last executing test programs: 2.744827584s ago: executing program 4 (id=11684): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8102}, {{0x0, 0x0, 0x0}, 0x10006}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/180, 0xb4}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000380)=""/238, 0xee}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000600)=""/91, 0x5b}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 2.664929783s ago: executing program 4 (id=11685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11002bbd7000fedbdf251b000000100002800600018008000100080000001800018014000200776c616e30"], 0x3c}}, 0x4000) 2.505505134s ago: executing program 4 (id=11687): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) 2.343290841s ago: executing program 3 (id=11690): r0 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000040)=ANY=[], 0x35) 2.272504327s ago: executing program 4 (id=11692): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b0000001b"], 0x0}, 0x0) 2.001117744s ago: executing program 2 (id=11698): openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) 1.91021543s ago: executing program 2 (id=11700): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a00010000000000000000000200000020"], 0x30}}, 0x0) 1.783407935s ago: executing program 2 (id=11703): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, 0x48, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/201, 0xc9}], 0x1, 0x9, 0x7fff) 1.650977707s ago: executing program 2 (id=11706): r0 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) 1.495939878s ago: executing program 2 (id=11708): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000002140)=@newtaction={0x18, 0x32, 0x829, 0x70bd2c, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 1.401751233s ago: executing program 2 (id=11711): r0 = syz_usb_connect$hid(0x5, 0x8f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.215446776s ago: executing program 0 (id=11714): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4000, @multicast1}}}, 0x118) 1.105419916s ago: executing program 0 (id=11715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'Xw'}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 949.881168ms ago: executing program 0 (id=11717): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x101, 0x0, 0xfffffffd, 0x6, 0x2, 0xfffffffc, 0x3, 0x0, 0x0, 0xfffffffe, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x79, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x400, 0x40000000, 0x80000, 0x0, 0xfffffffd, 0x400000, 0x0, 0x2, 0x3, 0x7, 0x0, 0x0, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffd, 0x0, 0x20000000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3]}, 0x45c) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) 782.669994ms ago: executing program 3 (id=11719): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="800000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="0080000003000000080004007a020000580019"], 0x80}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) 735.358314ms ago: executing program 0 (id=11720): unshare(0x22020400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) 682.337592ms ago: executing program 1 (id=11721): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000001c0)) 591.74244ms ago: executing program 3 (id=11722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) 587.874907ms ago: executing program 0 (id=11723): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) 580.443272ms ago: executing program 1 (id=11724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 474.495444ms ago: executing program 1 (id=11725): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) 434.865816ms ago: executing program 3 (id=11726): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 379.686983ms ago: executing program 1 (id=11727): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) 324.595573ms ago: executing program 3 (id=11728): io_setup(0x2007, &(0x7f0000000200)=0x0) r1 = eventfd2(0x0, 0x800) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)="7a8c06bd91b4f3b7", 0x8, 0x7, 0x0, 0x1, r1}]) 292.56203ms ago: executing program 4 (id=11729): r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 285.017199ms ago: executing program 0 (id=11730): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) close(0x3) 231.176399ms ago: executing program 1 (id=11731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x64, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}}, 0x0) 142.316661ms ago: executing program 1 (id=11732): r0 = socket(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa) 34.383314ms ago: executing program 3 (id=11733): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) 0s ago: executing program 4 (id=11734): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @mcast1, 0x200}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @remote, 0x4003}, 0x1c) kernel console output (not intermixed with test programs): k. [ 670.907342][T25898] netlink: 'syz.3.9518': attribute type 13 has an invalid length. [ 670.977961][T25901] trusted_key: encrypted_key: insufficient parameters specified [ 672.016893][T25211] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 672.219726][T25211] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 672.249519][T25211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.277231][T25211] usb 2-1: Product: syz [ 672.289124][T25211] usb 2-1: Manufacturer: syz [ 672.304034][T25211] usb 2-1: SerialNumber: syz [ 672.327777][T25211] usb 2-1: config 0 descriptor?? [ 672.465202][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 672.465223][ T30] audit: type=1326 audit(1757450024.763:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25956 comm="syz.2.9547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 672.496990][ T5989] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 672.544386][ T30] audit: type=1326 audit(1757450024.763:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25956 comm="syz.2.9547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 672.567098][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.570092][T25211] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22 [ 672.652248][ T30] audit: type=1326 audit(1757450024.773:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25956 comm="syz.2.9547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 672.706776][ T30] audit: type=1326 audit(1757450024.773:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25956 comm="syz.2.9547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 672.743606][ T5989] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.779389][ T5989] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.792398][ T982] usb 2-1: USB disconnect, device number 26 [ 672.801370][ T5989] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 672.813119][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 672.836146][ T5989] usb 5-1: SerialNumber: syz [ 673.104910][T25981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9560'. [ 673.117645][ T5989] usb 5-1: 0:2 : does not exist [ 673.134504][T25983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9559'. [ 673.167159][ T5989] usb 5-1: USB disconnect, device number 36 [ 673.287656][T23593] udevd[23593]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.785203][T26011] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.9574'. [ 673.843229][T26011] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `] Iq!>s*!)\+` [ 673.998077][ T5989] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 674.110443][T26026] netlink: 'syz.1.9581': attribute type 13 has an invalid length. [ 674.172584][ T5989] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 674.190555][ T5989] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 674.226923][ T5989] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 674.251746][ T5989] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 674.274260][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 674.305784][ T5989] usb 4-1: SerialNumber: syz [ 674.424401][T26035] sock: sock_timestamping_bind_phc: sock not bind to device [ 674.561557][ T5989] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 674.584748][ T5989] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 674.616003][ T5989] usb 4-1: USB disconnect, device number 37 [ 674.844121][T26048] program syz.4.9593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 675.175076][T26065] netlink: 176 bytes leftover after parsing attributes in process `syz.4.9601'. [ 676.175658][T26109] netlink: 'syz.2.9623': attribute type 7 has an invalid length. [ 676.192075][T26109] netlink: 'syz.2.9623': attribute type 5 has an invalid length. [ 676.212261][T26109] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9623'. [ 676.327894][T26114] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9625'. [ 677.517506][T26092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.624966][T26092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.708406][T26145] libceph: resolve '0.0' (ret=-3): failed [ 677.894493][T26092] 0: left allmulticast mode [ 677.899563][T26092] hsr_slave_0: left allmulticast mode [ 677.905050][T26092] hsr_slave_1: left allmulticast mode [ 678.304245][T26092] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 678.382420][T26092] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 678.391774][T26092] bridge2: left allmulticast mode [ 678.418134][T26092] xfrm1: left allmulticast mode [ 678.431176][T26092] ip6erspan0: left promiscuous mode [ 678.440824][T26092] bond4: left allmulticast mode [ 678.459104][T26092] bond0: left promiscuous mode [ 678.489877][ T2995] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.526996][ T2995] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.571558][ T2995] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.627906][ T2995] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.669459][T26164] PM: Enabling pm_trace changes system date and time during resume. [ 678.669459][T26164] PM: Correct system time has to be restored manually after resume. [ 678.863391][T26176] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9655'. [ 678.911243][T26181] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 679.707284][T26221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9676'. [ 680.097360][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9686'. [ 680.133016][T26241] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 680.316926][T26246] nvme_fabrics: missing parameter 'transport=%s' [ 680.335047][T26246] nvme_fabrics: missing parameter 'nqn=%s' [ 680.421315][T26259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9694'. [ 680.532222][T25209] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 680.711208][T25209] usb 4-1: Using ep0 maxpacket: 32 [ 680.727085][T26269] bond3: entered allmulticast mode [ 680.740812][T26269] 8021q: adding VLAN 0 to HW filter on device bond3 [ 680.741798][T25209] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 680.796653][T25209] usb 4-1: config 0 has no interface number 0 [ 680.831734][T25209] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 680.866707][T25209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.874784][T25209] usb 4-1: Product: syz [ 680.906038][T26280] geneve2: entered promiscuous mode [ 680.910766][T25209] usb 4-1: Manufacturer: syz [ 680.916083][T26280] geneve2: entered allmulticast mode [ 680.916296][T25209] usb 4-1: SerialNumber: syz [ 680.949339][T25209] usb 4-1: