][T28756] ctrl_cdev_ioctl+0x28b/0x3e0 [ 1081.063887][T28756] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1081.063909][T28756] ? __fget_files+0x2a/0x420 [ 1081.063933][T28756] ? __fget_files+0x2a/0x420 [ 1081.063959][T28756] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1081.063980][T28756] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1081.064004][T28756] __se_sys_ioctl+0xf9/0x170 [ 1081.064024][T28756] do_syscall_64+0xfa/0x3b0 [ 1081.064048][T28756] ? lockdep_hardirqs_on+0x9c/0x150 [ 1081.064072][T28756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.064090][T28756] ? clear_bhb_loop+0x60/0xb0 [ 1081.064111][T28756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.064136][T28756] RIP: 0033:0x7fd1e3f8e929 [ 1081.064154][T28756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.064171][T28756] RSP: 002b:00007fd1e4d92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1081.064190][T28756] RAX: ffffffffffffffda RBX: 00007fd1e41b5fa0 RCX: 00007fd1e3f8e929 [ 1081.064203][T28756] RDX: 0000200000000440 RSI: 0000000040186f40 RDI: 0000000000000003 [ 1081.064216][T28756] RBP: 00007fd1e4010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1081.064228][T28756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.064239][T28756] R13: 0000000000000000 R14: 00007fd1e41b5fa0 R15: 00007ffe6d350928 [ 1081.064268][T28756] [ 1081.064354][T28756] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 1081.100068][ T43] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1081.219214][T23935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.220217][ T43] usb 2-1: config 0 has no interface number 0 [ 1081.225295][T23935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.237965][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1081.271802][T23935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1081.311873][ T43] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1081.328436][T23935] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1081.401925][ T43] usb 2-1: Manufacturer: syz [ 1081.404926][T28756] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1081.422292][ T43] usb 2-1: config 0 descriptor?? [ 1081.439784][ T43] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.105/input/input151 [ 1081.508319][T23935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.528025][T23935] usb 6-1: config 0 descriptor?? [ 1081.776080][ T10] usb 2-1: USB disconnect, device number 107 [ 1081.931870][T23935] ryos 0003:1E7D:31CE.005F: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.5-1/input0 [ 1082.111026][ T43] usb 6-1: USB disconnect, device number 38 [ 1082.127954][T28829] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20259'. [ 1082.344470][T28850] ip6tnl1: entered promiscuous mode [ 1082.352102][T28850] ip6tnl1: entered allmulticast mode [ 1082.359502][T28850] team0: Device ip6tnl1 is of different type [ 1082.710644][T28880] netlink: 'syz.6.20275': attribute type 11 has an invalid length. [ 1082.945358][T28890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20278'. [ 1083.485100][T28924] binder: 28923:28924 ioctl 400c620e 200000000140 returned -22 [ 1083.595100][T28931] delete_channel: no stack [ 1083.630180][T28933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20296'. [ 1083.640467][ T43] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1083.791803][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1083.804302][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.828940][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.845186][ T43] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1083.854747][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.879716][ T43] usb 6-1: config 0 descriptor?? [ 1084.286110][ T43] kone 0003:1E7D:2CED.0060: item fetching failed at offset 2/5 [ 1084.294501][ T43] kone 0003:1E7D:2CED.0060: parse failed [ 1084.323483][ T43] kone 0003:1E7D:2CED.0060: probe with driver kone failed with error -22 [ 1084.500295][ T43] usb 6-1: USB disconnect, device number 39 [ 1085.226485][T29023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20330'. [ 1085.247655][T29023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20330'. [ 1085.293331][T29023] netlink: 'syz.5.20330': attribute type 20 has an invalid length. [ 1085.600884][ T43] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1085.664797][T29044] delete_channel: no stack [ 1085.750623][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1085.778195][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.794307][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.817414][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1085.843933][ T43] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1085.861698][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.884596][ T43] usb 2-1: config 0 descriptor?? [ 1086.299302][ T43] hid-multitouch 0003:0457:07DA.0061: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 1086.376685][T29080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20351'. [ 1086.482931][ T43] usb 2-1: USB disconnect, device number 108 [ 1086.543082][ T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1086.659672][T29107] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20359'. [ 1086.676750][T29107] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20359'. [ 1086.684583][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1086.693184][T29107] netlink: 'syz.7.20359': attribute type 5 has an invalid length. [ 1086.716083][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1086.737778][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.758436][ T10] usb 1-1: config 0 descriptor?? [ 1087.137890][T29131] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.20369'. [ 1087.174472][ T10] microsoft 0003:045E:00F9.0062: hidraw0: USB HID v0.02 Device [HID 045e:00f9] on usb-dummy_hcd.0-1/input0 [ 1087.217218][ T10] microsoft 0003:045E:00F9.0062: no inputs found [ 1087.225643][ T10] microsoft 0003:045E:00F9.0062: could not initialize ff, continuing anyway [ 1087.358981][ T6074] usb 1-1: USB disconnect, device number 92 [ 1087.458363][ T43] IPVS: starting estimator thread 0... [ 1087.506831][T29170] [U] Ϧ…:ÈK˜È›.£G¬²ÃØ8XÕ4QŸÍÐTZÂ.̘|| [ 1087.540488][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1087.548211][T29168] IPVS: using max 31 ests per chain, 74400 per kthread [ 1087.699329][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1087.713573][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.724987][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.742154][ T10] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1087.752774][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.768889][ T10] usb 6-1: config 0 descriptor?? [ 1088.009617][T29190] netlink: 'syz.0.20387': attribute type 2 has an invalid length. [ 1088.176805][ T10] hkems 0003:2006:0118.0063: item fetching failed at offset 0/2 [ 1088.200751][ T10] hkems 0003:2006:0118.0063: parse failed [ 1088.224293][ T10] hkems 0003:2006:0118.0063: probe with driver hkems failed with error -22 [ 1088.363831][ T6074] usb 6-1: USB disconnect, device number 40 [ 1088.957992][T29260] sp0: Synchronizing with TNC [ 1089.123343][T29280] Bluetooth: MGMT ver 1.23 [ 1089.218624][ T43] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1089.370721][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1089.386502][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1089.403954][ T43] usb 6-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 1089.413913][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.430622][ T43] usb 6-1: config 0 descriptor?? [ 1089.437752][T29264] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1089.461102][T18725] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1089.628868][T18725] usb 1-1: Using ep0 maxpacket: 8 [ 1089.637487][T18725] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1089.648781][T18725] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 1089.658724][T18725] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1089.677548][T18725] usb 1-1: config 4 has no interface number 0 [ 1089.698039][T18725] usb 1-1: string descriptor 0 read error: -22 [ 1089.708785][T18725] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1089.719084][T18725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.739932][T18725] usb 1-1: Found UVC 0.02 device (04f2:b746) [ 1089.760566][T18725] usb 1-1: No valid video chain found. [ 1089.824725][ T6074] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1089.858580][T29318] netlink: 'syz.7.20423': attribute type 27 has an invalid length. [ 1089.943513][ T43] usb 1-1: USB disconnect, device number 93 [ 1089.978035][ T6074] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 253, using maximum allowed: 30 [ 1089.994003][ T6074] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.006563][ T6074] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1090.019981][ T6074] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1090.027470][ T6074] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1090.053376][T18725] usb 