last executing test programs: 7.233547839s ago: executing program 0 (id=1598): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0x7ec0, 0x8, 0x5, 0x3d4}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x1724, 0x5b53, 0xd, 0x0, 0x0) 6.890039823s ago: executing program 0 (id=1602): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a22213bc73b5c37696b90ad5bca70304193fc04574d3ca94f8bd1cfecb4c0bbc0c62d3e3b7d4578bd360ea718afacbfd6c7559a0363ec0d12576131d3c2de8be8d600ab0c76798f2675cf5d68d137fe86e1d0", 0x54}, {&(0x7f0000000100)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd46c823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a6a79dd2d20ff1637187bf9b58377bd5ae528", 0xe3}, {&(0x7f00000012c0)="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", 0x22a}], 0x3, 0x0, 0x0, 0x80}], 0x1, 0x50) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 6.803117277s ago: executing program 0 (id=1603): memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) unshare(0x2040400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r0, r0, 0x2f, 0x202c, 0x4}, 0x20) 6.523270522s ago: executing program 0 (id=1607): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 6.307934195s ago: executing program 0 (id=1609): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaedf, 0x0, 0x2, 0x2ab}, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x5040}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x5c}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@ip={@rand_addr=0x64010100, @empty, 0xff000000, 0xffffffff, 'bond0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348) 5.698074877s ago: executing program 0 (id=1611): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 4.983972331s ago: executing program 32 (id=1611): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 4.012832813s ago: executing program 1 (id=1625): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000defbffff02"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.700147873s ago: executing program 1 (id=1628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x10, 0x7f, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x20, 0x70, 0x8}}}}}]}}]}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.955790509s ago: executing program 1 (id=1633): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x120, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) 2.768260721s ago: executing program 1 (id=1636): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/29, 0x1d}, 0xffff7fff}], 0x1, 0x20102, 0x0) 2.691129179s ago: executing program 1 (id=1637): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x2b) 2.557751067s ago: executing program 4 (id=1638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = userfaultfd(0x80801) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000004280)={0x0, 0x0, 0x20, 0x0, 0x1fff, r0, 0x0, 0x0, 0x6}]) 2.354245316s ago: executing program 1 (id=1641): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="77c327e032c1f686ee5b1e9fc5f88822cb553e889f1c85f804827ad8d9602756b09ad51d64b19d28ec07", 0x2a}], 0x1, 0x1680, 0x4) 2.342032777s ago: executing program 4 (id=1642): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = inotify_init1(0x800) r3 = fcntl$dupfd(r0, 0x406, r2) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000), 0x4) 2.134598257s ago: executing program 4 (id=1645): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)=""/4163, 0x1043}], 0x1}, 0x40000000) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 1.933671305s ago: executing program 2 (id=1648): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6c", 0x6}, {&(0x7f00000001c0)='z3', 0x2}], 0x3, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4012}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x20, 0x0) 1.837763944s ago: executing program 2 (id=1649): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) flock(r1, 0x2) dup3(r1, r0, 0x0) 1.648947303s ago: executing program 3 (id=1650): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 1.578191133s ago: executing program 2 (id=1651): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x834) 1.41462279s ago: executing program 3 (id=1652): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x82) 1.350711461s ago: executing program 2 (id=1653): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0xe58, 0x2, [@TCA_BPF_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x1b, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x9, 0x6, 0x8, 0x3, 0x9}, 0x4, 0x1}, [{0xf, 0x4, 0x7, 0x5, 0x8, 0x3}, {0xff, 0x7f, 0x9, 0xd2, 0xb, 0x7}, {0x5, 0x1, 0x80000001, 0x8}, {0x9, 0x4, 0x3ff, 0xfffffff8, 0x3, 0x10001}, {0xfffffffb, 0x5, 0x8, 0x9, 0x0, 0x678f}, {0x0, 0x2, 0x5, 0x9, 0x4, 0x2}, {0x5, 0x10000, 0xdce, 0xfffffffc, 0xa}, {0x20c9, 0x9, 0x6, 0x2, 0x1, 0x3}, {0xd, 0x9568, 0xfffffffc, 0xbb76f76, 0x5, 0x1}, {0x3, 0x0, 0x0, 0xd, 0x8, 0x4}, {0x1, 0x35a, 0x400, 0x8, 0x1446, 0x99}, {0x0, 0x40, 0xc, 0xffc0, 0xd, 0x100}, {0x9, 0x7ff, 0x4, 0x3, 0x8, 0x2}, {0x6, 0x8, 0x5, 0xfeac, 0xa25, 0x8}, {0xd, 0x6, 0x1, 0x0, 0x0, 0x6}, {0xfffffffe, 0x1, 0xffff, 0x70, 0x8, 0x800}, {0x7, 0x6, 0x2, 0x400, 0x2, 0x3ff}, {0x481a, 0x4, 0x3a2, 0x7, 0x7f, 0x1}, {0xfffffffc, 0x6, 0x4d, 0x8, 0x1000, 0x80}, {0xfffffffb, 0x996, 0x7ff, 0x9, 0x47f, 0xe3df}, {0x9, 0x1, 0x6, 0x6, 0x9, 0x10}, {0x8, 0xfffff801, 0x1, 0x6, 0xa631, 0x7ff}, {0x200, 0x0, 0xd43d, 0x9, 0x5d63, 0x6}, {0x6, 0x101, 0x5, 0x9, 0x1ff, 0x2}, {0x7fff, 0x1ff, 0x6, 0x21aa, 0x86, 0x515}, {0x1, 0x8, 0x3, 0x9, 0x7c1, 0x4}, {0x0, 0x0, 0x3, 0x7, 0x10001, 0x401}, {0x6, 0x2, 0x3, 0x8001, 0xe, 0xa}, {0x7fffffff, 0x3e1, 0x4a9, 0x24f, 0x200, 0x80}, {0x4, 0x80000000, 0x3, 0x80, 0x9, 0xd5}, {0xfffffff7, 0x5, 0x1, 0xf, 0x2, 0x2}, {0xfffffd60, 0xf97, 0x7, 0x8, 0x9, 0x7}, {0x2, 0x9, 0xcea, 0x5, 0x8, 0x8}, {0x7, 0xad9, 0x5, 0xa, 0x3c4, 0x2}, {0x4, 0x6, 0x10001, 0xc74, 0x10000, 0x8}, {0x5, 0x6, 0x2, 0x3, 0x4, 0xf3}, {0x1, 0x5, 0x7, 0x2, 0xa15e, 0xad}, {0x0, 0x2, 0x3, 0x4, 0x8000, 0x2}, {0x8, 0x4, 0x7ff, 0x8, 0x9, 0x9}, {0x10001, 0xea7, 0x0, 0x8, 0x7, 0x4}, {0x0, 0x9, 0xba6, 0x8, 0x3, 0xb}, {0x6, 0x0, 0xfffffd72, 0x7, 0x800, 0x7}, {0x9, 0x8000, 0x9, 0x13e41d9c, 0xfffffffd, 0x40}, {0xd, 0x1, 0x4, 0x1, 0x0, 0x8852}, {0x6e2, 0x2, 0x1000, 0x3, 0xb36}, {0x4, 0x80000000, 0x1, 0x9, 0x4, 0x8000}, {0xb1, 0x4, 0x0, 0x6, 0xcc, 0xc54d}, {0x8, 0xb53, 0x6, 0x7, 0x3, 0x7}, {0x296, 0x65, 0xffffffff, 0x8, 0x7, 0xfffffffb}, {0x401, 0x401, 0x141, 0x8, 0x9, 0x8001}, {0x2, 0x7, 0x8, 0xfffffffd, 0x6, 0x1}, {0x6, 0x7, 0x14000, 0x0, 0x2, 0x10}, {0x7, 0x8, 0x7, 0xc7a, 0xfff, 0xe}, {0x3, 0xe6, 0x77b, 0x80000000, 0x1, 0x7}, {0x0, 0xb66, 0x8, 0x51c, 0x4}, {0x6e67, 0xffff4df6, 0x3, 0x27, 0x1ff, 0x4}, {0x1d, 0x9, 0xe, 0x7, 0x9747, 0xf}, {0x0, 0x1ff, 0x6, 0x55a, 0x699, 0x9}, {0x2, 0x9, 0x0, 0x8, 0x8}, {0xa, 0x9, 0x9, 0x401, 0x1, 0xe271}, {0x5, 0xb6e5, 0x401, 0x6, 0x1, 0x2}, {0xc, 0x9, 0x9, 0xffff, 0x7, 0x10001}, {0x7ff800, 0x9, 0x8, 0x3, 0xf9, 0x5}, {0x5, 0xa, 0x3, 0x100, 0xff, 0xfffffff8}, {0x7ff, 0xa213, 0x8, 0xfffffffc, 0x7, 0x9}, {0x101, 0x7, 0x9, 0x0, 0x0, 0xc}, {0x7, 0x1, 0x3, 0x7, 0x7ff, 0xfff}, {0xf, 0x6, 0x8, 0x2, 0x1935a7aa, 0x7}, {0x2a, 0xc31, 0x9, 0x6, 0x9, 0x4a05}, {0x7, 0xb4e, 0xc, 0x8, 0x80, 0x2}, {0x5, 0xd0, 0x6, 0x3, 0x11, 0xd}, {0x7fff, 0x80, 0x16dd, 0x7, 0xd, 0x5}, {0xf2, 0x1, 0x0, 0x9, 0x6d, 0x9}, {0x62413000, 0x7fffffff, 0x9, 0x81, 0x5, 0x9}, {0x3, 0x1, 0x6, 0xfffffffa, 0x5, 0x9}, {0x49, 0x7fff, 0x2, 0x4, 0xba3, 0xe3}, {0x9, 0x8, 0x5, 0x7fffffff, 0xe, 0x5}, {0x9, 0xf, 0xa, 0xd0, 0x52, 0x4}, {0x8, 0x7, 0x4d7, 0x8, 0x1, 0xfffffffc}, {0x3ff, 0xefb, 0x3ff, 0x51b8, 0x10001, 0x8000}, {0x1, 0xb78, 0xfff, 0xa2ff, 0x321, 0xfffff801}, {0x6, 0xffffffff, 0xfff, 0x5, 0x81, 0x700000}, {0x9, 0x9, 0x1ff, 0x4, 0x101, 0x6}, {0x8000, 0x5, 0x6, 0xc6, 0x80, 0xddc}, {0x101, 0x2, 0x7, 0x1, 0x8, 0x9}, {0x7, 0x8, 0x0, 0x20ff, 0x2, 0x2}, {0x1, 0x8, 0x9, 0x10000, 0x7f, 0xf1}, {0x2768, 0xd0, 0x3, 0x12, 0x58000000, 0x9}, {0x3, 0x5, 0xfffffff9, 0x100, 0x880, 0x82}, {0xfff, 0x10, 0x3, 0x7f, 0xfffffffe, 0x3}, {0x2d, 0x6, 0x0, 0xf, 0x4, 0x5}, {0x6, 0x4, 0x3ff, 0x0, 0x3, 0x3}, {0x8, 0x30c, 0x6, 0x65f, 0x287, 0x2}, {0x1, 0x6, 0xb99c, 0x1, 0xfffffffd, 0xb5b6}, {0x7476, 0xfff, 0x1, 0x0, 0x101, 0x6}, {0x400, 0xf54, 0xfffffffb, 0x7, 0x9, 0x80000001}, {0x0, 0x2, 0x7, 0xffff0001, 0x5, 0xfffffbff}, {0xffffff11, 0x3, 0xcb, 0x3, 0x281f, 0x9f6}, {0x7, 0x5, 0x1, 0x0, 0x2}, {0xd, 0x9, 0x1, 0x4, 0x0, 0x8001}, {0x9, 0xfffff704, 0x1, 0x4, 0x463, 0x9}, {0x1, 0x5, 0x1, 0x7fffffff, 0x1, 0xff}, {0x3, 0x7, 0x2, 0x8001, 0x374b, 0x62c3f208}, {0x8001, 0x1ff, 0x4, 0x4, 0x6, 0x5}, {0x7, 0x0, 0x4, 0x1, 0x8001, 0x4}, {0xa7c9, 0x7, 0xb21e, 0xa8a, 0x1, 0x5}, {0x7ff, 0xe, 0x2, 0xf, 0x6, 0x8}, {0x5, 0xffffffff, 0x80f, 0x9, 0x3, 0x800}, {0x1, 0xdc66, 0x0, 0x80, 0x7192, 0x7ff}, {0x10, 0x7f, 0xb30b, 0x1, 0x8, 0x6}, {0x4, 0x18e5, 0x4, 0x5, 0x9, 0x40}, {0x0, 0xa, 0x8, 0x0, 0x4, 0x6}, {0x69, 0x6, 0x0, 0x3, 0xb, 0xe}, {0x0, 0x1007, 0xffff9b76, 0x987e, 0x7, 0x3}, {0x9, 0x7, 0x2, 0x4, 0x6, 0xfffffffc}, {0x2, 0x29, 0x2, 0x40, 0x0, 0x1}, {0xffffffff, 0x6, 0x6, 0xfffffff8, 0x9, 0xc}, {0x1, 0xffffffff, 0x2, 0x8, 0x5, 0x4}, {0x7d1e, 0x3, 0xd, 0x30b4, 0xfe, 0x2}, {0x81, 0x8, 0x4, 0xbb2, 0xbf3, 0x2}, {0x3b75, 0x731, 0x4, 0x9, 0x8e14}, {0x8, 0x3, 0x940, 0xe, 0x7, 0x7f}, {0x10001, 0x5, 0x417, 0x7f, 0xfff, 0x7}, {0x5, 0x10, 0x6, 0x0, 0x1, 0x100}, {0x7, 0x2, 0x4, 0x0, 0xffff550d, 0x5}, {0x2, 0x8001, 0x6, 0x8, 0xb78, 0xffffffff}, {0xffffffaa, 0xb49, 0x3, 0x1, 0x8, 0x97e}, {0x7, 0xaa7, 0x9, 0x4, 0x4, 0x81}], [{0x4}, {0x5}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x2f4781f4068c5413}, {0x3}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x5b46fac980ec826}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x7}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0xd8a0cbfe26f61e5e}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x3}, {0x5}, {0x4}, {0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4}, {0x4}, {}, {0x1}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xe84}}, 0x20040054) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.228090234s ago: executing program 4 (id=1654): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e9, 0x1c410, 0x2, 0x20002f7}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x8002}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) 1.042698096s ago: executing program 4 (id=1655): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) creat(&(0x7f0000000100)='./file0\x00', 0x130) creat(&(0x7f0000000140)='./file0\x00', 0x20) 1.039953211s ago: executing program 2 (id=1656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 882.146005ms ago: executing program 3 (id=1657): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0xffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="f7a6f62fe17ea564b2b6", 0xa}], 0x1}}], 0x1, 0x80) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x48805) 806.861903ms ago: executing program 4 (id=1658): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) dup2(r1, r0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, 0x0) 651.846725ms ago: executing program 3 (id=1659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800005ba500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 385.604089ms ago: executing program 3 (id=1660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 90.274439ms ago: executing program 3 (id=1661): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x34, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1662): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x3, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540), 0x395}, 0x24048000) kernel console output (not intermixed with test programs): ber 3 using dummy_hcd [ 117.727600][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 117.730703][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.730750][ T5930] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 117.730770][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.877951][ T5930] usb 4-1: config 0 descriptor?? [ 118.387346][ T5954] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.398842][ T5930] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 118.657154][ T5954] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 118.657197][ T5954] usb 5-1: config 0 has no interface number 0 [ 118.657231][ T5954] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 118.657288][ T5954] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 118.657316][ T5954] usb 5-1: config 0 interface 255 has no altsetting 0 [ 118.657350][ T5954] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 118.657374][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.742697][ T5954] usb 5-1: config 0 descriptor?? [ 118.746626][ T5954] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 119.041134][ T5930] usb 4-1: USB disconnect, device number 3 [ 119.042311][ T5954] usb 5-1: USB disconnect, device number 2 [ 119.411124][ T6024] pim6reg: entered allmulticast mode [ 119.432754][ T6026] pim6reg: left allmulticast mode [ 119.633287][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.718071][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.787437][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.856165][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.298318][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 120.610386][ T6046] loop8: detected capacity change from 0 to 7 [ 120.645701][ T6046] Dev loop8: unable to read RDB block 7 [ 120.645755][ T6046] loop8: unable to read partition table [ 120.645990][ T6046] loop8: partition table beyond EOD, truncated [ 120.646028][ T6046] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.808786][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.811714][ T6050] netlink: 'syz.4.36': attribute type 12 has an invalid length. [ 120.811736][ T6050] netlink: 'syz.4.36': attribute type 29 has an invalid length. [ 120.811750][ T6050] netlink: 148 bytes leftover after parsing attributes in process `syz.4.36'. [ 120.811789][ T6050] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 120.811802][ T6050] netlink: 'syz.4.36': attribute type 2 has an invalid length. [ 120.812073][ T6050] Zero length message leads to an empty skb [ 120.893766][ T5998] Dev loop8: unable to read RDB block 7 [ 120.893815][ T5998] loop8: unable to read partition table [ 120.894078][ T5998] loop8: partition table beyond EOD, truncated [ 120.921751][ T6046] Dev loop8: unable to read RDB block 7 [ 120.921807][ T6046] loop8: unable to read partition table [ 120.922048][ T6046] loop8: partition table beyond EOD, truncated [ 120.922068][ T6046] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 121.307271][ T5930] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.468157][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 121.474331][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.474366][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.474407][ T5930] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.474431][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.546869][ T5930] usb 1-1: config 0 descriptor?? [ 121.706168][ T5930] hub 1-1:0.0: USB hub found [ 121.915336][ T5930] hub 1-1:0.0: 1 port detected [ 122.197138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.535596][ T5927] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 122.547035][ T5927] usb 1-1: Failed to suspend device, error -71 [ 122.547809][ T5927] usb 1-1: USB disconnect, device number 2 [ 122.637355][ T5854] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.795443][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.795480][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.795509][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 122.795532][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.795578][ T5854] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.795603][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.880675][ T5854] usb 5-1: config 0 descriptor?? [ 123.380005][ T5854] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 123.523960][ T5854] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 124.247111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.834280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 125.153041][ T6096] Bluetooth: MGMT ver 1.23 [ 125.153086][ T6096] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 125.440305][ T6101] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.567550][ T5930] usb 5-1: USB disconnect, device number 3 [ 127.541937][ T6156] cgroup: Unknown subsys name 'cpuset' [ 128.564759][ T6173] vlan2: entered allmulticast mode [ 128.564783][ T6173] dummy0: entered allmulticast mode [ 129.167327][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 129.771920][ T6184] ======================================================= [ 129.771920][ T6184] WARNING: The mand mount option has been deprecated and [ 129.771920][ T6184] and is ignored by this kernel. Remove the mand [ 129.771920][ T6184] option from the mount to silence this warning. [ 129.771920][ T6184] ======================================================= [ 130.223000][ T6180] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.087474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.087820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.941921][ T6226] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 131.986924][ T6225] capability: warning: `syz.0.102' uses 32-bit capabilities (legacy support in use) [ 132.791474][ T1012] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 133.637817][ T6268] sctp: [Deprecated]: syz.1.114 (pid 6268) Use of int in max_burst socket option deprecated. [ 133.637817][ T6268] Use struct sctp_assoc_value instead [ 134.146594][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.257222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.597313][ T38] audit: type=1326 audit(1757362552.079:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd29c4ebe9 code=0x7ffc0000 [ 136.624870][ T38] audit: type=1326 audit(1757362552.089:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdd29c4ebe9 code=0x7ffc0000 [ 136.624926][ T38] audit: type=1326 audit(1757362552.089:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd29c4ebe9 code=0x7ffc0000 [ 136.624971][ T38] audit: type=1326 audit(1757362552.089:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd29c4ebe9 code=0x7ffc0000 [ 136.625019][ T38] audit: type=1326 audit(1757362552.099:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdd29c4ebe9 code=0x7ffc0000 [ 136.625065][ T38] audit: type=1326 audit(1757362552.099:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd29c4ebe9 code=0x7ffc0000 [ 136.625119][ T38] audit: type=1326 audit(1757362552.099:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fdd29c4ebe9 code=0x7ffc0000 [ 136.625164][ T38] audit: type=1326 audit(1757362552.099:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd29c4ebe9 code=0x7ffc0000 [ 136.625210][ T38] audit: type=1326 audit(1757362552.099:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd29c4ebe9 code=0x7ffc0000 [ 136.625258][ T38] audit: type=1326 audit(1757362552.099:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6306 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdd29c4ebe9 code=0x7ffc0000 [ 138.296759][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.296861][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.898430][ T6341] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 140.387965][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.537271][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 140.540292][ T44] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 140.540320][ T44] usb 3-1: config 0 has no interface number 0 [ 140.544100][ T44] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 140.544131][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.544151][ T44] usb 3-1: Product: syz [ 140.544166][ T44] usb 3-1: Manufacturer: syz [ 140.544181][ T44] usb 3-1: SerialNumber: syz [ 140.604901][ T44] usb 3-1: config 0 descriptor?? [ 140.633680][ T44] kobil_sct 3-1:0.148: required endpoints missing [ 140.905832][ T5854] usb 3-1: USB disconnect, device number 2 [ 141.237274][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.407240][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.407277][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.407317][ T44] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 141.407342][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.413593][ T44] usb 2-1: config 0 descriptor?? [ 141.900432][ T44] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 142.663978][ T44] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 142.664035][ T44] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 142.685263][ T44] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 142.715952][ T44] usb 2-1: USB disconnect, device number 2 [ 145.877404][ T5927] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.909077][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.177'. [ 145.909101][ T6428] netlink: 64 bytes leftover after parsing attributes in process `syz.1.177'. [ 145.909480][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.177'. [ 146.027263][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 146.032847][ T5927] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 146.032880][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.032902][ T5927] usb 4-1: Product: syz [ 146.032918][ T5927] usb 4-1: Manufacturer: syz [ 146.032934][ T5927] usb 4-1: SerialNumber: syz [ 146.083822][ T5927] usb 4-1: config 0 descriptor?? [ 146.095959][ T5927] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 147.340315][ T5927] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 147.372375][ T5927] usb 4-1: USB disconnect, device number 4 [ 147.790910][ T6455] evm: overlay not supported [ 148.134484][ T6465] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 148.197197][ T5927] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 148.350997][ T5927] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 148.351030][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 148.356175][ T5927] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 148.356207][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 148.356238][ T5927] usb 3-1: Product: syz [ 148.356253][ T5927] usb 3-1: Manufacturer: syz [ 148.356268][ T5927] usb 3-1: SerialNumber: syz [ 148.414293][ T5927] usb 3-1: config 0 descriptor?? [ 148.465414][ T5927] usb 3-1: selecting invalid altsetting 0 [ 148.737892][ T6485] netlink: 'syz.4.198': attribute type 10 has an invalid length. [ 148.739705][ T5822] usb 3-1: USB disconnect, device number 3 [ 149.035315][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.193487][ T6485] syz_tun: entered promiscuous mode [ 149.273173][ T6485] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 152.737196][ T5927] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 152.891334][ T5927] usb 1-1: config 0 has no interfaces? [ 152.895056][ T5927] usb 1-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.84 [ 152.895089][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.895111][ T5927] usb 1-1: Product: syz [ 152.895126][ T5927] usb 1-1: Manufacturer: syz [ 152.895141][ T5927] usb 1-1: SerialNumber: syz [ 152.973688][ T5927] usb 1-1: config 0 descriptor?? [ 153.060169][ T6541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.250883][ T5927] usb 1-1: USB disconnect, device number 3 [ 153.487245][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.651617][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.651654][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.651679][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.651725][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.651749][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.719085][ T44] usb 2-1: config 0 descriptor?? [ 153.982781][ T6554] tc_dump_action: action bad kind [ 154.181170][ T44] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 154.182836][ T6556] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 154.268024][ T44] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 154.329366][ T6556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.394152][ T6558] bond1: (slave ip6gretap1): making interface the new active one [ 154.396350][ T6558] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 154.449706][ T44] usb 2-1: USB disconnect, device number 3 [ 154.500623][ T6559] fido_id[6559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 156.454241][ T6601] loop3: detected capacity change from 0 to 1 [ 156.467248][ T5854] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.618753][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 156.628017][ T5854] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 156.628051][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.628073][ T5854] usb 2-1: Product: syz [ 156.628089][ T5854] usb 2-1: Manufacturer: syz [ 156.628104][ T5854] usb 2-1: SerialNumber: syz [ 156.653775][ T5854] usb 2-1: config 0 descriptor?? [ 156.839037][ T5854] as10x_usb: device has been detected [ 156.845230][ T5854] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 157.035141][ T5854] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 157.254233][ T6613] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.250'. [ 157.270369][ T5854] as10x_usb: error during firmware upload part1 [ 157.271103][ T5854] Registered device Abilis Systems DVB-Titan [ 157.335632][ T5854] usb 2-1: USB disconnect, device number 4 [ 157.516247][ T5854] Unregistered device Abilis Systems DVB-Titan [ 157.561702][ T5854] as10x_usb: device has been disconnected [ 158.008496][ T6629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.167411][ T5822] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.328877][ T5822] usb 3-1: Using ep0 maxpacket: 32 [ 159.333265][ T5822] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 159.333297][ T5822] usb 3-1: config 0 has no interface number 0 [ 159.333347][ T5822] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 159.333377][ T5822] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 159.387204][ T5822] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 159.387236][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.387258][ T5822] usb 3-1: Product: syz [ 159.387273][ T5822] usb 3-1: Manufacturer: syz [ 159.387289][ T5822] usb 3-1: SerialNumber: syz [ 159.439662][ T5822] usb 3-1: config 0 descriptor?? [ 159.440539][ T6648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.440698][ T6648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.487418][ T5822] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 159.801025][ T5822] usb 3-1: USB disconnect, device number 4 [ 159.849803][ T6671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.274'. [ 159.913881][ T6671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.274'. [ 159.955006][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.196437][ T6675] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 160.827261][ T5954] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.977282][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 160.978364][ T5954] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 160.980220][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.033582][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.035157][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.036600][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.045552][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.049232][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.051205][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.069132][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.080367][ T5954] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 161.080406][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 161.080432][ T5954] usb 5-1: SerialNumber: syz [ 161.153395][ T5954] usb 5-1: config 0 descriptor?? [ 161.211620][ T5954] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 161.342383][ T6704] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 161.439695][ T5192] bcm5974 5-1:0.0: could not read from device [ 161.553288][ T5192] bcm5974 5-1:0.0: could not read from device [ 161.569775][ T5954] usb 5-1: USB disconnect, device number 4 [ 161.616463][ T6704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.820395][ T6708] bond1: (slave geneve2): making interface the new active one [ 161.822853][ T6708] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 162.176000][ T6725] netlink: 'syz.4.294': attribute type 6 has an invalid length. [ 162.176025][ T6725] netlink: 'syz.4.294': attribute type 4 has an invalid length. [ 162.176039][ T6725] netlink: 'syz.4.294': attribute type 6 has an invalid length. [ 162.176053][ T6725] netlink: 5944 bytes leftover after parsing attributes in process `syz.4.294'. [ 162.215019][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 162.252724][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 163.154191][ T6746] process 'syz.0.305' launched './file1' with NULL argv: empty string added [ 163.677332][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.830925][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.830970][ T44] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 163.830990][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.871094][ T44] usb 3-1: config 0 descriptor?? [ 163.928307][ T6770] warning: `syz.3.315' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 164.116337][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 164.116470][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 164.165120][ T44] usb 3-1: USB disconnect, device number 5 [ 164.463292][ T6784] Bluetooth: hci0: invalid length 4, exp 2 for type 15 [ 164.638166][ T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.787193][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 164.790005][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.790068][ T44] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 164.790093][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.840381][ T44] usb 3-1: config 0 descriptor?? [ 165.341065][ T44] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 165.794348][ T5954] usb 3-1: USB disconnect, device number 6 [ 166.615143][ T6799] syz.0.329 (6799) used greatest stack depth: 16760 bytes left [ 166.673491][ T6810] netlink: 'syz.3.332': attribute type 2 has an invalid length. [ 167.327195][ T5954] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 167.479632][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.479675][ T5954] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 167.479699][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.484931][ T5954] usb 2-1: config 0 descriptor?? [ 167.607220][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.789913][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 