config 0 descriptor?? [ 680.982020][T25209] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 681.000366][T25209] usb 4-1: selecting invalid altsetting 1 [ 681.006255][T25209] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 681.019316][T25209] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 681.037086][T25209] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 681.055373][T25209] usb 4-1: media controller created [ 681.103663][T25209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 681.140214][T26289] vti0: entered promiscuous mode [ 681.157079][T26289] vti0: entered allmulticast mode [ 681.207744][T25209] usb 4-1: DVB: registering adapter 2 frontend 0 (Zarlink ZL10353 DVB-T)... [ 681.251794][T25209] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 681.273930][T26294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9711'. [ 681.291572][T26294] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9711'. [ 681.445200][T25209] DVB: Unable to find symbol mxl5005s_attach() [ 681.473372][T25209] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 681.638549][T25209] usb 4-1: USB disconnect, device number 38 [ 681.675669][T26309] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 681.756798][T26314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9720'. [ 682.025049][T26326] netlink: 'syz.0.9726': attribute type 30 has an invalid length. [ 682.204264][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9730'. [ 682.236746][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9730'. [ 682.955668][T26376] MPI: mpi too large (107144 bits) [ 683.316764][T26394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9759'. [ 683.439030][T26403] netlink: 'syz.2.9765': attribute type 15 has an invalid length. [ 683.714772][T26419] netlink: 'syz.4.9772': attribute type 6 has an invalid length. [ 683.885138][T26430] __nla_validate_parse: 2 callbacks suppressed [ 683.885161][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9776'. [ 683.920238][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9776'. [ 683.935528][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9776'. [ 683.944806][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9776'. [ 683.965465][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9776'. [ 683.988335][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9776'. [ 684.000357][T26435] netlink: 'syz.3.9780': attribute type 1 has an invalid length. [ 684.003526][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9776'. [ 684.025300][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9776'. [ 684.034576][T26436] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9781'. [ 684.050355][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9776'. [ 684.144476][T26442] tc_dump_action: action bad kind [ 685.006942][T23724] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 685.137682][T25175] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 685.156802][T23724] usb 3-1: Using ep0 maxpacket: 16 [ 685.170949][T23724] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 685.185328][T23724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.223408][T23724] usb 3-1: config 0 descriptor?? [ 685.248289][T23724] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 685.302563][T25175] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 685.333459][T25175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.355239][T25175] usb 5-1: Product: syz [ 685.359971][T25175] usb 5-1: Manufacturer: syz [ 685.364740][T25175] usb 5-1: SerialNumber: syz [ 685.378633][T25175] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 685.398527][ T5982] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 685.481562][T23724] usb 3-1: Detected FT232B [ 685.691283][T23724] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 685.732164][T23724] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 685.763845][T23724] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 685.818432][T23724] usb 3-1: USB disconnect, device number 21 [ 685.847126][T25175] usb 5-1: USB disconnect, device number 37 [ 685.870582][T23724] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 685.930573][T23724] ftdi_sio 3-1:0.0: device disconnected [ 686.192282][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.217041][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.677101][ T5982] usb 5-1: Service connection timeout for: 256 [ 686.726709][ T5982] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 686.755353][ T5982] ath9k_htc: Failed to initialize the device [ 686.773483][T25175] usb 5-1: ath9k_htc: USB layer deinitialized [ 687.352465][T25175] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 687.459732][T26602] netlink: 'syz.0.9863': attribute type 2 has an invalid length. [ 687.471418][T26602] netlink: 'syz.0.9863': attribute type 6 has an invalid length. [ 687.496651][ T5982] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 687.518564][T25175] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 687.536590][T25175] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 687.573956][T25175] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 687.605784][T25175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.643241][T26582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 687.667099][ T5982] usb 3-1: Using ep0 maxpacket: 8 [ 687.675209][T25175] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 687.699141][ T5982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.748763][ T5982] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 687.783420][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.795465][ T5982] usb 3-1: Product: syz [ 687.825157][ T5982] usb 3-1: Manufacturer: syz [ 687.836787][ T5982] usb 3-1: SerialNumber: syz [ 687.925592][T23724] usb 4-1: USB disconnect, device number 39 [ 687.933502][ T5982] usb 3-1: config 0 descriptor?? [ 687.968379][ T5982] cdc_phonet 3-1:0.0: invalid descriptor buffer length [ 688.001750][ T5982] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22 [ 688.069689][ T30] audit: type=1326 audit(1757450040.373:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.1.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31a98ebe9 code=0x7ffc0000 [ 688.092262][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.178403][ T30] audit: type=1326 audit(1757450040.413:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.1.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31a98ebe9 code=0x7ffc0000 [ 688.211134][T25209] usb 3-1: USB disconnect, device number 22 [ 688.266471][ T30] audit: type=1326 audit(1757450040.433:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.1.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fc31a98ebe9 code=0x7ffc0000 [ 688.290061][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.337546][ T30] audit: type=1326 audit(1757450040.433:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.1.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31a98ebe9 code=0x7ffc0000 [ 688.374971][ T30] audit: type=1326 audit(1757450040.433:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26618 comm="syz.1.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31a98ebe9 code=0x7ffc0000 [ 688.756914][T23724] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 688.941598][T23724] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 688.961198][T23724] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 689.004446][T23724] usb 5-1: Product: syz [ 689.023121][T23724] usb 5-1: SerialNumber: syz [ 689.048843][T23724] usb 5-1: config 0 descriptor?? [ 689.289754][T23724] hso 5-1:0.0: Failed to find BULK IN ep [ 689.494912][T25175] usb 5-1: USB disconnect, device number 38 [ 689.596871][T26670] __nla_validate_parse: 41 callbacks suppressed [ 689.596896][T26670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9894'. [ 689.751404][T26678] netlink: 'syz.1.9899': attribute type 4 has an invalid length. [ 689.971956][T26692] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 690.358529][T26714] netlink: 'syz.4.9918': attribute type 2 has an invalid length. [ 690.386083][T26719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9919'. [ 690.502925][T26724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9922'. [ 690.512752][T26724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9922'. [ 690.695711][T26731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9926'. [ 690.793716][T26738] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 690.805161][T26738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.005111][T26807] netlink: 'syz.3.9959': attribute type 9 has an invalid length. [ 692.036812][T26807] netlink: 'syz.3.9959': attribute type 7 has an invalid length. [ 692.063284][T26807] netlink: 'syz.3.9959': attribute type 8 has an invalid length. [ 693.566710][T25209] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 693.728563][T26890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 693.753712][T25209] usb 3-1: Using ep0 maxpacket: 8 [ 693.769611][T25209] usb 3-1: unable to get BOS descriptor or descriptor too short [ 693.783047][T25209] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 693.806874][T25209] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 693.824887][T25209] usb 3-1: config 4 has no interface number 0 [ 693.837810][T25209] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 693.869788][T25209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.890008][T25209] usb 3-1: Product: syz [ 693.894253][T25209] usb 3-1: Manufacturer: syz [ 693.909660][T25209] usb 3-1: SerialNumber: syz [ 693.948485][T26898] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 694.104008][T26904] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10007'. [ 694.138300][T26904] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10007'. [ 694.146027][T25209] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 694.153202][T26904] netlink: 'syz.1.10007': attribute type 3 has an invalid length. [ 694.162342][T26904] netlink: 11 bytes leftover after parsing attributes in process `syz.1.10007'. [ 694.169684][T25209] usb 3-1: No valid video chain found. [ 694.180392][T26906] QAT: failed to copy from user. [ 694.209059][T25209] usb 3-1: USB disconnect, device number 23 [ 694.322821][ T30] audit: type=1326 audit(1757450046.624:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26907 comm="syz.3.10010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb838ebe9 code=0x7ffc0000 [ 694.345383][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.373384][T26912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10012'. [ 694.392918][ T30] audit: type=1326 audit(1757450046.624:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26907 comm="syz.3.10010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb838ebe9 code=0x7ffc0000 [ 694.422712][ T30] audit: type=1326 audit(1757450046.624:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26907 comm="syz.3.10010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb838ebe9 code=0x7ffc0000 [ 694.445281][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.454238][ T30] audit: type=1326 audit(1757450046.624:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26907 comm="syz.3.10010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb838ebe9 code=0x7ffc0000 [ 694.477072][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.490117][ T30] audit: type=1326 audit(1757450046.664:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26907 