6-1: USB disconnect, device number 41 [ 1090.075415][ T6074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.089953][ T6074] usb 2-1: config 0 descriptor?? [ 1090.231991][T29347] netlink: 'syz.7.20429': attribute type 1 has an invalid length. [ 1090.485367][ T6074] creative-sb0540 0003:041E:3100.0065: unknown main item tag 0x0 [ 1090.493781][ T6074] creative-sb0540 0003:041E:3100.0065: unknown main item tag 0x0 [ 1090.507794][ T6074] creative-sb0540 0003:041E:3100.0065: unknown main item tag 0x0 [ 1090.518699][ T6074] creative-sb0540 0003:041E:3100.0065: No inputs registered, leaving [ 1090.535287][ T6074] creative-sb0540 0003:041E:3100.0065: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 1090.681686][ T1975] usb 2-1: USB disconnect, device number 109 [ 1090.862362][ T43] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1090.994040][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.003802][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.011698][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.019767][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.027220][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.040228][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.053813][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.065836][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.073410][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.083691][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.091921][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.099460][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1091.113404][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.121171][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.129330][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1091.138659][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.146152][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.154397][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.165916][ T43] usb 6-1: config 0 descriptor?? [ 1091.170991][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.196504][ T6074] hid-generic 00A0:0008:0003.0066: unknown main item tag 0x0 [ 1091.229268][ T6074] hid-generic 00A0:0008:0003.0066: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1091.594961][ T43] plantronics 0003:047F:FFFF.0067: ignoring exceeding usage max [ 1091.609575][T29436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20455'. [ 1091.619266][ T43] plantronics 0003:047F:FFFF.0067: No inputs registered, leaving [ 1091.642277][ T43] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1091.676605][T29444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20458'. [ 1091.684591][ T30] audit: type=1400 audit(2000000315.608:7983): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=29441 comm="syz.6.20457" daddr=::ffff:255.255.255.255 dest=2 [ 1091.704366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1091.844097][ T43] usb 6-1: USB disconnect, device number 42 [ 1092.610978][T29509] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1092.866004][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1092.904379][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1092.914487][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1092.945648][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1092.956623][ T43] rtc rtc0: __rtc_set_alarm: err=-22 [ 1093.216784][T29487] syz.7.20470 (29487): drop_caches: 1 [ 1093.286991][T29544] netlink: 'syz.6.20492': attribute type 15 has an invalid length. [ 1093.410029][ T43] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1093.555812][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1093.564349][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.579793][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.589957][ T43] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1093.599597][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.610428][ T43] usb 2-1: config 0 descriptor?? [ 1093.615907][ T6154] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1093.747345][T29571] loop2: detected capacity change from 0 to 7 [ 1093.787023][T29571] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1093.801383][T29571] loop2: partition table partially beyond EOD, truncated [ 1093.817567][T29571] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 1094.015912][ T43] hid (null): report_id 0 is invalid [ 1094.034546][ T43] hid-u2fzero 0003:10C4:8ACF.0068: report_id 0 is invalid [ 1094.047695][ T43] hid-u2fzero 0003:10C4:8ACF.0068: item 0 0 1 8 parsing failed [ 1094.061450][ T43] hid-u2fzero 0003:10C4:8ACF.0068: probe with driver hid-u2fzero failed with error -22 [ 1094.163826][T29611] netlink: 32 bytes leftover after parsing attributes in process `syz.5.20512'. [ 1094.220015][ T1975] usb 2-1: USB disconnect, device number 110 [ 1094.366297][ T43] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1094.524507][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1094.545592][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.557104][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.569261][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1094.585146][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 1094.597781][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.610374][ T43] usb 1-1: config 0 descriptor?? [ 1094.766948][ T6154] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1094.940554][ T6154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.965660][ T6154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.981268][ T6154] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1094.990413][ T6154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.037008][ T6154] usb 6-1: config 0 descriptor?? [ 1095.055466][ T43] lg-g15 0003:046D:C227.0069: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.0-1/input0 [ 1095.227122][ T1975] usb 1-1: USB disconnect, device number 94 [ 1095.405065][T29687] sctp: [Deprecated]: syz.1.20534 (pid 29687) Use of int in max_burst socket option. [ 1095.405065][T29687] Use struct sctp_assoc_value instead [ 1095.459640][ T6154] hid-steam 0003:28DE:1142.006A: unknown main item tag 0x0 [ 1095.483732][ T6154] hid-steam 0003:28DE:1142.006A: unknown main item tag 0x0 [ 1095.491699][ T6154] hid-steam 0003:28DE:1142.006A: unknown main item tag 0x0 [ 1095.499183][ T6154] hid-steam 0003:28DE:1142.006A: unknown main item tag 0x0 [ 1095.506514][ T6154] hid-steam 0003:28DE:1142.006A: unknown main item tag 0x0 [ 1095.520462][ T6154] hid-steam 0003:28DE:1142.006A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1095.642763][ T1975] usb 6-1: USB disconnect, device number 44 [ 1096.018439][ T30] audit: type=1800 audit(2000000320.251:7984): pid=29732 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.20550" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1096.065282][T29734] option changes via remount are deprecated (pid=29733 comm=syz.0.20549) [ 1097.658077][ T43] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1097.860935][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1097.880120][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1097.900421][ T43] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 1097.926743][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.949593][ T43] usb 2-1: config 0 descriptor?? [ 1097.976152][ T43] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1098.159838][ T43] usb 2-1: USB disconnect, device number 111 [ 1098.276297][T29878] vlan2: entered allmulticast mode [ 1098.652759][T29899] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1098.665202][T29899] overlayfs: missing 'lowerdir' [ 1099.113126][ T1975] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1099.270764][ T1975] usb 6-1: Using ep0 maxpacket: 8 [ 1099.290747][T23935] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1099.301121][ T1975] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.314874][ T1975] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1099.339574][ T1975] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1099.348973][ T1975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1099.358748][ T1975] usb 6-1: SerialNumber: syz [ 1099.369063][ T1975] cdc_acm 6-1:1.0: skipping garbage [ 1099.375432][ T1975] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1099.384006][ T1975] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 1099.393559][ T1975] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 1099.452603][T23935] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1099.471718][T23935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.481802][T23935] usb 2-1: Product: syz [ 1099.486393][T23935] usb 2-1: Manufacturer: syz [ 1099.491922][T23935] usb 2-1: SerialNumber: syz [ 1099.507292][T23935] usb 2-1: config 0 descriptor?? [ 1099.523593][T23935] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 112 [ 1099.581445][ T43] usb 6-1: USB disconnect, device number 45 [ 1099.671835][ T6154] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1099.821003][ T6154] usb 1-1: Using ep0 maxpacket: 16 [ 1099.829224][ T6154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.840701][ T6154] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1099.850132][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.863229][ T6154] usb 1-1: config 0 descriptor?? [ 1100.088763][T23935] i2c i2c-2: failure reading functionality [ 1100.099510][T23935] i2c i2c-2: connected i2c-tiny-usb device [ 1100.114997][T23935] usb 2-1: USB disconnect, device number 112 [ 1100.255436][ T6154] pantherlord 0003:0E8F:0003.006B: item fetching failed at offset 3/5 [ 1100.274924][ T6154] pantherlord 0003:0E8F:0003.006B: parse failed [ 1100.283844][ T6154] pantherlord 0003:0E8F:0003.006B: probe with driver pantherlord failed with error -22 [ 1100.390044][T23551] Bluetooth: hci5: command 0x0405 tx timeout [ 1100.441612][T23935] usb 1-1: USB disconnect, device number 95 [ 1100.902807][ T6154] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1101.052237][ T6154] usb 2-1: Using ep0 maxpacket: 8 [ 1101.067548][ T6154] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1101.096067][ T6154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.118014][ T6154] usb 2-1: Product: syz [ 1101.122270][ T6154] usb 2-1: Manufacturer: syz [ 1101.140899][ T6154] usb 2-1: SerialNumber: syz [ 1101.148340][ T6154] usb 2-1: config 0 descriptor?? [ 1101.293714][T30060] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1101.351299][ T6154] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1101.728589][ T6154] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1101.742246][T18725] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1101.763548][ T6154] usb 2-1: USB disconnect, device number 113 [ 1101.923646][T18725] usb 6-1: Using ep0 maxpacket: 16 [ 1101.933475][T18725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.953136][T18725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.974573][T18725] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1102.011261][T18725] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1102.026731][T18725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.068975][T18725] usb 6-1: config 0 descriptor?? [ 1102.486304][T18725] hid-multitouch 0003:0457:07DA.006C: item fetching failed at offset 30/34 [ 1102.509712][T18725] hid-multitouch 0003:0457:07DA.006C: probe with driver hid-multitouch failed with error -22 [ 1102.670204][ T1975] usb 6-1: USB disconnect, device number 46 [ 1102.694992][T23935] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1102.872212][T23935] usb 1-1: Using ep0 maxpacket: 16 [ 1102.886543][ T30] audit: type=1400 audit(2000000327.629:7985): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=30180 comm="syz.1.20703" daddr=::ffff:224.0.0.1 dest=20000 [ 1102.924658][T23935] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1102.940389][T23935] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1102.949697][T23935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.993241][T23935] usb 1-1: config 0 descriptor?? [ 1103.421161][T23935] logitech 0003:046D:C24F.006D: ignoring exceeding usage max [ 1103.497116][T23935] logitech 0003:046D:C24F.006D: hidraw0: USB HID v10.00 Device [HID 046d:c24f] on usb-dummy_hcd.0-1/input0 [ 1103.562729][T23935] logitech 0003:046D:C24F.006D: no inputs found [ 1103.622771][T23935] usb 1-1: USB disconnect, device number 96 [ 1103.669873][T30221] binder: 30216:30221 ioctl c0306201 0 returned -14 [ 1105.080923][T30298] program syz.6.20746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1105.129419][T30306] program syz.6.20746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1105.342386][ T9] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1105.413161][T30317] pimreg: entered allmulticast mode [ 1105.427891][T30317] pimreg: left allmulticast mode [ 1105.492733][ T9] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.509872][ T9] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.529798][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1105.536497][ T9] usb 2-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 1105.574679][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.592433][ T9] usb 2-1: config 0 descriptor?? [ 1106.025063][ T9] hid-generic 0003:0463:1215.006E: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.1-1/input0 [ 1106.196109][ T1975] usb 2-1: USB disconnect, device number 114 [ 1106.420533][ T30] audit: type=1400 audit(2000000331.415:7986): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=30359 comm="syz.6.20763" dest=20000 [ 1106.637854][ T6074] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1106.815898][ T6074] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1106.847660][ T6074] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1106.881148][ T6074] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1106.895782][ T6074] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1106.921516][ T6074] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.942084][ T6074] usb 6-1: Product: syz [ 1106.959839][ T6074] usb 6-1: Manufacturer: syz [ 1106.964749][ T6074] usb 6-1: SerialNumber: syz [ 1106.984174][ T6074] usb 6-1: config 0 descriptor?? [ 1106.999751][T30362] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1107.007926][T30362] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1107.030363][ T6074] usb 6-1: ucan: probing device on interface #0 [ 1107.334136][ T30] audit: type=1400 audit(2000000332.391:7987): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=30396 comm="syz.6.20779" daddr=::ffff:172.20.20.0 [ 1107.614738][ T6074] ucan 6-1:0.0: probe with driver ucan failed with error -71 [ 1107.650360][ T6074] usb 6-1: USB disconnect, device number 47 [ 1107.676583][T30420] syz.0.20786 (30420): drop_caches: 4 [ 1107.976047][T30432] [U]  [ 1108.819160][ T30] audit: type=1400 audit(2000000333.989:7988): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=30480 comm="syz.5.20812" daddr=::ffff:172.20.20.0 [ 1109.013834][T30495] tipc: Enabling of bearer rejected, failed to enable media [ 1109.035213][ T30] audit: type=1326 audit(2000000334.214:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30496 comm="syz.1.20819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1109.116698][ T30] audit: type=1326 audit(2000000334.214:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30496 comm="syz.1.20819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1109.152620][T30502] netlink: 88 bytes leftover after parsing attributes in process `syz.7.20822'. [ 1109.174211][ T30] audit: type=1326 audit(2000000334.214:7991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30496 comm="syz.1.20819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1109.221824][T30507] MTD: Couldn't look up 'memory.events': -15 [ 1109.228555][ T30] audit: type=1326 audit(2000000334.214:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30496 comm="syz.1.20819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1109.310290][ T30] audit: type=1326 audit(2000000334.214:7993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30496 comm="syz.1.20819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1109.339550][ T30] audit: type=1326 audit(2000000334.214:7994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30496 comm="syz.1.20819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1109.441722][ T30] audit: type=1326 audit(2000000334.214:7995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30496 comm="syz.1.20819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1109.483181][ T30] audit: type=1326 audit(2000000334.214:7996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30496 comm="syz.1.20819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1109.681769][ T30] audit: type=1326 audit(2000000334.911:7997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30533 comm="syz.7.20835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x0 [ 1109.936146][T30550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.295735][T30566] loop2: detected capacity change from 0 to 7 [ 1110.316670][T30566] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1110.327229][T30566] loop2: partition table partially beyond EOD, truncated [ 1110.335554][T30566] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 1110.732162][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1110.880963][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1110.896373][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1110.921241][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1110.934303][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.948222][T30612] netlink: 'syz.5.20867': attribute type 66 has an invalid length. [ 1110.948918][ T9] usb 1-1: config 0 descriptor?? [ 1111.343743][ T9] kye 0003:0458:4018.006F: unbalanced collection at end of report description [ 1111.378370][ T9] kye 0003:0458:4018.006F: parse failed [ 1111.411118][ T9] kye 0003:0458:4018.006F: probe with driver kye failed with error -22 [ 1111.537617][ T9] usb 