167.796870][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.796970][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.797014][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 167.823668][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.874333][ T9] usb 5-1: config 0 descriptor?? [ 167.962419][ T5954] hid-udraw 0003:20D6:CB17.0006: unknown main item tag 0x0 [ 167.962464][ T5954] hid-udraw 0003:20D6:CB17.0006: item fetching failed at offset 4/5 [ 167.965427][ T5954] hid-udraw 0003:20D6:CB17.0006: parse failed [ 167.965760][ T5954] hid-udraw 0003:20D6:CB17.0006: probe with driver hid-udraw failed with error -22 [ 168.158797][ T44] usb 2-1: USB disconnect, device number 5 [ 168.353593][ T9] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 168.677796][ T44] usb 5-1: USB disconnect, device number 5 [ 168.991412][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 169.037281][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 169.107268][ T5822] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.187130][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 169.191425][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.191460][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.191485][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 169.191530][ T31] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 169.191555][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.262674][ T31] usb 1-1: config 0 descriptor?? [ 169.264002][ T5822] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 169.264179][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.264209][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.264237][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 169.264266][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.264311][ T5822] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.264335][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.446057][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 169.502210][ T5822] usb 4-1: config 0 descriptor?? [ 169.505738][ T6859] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 169.816643][ T31] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 169.961588][ T5822] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.961629][ T5822] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.961659][ T5822] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.961688][ T5822] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.961718][ T5822] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 169.961748][ T5822] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 170.027529][ T5822] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 170.256324][ T31] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 170.263719][ T31] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 170.280595][ T9] usb 4-1: USB disconnect, device number 5 [ 170.362729][ T5927] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 170.377269][ T5927] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 170.377802][ T5927] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 170.379804][ T5927] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 170.394575][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 170.394597][ T38] audit: type=1326 audit(1757362841.840:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6878 comm="syz.4.362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd55997ebe9 code=0x0 [ 170.434412][ T31] usb 1-1: USB disconnect, device number 4 [ 170.559728][ T6885] fido_id[6885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 171.865298][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 173.987116][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 174.139452][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 174.143673][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 174.143703][ T31] usb 2-1: config 0 has no interface number 0 [ 174.148826][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 174.148862][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.148885][ T31] usb 2-1: Product: syz [ 174.148905][ T31] usb 2-1: Manufacturer: syz [ 174.148922][ T31] usb 2-1: SerialNumber: syz [ 174.217213][ T31] usb 2-1: config 0 descriptor?? [ 174.235153][ T31] smsc95xx v2.0.0 [ 174.678530][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 174.678563][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 175.285532][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 175.286210][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 175.327776][ T31] usb 2-1: USB disconnect, device number 6 [ 177.020618][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 177.170547][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 177.173057][ T9] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 177.173087][ T9] usb 5-1: config 0 has no interface number 0 [ 177.173143][ T9] usb 5-1: config 0 interface 172 altsetting 0 has an endpoint descriptor with address 0x55, changing to 0x5 [ 177.173173][ T9] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 177.173202][ T9] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.234795][ T9] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 177.234827][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.234849][ T9] usb 5-1: Product: syz [ 177.234865][ T9] usb 5-1: Manufacturer: syz [ 177.234880][ T9] usb 5-1: SerialNumber: syz [ 177.251400][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 177.283035][ T9] usb 5-1: config 0 descriptor?? [ 177.303015][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 177.426331][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 177.432157][ T44] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 177.432191][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.451902][ T44] usb 1-1: config 0 descriptor?? [ 177.697165][ T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 177.772602][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.810144][ T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 177.810225][ T44] usb 1-1: media controller created [ 178.042796][ T7019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.050903][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.154729][ T9] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 178.219438][ T44] az6027: usb out operation failed. (-71) [ 178.247503][ T44] az6027: usb out operation failed. (-71) [ 178.247524][ T44] stb0899_attach: Driver disabled by Kconfig [ 178.247533][ T44] az6027: no front-end attached [ 178.247533][ T44] [ 178.255054][ T44] az6027: usb out operation failed. (-71) [ 178.255073][ T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 178.330814][ T6008] usb 5-1: USB disconnect, device number 6 [ 178.373074][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 178.393085][ T44] dvb-usb: schedule remote query interval to 400 msecs. [ 178.393111][ T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 178.438685][ T44] usb 1-1: USB disconnect, device number 5 [ 178.979644][ T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 179.897276][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.097268][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 180.100331][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.100365][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.100390][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 180.100434][ T31] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 180.100459][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.214561][ T31] usb 3-1: config 0 descriptor?? [ 180.267209][ T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 180.437195][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 180.439762][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.439786][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.439812][ T44] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 180.439882][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.568646][ T44] usb 4-1: config 0 descriptor?? [ 180.796494][ T31] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 181.175235][ T31] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 181.175599][ T31] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 181.239155][ T5927] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 181.239620][ T5927] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 181.240640][ T5927] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 181.241116][ T5927] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 181.407464][ T31] usb 3-1: USB disconnect, device number 7 [ 181.635609][ T44] letsketch 0003:6161:4D15.000B: Device info: à° [ 181.907217][ T44] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 181.907312][ T44] letsketch 0003:6161:4D15.000B: probe with driver letsketch failed with error -71 [ 181.936314][ T44] usb 4-1: USB disconnect, device number 6 [ 182.638884][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.442'. [ 183.060234][ T7086] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.444'. [ 183.060260][ T7086] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.444'. [ 183.060276][ T7086] netlink: 6 bytes leftover after parsing attributes in process `syz.2.444'. [ 184.343749][ T7101] sit0: entered allmulticast mode [ 184.482375][ T38] audit: type=1326 audit(1757362855.970:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7114 comm="syz.1.452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd9b4cebe9 code=0x0 [ 184.929310][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.455'. [ 185.623606][ T7145] netlink: 'syz.4.462': attribute type 12 has an invalid length. [ 185.699028][ T5822] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 185.776798][ T5502] veth1_vlan: left promiscuous mode [ 185.850916][ T5822] usb 1-1: Using ep0 maxpacket: 32 [ 185.862143][ T5822] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 185.862180][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.932146][ T5822] usb 1-1: config 0 descriptor?? [ 185.975937][ T5822] gspca_main: sq930x-2.14.0 probing 041e:403c [ 187.227236][ T5822] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 187.227345][ T5822] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 187.233097][ T5822] usb 1-1: USB disconnect, device number 6 [ 187.247648][ T7167] nbd: device at index 1 is going down [ 187.837490][ T44] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 188.004178][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 188.009214][ T44] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 188.009247][ T44] usb 3-1: config 0 has no interface number 0 [ 188.009286][ T44] usb 3-1: config 0 interface 38 has no altsetting 0 [ 188.056172][ T44] usb 3-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 188.056203][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.056223][ T44] usb 3-1: Product: syz [ 188.056238][ T44] usb 3-1: Manufacturer: syz [ 188.056253][ T44] usb 3-1: SerialNumber: syz [ 188.131561][ T44] usb 3-1: config 0 descriptor?? [ 188.135630][ T44] usb-storage 3-1:0.38: USB Mass Storage device detected [ 188.639261][ T44] usb 3-1: USB disconnect, device number 8 [ 189.887356][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 189.887397][ T7225] bridge: RTM_NEWNEIGH with invalid ether address [ 191.158922][ T38] audit: type=1326 audit(1757362862.650:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1e547adb9 code=0x7ffc0000 [ 191.159335][ T38] audit: type=1326 audit(1757362862.650:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e54debe9 code=0x7ffc0000 [ 191.159823][ T38] audit: type=1326 audit(1757362862.650:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e54debe9 code=0x7ffc0000 [ 191.160492][ T38] audit: type=1326 audit(1757362862.650:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e54debe9 code=0x7ffc0000 [ 191.337947][ T38] audit: type=1326 audit(1757362862.820:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e54debe9 code=0x7ffc0000 [ 191.338437][ T38] audit: type=1326 audit(1757362862.830:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e54debe9 code=0x7ffc0000 [ 191.339241][ T38] audit: type=1326 audit(1757362862.830:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1e547adb9 code=0x7ffc0000 [ 191.339785][ T38] audit: type=1326 audit(1757362862.830:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e54debe9 code=0x7ffc0000 [ 191.340533][ T38] audit: type=1326 audit(1757362862.830:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1e547adb9 code=0x7ffc0000 [ 191.341518][ T38] audit: type=1326 audit(1757362862.830:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e54debe9 code=0x7ffc0000 [ 192.401065][ T37] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 193.281112][ T7265] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 193.505531][ T7264] input: syz1 as /devices/virtual/input/input11 [ 194.487592][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 194.620369][ T7311] hsr_slave_0: left promiscuous mode [ 194.777237][ T7311] hsr_slave_1: left promiscuous mode [ 194.994602][ T7318] netlink: 'syz.0.510': attribute type 39 has an invalid length. [ 195.539201][ T7315] netlink: 830 bytes leftover after parsing attributes in process `syz.3.508'. [ 195.820274][ T7333] syz.4.513 uses obsolete (PF_INET,SOCK_PACKET) [ 196.237271][ T991] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 196.391627][ T991] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.391689][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 196.391721][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.391745][ T991] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 196.424450][ T991] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.424489][ T991] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.424512][ T991] usb 3-1: Manufacturer: syz [ 196.477687][ T991] usb 3-1: config 0 descriptor?? [ 196.654623][ T7354] Invalid ELF header magic: != ELF [ 196.857158][ T991] rc_core: IR keymap rc-hauppauge not found [ 196.857179][ T991] Registered IR keymap rc-empty [ 196.858007][ T991] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 196.878994][ T991] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 196.910916][ T991] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 196.931472][ T991] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 196.951646][ T991] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 196.968630][ T991] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.022460][ T991] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.040985][ T991] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.058134][ T991] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.078141][ T991] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.097531][ T991] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.117472][ T991] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.139748][ T991] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.157631][ T991] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.207457][ T991] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 197.207484][ T991] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 197.341448][ T991] usb 3-1: USB disconnect, device number 9 [ 197.614181][ T7372] atomic_op ffff888032fe1a18 conn xmit_atomic 0000000000000000 [ 198.005107][ T7386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.006246][ T7384] tipc: Started in network mode [ 198.006276][ T7384] tipc: Node identity ac14140f, cluster identity 4711 [ 