comm="syz.3.10010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bb838ebe9 code=0x7ffc0000 [ 694.512718][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.528589][ T30] audit: type=1326 audit(1757450046.664:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26907 comm="syz.3.10010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb838ebe9 code=0x7ffc0000 [ 694.550459][T26914] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 694.599659][ T30] audit: type=1326 audit(1757450046.664:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26907 comm="syz.3.10010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb838ebe9 code=0x7ffc0000 [ 694.630266][ T30] audit: type=1326 audit(1757450046.664:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26907 comm="syz.3.10010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1bb838ebe9 code=0x7ffc0000 [ 694.661819][ T30] audit: type=1326 audit(1757450046.664:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26907 comm="syz.3.10010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1bb838ebe9 code=0x7ffc0000 [ 694.889068][T26930] sctp: [Deprecated]: syz.3.10021 (pid 26930) Use of int in max_burst socket option. [ 694.889068][T26930] Use struct sctp_assoc_value instead [ 694.962989][T26934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10023'. [ 694.987573][T26934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10023'. [ 695.127142][T26943] netlink: 13 bytes leftover after parsing attributes in process `syz.1.10027'. [ 695.156082][T26943] netlink: 'syz.1.10027': attribute type 3 has an invalid length. [ 695.165871][T26943] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10027'. [ 695.326740][T23724] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 695.491013][T23724] usb 4-1: Using ep0 maxpacket: 16 [ 695.521627][T23724] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 695.542130][T23724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.570422][T23724] usb 4-1: Product: syz [ 695.574703][T23724] usb 4-1: Manufacturer: syz [ 695.601908][T23724] usb 4-1: SerialNumber: syz [ 695.624687][T23724] r8152-cfgselector 4-1: Unknown version 0x0000 [ 695.644027][T23724] r8152-cfgselector 4-1: config 0 descriptor?? [ 695.936648][T25209] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 696.104054][T25199] r8152-cfgselector 4-1: USB disconnect, device number 40 [ 696.117144][T25209] usb 3-1: Using ep0 maxpacket: 8 [ 696.128615][T25209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 696.176149][T25209] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 696.187008][T25209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.195059][T25209] usb 3-1: Product: syz [ 696.207451][T25209] usb 3-1: Manufacturer: syz [ 696.212122][T25209] usb 3-1: SerialNumber: syz [ 696.238727][T25209] usb 3-1: config 0 descriptor?? [ 696.267718][T25209] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 696.474017][T25209] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 696.500246][T25209] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 696.683082][T25199] usb 3-1: USB disconnect, device number 24 [ 697.279598][T25199] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 697.487049][T25199] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 697.495303][T25199] usb 2-1: config 0 has no interface number 0 [ 697.526769][T25199] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 697.554829][T25199] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 697.605759][T25199] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 697.634182][T25199] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 697.678498][T25199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.715831][T25199] usb 2-1: config 0 descriptor?? [ 697.752802][T25199] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input92 [ 698.038951][T27041] netlink: 'syz.4.10073': attribute type 4 has an invalid length. [ 698.139724][T25199] usb 2-1: USB disconnect, device number 27 [ 698.734663][T27073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10090'. [ 698.787557][T27073] netlink: 'syz.3.10090': attribute type 1 has an invalid length. [ 699.146653][T27090] netlink: 'syz.0.10098': attribute type 1 has an invalid length. [ 699.474123][T27105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10105'. [ 699.950169][T27128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10116'. [ 700.072707][T27135] 0{X: left allmulticast mode [ 700.122271][T27135] dummy0: left promiscuous mode [ 700.155413][T27135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.249485][ T30] audit: type=1326 audit(1757450052.524:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27141 comm="syz.2.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 700.293359][T27146] netlink: 'syz.3.10125': attribute type 11 has an invalid length. [ 700.323746][T27146] netlink: 448 bytes leftover after parsing attributes in process `syz.3.10125'. [ 700.331438][ T30] audit: type=1326 audit(1757450052.554:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27141 comm="syz.2.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 700.421889][ T30] audit: type=1326 audit(1757450052.554:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27141 comm="syz.2.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 700.466096][ T30] audit: type=1326 audit(1757450052.554:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27141 comm="syz.2.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 700.553657][ T30] audit: type=1326 audit(1757450052.554:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27141 comm="syz.2.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 701.005302][T27178] _Z`Ԁ@: entered promiscuous mode [ 701.099015][T27184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10144'. [ 701.586817][T27211] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10157'. [ 701.607407][T27211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.683363][T27213] netdevsim netdevsim1: Direct firmware load for . [ 701.683363][T27213] failed with error -2 [ 701.736780][T27213] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 701.736780][T27213] [ 701.950927][ T30] audit: type=1326 audit(1757450054.254:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27229 comm="syz.0.10166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378eb8ebe9 code=0x7ffc0000 [ 702.034789][ T30] audit: type=1326 audit(1757450054.284:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27229 comm="syz.0.10166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f378eb8ebe9 code=0x7ffc0000 [ 702.074660][ T30] audit: type=1326 audit(1757450054.284:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27229 comm="syz.0.10166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378eb8ebe9 code=0x7ffc0000 [ 702.118594][T27237] netlink: 'syz.4.10170': attribute type 2 has an invalid length. [ 702.133838][ T30] audit: type=1326 audit(1757450054.284:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27229 comm="syz.0.10166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378eb8ebe9 code=0x7ffc0000 [ 702.165416][T27237] netlink: 119 bytes leftover after parsing attributes in process `syz.4.10170'. [ 702.264436][T27241] (unnamed net_device) (uninitialized): up delay (70) is not a multiple of miimon (32768), value rounded to 0 ms [ 702.530597][T27254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10176'. [ 702.549421][T27254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10176'. [ 702.583836][T27254] geneve3: entered promiscuous mode [ 702.592317][T27254] geneve3: entered allmulticast mode [ 702.619135][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.638839][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.678683][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.717811][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.823723][T27267] IPVS: Unknown mcast interface: hsr0 [ 703.170791][T27285] fuse: Bad value for 'group_id' [ 703.177065][T27285] fuse: Bad value for 'group_id' [ 704.019634][T27330] netlink: 'syz.2.10215': attribute type 1 has an invalid length. [ 704.097532][ T30] audit: type=1326 audit(1757450056.394:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27333 comm="syz.4.10217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179898ebe9 code=0x7ffc0000 [ 704.191370][T27336] : entered promiscuous mode [ 704.418648][T27349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10226'. [ 704.509120][T27350] 8021q: adding VLAN 0 to HW filter on device bond4 [ 705.195948][T27394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10246'. [ 705.487114][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 705.487137][ T30] audit: type=1326 audit(1757450057.774:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27406 comm="syz.0.10253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378eb8ebe9 code=0x7ffc0000 [ 705.579672][ T30] audit: type=1326 audit(1757450057.774:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27406 comm="syz.0.10253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378eb8ebe9 code=0x7ffc0000 [ 705.610599][ T30] audit: type=1326 audit(1757450057.784:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27406 comm="syz.0.10253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f378eb8ebe9 code=0x7ffc0000 [ 705.682600][ T30] audit: type=1326 audit(1757450057.784:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27406 comm="syz.0.10253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378eb8ebe9 code=0x7ffc0000 [ 705.762716][T27420] usb usb8: usbfs: process 27420 (syz.0.10258) did not claim interface 0 before use [ 705.780158][ T30] audit: type=1326 audit(1757450057.784:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27406 comm="syz.0.10253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378eb8ebe9 code=0x7ffc0000 [ 705.860729][ T30] audit: type=1800 audit(1757450057.874:5853): pid=27414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10255" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 706.009583][T27436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10267'. [ 706.077675][T27438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.165760][ T30] audit: type=1326 audit(1757450058.464:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27441 comm="syz.2.10271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 706.229626][ T30] audit: type=1326 audit(1757450058.464:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27441 comm="syz.2.10271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 706.300498][ T30] audit: type=1326 audit(1757450058.464:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27441 comm="syz.2.10271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 706.348411][ T30] audit: type=1326 audit(1757450058.464:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27441 comm="syz.2.10271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 706.520140][T23724] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 706.624549][T27466] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10282'. [ 706.668414][T27467] netlink: 'syz.2.10284': attribute type 3 has an invalid length. [ 706.686153][T27467] netlink: 'syz.2.10284': attribute type 2 has an invalid length. [ 706.698345][T23724] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 706.708127][T23724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.716865][T23724] usb 2-1: Product: syz [ 706.726823][T23724] usb 2-1: Manufacturer: syz [ 706.741748][T23724] usb 2-1: SerialNumber: syz [ 706.780021][T23724] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 706.820716][T25209] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 707.313079][T23724] usb 2-1: USB disconnect, device number 28 [ 707.519549][T27506] netlink: 'syz.4.10302': attribute type 5 has an invalid length. [ 707.874704][T25209] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 707.891628][T25209] ath9k_htc: Failed to initialize the device [ 707.909780][T23724] usb 2-1: ath9k_htc: USB layer deinitialized [ 707.943567][T27524] netlink: 'syz.1.10311': attribute type 10 has an invalid length. [ 707.969536][T27524] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 708.005856][T27524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.037779][T27528] netlink: 'syz.2.10312': attribute type 1 has an invalid length. [ 708.075365][T27528] netlink: 'syz.2.10312': attribute type 1 has an invalid length. [ 708.111006][T27528] netlink: 'syz.2.10312': attribute type 1 has an invalid length. [ 708.143785][T27528] netlink: 'syz.2.10312': attribute type 1 has an invalid length. [ 708.175872][T27528] netlink: 'syz.2.10312': attribute type 1 has an invalid length. [ 708.199497][T27528] netlink: 'syz.2.10312': attribute type 1 has an invalid length. [ 708.856941][T27571] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 709.218037][T27589] netlink: 23 bytes leftover after parsing attributes in process `syz.4.10343'. [ 710.026968][ T5982] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 710.193716][ T5982] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 710.213666][ T5982] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.228920][ T5982] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 710.239731][T27647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10372'. [ 710.256156][T27647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10372'. [ 710.259282][ T5982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 710.298072][ T5982] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.316664][ T5982] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 710.333670][ T5982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 710.355593][ T5982] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.368235][ T5982] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 710.389143][ T5982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 710.410575][ T5982] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.430332][ T5982] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 710.459959][ T5982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 710.481837][ T5982] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.494804][ T5982] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 710.512452][ T5982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 710.523991][ T5982] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.565772][ T5982] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 710.591863][ T5982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 710.607985][ T5982] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.629010][ T5982] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 710.643916][ T5982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 710.661626][ T5982] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.682421][ T5982] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 710.700727][ T5982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 710.722107][ T5982] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 710.746646][ T5982] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 710.767968][ T5982] usb 3-1: Product: syz [ 710.772316][ T5982] usb 3-1: Manufacturer: syz [ 710.802688][ T5982] usb 3-1: SerialNumber: syz [ 710.818644][ T5982] usb 3-1: config 0 descriptor?? [ 710.852419][ T5982] yurex 3-1:0.0: Could not find endpoints [ 711.121644][ T5982] usb 3-1: USB disconnect, device number 25 [ 711.123183][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 711.123200][ T30] audit: type=1326 audit(1757450063.424:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27686 comm="syz.1.10392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31a98ebe9 code=0x7ffc0000 [ 711.210582][ T30] audit: type=1326 audit(1757450063.464:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27686 comm="syz.1.10392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fc31a98ebe9 code=0x7ffc0000 [ 711.242523][ T30] audit: type=1326 audit(1757450063.464:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27686 comm="syz.1.10392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31a98ebe9 code=0x7ffc0000 [ 711.275281][ T30] audit: type=1326 audit(1757450063.464:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27686 comm="syz.1.10392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31a98ebe9 code=0x7ffc0000 [ 711.473690][T27702] program syz.4.10399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 712.476972][T25209] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 712.508416][T27757] program syz.3.10424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 712.541446][T27760] fuse: Unknown parameter 'no' [ 712.639114][T25209] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 712.649214][T25209] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.678037][T25209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.693005][T25209] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 712.704909][T25209] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 712.715990][T25209] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 712.733146][T25209] usb 5-1: config 1 interface 1 has no altsetting 0 [ 712.775749][T25209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.785812][T25209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.803253][T25209] usb 5-1: Product: syz [ 712.821786][T25209] usb 5-1: Manufacturer: syz [ 712.826464][T25209] usb 5-1: SerialNumber: syz [ 712.894757][T25209] cdc_ncm 5-1:1.0: skipping garbage [ 712.904723][T25209] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 712.933636][T25209] cdc_ncm 5-1:1.0: bind() failure [ 713.281858][T27790] validate_nla: 45 callbacks suppressed [ 713.281883][T27790] netlink: 'syz.1.10439': attribute type 9 has an invalid length. [ 713.369490][T25209] usb 5-1: USB disconnect, device number 39 [ 713.443872][T27794] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10441'. [ 713.700908][T27804] binder: binder_mmap: 27802 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 714.077153][T27824] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 714.596298][T27851] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10468'. [ 714.927443][T27870] bond0: Error: Cannot enslave bond to itself. [ 715.156618][ T43] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 715.272202][T27888] netlink: 'syz.2.10487': attribute type 27 has an invalid length. [ 715.281510][T27888] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10487'. [ 715.296331][T27888] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 715.336984][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 715.363699][ T43] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 715.382899][ T43] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 715.415320][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 715.416660][T27892] program syz.0.10489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 715.433276][ T43] usb 5-1: config 1 has no interface number 0 [ 715.466293][ T43] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 715.485014][T27898] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 715.492657][ T43] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 715.515849][T27898] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 715.523066][ T43] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 715.565222][ T43] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 715.580602][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.613026][ T43] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 715.722767][T27906] netlink: 'syz.2.10496': attribute type 10 has an invalid length. [ 715.811240][ T43] snd_usb_pod 5-1:1.1: cannot start listening: -90 [ 715.829229][ T43] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 715.880848][ T43] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 716.011530][T27919] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 716.091773][ T43] usb 5-1: USB disconnect, device number 40 [ 716.332810][T27934] kAFS: unparsable volume name [ 716.841744][T27962] netlink: 'syz.1.10523': attribute type 3 has an invalid length. [ 717.011011][T27972] netlink: 'syz.0.10528': attribute type 8 has an invalid length. [ 717.130064][T27976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10532'. [ 717.156815][T27976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10532'. [ 717.327899][T27987] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10537'. [ 717.672573][T28002] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10544'. [ 717.856877][T28014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10550'. [ 717.897144][T28014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10550'. [ 717.975913][T28020] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 717.997848][T28020] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 718.124883][T28022] bond1: entered promiscuous mode [ 718.131276][T28022] bond1: entered allmulticast mode [ 718.145322][T28022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 718.481509][T28022] bond1 (unregistering): Released all slaves [ 718.547830][T28037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10561'. [ 718.894926][T28057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10571'. [ 718.906881][T25175] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 719.091771][T25175] usb 4-1: config 0 has an invalid interface number: 118 but max is 0 [ 719.114520][T25175] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.129608][T25175] usb 4-1: config 0 has no interface number 0 [ 719.141787][T25175] usb 4-1: config 0 interface 118 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 719.165140][T25175] usb 4-1: config 0 interface 118 has no altsetting 0 [ 719.178613][T25175] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 719.214668][T25175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.233122][T25175] usb 4-1: Product: syz [ 719.243269][T25175] usb 4-1: Manufacturer: syz [ 719.253410][T25175] usb 4-1: SerialNumber: syz [ 719.278418][T25175] usb 4-1: config 0 descriptor?? [ 719.306107][T25175] usb-storage 4-1:0.118: USB Mass Storage device detected [ 719.337766][T25175] usb-storage 4-1:0.118: Quirks match for vid 04e6 pid 000b: 4 [ 719.379465][T25175] usb-storage 4-1:0.118: This device (04e6,000b,0100 S fb P 50) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 719.379465][T25175] Please send a copy of this message to and [ 719.605318][T25175] usb 4-1: USB disconnect, device number 41 [ 719.656899][T28095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10589'. [ 719.699623][T28095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10589'. [ 719.923969][T28107] program syz.1.10596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 720.126743][T28119] deleting an unspecified loop device is not supported. [ 721.007121][T28169] sctp: [Deprecated]: syz.3.10624 (pid 28169) Use of int in max_burst socket option. [ 721.007121][T28169] Use struct