1-1: USB disconnect, device number 97 [ 1111.604653][T30664] tipc: Enabling of bearer rejected, failed to enable media [ 1111.740096][T30672] binder: 30671:30672 ioctl c00c620f 200000000500 returned -22 [ 1112.615233][ T1975] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1112.622641][T30739] netlink: 104 bytes leftover after parsing attributes in process `syz.0.20914'. [ 1112.764836][ T1975] usb 6-1: Using ep0 maxpacket: 32 [ 1112.783049][ T1975] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1112.801667][ T1975] usb 6-1: config 0 has no interface number 0 [ 1112.813235][ T1975] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1112.833398][ T1975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.845265][ T1975] usb 6-1: Product: syz [ 1112.849712][ T1975] usb 6-1: Manufacturer: syz [ 1112.854334][ T1975] usb 6-1: SerialNumber: syz [ 1112.863270][ T1975] usb 6-1: config 0 descriptor?? [ 1112.871398][T30754] netlink: 68 bytes leftover after parsing attributes in process `syz.6.20919'. [ 1112.885089][ T1975] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1112.897202][T30754] netlink: 32 bytes leftover after parsing attributes in process `syz.6.20919'. [ 1112.948887][ T6074] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1113.069036][ T1975] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1113.087843][ T1975] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1113.120213][ T6074] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 199, using maximum allowed: 30 [ 1113.134306][ T6074] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.145640][ T6074] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 199 [ 1113.162220][ T6074] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1113.169125][ T6074] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1113.181643][ T6074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.199918][ T6074] usb 1-1: config 0 descriptor?? [ 1113.211655][ T6154] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1113.371857][ T6154] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.383352][ T6154] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.395267][ T6154] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1113.405370][ T6154] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1113.415454][ T6154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.441977][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1113.442385][ T43] usb 6-1: USB disconnect, device number 48 [ 1113.464400][ T6154] usb 2-1: config 0 descriptor?? [ 1113.482121][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1113.502821][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1113.516641][ T43] quatech2 6-1:0.51: device disconnected [ 1113.608058][ T6074] kye 0003:0458:5010.0070: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1113.630737][ T6074] kye 0003:0458:5010.0070: hidraw0: USB HID v10.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 1113.643873][ T6074] kye 0003:0458:5010.0070: tablet-enabling feature report not found [ 1113.652056][ T6074] kye 0003:0458:5010.0070: tablet enabling failed [ 1113.751328][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1113.751346][ T30] audit: type=1400 audit(2000000339.276:8007): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=30816 comm="syz.6.20931" daddr=::8500:0:a800:0 [ 1113.817205][T23935] usb 1-1: USB disconnect, device number 98 [ 1113.862554][ T6154] cypress 0003:04B4:07B1.0071: unknown main item tag 0x0 [ 1113.871304][ T6154] cypress 0003:04B4:07B1.0071: unknown main item tag 0x0 [ 1113.878564][ T6154] cypress 0003:04B4:07B1.0071: unknown main item tag 0x0 [ 1113.886953][ T6154] cypress 0003:04B4:07B1.0071: unknown main item tag 0x0 [ 1113.894195][ T6154] cypress 0003:04B4:07B1.0071: unknown main item tag 0x0 [ 1113.905024][ T6154] cypress 0003:04B4:07B1.0071: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.1-1/input0 [ 1114.084444][T23935] usb 2-1: USB disconnect, device number 115 [ 1114.474253][T30857] can0: slcan on ptm0. [ 1114.630890][T30856] can0 (unregistered): slcan off ptm0. [ 1115.978704][T30937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20972'. [ 1116.027662][T30937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20972'. [ 1116.036684][T30937] netlink: 'syz.5.20972': attribute type 11 has an invalid length. [ 1116.085165][T30937] netlink: 'syz.5.20972': attribute type 13 has an invalid length. [ 1117.141118][T31002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21002'. [ 1117.602066][T31030] netlink: 'syz.5.21013': attribute type 2 has an invalid length. [ 1118.228518][T31066] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21028'. [ 1118.294309][T31064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21028'. [ 1118.409875][T31071] netlink: 'syz.5.21031': attribute type 1 has an invalid length. [ 1118.453149][T31071] netlink: 184 bytes leftover after parsing attributes in process `syz.5.21031'. [ 1118.480779][T31071] netlink: 'syz.5.21031': attribute type 1 has an invalid length. [ 1118.539150][T31075] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.21033'. [ 1118.606072][T31075] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1118.638815][T31075] openvswitch: netlink: Message has 6332 unknown bytes. [ 1119.096225][T31105] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1119.391377][T31125] netlink: 'syz.6.21058': attribute type 27 has an invalid length. [ 1119.698289][T31143] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 1119.893777][T31149] sp0: Synchronizing with TNC [ 1119.926457][T31158] No buffer was provided with the request [ 1120.047861][T31171] sp0: Synchronizing with TNC [ 1120.081628][T31182] usb usb8: usbfs: process 31182 (syz.5.21077) did not claim interface 0 before use [ 1120.252157][T23935] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1120.378819][T31195] sp0: Synchronizing with TNC [ 1120.401446][T23935] usb 1-1: Using ep0 maxpacket: 8 [ 1120.414374][T23935] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1120.429635][T23935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.445789][T23935] usb 1-1: Product: syz [ 1120.451798][T23935] usb 1-1: Manufacturer: syz [ 1120.459547][T23935] usb 1-1: SerialNumber: syz [ 1120.473682][T23935] usb 1-1: config 0 descriptor?? [ 1120.491510][T23935] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1121.110331][T23935] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1121.130112][T23935] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1121.156086][T23935] usb 1-1: USB disconnect, device number 99 [ 1121.379568][T31246] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1121.658936][T31260] usb usb1: check_ctrlrecip: process 31260 (syz.0.21105) requesting ep 01 but needs 81 [ 1122.687844][T23935] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1122.839498][T23935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.856236][T23935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.866493][T23935] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1122.876180][T23935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.901193][T23935] usb 2-1: config 0 descriptor?? [ 1123.043677][T31316] smc: net device lo applied user defined pnetid SYZ1 [ 1123.299146][T23935] steelseries 0003:1038:12B6.0072: item fetching failed at offset 5/7 [ 1123.318163][T23935] steelseries 0003:1038:12B6.0072: probe with driver steelseries failed with error -22 [ 1123.381209][T31335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21132'. [ 1123.514497][ T43] usb 2-1: USB disconnect, device number 116 [ 1124.456250][T31384] tipc: Invalid UDP bearer configuration [ 1124.456310][T31384] tipc: Enabling of bearer rejected, failed to enable media [ 1125.231726][ T6074] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1125.237513][T31439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21172'. [ 1125.295958][T31444] netlink: 60 bytes leftover after parsing attributes in process `syz.7.21173'. [ 1125.308811][T31444] netlink: 116 bytes leftover after parsing attributes in process `syz.7.21173'. [ 1125.404048][ T6074] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1125.412591][ T6074] usb 2-1: config 0 has no interface number 0 [ 1125.423602][ T6074] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.463877][ T6074] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.481714][ T6074] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1125.500983][ T6074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.545692][ T6074] usb 2-1: config 0 descriptor?? [ 1125.561712][T31460] vimc link validate: Sensor B:src:256x16 (0x33424752, 6, 2, 0, 0) Raw Capture 1:snk:16x16 (0x38414761, 8, 0, 0, 0) [ 1125.648748][T31466] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1125.950268][ T6074] logitech-djreceiver 0003:046D:C534.0073: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.1-1/input28 [ 1126.010232][T31482] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 1126.046313][T31484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21188'. [ 