198.024609][ T7384] tipc: New replicast peer: 255.255.255.255 [ 198.065277][ T7384] tipc: Enabled bearer , priority 10 [ 198.472806][ T31] IPVS: starting estimator thread 0... [ 198.582022][ T7396] IPVS: using max 6 ests per chain, 14400 per kthread [ 199.140043][ T10] tipc: Node number set to 2886997007 [ 199.735708][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.735788][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.807996][ T991] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.963435][ T991] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 200.963478][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.963500][ T991] usb 4-1: Product: syz [ 200.963528][ T991] usb 4-1: Manufacturer: syz [ 200.963544][ T991] usb 4-1: SerialNumber: syz [ 200.985144][ T991] usb 4-1: config 0 descriptor?? [ 201.010313][ T991] ch341 4-1:0.0: ch341-uart converter detected [ 201.888077][ T5822] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 202.004539][ T991] ch341-uart ttyUSB0: break control not supported, using simulated break [ 202.020427][ T991] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 202.037547][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 202.052548][ T5822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.052612][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.052646][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 202.052677][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 202.052703][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.062890][ T5822] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 202.062922][ T5822] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 202.062944][ T5822] usb 3-1: Manufacturer: syz [ 202.098685][ T5822] usb 3-1: config 0 descriptor?? [ 202.100158][ T44] usb 4-1: USB disconnect, device number 7 [ 202.181488][ T44] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 202.181976][ T44] ch341 4-1:0.0: device disconnected [ 202.784680][ T5822] rc_core: IR keymap rc-hauppauge not found [ 202.784705][ T5822] Registered IR keymap rc-empty [ 202.784866][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.800073][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.822349][ T5822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 202.825575][ T5822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 202.911920][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.940816][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.968530][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 202.992670][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.011103][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.031522][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.047758][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.068496][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.087355][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.108035][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 203.153964][ T5822] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 203.153992][ T5822] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 203.339507][ T5822] usb 3-1: USB disconnect, device number 10 [ 203.516083][ T7497] netlink: 'syz.1.574': attribute type 12 has an invalid length. [ 203.516104][ T7497] netlink: 'syz.1.574': attribute type 29 has an invalid length. [ 203.516118][ T7497] netlink: 148 bytes leftover after parsing attributes in process `syz.1.574'. [ 203.535117][ T7497] netlink: 'syz.1.574': attribute type 12 has an invalid length. [ 203.535142][ T7497] netlink: 'syz.1.574': attribute type 29 has an invalid length. [ 203.535156][ T7497] netlink: 148 bytes leftover after parsing attributes in process `syz.1.574'. [ 204.429165][ T5822] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 204.590121][ T5822] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 204.590176][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.590204][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.590228][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 204.592262][ T5822] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 204.592290][ T5822] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 204.592312][ T5822] usb 3-1: Manufacturer: syz [ 204.600293][ T5822] usb 3-1: config 0 descriptor?? [ 205.061255][ T5822] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 205.104421][ T5822] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 205.310318][ T5927] usb 3-1: USB disconnect, device number 11 [ 206.312340][ T7570] 9pnet: p9_errstr2errno: server reported unknown error @íÎÇpî‘AçÁ›¬ž;KZì44§/@®qæžkøp [ 206.312340][ T7570] [ 206.370487][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 206.787632][ T5927] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 206.936282][ T7591] netlink: 64 bytes leftover after parsing attributes in process `syz.1.607'. [ 206.967127][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.967184][ T5927] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 206.967210][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.011240][ T5927] usb 1-1: config 0 descriptor?? [ 207.077173][ T991] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 207.233773][ T991] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.233857][ T991] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.233901][ T991] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.240649][ T991] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.240677][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.240697][ T991] usb 4-1: Product: syz [ 207.240709][ T991] usb 4-1: Manufacturer: syz [ 207.240723][ T991] usb 4-1: SerialNumber: syz [ 207.241894][ T5927] usbhid 1-1:0.0: can't add hid device: -71 [ 207.242265][ T5927] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 207.364808][ T991] cdc_mbim 4-1:1.0: skipping garbage [ 207.397915][ T5927] usb 1-1: USB disconnect, device number 7 [ 207.688402][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 207.837426][ T5927] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 207.840494][ T44] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 207.840522][ T44] usb 2-1: config 0 has no interface number 0 [ 207.840556][ T44] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 207.840598][ T44] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 207.840628][ T44] usb 2-1: config 0 interface 255 has no altsetting 0 [ 207.840662][ T44] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 207.840686][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.865873][ T44] usb 2-1: config 0 descriptor?? [ 207.874194][ T44] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 207.999775][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 208.010867][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.010928][ T5927] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 208.010956][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.023337][ T5927] usb 1-1: config 0 descriptor?? [ 208.040356][ T7609] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 208.161282][ T5954] usb 2-1: USB disconnect, device number 7 [ 208.309591][ T7609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.385946][ T991] cdc_mbim 4-1:1.0: bind() failure [ 208.410353][ T991] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 208.410402][ T991] cdc_ncm 4-1:1.1: bind() failure [ 208.414907][ T7611] bond1: (slave geneve2): making interface the new active one [ 208.441572][ T991] usb 4-1: USB disconnect, device number 8 [ 208.445726][ T7611] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 208.510566][ T5927] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 208.843517][ T7622] input: syz1 as /devices/virtual/input/input14 [ 208.896777][ T5954] usb 1-1: USB disconnect, device number 8 [ 209.057230][ T991] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 209.227564][ T991] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.227599][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 209.227636][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 209.227660][ T991] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.227705][ T991] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.227729][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.234879][ T991] usb 2-1: config 0 descriptor?? [ 209.744081][ T991] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 209.802077][ T991] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 209.877288][ T7650] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 210.057179][ T44] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 210.207198][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 210.212973][ T44] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 210.213062][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.255071][ T44] usb 3-1: config 0 descriptor?? [ 211.172024][ T5954] usb 2-1: USB disconnect, device number 8 [ 211.532316][ T44] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 211.532348][ T44] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 211.532624][ T44] asix 3-1:0.0: probe with driver asix failed with error -71 [ 211.571734][ T44] usb 3-1: USB disconnect, device number 12 [ 211.866014][ T7668] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.635'. [ 212.195899][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 212.367452][ T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 212.542135][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.542164][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.543739][ T44] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 212.543769][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.543790][ T44] usb 2-1: SerialNumber: syz [ 212.637241][ T5822] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 212.747955][ T5927] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.827631][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 212.854243][ T7686] input: syz0 as /devices/virtual/input/input15 [ 212.868570][ T5822] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.868608][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 212.868645][ T5822] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 212.868670][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.889015][ T44] usb 2-1: 0:2 : does not exist [ 212.900934][ T5822] usb 5-1: config 0 descriptor?? [ 212.931640][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 212.942943][ T5927] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 212.942971][ T5927] usb 1-1: config 0 has no interface number 0 [ 212.945291][ T5927] usb 1-1: config 0 interface 12 has no altsetting 0 [ 212.977903][ T5927] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 212.977934][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.978013][ T5927] usb 1-1: Product: syz [ 212.978029][ T5927] usb 1-1: Manufacturer: syz [ 212.978044][ T5927] usb 1-1: SerialNumber: syz [ 213.091546][ T5927] usb 1-1: config 0 descriptor?? [ 213.186831][ T44] usb 2-1: USB disconnect, device number 9 [ 213.459123][ T5822] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 213.770403][ T5954] usb 5-1: USB disconnect, device number 7 [ 214.367110][ T5927] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 214.367166][ T5927] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 214.367184][ T5927] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 214.367288][ T5927] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 214.406254][ T5927] usb 1-1: USB disconnect, device number 9 [ 214.606831][ T7722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.991646][ T7731] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 215.367295][ T5954] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 215.519231][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 215.521903][ T5954] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 215.521932][ T5954] usb 2-1: config 0 has no interface number 0 [ 215.526674][ T5954] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 215.526705][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.526726][ T5954] usb 2-1: Product: syz [ 215.526741][ T5954] usb 2-1: Manufacturer: syz [ 215.526757][ T5954] usb 2-1: SerialNumber: syz [ 215.594465][ T5954] usb 2-1: config 0 descriptor?? [ 215.605870][ T5954] smsc95xx v2.0.0 [ 216.900283][ T5954] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 216.900317][ T5954] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 216.902988][ T5954] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 216.903311][ T5954] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 217.024592][ T5954] usb 2-1: USB disconnect, device number 10 [ 217.352453][ T7745] syz.2.670 (7745): drop_caches: 2 [ 218.761539][ T38] kauditd_printk_skb: 91 callbacks suppressed [ 218.761558][ T38] audit: type=1400 audit(1757363146.251:119): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="w" requested=x pid=7813 comm="syz.3.697" name="fd" dev="proc" ino=16981 [ 222.295824][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 222.295890][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 222.295927][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 222.295952][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 222.298397][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 222.328290][ T5822] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 222.486546][ T7897] syz.1.729: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 222.489287][ T7897] CPU: 0 UID: 0 PID: 7897 Comm: syz.1.729 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 222.489315][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.489333][ T7897] Call Trace: [ 222.489341][ T7897] [ 222.489351][ T7897] dump_stack_lvl+0x189/0x250 [ 222.489403][ T7897] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 222.489435][ T7897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.489469][ T7897] ? __pfx__printk+0x10/0x10 [ 222.489494][ T7897] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 222.489521][ T7897] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 222.489566][ T7897] warn_alloc+0x22e/0x3b0 [ 222.489637][ T7897] ? __pfx_warn_alloc+0x10/0x10 [ 222.489678][ T7897] ? __kasan_kmalloc+0x93/0xb0 [ 222.489705][ T7897] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 222.489736][ T7897] ? xskq_create+0x56/0x170 [ 222.489766][ T7897] ? xsk_init_queue+0xb0/0x110 [ 222.489794][ T7897] ? xsk_setsockopt+0x57b/0x8d0 [ 222.489820][ T7897] ? do_sock_setsockopt+0x179/0x1b0 [ 222.489855][ T7897] ? __x64_sys_setsockopt+0x145/0x1b0 [ 222.489889][ T7897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.489919][ T7897] __vmalloc_node_range_noprof+0x125/0x12f0 [ 222.489995][ T7897] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.490057][ T7897] ? __kasan_kmalloc+0x93/0xb0 [ 222.490089][ T7897] vmalloc_user_noprof+0xad/0xf0 [ 222.490124][ T7897] ? xskq_create+0xbf/0x170 [ 222.490159][ T7897] xskq_create+0xbf/0x170 [ 222.490197][ T7897] xsk_init_queue+0xb0/0x110 [ 222.490232][ T7897] xsk_setsockopt+0x57b/0x8d0 [ 222.490267][ T7897] ? __pfx_xsk_setsockopt+0x10/0x10 [ 222.490306][ T7897] ? __fget_files+0x2a/0x420 [ 222.490344][ T7897] ? __fget_files+0x2a/0x420 [ 222.490375][ T7897] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 222.490399][ T7897] ? __pfx_xsk_setsockopt+0x10/0x10 [ 222.490433][ T7897] do_sock_setsockopt+0x179/0x1b0 [ 222.490474][ T7897] __x64_sys_setsockopt+0x145/0x1b0 [ 