sctp_assoc_value instead [ 721.951273][T28226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10653'. [ 722.692740][T28264] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 723.446421][T28301] netlink: 'syz.0.10688': attribute type 2 has an invalid length. [ 724.293031][T28346] kAFS: unparsable volume name [ 724.580972][T28359] netlink: 'syz.3.10716': attribute type 1 has an invalid length. [ 724.689652][T28366] netlink: 'syz.4.10720': attribute type 25 has an invalid length. [ 724.756716][T28370] usb usb8: usbfs: process 28370 (syz.0.10722) did not claim interface 4 before use [ 724.965916][T28380] netlink: 'syz.2.10726': attribute type 11 has an invalid length. [ 725.191467][T28392] IPv6: sit1: Disabled Multicast RS [ 725.253140][T28394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.945141][T28433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 725.952590][T28433] IPv6: NLM_F_CREATE should be set when creating new route [ 725.960026][T28433] IPv6: NLM_F_CREATE should be set when creating new route [ 726.127247][ T5989] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 726.310182][ T5989] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 726.319189][ T5989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.347116][ T5989] usb 2-1: config 0 has no interface number 0 [ 726.353298][ T5989] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 726.409291][ T5989] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 726.435779][ T5989] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.459037][ T5989] usb 2-1: config 0 interface 52 has no altsetting 0 [ 726.476898][ T5989] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 726.506431][ T5989] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 726.546647][ T5989] usb 2-1: Manufacturer: syz [ 726.564918][ T5989] usb 2-1: config 0 descriptor?? [ 726.681679][T28463] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 726.792203][ T5989] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 726.815131][ T5989] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 726.998130][ T5989] usb 2-1: USB disconnect, device number 29 [ 727.248045][T28487] pim6reg: entered allmulticast mode [ 727.278930][T28490] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10781'. [ 727.720287][ T30] audit: type=1326 audit(1757450080.024:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28514 comm="syz.3.10794" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bb838ebe9 code=0x0 [ 727.826926][T25175] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 727.876318][T28524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10798'. [ 727.988848][T25175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.002381][T25175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.016425][T25175] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 728.026183][T25175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.038881][T25175] usb 5-1: config 0 descriptor?? [ 728.216096][T28539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10805'. [ 728.475659][T25175] arvo 0003:1E7D:30D4.0003: item fetching failed at offset 5/7 [ 728.487147][T25175] arvo 0003:1E7D:30D4.0003: parse failed [ 728.493186][T25175] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -22 [ 728.670556][T25175] usb 5-1: USB disconnect, device number 41 [ 728.969249][T28560] netlink: 'syz.2.10815': attribute type 29 has an invalid length. [ 729.136869][T25175] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 729.177791][ T5982] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 729.306830][T25175] usb 4-1: Using ep0 maxpacket: 16 [ 729.328484][T25175] usb 4-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 729.349535][T25175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.378911][T25175] usb 4-1: Product: syz [ 729.383359][ T5982] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 729.404238][T25175] usb 4-1: Manufacturer: syz [ 729.411390][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 729.426911][T25175] usb 4-1: SerialNumber: syz [ 729.441743][T25175] usb 4-1: config 0 descriptor?? [ 729.458692][ T5982] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 729.471829][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.485546][ T5982] usb 2-1: Product: syz [ 729.494982][ T5982] usb 2-1: Manufacturer: syz [ 729.502654][ T5982] usb 2-1: SerialNumber: syz [ 729.519545][ T5982] usb 2-1: config 0 descriptor?? [ 729.537823][T28558] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 729.640967][ T5982] rc_core: IR keymap rc-streamzap not found [ 729.659570][ T5982] Registered IR keymap rc-empty [ 729.671356][ T5982] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 729.695326][ T5982] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input96 [ 729.791189][T25199] usb 2-1: USB disconnect, device number 30 [ 729.886797][T25175] mxuport 4-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 729.903348][T25175] mxuport 4-1:0.0: probe with driver mxuport failed with error -5 [ 729.948743][T25175] usb 4-1: USB disconnect, device number 42 [ 730.120877][T28603] netlink: 19 bytes leftover after parsing attributes in process `syz.2.10834'. [ 731.349435][T25199] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 731.516693][T25199] usb 5-1: Using ep0 maxpacket: 32 [ 731.535893][T25199] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 731.558839][T25199] usb 5-1: config 0 has no interface number 0 [ 731.583703][T25199] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 731.596884][ T30] audit: type=1326 audit(1757450083.884:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28671 comm="syz.2.10868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 731.619477][ C0] vkms_vblank_simulate: vblank timer overrun [ 731.640002][ T30] audit: type=1326 audit(1757450083.884:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28671 comm="syz.2.10868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 731.675290][T25199] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 731.684704][T25199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.702307][T25199] usb 5-1: Product: syz [ 731.709784][T25199] usb 5-1: Manufacturer: syz [ 731.714439][T25199] usb 5-1: SerialNumber: syz [ 731.724996][ T30] audit: type=1326 audit(1757450083.884:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28671 comm="syz.2.10868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 731.773693][T25199] usb 5-1: config 0 descriptor?? [ 731.801421][T25199] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 731.816620][ T30] audit: type=1326 audit(1757450083.904:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28671 comm="syz.2.10868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f426738ec23 code=0x7ffc0000 [ 731.839190][ C0] vkms_vblank_simulate: vblank timer overrun [ 731.862324][T25199] em28xx 5-1:0.132: Video interface 132 found: [ 731.890211][ T30] audit: type=1326 audit(1757450083.904:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28671 comm="syz.2.10868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 731.913829][ T30] audit: type=1326 audit(1757450083.904:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28671 comm="syz.2.10868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 731.936407][ C0] vkms_vblank_simulate: vblank timer overrun [ 731.947138][ T30] audit: type=1326 audit(1757450083.904:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28671 comm="syz.2.10868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 731.970328][ C0] vkms_vblank_simulate: vblank timer overrun [ 731.985532][ T30] audit: type=1326 audit(1757450083.904:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28671 comm="syz.2.10868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 732.076879][ T30] audit: type=1326 audit(1757450083.904:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28671 comm="syz.2.10868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 732.244418][T25199] em28xx 5-1:0.132: chip ID is em2840 [ 732.505861][T25199] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 732.520029][T25199] em28xx 5-1:0.132: board has no eeprom [ 732.614472][T25199] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 732.637398][T25199] em28xx 5-1:0.132: analog set to bulk mode. [ 732.647565][T25209] em28xx 5-1:0.132: Registering V4L2 extension [ 732.665884][T25199] usb 5-1: USB disconnect, device number 42 [ 732.698107][T25199] em28xx 5-1:0.132: Disconnecting em28xx [ 732.874856][T28720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10888'. [ 732.904378][T28720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10888'. [ 732.914470][T28720] netlink: 'syz.2.10888': attribute type 14 has an invalid length. [ 732.939530][T25209] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 732.948142][T25209] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 732.997033][T25209] em28xx 5-1:0.132: No AC97 audio processor [ 733.013417][T25209] usb 5-1: Decoder not found [ 733.022531][T25209] em28xx 5-1:0.132: failed to create media graph [ 733.029118][T25209] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 733.039857][T25209] em28xx 5-1:0.132: Remote control support is not available for this card. [ 733.063997][T25199] em28xx 5-1:0.132: Closing input extension [ 733.100718][T25199] em28xx 5-1:0.132: Freeing device [ 733.137980][T23724] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 733.307631][T25175] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 733.310921][T23724] usb 2-1: Using ep0 maxpacket: 16 [ 733.332283][T23724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.364330][T23724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.403729][T23724] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 733.415685][T23724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.435022][T23724] usb 2-1: config 0 descriptor?? [ 733.486950][T25175] usb 3-1: Using ep0 maxpacket: 32 [ 733.494431][T25175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.504671][T25175] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 733.514587][T25175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.525570][T25175] usb 3-1: config 0 descriptor?? [ 733.636648][ T5982] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 733.656926][ T5989] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 733.806667][ T5989] usb 5-1: Using ep0 maxpacket: 16 [ 733.811993][ T5982] usb 4-1: Using ep0 maxpacket: 16 [ 733.820552][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.832177][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.845107][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.855020][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.861235][T23724] hid_parser_main: 5 callbacks suppressed [ 733.861258][T23724] apple 0003:05AC:024B.0004: unknown main item tag 0x5 [ 733.864987][ T5989] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 733.878239][T23724] apple 0003:05AC:024B.0004: unknown main item tag 0x7 [ 733.891357][ T5982] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 733.900033][T23724] apple 0003:05AC:024B.0004: unbalanced collection at end of report description [ 733.911081][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.920755][T23724] apple 0003:05AC:024B.0004: parse failed [ 733.924907][ T5982] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 733.931145][T23724] apple 0003:05AC:024B.0004: probe with driver apple failed with error -22 [ 733.948032][ T5989] usb 5-1: config 0 