1126.148959][ T6074] usb 2-1: USB disconnect, device number 117 [ 1126.973729][ T30] audit: type=1400 audit(2000000353.453:8008): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=31542 comm="syz.7.21210" dest=20000 [ 1127.116707][T31556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21214'. [ 1127.587331][ T30] audit: type=1326 audit(2000000354.118:8009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31581 comm="syz.1.21226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1127.620396][ T30] audit: type=1326 audit(2000000354.150:8010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31581 comm="syz.1.21226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1127.688563][ T30] audit: type=1326 audit(2000000354.182:8011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31581 comm="syz.1.21226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1127.737318][ T30] audit: type=1326 audit(2000000354.182:8012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31581 comm="syz.1.21226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1127.767361][ T30] audit: type=1326 audit(2000000354.182:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31581 comm="syz.1.21226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1128.534696][T31636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21248'. [ 1129.569080][T31707] tipc: Enabling not permitted [ 1129.581328][T31707] tipc: Enabling of bearer rejected, failed to enable media [ 1129.788432][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21281'. [ 1130.124504][T31740] sp0: Synchronizing with TNC [ 1130.155568][ T5923] usb 1-1: [UEAGLE-ATM] firmware is not available [ 1130.328694][T31757] netlink: 100 bytes leftover after parsing attributes in process `syz.0.21291'. [ 1131.052045][ T1975] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1131.154247][T31804] "syz.7.21312" (31804) uses obsolete ecb(arc4) skcipher [ 1131.218184][ T1975] usb 6-1: Using ep0 maxpacket: 16 [ 1131.234551][ T1975] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1131.260110][ T1975] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1131.270341][ T1975] usb 6-1: Product: syz [ 1131.274846][ T1975] usb 6-1: Manufacturer: syz [ 1131.279703][ T1975] usb 6-1: SerialNumber: syz [ 1131.290071][ T1975] usb 6-1: config 0 descriptor?? [ 1131.547918][ T6074] usb 6-1: USB disconnect, device number 49 [ 1131.738271][ T30] audit: type=1326 audit(2000000358.568:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31860 comm="syz.0.21326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1131.792031][ T30] audit: type=1326 audit(2000000358.568:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31860 comm="syz.0.21326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1131.813850][ C1] vkms_vblank_simulate: vblank timer overrun [ 1131.852005][ T30] audit: type=1326 audit(2000000358.600:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31860 comm="syz.0.21326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1131.920262][ T30] audit: type=1326 audit(2000000358.600:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31860 comm="syz.0.21326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1131.942362][ C1] vkms_vblank_simulate: vblank timer overrun [ 1131.999613][ T30] audit: type=1326 audit(2000000358.600:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31860 comm="syz.0.21326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1132.040221][ T30] audit: type=1326 audit(2000000358.600:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31860 comm="syz.0.21326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1132.063745][ T30] audit: type=1326 audit(2000000358.611:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31860 comm="syz.0.21326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1132.087033][ T30] audit: type=1326 audit(2000000358.611:8021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31860 comm="syz.0.21326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1133.125041][T31928] netlink: 188 bytes leftover after parsing attributes in process `syz.1.21354'. [ 1134.847329][ T6074] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1135.006087][ T6074] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1135.023626][ T6074] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1135.032793][ T6074] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.045187][ T6074] usb 2-1: config 220 has no interface number 2 [ 1135.056671][ T6074] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1135.071222][ T6074] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1135.078083][ T6074] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1135.085758][ T6074] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1135.095896][ T6074] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1135.105779][ T6074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.114329][ T6074] usb 2-1: Product: syz [ 1135.118743][ T6074] usb 2-1: Manufacturer: syz [ 1135.123365][ T6074] usb 2-1: SerialNumber: syz [ 1135.338484][ T6074] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1135.359857][ T6074] usb 2-1: No valid video chain found. [ 1135.365434][ T6074] usb 2-1: selecting invalid altsetting 0 [ 1135.418925][ T6074] usb 2-1: selecting invalid altsetting 0 [ 1135.454001][ T6074] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1135.482112][ T6074] usb 2-1: USB disconnect, device number 118 [ 1135.761176][ T43] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1135.930755][T32084] sock: sock_timestamping_bind_phc: sock not bind to device [ 1135.950882][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.988979][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.004529][ T43] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1136.023485][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.040959][ T43] usb 6-1: config 0 descriptor?? [ 1136.460854][ T43] steelseries 0003:1038:12B6.0074: reserved main item tag 0xe [ 1136.475881][ T43] steelseries 0003:1038:12B6.0074: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.5-1/input0 [ 1136.628007][ T43] steelseries 0003:1038:12B6.0074: hid_hw_raw_request() failed with -71 [ 1136.674952][ T43] usb 6-1: USB disconnect, device number 50 [ 1136.829444][T32137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21427'. [ 1136.848368][T32137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21427'. [ 1136.871596][T23551] Bluetooth: hci4: command 0x0406 tx timeout [ 1137.296323][T32150] pim6reg: left allmulticast mode [ 1137.712236][ T30] audit: type=1400 audit(2000000364.981:8022): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=32176 comm="syz.1.21443" daddr=::ac14:140c [ 1137.733890][T32181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21444'. [ 1137.764891][T32181] hsr0: entered promiscuous mode [ 1137.939205][T32020] Bluetooth: hci5: link tx timeout [ 1137.947028][T32020] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1138.202610][ T1975] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1138.354328][ T1975] usb 6-1: config 0 has an invalid interface number: 30 but max is 0 [ 1138.362662][ T1975] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1138.371573][ T1975] usb 6-1: config 0 has no interface number 0 [ 1138.377877][ T1975] usb 6-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1138.391860][ T1975] usb 6-1: config 0 interface 30 has no altsetting 0 [ 1138.407981][ T1975] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 1138.422373][ T1975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.441126][ T1975] usb 6-1: config 0 descriptor?? [ 1138.456380][ T1975] usb 6-1: unknown interface protocol 0x41, assuming v1 [ 1138.464297][ T1975] usb 6-1: 30:2 : does not exist [ 1138.647760][ T1975] usb 6-1: USB disconnect, device number 51 [ 1139.122433][T32269] netlink: 136 bytes leftover after parsing attributes in process `syz.0.21468'. [ 1139.150345][T32269] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1139.803975][ T1975] kernel write not supported for file /input/mice (pid: 1975 comm: kworker/0:2) [ 1139.844068][T23551] Bluetooth: hci5: command 0x0405 tx timeout [ 1139.893007][T32318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21489'. [ 1139.908737][T32318] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1139.968986][T32318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1140.414935][T32338] futex_wake_op: syz.1.21499 tries to shift op by 32; fix this program [ 1140.982572][T32375] can0: slcan on ttyS3. [ 1141.058200][T32375] can0 (unregistered): slcan off ttyS3. [ 1141.085898][T32389] netlink: 72 bytes leftover after parsing attributes in process `syz.0.21516'. [ 1141.923005][T23935] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1142.067249][T23935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.071507][T32441] netlink: 79 bytes leftover after parsing attributes in process `syz.6.21538'. [ 1142.092893][T23935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.106655][T32441] netlink: 