222.490518][ T7897] do_syscall_64+0xfa/0x3b0 [ 222.490539][ T7897] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.490573][ T7897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.490596][ T7897] ? clear_bhb_loop+0x60/0xb0 [ 222.490624][ T7897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.490647][ T7897] RIP: 0033:0x7fdd9b4cebe9 [ 222.490676][ T7897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.490696][ T7897] RSP: 002b:00007fdd9972e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 222.490719][ T7897] RAX: ffffffffffffffda RBX: 00007fdd9b705fa0 RCX: 00007fdd9b4cebe9 [ 222.490738][ T7897] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 222.490751][ T7897] RBP: 00007fdd9b551e19 R08: 0000000000000004 R09: 0000000000000000 [ 222.490776][ T7897] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 222.490791][ T7897] R13: 00007fdd9b706038 R14: 00007fdd9b705fa0 R15: 00007ffd87ed81c8 [ 222.490824][ T7897] [ 222.490838][ T7897] Mem-Info: [ 222.490853][ T7897] active_anon:260 inactive_anon:4439 isolated_anon:0 [ 222.490853][ T7897] active_file:5801 inactive_file:37536 isolated_file:0 [ 222.490853][ T7897] unevictable:768 dirty:354 writeback:0 [ 222.490853][ T7897] slab_reclaimable:11745 slab_unreclaimable:101761 [ 222.490853][ T7897] mapped:29294 shmem:1359 pagetables:1147 [ 222.490853][ T7897] sec_pagetables:0 bounce:0 [ 222.490853][ T7897] kernel_misc_reclaimable:0 [ 222.490853][ T7897] free:1338395 free_pcp:3557 free_cma:0 [ 222.490912][ T7897] Node 0 active_anon:1040kB inactive_anon:17756kB active_file:22944kB inactive_file:150144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117168kB dirty:1408kB writeback:0kB shmem:3900kB kernel_stack:12996kB pagetables:4444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.490977][ T7897] Node 1 active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:8kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.491024][ T7897] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.491103][ T7897] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 222.491141][ T7897] Node 0 DMA32 free:1439088kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1036kB inactive_anon:17712kB active_file:21932kB inactive_file:150072kB unevictable:1536kB writepending:1408kB present:3129332kB managed:2572304kB mlocked:0kB bounce:0kB free_pcp:13932kB local_pcp:7268kB free_cma:0kB [ 222.491207][ T7897] lowmem_reserve[]: 0 0 1 1 1 [ 222.491249][ T7897] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1012kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.491310][ T7897] lowmem_reserve[]: 0 0 0 0 0 [ 222.491347][ T7897] Node 1 Normal free:3899132kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:280kB local_pcp:280kB free_cma:0kB [ 222.491412][ T7897] lowmem_reserve[]: 0 0 0 0 0 [ 222.491449][ T7897] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.491793][ T7897] Node 0 DMA32: 982*4kB (UME) 947*8kB (UME) 484*16kB (UME) 634*32kB (UME) 104*64kB (UME) 34*128kB (UME) 12*256kB (UME) 8*512kB (UME) 7*1024kB (UME) 7*2048kB (UME) 332*4096kB (UM) = 1439088kB [ 222.491980][ T7897] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 222.492095][ T7897] Node 1 Normal: 201*4kB (UME) 53*8kB (UME) 45*16kB (UME) 217*32kB (UE) 99*64kB (UME) 39*128kB (UE) 8*256kB (UM) 6*512kB (UME) 1*1024kB (M) 1*2048kB (E) 945*4096kB (UM) = 3899132kB [ 222.492272][ T7897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.492291][ T7897] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.492309][ T7897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.492327][ T7897] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.492344][ T7897] 44692 total pagecache pages [ 222.492359][ T7897] 0 pages in swap cache [ 222.492367][ T7897] Free swap = 124996kB [ 222.492376][ T7897] Total swap = 124996kB [ 222.492385][ T7897] 2097051 pages RAM [ 222.492392][ T7897] 0 pages HighMem/MovableOnly [ 222.492400][ T7897] 422077 pages reserved [ 222.492408][ T7897] 0 pages cma reserved [ 222.500623][ T5822] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.500652][ T5822] usb 1-1: config 0 has no interface number 0 [ 222.500713][ T5822] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.500740][ T5822] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.500779][ T5822] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 222.500803][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.522357][ T5822] usb 1-1: config 0 descriptor?? [ 223.363145][ T5822] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0010/input/input16 [ 223.660272][ T5822] holtek_kbd 0003:04D9:A055.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 223.695183][ T5822] usb 1-1: USB disconnect, device number 10 [ 223.991735][ T7919] overlayfs: failed lookup in lower (newroot/148, name='file1', err=-40): overlapping layers [ 224.383267][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 224.457264][ T5954] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 224.610336][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.610375][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.610419][ T5954] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 224.610445][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.616288][ T5954] usb 5-1: config 0 descriptor?? [ 225.064354][ T5954] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 225.064490][ T5954] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 225.105568][ T5954] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0011/input/input17 [ 225.178290][ T5954] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 225.309062][ T44] usb 5-1: USB disconnect, device number 8 [ 225.346276][ T7947] netlink: 68 bytes leftover after parsing attributes in process `syz.0.748'. [ 226.906194][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 227.207479][ T44] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.370443][ T44] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 227.370476][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.411205][ T44] usb 4-1: config 0 descriptor?? [ 227.429115][ T44] pwc: Creative Labs Webcam Pro Ex detected. [ 227.701698][ T44] pwc: Failed to set LED on/off time (-71) [ 227.702148][ T44] pwc: send_video_command error -71 [ 227.702163][ T44] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 227.702289][ T44] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 227.739255][ T44] usb 4-1: USB disconnect, device number 9 [ 228.087410][ T991] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 228.237296][ T991] usb 5-1: Using ep0 maxpacket: 32 [ 228.241256][ T991] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 228.241291][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 228.241320][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 228.241344][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 228.241373][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 228.253617][ T991] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 228.253654][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.253856][ T991] usb 5-1: Product: syz [ 228.253876][ T991] usb 5-1: Manufacturer: syz [ 228.253894][ T991] usb 5-1: SerialNumber: syz [ 228.282909][ T991] usb 5-1: config 0 descriptor?? [ 228.732963][ T991] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 228.733031][ T991] input input18: Device does not respond to id packet M [ 228.734031][ T991] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 228.734078][ T991] input input18: Device does not respond to id packet P [ 228.737406][ T991] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 228.737461][ T991] input input18: Device does not respond to id packet B [ 228.740105][ T991] input input18: Device does not respond to id packet N [ 228.948174][ T991] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 228.951571][ T991] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 228.952107][ T991] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 228.953842][ T991] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 229.012164][ T991] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 229.075403][ T991] usb 5-1: USB disconnect, device number 9 [ 229.371060][ T8039] netlink: 'syz.0.787': attribute type 4 has an invalid length. [ 229.420057][ T8039] netlink: 'syz.0.787': attribute type 4 has an invalid length. [ 229.807553][ T59] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 229.811402][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 229.884476][ T8055] netlink: 'syz.3.794': attribute type 4 has an invalid length. [ 229.948274][ T8056] netlink: 'syz.3.794': attribute type 4 has an invalid length. [ 230.242859][ T8068] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.243138][ T8068] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 230.638081][ T8079] netlink: 'syz.3.803': attribute type 25 has an invalid length. [ 230.638104][ T8079] netlink: 'syz.3.803': attribute type 7 has an invalid length. [ 230.645736][ T8079] netlink: 'syz.3.803': attribute type 25 has an invalid length. [ 230.645760][ T8079] netlink: 'syz.3.803': attribute type 7 has an invalid length. [ 231.077166][ T44] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 231.078365][ T8090] Invalid ELF header magic: != ELF [ 231.354651][ T8094] Invalid ELF header len 8 [ 231.409635][ T5843] Bluetooth: hci4: hcon ffff88803980c000 sent 1 < count 32780 [ 231.571851][ T8099] Bluetooth: hci0: unsupported parameter 32780 [ 231.571876][ T8099] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 231.584839][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 231.738322][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 231.741237][ T10] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 231.741264][ T10] usb 3-1: config 1 has no interface number 0 [ 231.741317][ T10] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 231.741344][ T10] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 231.741380][ T10] usb 3-1: config 1 interface 105 has no altsetting 0 [ 231.744648][ T10] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 231.744678][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.744700][ T10] usb 3-1: Product: syz [ 231.744715][ T10] usb 3-1: Manufacturer: syz [ 231.744731][ T10] usb 3-1: SerialNumber: syz [ 231.774790][ T8095] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 231.775079][ T8095] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 232.230613][ T8095] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 232.231979][ T8095] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 232.441607][ T8114] netlink: 'syz.1.820': attribute type 22 has an invalid length. [ 232.441632][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 232.643336][ T1303] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.644066][ T8114] netlink: 'syz.1.820': attribute type 22 has an invalid length. [ 232.644085][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 232.646576][ T10] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 232.651556][ T1303] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.652142][ T1303] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.652188][ T1303] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.850215][ T10] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 233.107989][ T10] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d6:db:c3:b0:ea:18 [ 233.126321][ T10] usb 3-1: USB disconnect, device number 13 [ 233.144997][ T10] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 233.210390][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 233.215489][ T44] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 233.215529][ T44] usb 1-1: can't read configurations, error -71 [ 233.429193][ T10] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 233.429347][ T10] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 233.429489][ T10] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 233.907234][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 234.057161][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 234.060580][ T10] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 234.060607][ T10] usb 3-1: config 0 has no interface number 0 [ 234.060763][ T10] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.107579][ T10] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 234.107611][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.107632][ T10] usb 3-1: Product: syz [ 234.107648][ T10] usb 3-1: Manufacturer: syz [ 234.107664][ T10] usb 3-1: SerialNumber: syz [ 234.141224][ T10] usb 3-1: config 0 descriptor?? [ 234.191576][ T10] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 234.191619][ T10] em28xx 3-1:0.132: Video interface 132 found: [ 234.574704][ T10] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 234.927123][ T44] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 235.077189][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 235.079726][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.079798][ T44] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 235.079824][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.123268][ T44] usb 5-1: config 0 descriptor?? [ 235.185979][ T10] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 235.186019][ T10] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 235.186058][ T10] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 235.230856][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'. [ 235.237351][ T10] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 235.237382][ T10] em28xx 3-1:0.132: analog set to bulk mode. [ 235.241603][ T991] em28xx 3-1:0.132: Registering V4L2 extension [ 235.287810][ T10] usb 3-1: USB disconnect, device number 14 [ 235.293113][ T10] em28xx 3-1:0.132: Disconnecting em28xx [ 235.589659][ T44] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 235.807289][ T8169] capability: warning: `syz.0.841' uses deprecated v2 capabilities in a way that may be insecure [ 235.859696][ T991] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 235.859722][ T991] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 235.859737][ T991] em28xx 3-1:0.132: No AC97 audio processor [ 235.910744][ T991] usb 3-1: Decoder not found [ 235.910766][ T991] em28xx 3-1:0.132: failed to create media graph [ 235.910825][ T991] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 235.987762][ T991] em28xx 3-1:0.132: Remote control support is not available for this card. [ 235.993099][ T991] usb 5-1: USB disconnect, device number 10 [ 236.000158][ T10] em28xx 3-1:0.132: Closing input extension [ 236.117200][ T5854] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 236.268358][ T5854] usb 2-1: Using ep0 maxpacket: 16 [ 236.271064][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.271101][ T5854] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.271147][ T5854] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.271173][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.294472][ T10] em28xx 3-1:0.132: Freeing device [ 236.305449][ T5854] usb 2-1: config 0 descriptor?? [ 236.585754][ T38] audit: type=1326 audit(1757363164.071:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8186 comm="syz.0.848" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1e54debe9 code=0x0 [ 236.784963][ T5854] HID 045e:07da: Invalid code 65791 type 1 [ 236.822781][ T5854] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0013/input/input19 [ 236.904583][ T5854] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 237.326717][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 237.326779][ T8203] netlink: 'syz.2.851': attribute type 15 has an invalid length. [ 237.328883][ T8203] netlink: 'syz.2.851': attribute type 18 has an invalid length. [ 237.448764][ T8203] vxlan0: entered promiscuous mode [ 237.468049][ T67] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.469978][ T67] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.470022][ T67] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.470057][ T67] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.675280][ T44] usb 2-1: USB disconnect, device number 11 [ 237.826260][ T8209] loop3: detected capacity change from 0 to 1 [ 237.841195][ T8209] Dev loop3: unable to read RDB block 1 [ 237.841255][ T8209] loop3: unable to read partition table [ 237.841492][ T8209] loop3: partition table beyond EOD, truncated [ 237.841511][ T8209] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.372651][ T8224] pim6reg: entered allmulticast mode [ 238.388356][ T8224] pim6reg: left allmulticast mode [ 238.398207][ T8227] netlink: 'syz.3.864': attribute type 1 has an invalid length. [ 238.398232][ T8227] netlink: 'syz.3.864': attribute type 4 has an invalid length. [ 238.398248][ T8227] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.864'. [ 238.776507][ T8233] cgroup: fork rejected by pids controller in /syz2 [ 240.357247][ T991] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 240.515623][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 240.553338][ T991] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 240.553375][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.577685][ T991] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.577721][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.577742][ T991] usb 4-1: Product: syz [ 240.577758][ T991] usb 4-1: Manufacturer: syz [ 240.577773][ T991] usb 4-1: SerialNumber: syz [ 240.619743][ T991] usb 4-1: config 0 descriptor?? [ 240.657619][ T991] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 240.657655][ T991] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 240.775721][ T38] audit: type=1326 audit(1757363168.261:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8301 comm="syz.4.883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd55997ebe9 code=0x0 [ 241.235867][ T991] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 241.236583][ T991] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 241.500586][ T991] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 241.500609][ T991] em28xx 4-1:0.0: No AC97 audio processor [ 241.530263][ T991] usb 4-1: USB disconnect, device number 10 [ 241.532766][ T991] em28xx 4-1:0.0: Disconnecting em28xx [ 241.591074][ T991] em28xx 4-1:0.0: Freeing device [ 242.511304][ T8341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.308324][ T8365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.910'. [ 243.320259][ T8365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.910'. [ 245.097923][ T8390] pim6reg: tun_chr_ioctl cmd 1074025672 [ 245.097946][ T8390] pim6reg: ignored: set checksum disabled [ 245.285853][ T8394] kvm: emulating exchange as write [ 245.481358][ T8396] ceph: No mds server is up or the cluster is laggy [ 246.680056][ T8422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.560687][ T8413] syz.1.930 (8413): drop_caches: 2 [ 248.587272][ T991] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 248.772120][ T991] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 248.772152][ T991] usb 4-1: config 0 has no interface number 0 [ 248.772212][ T991] usb 4-1: config 0 interface 255 has no altsetting 0 [ 248.772247][ T991] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.772272][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.824248][ T991] usb 4-1: config 0 descriptor?? [ 248.853152][ T991] cp210x 4-1:0.255: cp210x converter detected [ 249.298561][ T991] cp210x 4-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 249.503150][ T991] cp210x 4-1:0.255: GPIO initialisation failed: -19 [ 249.520100][ T991] usb 4-1: cp210x converter now attached to ttyUSB0 [ 249.731910][ T991] usb 4-1: USB disconnect, device number 11 [ 249.817373][ T991] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.821539][ T991] cp210x 4-1:0.255: device disconnected [ 250.939230][ T8500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.057658][ T8505] all: renamed from bridge_slave_0 (while UP) [ 251.278152][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 251.278774][ T8513] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 251.278793][ T8513] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 251.618791][ T8523] netlink: 'syz.1.977': attribute type 12 has an invalid length. [ 251.618814][ T8523] netlink: 'syz.1.977': attribute type 29 has an invalid length. [ 251.618829][ T8523] netlink: 148 bytes leftover after parsing attributes in process `syz.1.977'. [ 251.618860][ T8523] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 251.618875][ T8523] netlink: 'syz.1.977': attribute type 2 has an invalid length. [ 251.618889][ T8523] netlink: 39 bytes leftover after parsing attributes in process `syz.1.977'. [ 251.727134][ T5910] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 251.877883][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 251.880571][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.880630][ T5910] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 251.880654][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.924549][ T5910] usb 4-1: config 0 descriptor?? [ 251.940612][ T5910] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 252.953347][ T8550] hsr0: entered allmulticast mode [ 252.953371][ T8550] hsr_slave_0: entered allmulticast mode [ 252.953397][ T8550] hsr_slave_1: entered allmulticast mode [ 253.009870][ T8550] hsr_slave_0: left promiscuous mode [ 253.048649][ T8550] hsr_slave_1: left promiscuous mode [ 253.166777][ T5910] gspca_vc032x: reg_w err -71 [ 253.166858][ T5910] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 253.184038][ T5910] usb 4-1: USB disconnect, device number 12 [ 253.229822][ T8550] hsr0 (unregistering): left allmulticast mode [ 254.137202][ T5854] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 254.307242][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 254.378267][ T5854] usb 5-1: config 0 has an invalid interface number: 155 but max is 0 [ 254.378299][ T5854] usb 5-1: config 0 has no interface number 0 [ 254.588334][ T5854] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c [ 254.588367][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.588389][ T5854] usb 5-1: Product: syz [ 254.588404][ T5854] usb 5-1: Manufacturer: syz [ 254.588420][ T5854] usb 5-1: SerialNumber: syz [ 254.641174][ T5854] usb 5-1: config 0 descriptor?? [ 254.963721][ T5854] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.155/input/input20 [ 254.976825][ T5192] bcm5974 5-1:0.155: could not read from device [ 255.123426][ T5192] bcm5974 5-1:0.155: could not read from device [ 255.133400][ T5854] usb 5-1: USB disconnect, device number 11 [ 255.436307][ T8592] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 255.587377][ T5954] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 255.744188][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.744224][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.744248][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.744293][ T5954] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 255.744317][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.762985][ T5954] usb 2-1: config 0 descriptor?? [ 256.201511][ T5954] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 256.225400][ T5954] elecom 0003:056E:00FB.0014: hidraw0: USB HID v0.00 Device [HID 056e:00fb] on usb-dummy_hcd.1-1/input0 [ 256.370018][ T8581] syz.0.1000 (8581): drop_caches: 2 [ 256.425847][ T5954] usb 2-1: USB disconnect, device number 12 [ 256.547244][ T44] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 256.717185][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 256.722367][ T44] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 256.722417][ T44] usb 3-1: config 0 has no interface number 0 [ 256.722475][ T44] usb 3-1: config 0 interface 184 has no altsetting 0 [ 256.771242][ T44] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 256.771273][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.771293][ T44] usb 3-1: Product: syz [ 256.771307][ T44] usb 3-1: Manufacturer: syz [ 256.771321][ T44] usb 3-1: SerialNumber: syz [ 256.822746][ T44] usb 3-1: config 0 descriptor?? [ 256.836437][ T44] smsc75xx v1.0.0 [ 257.578737][ T8634] loop6: detected capacity change from 0 to 1 [ 257.639039][ T8634] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 257.639289][ T8634] loop6: p1 start 1048576 is beyond EOD, truncated [ 257.639312][ T8634] loop6: p2 size 458752 extends beyond EOD, truncated [ 257.688115][ T8634] loop6: p3 start 12666 is beyond EOD, truncated [ 257.688143][ T8634] loop6: p4 start 16387 is beyond EOD, truncated [ 257.688162][ T8634] loop6: p5 start 2037579777 is beyond EOD, truncated [ 257.688180][ T8634] loop6: p6 start 425986 is beyond EOD, truncated [ 258.067538][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 258.067573][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 258.068116][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 258.068143][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 258.068164][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 258.068191][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 258.068513][ T44] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 258.153759][ T44] usb 3-1: USB disconnect, device number 15 [ 258.592963][ T5954] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 258.661618][ T8638] syz.3.1025 (8638): drop_caches: 2 [ 258.662081][ T8638] syz.3.1025 (8638): drop_caches: 2 [ 258.805336][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 258.862327][ T5954] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 258.862360][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.901410][ T5954] usb 5-1: config 0 descriptor?? [ 259.209519][ T5954] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 260.229685][ T5954] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 260.229736][ T5954] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 260.230033][ T5954] asix 5-1:0.0: probe with driver asix failed with error -71 [ 260.251755][ T5954] usb 5-1: USB disconnect, device number 12 [ 261.007325][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 261.172263][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.172341][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.567245][ T991] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 261.717199][ T991] usb 3-1: Using ep0 maxpacket: 16 [ 261.719621][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.719665][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.719706][ T991] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 261.719730][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.768946][ T991] usb 3-1: config 0 descriptor?? [ 262.047293][ T5910] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 262.200880][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.200914][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.200953][ T5910] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 262.200978][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.256755][ T5910] usb 5-1: config 0 descriptor?? [ 262.610244][ T991] letsketch 0003:6161:4D15.0015: Device info: à° [ 262.738299][ T5910] cm6533_jd 0003:0D8C:0022.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 262.811325][ T991] letsketch 0003:6161:4D15.0015: Device info: 擃 [ 263.041851][ T991] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 263.041943][ T991] letsketch 0003:6161:4D15.0015: probe with driver letsketch failed with error -71 [ 263.070088][ T991] usb 3-1: USB disconnect, device number 16 [ 263.536071][ T5854] usb 5-1: USB disconnect, device number 13 [ 263.638285][ T8718] mmap: syz.3.1056 (8718) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 264.983203][ T8743] syz.4.1065 (8743): drop_caches: 2 [ 264.992835][ T8743] syz.4.1065 (8743): drop_caches: 2 [ 266.734138][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 266.734190][ T8774] netlink: 'syz.0.1078': attribute type 30 has an invalid length. [ 266.810667][ T67] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.811798][ T67] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.811843][ T67] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.811882][ T67] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.815304][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 266.815337][ T8774] netlink: 'syz.0.1078': attribute type 30 has an invalid length. [ 266.860035][ T8777] input: syz0 as /devices/virtual/input/input21 [ 267.007238][ T5910] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 267.170579][ T5910] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 267.170613][ T5910] usb 3-1: config 0 has no interface number 0 [ 267.170689][ T5910] usb 3-1: config 0 interface 112 altsetting 0 endpoint 0xF has invalid maxpacket 1007, setting to 64 [ 267.170736][ T5910] usb 3-1: New USB device found, idVendor=3154, idProduct=721e, bcdDevice= 9.c6 [ 267.170762][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.233691][ T5910] usb 3-1: config 0 descriptor?? [ 267.251123][ T5910] usb-storage 3-1:0.112: USB Mass Storage device detected [ 267.472530][ T31] usb 3-1: USB disconnect, device number 17 [ 267.902089][ T8809] mkiss: ax0: crc mode is auto. [ 268.947317][ T991] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 269.097202][ T991] usb 5-1: Using ep0 maxpacket: 32 [ 269.101871][ T991] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.101913][ T991] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 269.101939][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.172502][ T991] usb 5-1: config 0 descriptor?? [ 269.614756][ T991] corsair-cpro 0003:1B1C:0C10.0017: unknown main item tag 0x0 [ 269.614796][ T991] corsair-cpro 0003:1B1C:0C10.0017: unknown main item tag 0x0 [ 269.614825][ T991] corsair-cpro 0003:1B1C:0C10.0017: unknown main item tag 0x0 [ 269.614853][ T991] corsair-cpro 0003:1B1C:0C10.0017: unknown main item tag 0x0 [ 269.614880][ T991] corsair-cpro 0003:1B1C:0C10.0017: unknown main item tag 0x0 [ 269.629053][ T991] corsair-cpro 0003:1B1C:0C10.0017: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 269.828961][ T991] corsair-cpro 0003:1B1C:0C10.0017: probe with driver corsair-cpro failed with error -71 [ 269.882545][ T991] usb 5-1: USB disconnect, device number 14 [ 270.713438][ T31] kernel read not supported for file /dsp1 (pid: 31 comm: kworker/1:0) [ 270.793593][ T8851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.505048][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1119'. [ 272.802163][ T8896] cgroup: fork rejected by pids controller in /syz1 [ 273.212467][ T8952] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.823089][ T7299] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa8 [ 274.317832][ T8985] openvswitch: netlink: Multiple metadata blocks provided [ 275.043696][ T9000] bridge0: entered allmulticast mode [ 275.044405][ T9000] bridge0: left allmulticast mode [ 275.316821][ T6008] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 275.398008][ T6008] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.520911][ T9008] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 275.520941][ T9008] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 275.957157][ T991] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 276.111119][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 276.116571][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.116604][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.116626][ T991] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.116667][ T991] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 276.116689][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.147139][ T5954] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 276.192928][ T991] usb 2-1: config 0 descriptor?? [ 276.300779][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 276.300887][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 276.300916][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 276.305377][ T5954] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 276.305469][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.305492][ T5954] usb 5-1: Product: syz [ 276.305508][ T5954] usb 5-1: Manufacturer: syz [ 276.305523][ T5954] usb 5-1: SerialNumber: syz [ 276.416764][ T5954] usb 5-1: config 0 descriptor?? [ 276.424083][ T9012] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 276.424220][ T9012] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 276.452691][ T5954] usb 5-1: ucan: probing device on interface #0 [ 276.688252][ T991] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0019/input/input22 [ 276.746915][ T991] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 276.841385][ T44] usb 2-1: USB disconnect, device number 13 [ 277.115107][ T5954] ucan 5-1:0.0 can0: registered device [ 277.279438][ T5954] ucan 5-1:0.0 can0: firmware string: w [ 277.332636][ T9033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.343624][ T9033] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 277.463708][ T6008] usb 5-1: USB disconnect, device number 15 [ 277.627202][ T5954] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 277.787985][ T5954] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 277.788018][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 277.815325][ T5954] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 277.815357][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 277.815379][ T5954] usb 3-1: Product: syz [ 277.815489][ T5954] usb 3-1: Manufacturer: syz [ 277.815507][ T5954] usb 3-1: SerialNumber: syz [ 277.849855][ T5954] usb 3-1: config 0 descriptor?? [ 277.879775][ T5954] usb 3-1: selecting invalid altsetting 0 [ 278.086649][ T6008] usb 3-1: USB disconnect, device number 18 [ 278.437573][ T9064] netlink: 'syz.4.1188': attribute type 10 has an invalid length. [ 278.523692][ T9067] netlink: 'syz.4.1188': attribute type 10 has an invalid length. [ 278.534893][ T9064] team0: Port device dummy0 added [ 278.636479][ T9067] team0: Port device dummy0 removed [ 278.653689][ T9067] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 278.753535][ T9070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1189'. [ 278.914874][ T9070] nbd: socks must be embedded in a SOCK_ITEM attr [ 279.194743][ T9087] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1196'. [ 279.257259][ T5954] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 279.412141][ T5954] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.412172][ T5954] usb 2-1: config 0 has no interface number 0 [ 279.412223][ T5954] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.412253][ T5954] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.412295][ T5954] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 279.412322][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.427762][ T5954] usb 2-1: config 0 descriptor?? [ 279.900579][ T5954] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.001A/input/input23 [ 280.205714][ T5954] holtek_kbd 0003:04D9:A055.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 280.223828][ T5954] usb 2-1: USB disconnect, device number 14 [ 280.837526][ T9120] Bluetooth: hci0: invalid len left 7, exp >= 52 [ 281.372110][ T9138] binder: 9137:9138 ioctl 4018620d 0 returned -22 [ 281.980900][ T5954] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 282.139069][ T5954] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 282.139110][ T5954] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 282.139156][ T5954] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.139183][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.157944][ T9145] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 282.205978][ T5954] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.441595][ T5954] usb 5-1: USB disconnect, device number 16 [ 282.677230][ T991] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 282.832034][ T991] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.832065][ T991] usb 3-1: config 0 has no interface number 0 [ 282.832117][ T991] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.832143][ T991] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.832181][ T991] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 282.832204][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.852435][ T991] usb 3-1: config 0 descriptor?? [ 283.368273][ T991] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.001B/input/input24 [ 283.418205][ T9164] ceph: No mds server is up or the cluster is laggy [ 283.643369][ T991] holtek_kbd 0003:04D9:A055.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 283.667821][ T991] usb 3-1: USB disconnect, device number 19 [ 284.517746][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 285.292147][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 286.994117][ T9251] input: syz1 as /devices/virtual/input/input25 [ 288.622962][ T9269] syzkaller1: entered promiscuous mode [ 288.622996][ T9269] syzkaller1: entered allmulticast mode [ 288.997270][ T44] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 289.159688][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.159777][ T44] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 289.162641][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.162670][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.162691][ T44] usb 5-1: Product: syz [ 289.162706][ T44] usb 5-1: Manufacturer: syz [ 289.162721][ T44] usb 5-1: SerialNumber: syz [ 289.614137][ T9286] loop7: detected capacity change from 0 to 3 [ 289.789745][ T9286] Dev loop7: unable to read RDB block 3 [ 289.789874][ T9286] loop7: unable to read partition table [ 289.790562][ T9286] loop7: partition table beyond EOD, truncated [ 289.790584][ T9286] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 290.290109][ T44] cdc_ncm 5-1:1.0: bind() failure [ 290.325975][ T44] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 290.326031][ T44] cdc_ncm 5-1:1.1: bind() failure [ 290.500064][ T44] usb 5-1: USB disconnect, device number 17 [ 291.434928][ T9321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.735056][ T9354] netlink: 'syz.3.1308': attribute type 4 has an invalid length. [ 292.786537][ T9355] netlink: 'syz.3.1308': attribute type 4 has an invalid length. [ 293.520367][ T9366] Bluetooth: MGMT ver 1.23 [ 294.310295][ T6008] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 294.310332][ T6008] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 294.310361][ T6008] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 294.310389][ T6008] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 294.310418][ T6008] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x2 [ 294.310446][ T6008] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 294.310467][ T6008] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 294.310496][ T6008] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 294.310524][ T6008] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 294.310552][ T6008] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 294.381925][ T6008] hid-generic 00A0:0006:0003.001C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 294.553865][ T9371] overlayfs: statfs failed on './file0' [ 294.559337][ T5910] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 294.731023][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 294.733879][ T5910] usb 3-1: config 0 has no interfaces? [ 294.775526][ T5910] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 294.775558][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.775580][ T5910] usb 3-1: Product: syz [ 294.775596][ T5910] usb 3-1: Manufacturer: syz [ 294.775613][ T5910] usb 3-1: SerialNumber: syz [ 294.812695][ T5910] usb 3-1: config 0 descriptor?? [ 294.870633][ T9376] syz.1.1317 (9376) used greatest stack depth: 16616 bytes left [ 295.042961][ T5954] usb 3-1: USB disconnect, device number 20 [ 295.567269][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 295.567341][ T5843] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 295.872555][ T9415] netlink: 'syz.3.1333': attribute type 11 has an invalid length. [ 296.261387][ T5954] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 296.437979][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 296.440742][ T5954] usb 4-1: too many configurations: 120, using maximum allowed: 8 [ 296.496043][ T5954] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 296.496076][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 296.496098][ T5954] usb 4-1: Product: syz [ 296.496114][ T5954] usb 4-1: Manufacturer: syz [ 296.496129][ T5954] usb 4-1: SerialNumber: syz [ 296.544874][ T5954] usb 4-1: config 0 descriptor?? [ 296.556077][ T5954] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 296.556145][ T5954] usb 4-1: setting power ON [ 296.582099][ T5954] dvb-usb: bulk message failed: -22 (2/0) [ 296.597736][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.602660][ T5954] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 296.602723][ T5954] usb 4-1: media controller created [ 296.703721][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.750296][ T9420] dvb-usb: bulk message failed: -22 (3/0) [ 296.750320][ T9420] dvb-usb: bulk message failed: -22 (3/0) [ 296.750509][ T9420] dvb-usb: bulk message failed: -22 (4/0) [ 296.899872][ T5954] usb 4-1: selecting invalid altsetting 6 [ 296.899897][ T5954] usb 4-1: digital interface selection failed (-22) [ 296.899913][ T5954] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 296.901402][ T5954] usb 4-1: setting power OFF [ 296.901665][ T5954] dvb-usb: bulk message failed: -22 (2/0) [ 296.901684][ T5954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 296.901698][ T5954] (NULL device *): no alternate interface [ 297.166571][ T5954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 297.185533][ T5954] usb 4-1: USB disconnect, device number 13 [ 297.603955][ T9458] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 297.671663][ T9458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.752943][ T9463] bond1: (slave gretap1): making interface the new active one [ 297.776594][ T9463] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 298.042158][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 298.726233][ T9485] veth1_to_bond: entered allmulticast mode [ 298.726539][ T9485] veth1_to_bond: entered promiscuous mode [ 298.738565][ T9484] veth1_to_bond: left promiscuous mode [ 298.747846][ T9484] veth1_to_bond: left allmulticast mode [ 299.704742][ T9509] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 300.837586][ T38] audit: type=1326 audit(1757363228.321:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9547 comm="syz.1.1392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd9b4cebe9 code=0x0 [ 300.938981][ T9545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 302.008391][ T5954] Process accounting resumed [ 302.257230][ T44] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 302.427204][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 302.430823][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.430861][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.430913][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 302.430939][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.472080][ T44] usb 3-1: config 0 descriptor?? [ 302.510096][ T44] hub 3-1:0.0: USB hub found [ 302.687720][ T44] hub 3-1:0.0: 1 port detected [ 303.299253][ T5910] hub 3-1:0.0: activate --> -90 [ 303.369543][ T9588] bridge0: port 3(ipvlan2) entered blocking state [ 303.369947][ T9588] bridge0: port 3(ipvlan2) entered disabled state [ 303.370141][ T9588] ipvlan2: entered allmulticast mode [ 303.370158][ T9588] bridge0: entered allmulticast mode [ 303.375022][ T9588] ipvlan2: left allmulticast mode [ 303.375042][ T9588] bridge0: left allmulticast mode [ 303.503336][ T991] usb 3-1: USB disconnect, device number 21 [ 303.503728][ T5910] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 303.542712][ T9589] syz.3.1410 (9589) used greatest stack depth: 16248 bytes left [ 303.901517][ T9598] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 306.014991][ T9650] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 306.151862][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'. [ 306.151903][ T9652] netlink: 'syz.3.1439': attribute type 30 has an invalid length. [ 306.210439][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'. [ 306.210474][ T9652] netlink: 'syz.3.1439': attribute type 30 has an invalid length. [ 306.237728][ T67] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.238029][ T67] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.238073][ T67] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.632603][ T9681] netlink: 'syz.3.1452': attribute type 1 has an invalid length. [ 307.888639][ T9681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.989777][ T9683] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 307.993140][ T9683] bond2: (slave batadv1): making interface the new active one [ 307.995711][ T9683] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 308.530233][ T5910] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 308.692795][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 308.698381][ T5910] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.698415][ T5910] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.698441][ T5910] usb 3-1: config 0 interface 0 has no altsetting 0 [ 308.698511][ T5910] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 308.698537][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.723342][ T5910] usb 3-1: config 0 descriptor?? [ 308.795624][ T9708] netlink: 'syz.1.1462': attribute type 13 has an invalid length. [ 308.795648][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'. [ 308.803865][ T9708] netlink: 'syz.1.1462': attribute type 13 has an invalid length. [ 308.803891][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'. [ 309.228514][ T5910] hid_parser_main: 3 callbacks suppressed [ 309.228543][ T5910] nzxt-smart2 0003:1E71:2009.001D: unknown main item tag 0x0 [ 309.228577][ T5910] nzxt-smart2 0003:1E71:2009.001D: unknown main item tag 0x0 [ 309.228605][ T5910] nzxt-smart2 0003:1E71:2009.001D: unknown main item tag 0x0 [ 309.228632][ T5910] nzxt-smart2 0003:1E71:2009.001D: unknown main item tag 0x0 [ 309.228660][ T5910] nzxt-smart2 0003:1E71:2009.001D: unknown main item tag 0x0 [ 309.232065][ T5910] nzxt-smart2 0003:1E71:2009.001D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 309.387158][ T5822] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 309.414368][ T5954] usb 3-1: USB disconnect, device number 22 [ 309.547211][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 309.563482][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.563525][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.563575][ T5822] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 309.563605][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.600466][ T5822] usb 4-1: config 0 descriptor?? [ 310.262864][ T5822] ft260 0003:0403:6030.001E: chip code: 6424 8183 [ 310.671453][ T5822] usb 4-1: USB disconnect, device number 14 [ 312.447291][ T6008] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 312.632860][ T6008] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 312.632893][ T6008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.663283][ T6008] usb 5-1: config 0 descriptor?? [ 313.890792][ T6008] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.890826][ T6008] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 313.891111][ T6008] asix 5-1:0.0: probe with driver asix failed with error -71 [ 313.977372][ T6008] usb 5-1: USB disconnect, device number 18 [ 314.266490][ T9809] netlink: 'syz.1.1503': attribute type 10 has an invalid length. [ 314.335944][ T9811] netlink: 'syz.1.1503': attribute type 10 has an invalid length. [ 314.351029][ T9809] team0: Port device dummy0 added [ 314.474772][ T9811] team0: Port device dummy0 removed [ 314.500397][ T9811] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 315.595595][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d009c00: rx timeout, send abort [ 316.096689][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d009800: rx timeout, send abort [ 316.098065][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d009c00: abort rx timeout. Force session deactivation [ 316.596767][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d009800: abort rx timeout. Force session deactivation [ 317.374647][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d008000: rx timeout, send abort [ 317.874750][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d008000: abort rx timeout. Force session deactivation [ 321.409715][ T9989] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 322.619283][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.619369][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.945878][T10025] netlink: 'syz.1.1587': attribute type 1 has an invalid length. [ 323.044716][T10025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.071878][T10028] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 323.076570][T10028] bond2: (slave batadv1): making interface the new active one [ 323.106889][T10028] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 324.268047][T10050] syzkaller1: entered promiscuous mode [ 324.268078][T10050] syzkaller1: entered allmulticast mode [ 327.394766][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.417602][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.424011][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.433244][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.437797][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.515554][T10114] Bluetooth: MGMT ver 1.23 [ 327.764930][T10119] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1627'. [ 328.463601][T10111] chnl_net:caif_netlink_parms(): no params data found [ 329.094058][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.110060][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.110312][T10111] bridge_slave_0: entered allmulticast mode [ 329.110842][T10161] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1643'. [ 329.157357][T10111] bridge_slave_0: entered promiscuous mode [ 329.176315][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.176468][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.176705][T10111] bridge_slave_1: entered allmulticast mode [ 329.200666][T10111] bridge_slave_1: entered promiscuous mode [ 329.218957][ T7304] nci: nci_ntf_packet: unknown ntf opcode 0x703 [ 329.470349][T10171] input: syz0 as /devices/virtual/input/input27 [ 329.487462][ T59] Bluetooth: hci0: command tx timeout [ 329.541187][T10175] netlink: 'syz.4.1645': attribute type 2 has an invalid length. [ 329.541210][T10175] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1645'. [ 329.907036][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.003647][T10111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.073323][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.094363][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 330.186327][T10111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.587421][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'. [ 330.636519][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 330.708104][ T10] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.808479][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.036868][T10111] team0: Port device team_slave_0 added [ 331.067660][T10111] team0: Port device team_slave_1 added [ 331.438421][T10111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.438440][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.438487][T10111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.441021][T10111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.441037][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.441068][T10111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.577185][ T59] Bluetooth: hci0: command tx timeout [ 331.980605][T10111] hsr_slave_0: entered promiscuous mode [ 331.981989][T10111] hsr_slave_1: entered promiscuous mode [ 331.993504][T10111] debugfs: 'hsr0' already exists in 'hsr' [ 331.993538][T10111] Cannot create hsr debugfs directory [ 332.367170][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 332.372982][ T991] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 332.373008][ T991] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 333.057566][T10111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.117406][T10111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.158194][T10111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.219438][T10111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 333.600188][T10111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.649365][ T59] Bluetooth: hci0: command tx timeout [ 333.671884][T10111] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.682645][ T7302] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.682896][ T7302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.699547][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.699747][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.346240][T10111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.527211][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 334.527702][ T991] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 334.527722][ T991] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 335.059577][T10111] veth0_vlan: entered promiscuous mode [ 335.110608][T10111] veth1_vlan: entered promiscuous mode [ 335.200655][T10111] veth0_macvtap: entered promiscuous mode [ 335.221111][T10111] veth1_macvtap: entered promiscuous mode [ 335.262499][T10111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.285504][T10111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.314174][ T1012] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.314467][ T1012] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.314519][ T1012] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.314558][ T1012] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.727833][ T59] Bluetooth: hci0: command tx timeout [ 336.687278][ T991] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 336.687307][ T991] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 336.687338][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 338.767804][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 338.767877][ T991] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 338.767896][ T991] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 342.367382][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 342.367520][ T991] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 342.367538][ T991] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 342.532579][ T991] ------------[ cut here ]------------ [ 342.532595][ T991] rtmutex deadlock detected [ 342.532734][ T991] WARNING: CPU: 0 PID: 991 at kernel/locking/rtmutex.c:1674 rt_mutex_handle_deadlock+0x28/0xb0 [ 342.532776][ T991] Modules linked in: [ 342.532794][ T991] CPU: 0 UID: 0 PID: 991 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 342.532818][ T991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.532833][ T991] Workqueue: events rfkill_op_handler [ 342.532853][ T991] RIP: 0010:rt_mutex_handle_deadlock+0x28/0xb0 [ 342.532880][ T991] Code: 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 8c 00 00 00 48 89 f7 e8 c6 2c 01 00 90 48 c7 c7 00 09 0b 8b e8 09 28 8a f6 90 <0f> 0b 90 90 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 10 f6 91 4c 8d [ 342.532898][ T991] RSP: 0018:ffffc900048677d0 EFLAGS: 00010246 [ 342.532914][ T991] RAX: 4a6d923bead70400 RBX: ffffc90004867860 RCX: ffff888025881dc0 [ 342.532930][ T991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.532943][ T991] RBP: ffffc90004867970 R08: 0000000000000000 R09: 0000000000000000 [ 342.532956][ T991] R10: dffffc0000000000 R11: ffffed1017104863 R12: 1ffff9200090cf08 [ 342.532972][ T991] R13: ffffffff8af901b9 R14: ffff88802f890098 R15: dffffc0000000000 [ 342.532988][ T991] FS: 0000000000000000(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 342.533012][ T991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.533027][ T991] CR2: 00007ff5d24a4abe CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 342.533046][ T991] Call Trace: [ 342.533055][ T991] [ 342.533067][ T991] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 342.533093][ T991] rt_mutex_slowlock+0x692/0x6e0 [ 342.533121][ T991] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 342.533148][ T991] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 342.533185][ T991] ? nfc_rfkill_set_block+0x50/0x2e0 [ 342.533218][ T991] ? rt_spin_lock+0x1bb/0x2c0 [ 342.533246][ T991] ? nfc_rfkill_set_block+0x50/0x2e0 [ 342.533267][ T991] mutex_lock_nested+0x16a/0x1d0 [ 342.533294][ T991] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 342.533319][ T991] nfc_rfkill_set_block+0x50/0x2e0 [ 342.533342][ T991] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 342.533367][ T991] rfkill_set_block+0x1e2/0x450 [ 342.533404][ T991] rfkill_epo+0x7e/0x180 [ 342.533450][ T991] rfkill_op_handler+0x84/0x240 [ 342.533471][ T991] ? process_scheduled_works+0x9ef/0x17b0 [ 342.533500][ T991] process_scheduled_works+0xade/0x17b0 [ 342.533564][ T991] ? __pfx_process_scheduled_works+0x10/0x10 [ 342.533613][ T991] worker_thread+0x8a0/0xda0 [ 342.533675][ T991] kthread+0x70e/0x8a0 [ 342.533713][ T991] ? __pfx_worker_thread+0x10/0x10 [ 342.533742][ T991] ? __pfx_kthread+0x10/0x10 [ 342.533783][ T991] ? __pfx_kthread+0x10/0x10 [ 342.533819][ T991] ret_from_fork+0x3f9/0x770 [ 342.533852][ T991] ? __pfx_ret_from_fork+0x10/0x10 [ 342.533890][ T991] ? __switch_to_asm+0x39/0x70 [ 342.533911][ T991] ? __switch_to_asm+0x33/0x70 [ 342.533932][ T991] ? __pfx_kthread+0x10/0x10 [ 342.533967][ T991] ret_from_fork_asm+0x1a/0x30 [ 342.534015][ T991] [ 342.534035][ T991] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 342.534050][ T991] CPU: 0 UID: 0 PID: 991 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 342.534075][ T991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.534089][ T991] Workqueue: events rfkill_op_handler [ 342.534109][ T991] Call Trace: [ 342.534118][ T991] [ 342.534126][ T991] dump_stack_lvl+0x99/0x250 [ 342.534160][ T991] ? __asan_memcpy+0x40/0x70 [ 342.534184][ T991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.534217][ T991] ? __pfx__printk+0x10/0x10 [ 342.534258][ T991] vpanic+0x281/0x750 [ 342.534291][ T991] ? __pfx__printk+0x10/0x10 [ 342.534315][ T991] ? __pfx_vpanic+0x10/0x10 [ 342.534348][ T991] ? is_bpf_text_address+0x292/0x2b0 [ 342.534393][ T991] panic+0xb9/0xc0 [ 342.534425][ T991] ? __pfx_panic+0x10/0x10 [ 342.534478][ T991] __warn+0x31b/0x4b0 [ 342.534509][ T991] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 342.534539][ T991] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 342.534566][ T991] report_bug+0x2be/0x4f0 [ 342.534596][ T991] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 342.534624][ T991] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 342.534652][ T991] ? rt_mutex_handle_deadlock+0x2a/0xb0 [ 342.534678][ T991] handle_bug+0x84/0x160 [ 342.534702][ T991] exc_invalid_op+0x1a/0x50 [ 342.534725][ T991] asm_exc_invalid_op+0x1a/0x20 [ 342.534746][ T991] RIP: 0010:rt_mutex_handle_deadlock+0x28/0xb0 [ 342.534772][ T991] Code: 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 8c 00 00 00 48 89 f7 e8 c6 2c 01 00 90 48 c7 c7 00 09 0b 8b e8 09 28 8a f6 90 <0f> 0b 90 90 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 10 f6 91 4c 8d [ 342.534792][ T991] RSP: 0018:ffffc900048677d0 EFLAGS: 00010246 [ 342.534809][ T991] RAX: 4a6d923bead70400 RBX: ffffc90004867860 RCX: ffff888025881dc0 [ 342.534826][ T991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.534839][ T991] RBP: ffffc90004867970 R08: 0000000000000000 R09: 0000000000000000 [ 342.534854][ T991] R10: dffffc0000000000 R11: ffffed1017104863 R12: 1ffff9200090cf08 [ 342.534871][ T991] R13: ffffffff8af901b9 R14: ffff88802f890098 R15: dffffc0000000000 [ 342.534889][ T991] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 342.534933][ T991] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 342.534960][ T991] rt_mutex_slowlock+0x692/0x6e0 [ 342.534990][ T991] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 342.535024][ T991] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 342.535063][ T991] ? nfc_rfkill_set_block+0x50/0x2e0 [ 342.535097][ T991] ? rt_spin_lock+0x1bb/0x2c0 [ 342.535128][ T991] ? nfc_rfkill_set_block+0x50/0x2e0 [ 342.535150][ T991] mutex_lock_nested+0x16a/0x1d0 [ 342.535179][ T991] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 342.535206][ T991] nfc_rfkill_set_block+0x50/0x2e0 [ 342.535230][ T991] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 342.535257][ T991] rfkill_set_block+0x1e2/0x450 [ 342.535294][ T991] rfkill_epo+0x7e/0x180 [ 342.535324][ T991] rfkill_op_handler+0x84/0x240 [ 342.535345][ T991] ? process_scheduled_works+0x9ef/0x17b0 [ 342.535372][ T991] process_scheduled_works+0xade/0x17b0 [ 342.535436][ T991] ? __pfx_process_scheduled_works+0x10/0x10 [ 342.535486][ T991] worker_thread+0x8a0/0xda0 [ 342.535547][ T991] kthread+0x70e/0x8a0 [ 342.535585][ T991] ? __pfx_worker_thread+0x10/0x10 [ 342.535613][ T991] ? __pfx_kthread+0x10/0x10 [ 342.535654][ T991] ? __pfx_kthread+0x10/0x10 [ 342.535690][ T991] ret_from_fork+0x3f9/0x770 [ 342.535723][ T991] ? __pfx_ret_from_fork+0x10/0x10 [ 342.535761][ T991] ? __switch_to_asm+0x39/0x70 [ 342.535781][ T991] ? __switch_to_asm+0x33/0x70 [ 342.535802][ T991] ? __pfx_kthread+0x10/0x10 [ 342.535837][ T991] ret_from_fork_asm+0x1a/0x30 [ 342.535879][ T991] [ 342.536322][ T991] Kernel Offset: disabled