descriptor?? [ 733.978694][T25175] stadia 0003:18D1:9400.0005: item fetching failed at offset 0/4 [ 733.987713][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.998906][T25175] stadia 0003:18D1:9400.0005: parse failed [ 734.004838][T25175] stadia 0003:18D1:9400.0005: probe with driver stadia failed with error -22 [ 734.017972][ T5982] usb 4-1: config 0 descriptor?? [ 734.075148][T23724] usb 2-1: USB disconnect, device number 31 [ 734.175056][T25175] usb 3-1: USB disconnect, device number 26 [ 734.364824][ T5989] hid (null): unknown global tag 0xc [ 734.373725][ T5989] nzxt-kraken2 0003:1E71:170E.0006: unknown global tag 0xc [ 734.381248][ T5989] nzxt-kraken2 0003:1E71:170E.0006: item 0 1 1 12 parsing failed [ 734.390811][ T5989] nzxt-kraken2 0003:1E71:170E.0006: hid parse failed with -22 [ 734.399230][ T5989] nzxt-kraken2 0003:1E71:170E.0006: probe with driver nzxt-kraken2 failed with error -22 [ 734.441925][ T5982] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 734.449602][ T5982] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 734.456880][ T5982] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 734.464117][ T5982] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 734.471663][ T5982] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 734.478994][ T5982] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 734.486300][ T5982] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 734.493607][ T5982] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 734.510287][ T5982] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 734.521838][ T5982] microsoft 0003:045E:07DA.0007: no inputs found [ 734.528839][ T5982] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 734.652024][T23724] usb 5-1: USB disconnect, device number 43 [ 734.706460][ T5982] usb 4-1: USB disconnect, device number 43 [ 735.251866][T28773] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 735.787003][T23724] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 735.972819][T23724] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 735.998241][T23724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.006311][T23724] usb 3-1: Product: syz [ 736.013046][T23724] usb 3-1: Manufacturer: syz [ 736.018066][T23724] usb 3-1: SerialNumber: syz [ 736.037296][T23724] usb 3-1: config 0 descriptor?? [ 736.136948][T25209] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 736.287447][T25209] usb 5-1: Using ep0 maxpacket: 16 [ 736.300271][T25209] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 736.343845][T25209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.358037][T25209] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 736.383836][T25209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.395347][T28811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10929'. [ 736.418402][T25209] usb 5-1: config 0 descriptor?? [ 736.465200][T23724] mos7840 3-1:0.0: required endpoints missing [ 736.491030][T23724] usb 3-1: USB disconnect, device number 27 [ 736.867421][T25209] waltop 0003:172F:0034.0008: item fetching failed at offset 1/3 [ 736.891090][T25209] waltop 0003:172F:0034.0008: probe with driver waltop failed with error -22 [ 736.979801][T28832] netlink: 'syz.0.10939': attribute type 27 has an invalid length. [ 736.996933][ T5982] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 737.055566][T25209] usb 5-1: USB disconnect, device number 44 [ 737.079245][T28834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.170292][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 737.202721][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.223186][ T5982] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 737.249344][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.260906][T28842] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10943'. [ 737.270498][T28842] bridge: RTM_NEWNEIGH with invalid ether address [ 737.274654][ T5982] usb 4-1: config 0 descriptor?? [ 737.415705][T28848] netlink: 'syz.0.10947': attribute type 6 has an invalid length. [ 737.434575][T28848] netlink: 'syz.0.10947': attribute type 3 has an invalid length. [ 737.451718][T28848] netlink: 199728 bytes leftover after parsing attributes in process `syz.0.10947'. [ 737.485641][T28851] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 737.496135][T28850] IPVS: stopping backup sync thread 28851 ... [ 737.733366][ T5982] kone 0003:1E7D:2CED.0009: collection stack underflow [ 737.759867][ T5982] kone 0003:1E7D:2CED.0009: item 0 4 0 12 parsing failed [ 737.790625][ T5982] kone 0003:1E7D:2CED.0009: parse failed [ 737.796447][ T5982] kone 0003:1E7D:2CED.0009: probe with driver kone failed with error -22 [ 737.956072][ T5982] usb 4-1: USB disconnect, device number 44 [ 737.996911][T25209] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 738.187128][T25209] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.212033][T25209] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.239990][T25209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 738.259384][T25209] usb 3-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 738.269117][T25209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.283572][T25209] usb 3-1: config 0 descriptor?? [ 738.757009][T25175] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 738.773016][T25209] thrustmaster 0003:044F:B651.000A: hidraw0: USB HID v0.00 Device [HID 044f:b651] on usb-dummy_hcd.2-1/input0 [ 738.811121][T25209] thrustmaster 0003:044F:B651.000A: no inputs found [ 738.941085][T25175] usb 5-1: Using ep0 maxpacket: 8 [ 738.959035][T25175] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 738.970763][T25209] usb 3-1: USB disconnect, device number 28 [ 738.989242][T25175] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 739.011268][T25175] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 739.033203][T25175] usb 5-1: config 250 has no interface number 0 [ 739.041225][T25175] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 739.100002][T25175] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 739.136981][T25175] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 739.167080][T25175] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 739.186618][T25175] usb 5-1: config 250 interface 228 has no altsetting 0 [ 739.207473][T25175] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 739.216927][T25175] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 739.225219][T25175] usb 5-1: Product: syz [ 739.235896][T25175] usb 5-1: SerialNumber: syz [ 739.253595][T25175] hub 5-1:250.228: bad descriptor, ignoring hub [ 739.285512][T25175] hub 5-1:250.228: probe with driver hub failed with error -5 [ 739.463443][T25175] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 45 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 739.812178][ C0] usblp0: nonzero read bulk status received: -71 [ 739.847517][T25199] usb 5-1: USB disconnect, device number 45 [ 739.871872][T25199] usblp0: removed [ 740.001130][T28936] netlink: 'syz.1.10986': attribute type 2 has an invalid length. [ 740.129240][T28943] cgroup: fork rejected by pids controller in /syz1 [ 740.136287][T28945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 740.765973][ T2961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.922364][ T2961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.053935][ T2961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.214251][ T2961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.056608][ T5989] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 742.256419][ T5989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 742.288105][ T5989] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 742.327855][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.355735][ T5989] usb 3-1: config 0 descriptor?? [ 742.366152][T28987] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 742.432284][ T5187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 742.446243][ T5187] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 742.467565][ T5187] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 742.482447][ T5187] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 742.498763][ T5187] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 742.817505][ T5989] hid_parser_main: 14 callbacks suppressed [ 742.817531][ T5989] uclogic 0003:5543:0064.000B: unknown main item tag 0x0 [ 742.863508][ T5989] uclogic 0003:5543:0064.000B: unknown main item tag 0x0 [ 742.883135][ T5989] uclogic 0003:5543:0064.000B: unknown main item tag 0x0 [ 742.917760][ T5989] uclogic 0003:5543:0064.000B: unknown main item tag 0x0 [ 742.924919][ T5989] uclogic 0003:5543:0064.000B: unknown main item tag 0x0 [ 742.980764][ T5989] uclogic 0003:5543:0064.000B: hidraw0: USB HID v1.01 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0 [ 743.037947][ T5989] usb 3-1: USB disconnect, device number 29 [ 743.291389][T29017] fido_id[29017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 743.880560][ T5989] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 744.066400][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 744.096589][ T5989] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 744.116756][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.139600][ T5989] usb 5-1: config 0 descriptor?? [ 744.156177][T29031] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 744.601826][ T5989] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 744.608831][T22104] Bluetooth: hci0: command tx timeout [ 744.623128][ T5989] elan 0003:04F3:0755.000C: item fetching failed at offset 3/5 [ 744.657035][ T5989] elan 0003:04F3:0755.000C: Hid Parse failed [ 744.663198][ T5989] elan 0003:04F3:0755.000C: probe with driver elan failed with error -22 [ 744.829277][ T5989] usb 5-1: USB disconnect, device number 46 [ 745.103255][T29071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11041'. [ 745.182245][ T2961] dvmrp0 (unregistering): left allmulticast mode [ 745.664190][ T2961] bond1 (unregistering): Released all slaves [ 745.693503][ T2961] bond2 (unregistering): Released all slaves [ 745.717942][ T2961] bond3 (unregistering): Released all slaves [ 745.753489][ T2961] bond4 (unregistering): Released all slaves [ 745.785645][ T2961] bond0 (unregistering): Released all slaves [ 745.825586][ T2961] bond5 (unregistering): Released all slaves [ 745.855034][T29002] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (3) [ 745.982615][ T2961] : left promiscuous mode [ 746.119536][ T2961] : left promiscuous mode [ 746.271699][ T2961] : left promiscuous mode [ 746.423090][T29103] xt_l2tp: missing protocol rule (udp|l2tpip) [ 746.666689][T22104] Bluetooth: hci0: command tx timeout [ 746.840342][T29008] chnl_net:caif_netlink_parms(): no params data found [ 746.924900][T29119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11060'. [ 747.246901][T29130] netlink: 'syz.4.11063': attribute type 16 has an invalid length. [ 747.269966][T29130] netlink: 'syz.4.11063': attribute type 3 has an invalid length. [ 747.296645][T29130] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.11063'. [ 747.491413][T29008] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.501576][T29008] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.518691][T29008] bridge_slave_0: entered allmulticast mode [ 747.539619][T29008] bridge_slave_0: entered promiscuous mode [ 747.632503][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.645444][T29008] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.653404][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.663246][T29008] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.681467][T29008] bridge_slave_1: entered allmulticast mode [ 747.698911][T29008] bridge_slave_1: entered promiscuous mode [ 747.886627][T23724] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 747.889006][T29008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.919768][T29008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.018646][T29008] team0: Port device team_slave_0 added [ 748.046794][T23724] usb 5-1: Using ep0 maxpacket: 8 [ 748.053984][T23724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.086015][T23724] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 748.125466][T29008] team0: Port device team_slave_1 added [ 748.136594][T23724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.193249][T23724] usb 5-1: config 0 descriptor?? [ 748.482830][T29008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.514099][T29008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.615262][T29008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.679870][T23724] belkin 0003:050D:3201.000D: unknown main item tag 0x0 [ 748.742871][T23724] belkin 0003:050D:3201.