79 bytes leftover after parsing attributes in process `syz.6.21538'. [ 1142.117484][T23935] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1142.140515][T23935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.169306][T23935] usb 6-1: config 0 descriptor?? [ 1142.406329][T32459] netdevsim netdevsim7: Firmware load for '/../file0' refused, path contains '..' component [ 1142.574716][T23935] hid-led 0003:1D34:000A.0075: unknown main item tag 0x5 [ 1142.769562][T23935] hid-led 0003:1D34:000A.0075: probe with driver hid-led failed with error -71 [ 1142.785527][T23935] usb 6-1: USB disconnect, device number 52 [ 1143.539972][T18725] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1143.733928][T18725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.752447][T32508] usb usb8: usbfs: process 32508 (syz.6.21562) did not claim interface 0 before use [ 1143.762301][T18725] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1143.774318][T18725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.797337][T18725] usb 2-1: config 0 descriptor?? [ 1144.222904][T18725] zeroplus 0003:0C12:0005.0076: report_id 0 is invalid [ 1144.262529][T18725] zeroplus 0003:0C12:0005.0076: item 0 0 1 8 parsing failed [ 1144.280352][T18725] zeroplus 0003:0C12:0005.0076: parse failed [ 1144.292447][T18725] zeroplus 0003:0C12:0005.0076: probe with driver zeroplus failed with error -22 [ 1144.414456][T23935] usb 2-1: USB disconnect, device number 119 [ 1144.592027][T32561] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.21578'. [ 1145.249679][T32588] can0: slcan on ttyS3. [ 1145.374541][T32595] can0 (unregistered): slcan off ttyS3. [ 1146.087641][T32635] tmpfs: Bad value for 'size' [ 1146.226796][T32642] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1146.354320][T32649] program syz.5.21612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1147.479086][T32725] bad cache= option: no%e [ 1147.479086][T32725] [ 1147.499321][T32725] CIFS: VFS: bad cache= option: no%e [ 1147.893837][ T30] audit: type=1326 audit(2000000375.898:8023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32744 comm="syz.0.21655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1147.963700][ T30] audit: type=1326 audit(2000000375.898:8024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32744 comm="syz.0.21655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1148.046026][T32753] netlink: 56 bytes leftover after parsing attributes in process `syz.6.21658'. [ 1148.056294][ T30] audit: type=1800 audit(2000000375.898:8025): pid=32747 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.21656" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1148.115090][ T30] audit: type=1326 audit(2000000375.919:8026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32744 comm="syz.0.21655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1148.186954][ T30] audit: type=1326 audit(2000000375.919:8027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32744 comm="syz.0.21655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1148.266784][ T30] audit: type=1326 audit(2000000375.919:8028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32744 comm="syz.0.21655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1148.339625][ T30] audit: type=1326 audit(2000000375.930:8029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32744 comm="syz.0.21655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1148.344600][T32764] can0: slcan on ttyS3. [ 1148.429216][ T30] audit: type=1326 audit(2000000375.930:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32744 comm="syz.0.21655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1148.491541][ T30] audit: type=1326 audit(2000000375.930:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32744 comm="syz.0.21655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b2b8e929 code=0x7ffc0000 [ 1148.599807][T32764] can0 (unregistered): slcan off ttyS3. [ 1148.794190][ T323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1148.801534][ T323] IPv6: NLM_F_CREATE should be set when creating new route [ 1148.808853][ T323] IPv6: NLM_F_CREATE should be set when creating new route [ 1148.816145][ T323] IPv6: NLM_F_CREATE should be set when creating new route [ 1148.850039][ T326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1149.158062][ T336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21680'. [ 1149.799394][ T357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21687'. [ 1150.025959][ T370] delete_channel: no stack [ 1150.330185][ T396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21702'. [ 1150.462202][ T409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21706'. [ 1150.474093][ T409] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21706'. [ 1150.484265][ T409] netlink: 'syz.7.21706': attribute type 21 has an invalid length. [ 1150.650810][ T6074] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1150.801476][ T6074] usb 2-1: Using ep0 maxpacket: 32 [ 1150.808501][ T6074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.837644][ T6074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.857056][ T6074] usb 2-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1150.876752][ T6074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.893608][ T6074] usb 2-1: config 0 descriptor?? [ 1151.301236][ T6074] apple 0003:05AC:029C.0077: unknown main item tag 0x2 [ 1151.319191][ T6074] apple 0003:05AC:029C.0077: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.1-1/input0 [ 1151.496953][ T6074] usb 2-1: USB disconnect, device number 120 [ 1151.527823][ T474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21730'. [ 1151.538413][ T474] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21730'. [ 1152.087920][ T6074] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1152.236171][ T6074] usb 6-1: Using ep0 maxpacket: 32 [ 1152.244967][ T6074] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.264640][ T6074] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1152.277999][ T6074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.288974][ T6074] usb 6-1: config 0 descriptor?? [ 1152.682736][ T6074] arvo 0003:1E7D:30D4.0078: unknown main item tag 0x0 [ 1152.700676][ T6074] arvo 0003:1E7D:30D4.0078: unknown main item tag 0x0 [ 1152.715137][ T6074] arvo 0003:1E7D:30D4.0078: unknown main item tag 0x0 [ 1152.742505][ T6074] arvo 0003:1E7D:30D4.0078: unknown main item tag 0x0 [ 1152.759234][ T6074] arvo 0003:1E7D:30D4.0078: unknown main item tag 0x0 [ 1152.779694][ T6074] arvo 0003:1E7D:30D4.0078: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 1152.867575][ T6074] arvo 0003:1E7D:30D4.0078: couldn't init struct arvo_device [ 1152.891579][ T6074] arvo 0003:1E7D:30D4.0078: couldn't install keyboard [ 1152.921979][ T6074] arvo 0003:1E7D:30D4.0078: probe with driver arvo failed with error -71 [ 1152.948733][ T6074] usb 6-1: USB disconnect, device number 53 [ 1152.961722][ T547] program syz.1.21757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1153.139658][ T570] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 1153.155741][ T570] tipc: Enabled bearer , priority 1 [ 1153.766905][ T596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21774'. [ 1154.155330][ T30] audit: type=1400 audit(2000000382.601:8032): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=609 comm="syz.6.21780" daddr=::ffff:172.20.20.187 [ 1154.207777][ T613] netlink: 44 bytes leftover after parsing attributes in process `syz.5.21781'. [ 1154.258652][ T618] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1154.664516][ T638] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1154.670275][ T639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21794'. [ 1154.671065][ T638] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1154.690611][ T638] vhci_hcd vhci_hcd.0: Device attached [ 1154.870162][ T654] netlink: 'syz.1.21798': attribute type 1 has an invalid length. [ 1154.913184][ T5923] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1155.373514][ T30] audit: type=1326 audit(2000000383.920:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=675 comm="syz.7.21806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1155.402937][ T676] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1155.418247][ T30] audit: type=1326 audit(2000000383.920:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=675 comm="syz.7.21806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1155.441945][ T30] audit: type=1326 audit(2000000383.920:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=675 comm="syz.7.21806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1155.468575][ T30] audit: type=1326 audit(2000000383.920:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=675 comm="syz.7.21806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1155.497855][ T30] audit: type=1326 audit(2000000383.920:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=675 comm="syz.7.21806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1155.526200][ T30] audit: type=1326 audit(2000000383.920:8038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=675 comm="syz.7.21806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1155.549366][ T30] audit: type=1326 audit(2000000383.920:8039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=675 comm="syz.7.21806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3f8e929 code=0x7ffc0000 [ 1155.860097][ T30] audit: type=1326 audit(2000000384.434:8040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=693 comm="syz.1.21816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1155.888798][ T30] audit: type=1326 audit(2000000384.434:8041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=693 comm="syz.1.21816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1ff8e929 code=0x7ffc0000 [ 1156.516875][T23935] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1156.626428][ T728] netlink: 16 bytes leftover after parsing attributes in process `syz.7.21829'. [ 1156.678932][T23935] usb 2-1: Using ep0 maxpacket: 8 [ 1156.699777][T23935] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1156.716375][T23935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.736232][T23935] usb 2-1: Product: syz [ 1156.745041][T23935] usb 2-1: Manufacturer: syz [ 1156.753089][T23935] usb 2-1: SerialNumber: syz [ 1156.760692][T23935] usb 2-1: config 0 descriptor?? [ 1156.778913][T23935] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1157.105414][ T755] netlink: 28 bytes leftover after parsing attributes in process `syz.5.21841'. [ 1157.194752][ T765] netlink: 24 bytes leftover after parsing attributes in process `syz.5.21843'. [ 1157.339781][T23935] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1157.349675][T23935] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 1157.360961][T23935] usb 2-1: USB disconnect, device number 121 [ 1157.441302][ T640] vhci_hcd: connection reset by peer [ 1157.452190][T18575] vhci_hcd: stop threads [ 1157.456943][T18575] vhci_hcd: release socket [ 1157.467615][T18575] vhci_hcd: disconnect device [ 1158.143746][ T824] netlink: 16 bytes leftover after parsing attributes in process `syz.6.21866'. [ 1159.025885][ T879] tipc: Enabling of bearer rejected, failed to enable media [ 1159.141549][ T886] netlink: 'syz.5.21894': attribute type 2 has an invalid length. [ 1159.401329][ T43] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1159.536529][ T916] sg_write: process 2630 (syz.5.21904) changed security contexts after opening file descriptor, this is not allowed. [ 1159.574787][ T43] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1159.584493][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.598588][ T43] usb 2-1: config 0 descriptor?? [ 1159.612651][ T43] cp210x 2-1:0.0: cp210x converter detected [ 1159.850480][ T5923] vhci_hcd: vhci_device speed not set [ 1160.015816][ T953] netlink: 256 bytes leftover after parsing attributes in process `syz.6.21913'. [ 1160.059755][ T43] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1160.298050][ T43] usb 2-1: USB disconnect, device number 122 [ 1160.318281][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1160.350840][ T43] cp210x 2-1:0.0: device disconnected [ 1160.624371][ T1021] sctp: [Deprecated]: syz.6.21929 (pid 1021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1160.624371][ T1021] Use struct sctp_sack_info instead [ 1160.812878][ T6074] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1160.928762][ T1039] netlink: 'syz.6.21936': attribute type 2 has an invalid length. [ 1160.944524][ T1039] netlink: 244 bytes leftover after parsing attributes in process `syz.6.21936'. [ 1160.993100][ T6074] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.020245][ T6074] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1161.033341][ T6074] usb 6-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1161.072512][ T6074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.093462][ T6074] usb 6-1: config 0 descriptor?? [ 1161.553345][ T6074] nti 0003:0757:0A00.0079: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.5-1/input0 [ 1161.593156][ T5923] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1161.754004][ T1101] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21955'. [ 1161.774548][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 1161.799156][T23935] usb 6-1: USB disconnect, device number 54 [ 1161.810851][ T5923] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1161.829891][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.844438][ T5923] usb 2-1: Product: syz [ 1161.852159][ T5923] usb 2-1: Manufacturer: syz [ 1161.856819][ T5923] usb 2-1: SerialNumber: syz [ 1161.869821][ T5923] usb 2-1: config 0 descriptor?? [ 1161.886453][ T5923] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1162.544011][ T5923] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1162.563503][ T5923] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1162.582876][ T5923] usb 2-1: USB disconnect, device number 123 [ 1163.627657][ T31] INFO: task syz.2.19141:25395 blocked for more than 143 seconds. [ 1163.641947][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 1163.651101][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1163.660949][ T31] task:syz.2.19141 state:D stack:24424 pid:25395 tgid:25394 ppid:6021 task_flags:0x400140 flags:0x00004004 [ 1163.674468][ T31] Call Trace: [ 1163.677980][ T31] [ 1163.681317][ T31] __schedule+0x16a2/0x4cb0 [ 1163.686146][ T31] ? __sock_sendmsg+0x219/0x270 [ 1163.691286][ T31] ? ____sys_sendmsg+0x505/0x830 [ 1163.696318][ T31] ? do_syscall_64+0xfa/0x3b0 [ 1163.701296][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.707476][ T31] ? schedule+0x165/0x360 [ 1163.714447][ T31] ? __lock_acquire+0xab9/0xd20 [ 1163.719490][ T31] ? __pfx___schedule+0x10/0x10 [ 1163.724629][ T31] ? schedule+0x91/0x360 [ 1163.728920][ T31] schedule+0x165/0x360 [ 1163.742718][ T31] schedule_timeout+0x9a/0x270 [ 1163.747667][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1163.764214][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1163.773612][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1163.781426][ T31] ? wait_for_completion+0x267/0x5d0 [ 1163.788336][ T31] wait_for_completion+0x2bf/0x5d0 [ 1163.793727][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1163.799996][ T31] ? up_write+0x1c4/0x420 [ 1163.804513][ T31] ? remove_client_context+0xc0/0x1e0 [ 1163.810556][ T31] disable_device+0x1c6/0x320 [ 1163.815326][ T31] ? __pfx_disable_device+0x10/0x10 [ 1163.820788][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 1163.826214][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1163.832490][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 1163.838287][ T31] nldev_dellink+0x2d1/0x320 [ 1163.843049][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1163.848207][ T31] ? rcu_is_watching+0x15/0xb0 [ 1163.853011][ T31] ? cap_capable+0x11f/0x460 [ 1163.857598][ T31] ? safesetid_security_capable+0xa9/0x1a0 [ 1163.864157][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1163.868888][ T31] ? security_capable+0x7e/0x2e0 [ 1163.874024][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1163.879293][ T31] rdma_nl_rcv+0x6ae/0x980 [ 1163.884153][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1163.889234][ T31] ? __lock_acquire+0xab9/0xd20 [ 1163.894198][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1163.899570][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1163.905077][ T31] netlink_unicast+0x75b/0x8d0 [ 1163.909885][ T31] netlink_sendmsg+0x805/0xb30 [ 1163.914874][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1163.920184][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1163.925534][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1163.930862][ T31] __sock_sendmsg+0x219/0x270 [ 1163.935622][ T31] ____sys_sendmsg+0x505/0x830 [ 1163.940404][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1163.945794][ T31] ? import_iovec+0x74/0xa0 [ 1163.950337][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1163.955016][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1163.960272][ T31] ? __fget_files+0x2a/0x420 [ 1163.964860][ T31] ? __fget_files+0x3a0/0x420 [ 1163.969618][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1163.974978][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1163.980515][ T31] ? rcu_is_watching+0x15/0xb0 [ 1163.985304][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1163.990116][ T31] do_syscall_64+0xfa/0x3b0 [ 1163.994649][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1163.999912][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.006028][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1164.010759][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.016914][ T31] RIP: 0033:0x7f992bf8e929 [ 1164.021540][ T31] RSP: 002b:00007f992cd8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.030010][ T31] RAX: ffffffffffffffda RBX: 00007f992c1b5fa0 RCX: 00007f992bf8e929 [ 1164.039462][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1164.047528][ T31] RBP: 00007f992c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1164.055848][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.063904][ T31] R13: 0000000000000000 R14: 00007f992c1b5fa0 R15: 00007ffc79573138 [ 1164.072011][ T31] [ 1164.075255][ T31] [ 1164.075255][ T31] Showing all locks held in the system: [ 1164.083410][ T31] 1 lock held by rcu_tasks_trace/29: [ 1164.090299][ T31] #0: ffffffff8e13fb90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0 [ 1164.101570][ T31] 1 lock held by khungtaskd/31: [ 1164.106801][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1164.117048][ T31] 2 locks held by getty/5586: [ 1164.121749][ T31] #0: ffff88803540a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1164.132281][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1164.142646][ T31] 2 locks held by kworker/u8:12/18587: [ 1164.148342][ T31] 4 locks held by kworker/u8:2/13673: [ 1164.153733][ T31] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1164.164910][ T31] #1: ffffc9000539fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1164.175490][ T31] #2: ffffffff8f4f1050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1164.184920][ T31] #3: ffff8880702546d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1164.196637][ T31] 2 locks held by syz.2.19141/25395: [ 1164.202037][ T31] #0: ffffffff99e0e8d8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 1164.212160][ T31] #1: ffff8880702546d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 1164.224003][ T31] [ 1164.226339][ T31] ============================================= [ 1164.226339][ T31] [ 1164.235191][ T31] NMI backtrace for cpu 1 [ 1164.235207][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 1164.235229][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1164.235240][ T31] Call Trace: [ 1164.235249][ T31] [ 1164.235257][ T31] dump_stack_lvl+0x189/0x250 [ 1164.235285][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1164.235307][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.235331][ T31] ? __pfx__printk+0x10/0x10 [ 1164.235362][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1164.235386][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1164.235404][ T31] ? _printk+0xcf/0x120 [ 1164.235425][ T31] ? __pfx__printk+0x10/0x10 [ 1164.235444][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1164.235468][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1164.235492][ T31] watchdog+0xfee/0x1030 [ 1164.235515][ T31] ? watchdog+0x1de/0x1030 [ 1164.235543][ T31] kthread+0x70e/0x8a0 [ 1164.235564][ T31] ? __pfx_watchdog+0x10/0x10 [ 1164.235596][ T31] ? __pfx_kthread+0x10/0x10 [ 1164.235616][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1164.235638][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1164.235659][ T31] ? __pfx_kthread+0x10/0x10 [ 1164.235678][ T31] ret_from_fork+0x3fc/0x770 [ 1164.235704][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1164.235732][ T31] ? __switch_to_asm+0x39/0x70 [ 1164.235748][ T31] ? __switch_to_asm+0x33/0x70 [ 1164.235763][ T31] ? __pfx_kthread+0x10/0x10 [ 1164.235788][ T31] ret_from_fork_asm+0x1a/0x30 [ 1164.235820][ T31] [ 1164.235827][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1164.398339][ C0] NMI backtrace for cpu 0 [ 1164.398362][ C0] CPU: 0 UID: 0 PID: 18575 Comm: kworker/u8:9 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 1164.398383][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1164.398394][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1164.398418][ C0] RIP: 0010:__lock_acquire+0x2f9/0xd20 [ 1164.398440][ C0] Code: 0d c1 e6 0e 09 d6 8b 54 24 1c c1 e2 0f 0f b7 d2 09 f2 41 83 e4 03 41 c1 e4 10 41 09 d4 8b 54 24 0c 83 e2 01 c1 e2 12 44 09 e2 <41> c1 e6 14 41 09 d6 8b 54 24 10 c1 e2 13 c1 e5 15 09 d5 09 cd 44 [ 1164.398454][ C0] RSP: 0018:ffffc9000b7c7308 EFLAGS: 00000006 [ 1164.398468][ C0] RAX: 0000000000000014 RBX: ffffffff8e13ee60 RCX: 0000000000000007 [ 1164.398479][ C0] RDX: 0000000000020000 RSI: 0000000000000000 RDI: ffff888054ceda00 [ 1164.398490][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81728af5 [ 1164.398506][ C0] R10: ffffc9000b7c7558 R11: ffffffff81ace5b0 R12: 0000000000020000 [ 1164.398517][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888054cee4f0 [ 1164.398528][ C0] FS: 0000000000000000(0000) GS:ffff888125c83000(0000) knlGS:0000000000000000 [ 1164.398541][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.398553][ C0] CR2: 00007f5a20181178 CR3: 0000000029fdc000 CR4: 00000000003526f0 [ 1164.398567][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1164.398577][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1164.398586][ C0] Call Trace: [ 1164.398593][ C0] [ 1164.398604][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1164.398625][ C0] lock_acquire+0x120/0x360 [ 1164.398644][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1164.398667][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1164.398687][ C0] ? worker_thread+0x8a0/0xda0 [ 1164.398708][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1164.398728][ C0] unwind_next_frame+0xc2/0x2390 [ 1164.398748][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1164.398770][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1164.398790][ C0] ? process_scheduled_works+0xade/0x17b0 [ 1164.398812][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1164.398829][ C0] arch_stack_walk+0x11c/0x150 [ 1164.398852][ C0] ? worker_thread+0x8a0/0xda0 [ 1164.398874][ C0] stack_trace_save+0x9c/0xe0 [ 1164.398888][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1164.398903][ C0] ? chacha_block_generic+0x53/0xc80 [ 1164.398926][ C0] ? __lock_acquire+0xab9/0xd20 [ 1164.398945][ C0] kasan_save_track+0x3e/0x80 [ 1164.398961][ C0] ? kasan_save_track+0x3e/0x80 [ 1164.398975][ C0] ? kasan_save_free_info+0x46/0x50 [ 1164.398996][ C0] ? __kasan_slab_free+0x62/0x70 [ 1164.399012][ C0] ? kfree+0x18e/0x440 [ 1164.399027][ C0] ? skb_release_data+0x62d/0x7c0 [ 1164.399045][ C0] ? consume_skb+0x9e/0xf0 [ 1164.399060][ C0] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 1164.399076][ C0] ? process_scheduled_works+0xade/0x17b0 [ 1164.399096][ C0] ? worker_thread+0x8a0/0xda0 [ 1164.399132][ C0] kasan_save_free_info+0x46/0x50 [ 1164.399153][ C0] __kasan_slab_free+0x62/0x70 [ 1164.399170][ C0] ? skb_release_data+0x62d/0x7c0 [ 1164.399186][ C0] kfree+0x18e/0x440 [ 1164.399204][ C0] skb_release_data+0x62d/0x7c0 [ 1164.399224][ C0] consume_skb+0x9e/0xf0 [ 1164.399240][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 1164.399263][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1164.399284][ C0] process_scheduled_works+0xade/0x17b0 [ 1164.399315][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1164.399341][ C0] worker_thread+0x8a0/0xda0 [ 1164.399371][ C0] kthread+0x70e/0x8a0 [ 1164.399387][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1164.399407][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.399423][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1164.399443][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1164.399462][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.399477][ C0] ret_from_fork+0x3fc/0x770 [ 1164.399497][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1164.399523][ C0] ? __switch_to_asm+0x39/0x70 [ 1164.399538][ C0] ? __switch_to_asm+0x33/0x70 [ 1164.399551][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.399567][ C0] ret_from_fork_asm+0x1a/0x30 [ 1164.399587][ C0] [ 1164.400912][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1164.808390][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 1164.820195][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1164.830247][ T31] Call Trace: [ 1164.833527][ T31] [ 1164.836462][ T31] dump_stack_lvl+0x99/0x250 [ 1164.841059][ T31] ? __asan_memcpy+0x40/0x70 [ 1164.845643][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.850839][ T31] ? __pfx__printk+0x10/0x10 [ 1164.855436][ T31] panic+0x2db/0x790 [ 1164.859342][ T31] ? __pfx_panic+0x10/0x10 [ 1164.863750][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1164.869558][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1164.874928][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1164.881079][ T31] watchdog+0x102d/0x1030 [ 1164.885404][ T31] ? watchdog+0x1de/0x1030 [ 1164.889819][ T31] kthread+0x70e/0x8a0 [ 1164.893885][ T31] ? __pfx_watchdog+0x10/0x10 [ 1164.898557][ T31] ? __pfx_kthread+0x10/0x10 [ 1164.903143][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1164.908337][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1164.913534][ T31] ? __pfx_kthread+0x10/0x10 [ 1164.918122][ T31] ret_from_fork+0x3fc/0x770 [ 1164.922709][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1164.927815][ T31] ? __switch_to_asm+0x39/0x70 [ 1164.932575][ T31] ? __switch_to_asm+0x33/0x70 [ 1164.937338][ T31] ? __pfx_kthread+0x10/0x10 [ 1164.941923][ T31] ret_from_fork_asm+0x1a/0x30 [ 1164.946722][ T31] [ 1164.950199][ T31] Kernel Offset: disabled [ 1164.954520][ T31] Rebooting in 86400 seconds..