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.4-1/input0 [ 748.755080][T22104] Bluetooth: hci0: command tx timeout [ 748.790303][T29008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.798788][T29008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.826766][T29008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.955179][T23724] usb 5-1: USB disconnect, device number 47 [ 749.043237][T29171] fido_id[29171]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 749.308233][T29008] hsr_slave_0: entered promiscuous mode [ 749.325620][T29008] hsr_slave_1: entered promiscuous mode [ 749.382361][ T2961] hsr_slave_0: left promiscuous mode [ 749.395459][ T2961] hsr_slave_1: left promiscuous mode [ 749.448489][ T2961] veth1_macvtap: left allmulticast mode [ 749.460960][ T2961] veth1_macvtap: left promiscuous mode [ 749.471505][ T2961] veth0_macvtap: left promiscuous mode [ 749.479182][ T2961] veth1_vlan: left promiscuous mode [ 749.484713][ T2961] veth0_vlan: left promiscuous mode [ 750.835456][T22104] Bluetooth: hci0: command tx timeout [ 751.004345][T29198] tipc: Enabling of bearer rejected, failed to enable media [ 752.476627][T25199] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 752.668422][T25199] usb 3-1: Using ep0 maxpacket: 8 [ 752.692122][T25199] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.713012][T25199] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.745187][T25199] usb 3-1: config 0 interface 0 has no altsetting 0 [ 752.765776][T25199] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 752.803783][T25199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.833954][T25199] usb 3-1: config 0 descriptor?? [ 753.030667][T29008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 753.086743][T29008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 753.112863][T29008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 753.144033][T29008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 753.183480][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 753.183499][ T30] audit: type=1326 audit(1757450105.484:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29280 comm="syz.4.11118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179898ebe9 code=0x7ffc0000 [ 753.284838][T25199] smartjoyplus 0003:0B43:0003.000E: ignoring exceeding usage max [ 753.297256][ T30] audit: type=1326 audit(1757450105.544:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29280 comm="syz.4.11118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179898ebe9 code=0x7ffc0000 [ 753.305099][T25199] smartjoyplus 0003:0B43:0003.000E: unbalanced collection at end of report description [ 753.345090][T25199] smartjoyplus 0003:0B43:0003.000E: parse failed [ 753.361480][T25199] smartjoyplus 0003:0B43:0003.000E: probe with driver smartjoyplus failed with error -22 [ 753.456609][ T5989] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 753.489328][T25199] usb 3-1: USB disconnect, device number 30 [ 753.521681][T29008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.574488][T29008] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.613815][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.621125][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.628117][ T5989] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.656444][ T5989] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.662448][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.674548][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.676745][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.701688][ T5989] usb 4-1: Product: syz [ 753.705919][ T5989] usb 4-1: Manufacturer: syz [ 753.711576][ T5989] usb 4-1: SerialNumber: syz [ 753.910266][T29008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.995433][T29008] veth0_vlan: entered promiscuous mode [ 754.020739][T29008] veth1_vlan: entered promiscuous mode [ 754.046983][T25205] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 754.127207][T29008] veth0_macvtap: entered promiscuous mode [ 754.144117][ T5989] cdc_ncm 4-1:1.0: bind() failure [ 754.159992][T29008] veth1_macvtap: entered promiscuous mode [ 754.199330][ T5989] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 754.218294][T25205] usb 5-1: Using ep0 maxpacket: 16 [ 754.237690][T25205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.238211][T29008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.258644][ T5989] usb 4-1: USB disconnect, device number 45 [ 754.279774][T25205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.301248][T29008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.313078][T25205] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 754.346733][T25205] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 754.369359][ T3028] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.376354][T25205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.395988][ T3028] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.408837][T25205] usb 5-1: config 0 descriptor?? [ 754.440869][ T3028] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.475238][ T3028] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.661938][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.684712][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.767856][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.786044][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.869935][T25205] wacom 0003:056A:0317.000F: unbalanced delimiter at end of report description [ 754.898009][T25205] wacom 0003:056A:0317.000F: parse failed [ 754.914157][T25205] wacom 0003:056A:0317.000F: probe with driver wacom failed with error -22 [ 755.088265][T25205] usb 5-1: USB disconnect, device number 48 [ 755.921604][T29368] netlink: 'syz.1.11142': attribute type 3 has an invalid length. [ 755.956410][T29368] netlink: 666 bytes leftover after parsing attributes in process `syz.1.11142'. [ 756.107352][ T5989] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 756.272680][ T5989] usb 3-1: Using ep0 maxpacket: 32 [ 756.293493][ T5989] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 756.328368][ T5989] usb 3-1: config 0 has no interface number 0 [ 756.343862][ T5989] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 756.362147][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.388717][ T5989] usb 3-1: Product: syz [ 756.403178][ T5989] usb 3-1: Manufacturer: syz [ 756.426632][ T5989] usb 3-1: SerialNumber: syz [ 756.452319][ T5989] usb 3-1: config 0 descriptor?? [ 756.475134][ T5989] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 756.491481][ T5989] usb 3-1: selecting invalid altsetting 1 [ 756.499244][ T5989] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 756.521991][ T5989] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 756.541799][ T5989] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 756.552945][ T5989] usb 3-1: media controller created [ 756.556584][T25199] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 756.629387][ T5989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 756.734496][ T5989] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 756.750106][T25199] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 756.767256][ T5989] zl10353_read_register: readreg error (reg=127, ret==-71) [ 756.776569][T25199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.802038][ T5989] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 756.817395][T25199] usb 5-1: config 0 descriptor?? [ 757.005622][ T5989] usb 3-1: USB disconnect, device number 31 [ 757.073269][T25199] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 757.131574][T29407] syz.1.11158 (29407): drop_caches: 2 [ 757.289171][T25199] [drm:udl_init] *ERROR* Selecting channel failed [ 757.357156][T29414] ALSA: seq fatal error: cannot create timer (-19) [ 757.373625][T25199] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 757.401894][T25199] [drm] Initialized udl on minor 2 [ 757.433493][T25199] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 757.480780][T25199] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 757.489413][T25209] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 757.515098][T25209] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 757.537031][T25199] usb 5-1: USB disconnect, device number 49 [ 757.554407][T25209] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 757.803556][T29433] netdevsim netdevsim1: Firmware load for '/../file0' refused, path contains '..' component [ 758.050446][T29441] tipc: Started in network mode [ 758.055405][T29441] tipc: Node identity ac141427, cluster identity 4711 [ 758.100526][T29441] tipc: Enabled bearer , priority 10 [ 758.863588][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11185'. [ 759.090165][T29478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11187'. [ 759.230348][T25175] tipc: Node number set to 2886997031 [ 759.435394][T29499] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 759.486827][T29502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11195'. [ 759.529860][T29499] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 759.545115][T29502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11195'. [ 759.586219][T29502] netlink: 'syz.1.11195': attribute type 19 has an invalid length. [ 759.597210][T25209] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 759.778684][T25209] usb 4-1: config 0 has an invalid interface number: 45 but max is 0 [ 759.829266][T25209] usb 4-1: config 0 has no interface number 0 [ 759.835472][T25209] usb 4-1: config 0 interface 45 altsetting 175 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 759.861119][ T30] audit: type=1326 audit(1757450112.164:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29516 comm="syz.2.11203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 759.899813][T25209] usb 4-1: config 0 interface 45 altsetting 175 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.925021][ T30] audit: type=1326 audit(1757450112.194:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29516 comm="syz.2.11203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 759.957131][T25209] usb 4-1: config 0 interface 45 has no altsetting 0 [ 759.963913][T25209] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 760.003950][ T30] audit: type=1326 audit(1757450112.194:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29516 comm="syz.2.11203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 760.019102][T25209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.073565][T25209] usb 4-1: config 0 descriptor?? [ 760.085809][ T30] audit: type=1326 audit(1757450112.194:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29516 comm="syz.2.11203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 760.128181][ T30] audit: type=1326 audit(1757450112.194:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29516 comm="syz.2.11203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 760.165658][ T30] audit: type=1326 audit(1757450112.194:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29516 comm="syz.2.11203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 760.208490][ T30] audit: type=1326 audit(1757450112.194:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29516 comm="syz.2.11203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 760.243827][ T30] audit: type=1326 audit(1757450112.194:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29516 comm="syz.2.11203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 760.281636][ T30] audit: type=1800 audit(1757450112.264:5886): pid=29520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11202" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 760.526433][T25209] uclogic 0003:5543:3031.0010: interface is invalid, ignoring [ 760.793102][T25205] usb 4-1: USB disconnect, device number 46 [ 761.636985][T25209] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 761.822591][T25209] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 761.836765][T25209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.040831][T25209] usb 3-1: config 0 descriptor?? [ 762.067661][T25209] cp210x 3-1:0.0: cp210x converter detected [ 762.436992][T25205] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 762.488563][T25209] usb 3-1: cp210x converter now attached to ttyUSB0 [ 762.611374][T25205] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.622503][T25205] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 762.631912][T25205] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 762.641210][T25205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.651552][T25205] usb 2-1: config 0 descriptor?? [ 762.661369][T25205] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 762.668653][T25205] dvb-usb: bulk message failed: -22 (3/0) [ 762.690953][T25209] usb 3-1: USB disconnect, device number 32 [ 762.705351][T25205] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 762.723886][T25205] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 762.732826][T25209] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 762.741569][T25205] usb 2-1: media controller created [ 762.757097][T25209] cp210x 3-1:0.0: device disconnected [ 762.766179][T25205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 762.832409][T25205] dvb-usb: bulk message failed: -22 (6/0) [ 762.845680][T25205] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 762.860254][T25205] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input99 [ 762.886024][T25205] dvb-usb: schedule remote query interval to 150 msecs. [ 762.900618][T25205] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 762.929374][T25205] usb 2-1: USB disconnect, device number 32 [ 762.972561][T25205] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 763.357105][ T5982] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 763.506590][ T5982] usb 4-1: Using ep0 maxpacket: 8 [ 763.523178][ T5982] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 763.545653][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.556015][ T5982] usb 4-1: Product: syz [ 763.560442][ T5982] usb 4-1: Manufacturer: syz [ 763.566139][ T5982] usb 4-1: SerialNumber: syz [ 763.579289][ T5982] usb 4-1: config 0 descriptor?? [ 763.591911][ T5982] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 764.037971][T29666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11264'. [ 764.047663][T29666] netlink: 'syz.4.11264': attribute type 6 has an invalid length. [ 764.063253][T29666] netlink: 'syz.4.11264': attribute type 5 has an invalid length. [ 764.072786][T29666] netlink: 'syz.4.11264': attribute type 4 has an invalid length. [ 764.098297][T29668] pimreg: entered allmulticast mode [ 764.131497][T29668] pimreg: left allmulticast mode [ 764.212273][ T5982] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 764.253760][ T5982] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 764.302353][ T5982] usb 4-1: USB disconnect, device number 47 [ 764.337627][T29674] vlan0: entered promiscuous mode [ 764.342732][T29674] bridge0: entered promiscuous mode [ 765.139247][T25205] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 765.319117][T25205] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 765.335957][T25205] usb 3-1: config 0 has no interface number 0 [ 765.348600][T25205] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 765.365489][T25205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.374181][T25205] usb 3-1: Product: syz [ 765.382327][T25205] usb 3-1: Manufacturer: syz [ 765.390458][T25205] usb 3-1: SerialNumber: syz [ 765.407431][T25205] usb 3-1: config 0 descriptor?? [ 765.621875][T25205] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 765.635799][T25205] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 765.652887][T25205] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 765.671253][T25205] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 765.694213][T25205] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 765.759176][T29723] loop9: detected capacity change from 0 to 7 [ 765.781287][T29723] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.790331][T29723] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.806065][T29723] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.816109][T29723] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.833351][T29723] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.844649][T29723] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.854199][T29723] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.862655][T29723] ldm_validate_partition_table(): Disk read failed. [ 765.869845][T29723] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.878640][T29723] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.887479][T29723] Buffer I/O error on dev loop9, logical block 0, async page read [ 765.895781][T29723] Dev loop9: unable to read RDB block 0 [ 765.902660][T29723] loop9: unable to read partition table [ 765.909079][T29723] loop9: partition table beyond EOD, truncated [ 765.915387][T29723] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 765.915387][T29723] ) failed (rc=-5) [ 766.031442][T25205] usb 3-1: USB disconnect, device number 33 [ 766.058519][T25205] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 766.078241][T25205] keyspan 3-1:0.133: device disconnected [ 766.679069][T29755] netlink: 'syz.1.11307': attribute type 2 has an invalid length. [ 766.732542][T29758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11308'. [ 767.275481][T29788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11318'. [ 767.366841][T25175] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 767.549190][T25175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 767.582600][T25175] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 767.592218][T25175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.603669][T25175] usb 4-1: config 0 descriptor?? [ 767.817725][ T5989] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 768.010789][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.036432][T25175] logitech 0003:046D:C295.0011: ignoring exceeding usage max [ 768.046241][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.066142][T25175] logitech 0003:046D:C295.0011: ignoring exceeding usage max [ 768.074996][ T5989] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 768.085231][T25175] logitech 0003:046D:C295.0011: usage index exceeded [ 768.094851][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.113601][T25175] logitech 0003:046D:C295.0011: item 0 0 2 2 parsing failed [ 768.130417][ T5989] usb 2-1: config 0 descriptor?? [ 768.138704][T25175] logitech 0003:046D:C295.0011: parse failed [ 768.167186][T25175] logitech 0003:046D:C295.0011: probe with driver logitech failed with error -22 [ 768.241900][T25175] usb 4-1: USB disconnect, device number 48 [ 768.614200][ T5989] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 768.622300][ T5989] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 768.631463][ T5989] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 768.639488][ T5989] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 768.647863][ T5989] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 768.662025][ T43] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 768.692249][ T5989] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 768.834779][T25175] usb 2-1: USB disconnect, device number 33 [ 768.861356][ T43] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 768.875908][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 768.890184][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 768.905574][T29846] fido_id[29846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 768.938368][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 768.953023][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 768.963394][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 768.999772][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 769.034841][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 769.049779][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 769.082685][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 769.094720][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 769.117468][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 769.168619][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 769.179230][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 769.189863][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 769.231434][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 769.264604][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 769.287932][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 769.301153][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 769.347867][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 769.363115][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 769.390944][T29864] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11354'. [ 769.410791][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 769.428873][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 769.450374][T29864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11354'. [ 769.460935][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 769.472190][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 769.496736][T29864] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11354'. [ 769.505888][T29864] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11354'. [ 769.527771][T29870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11357'. [ 769.531341][ T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 769.553238][ T43] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 769.556112][T29870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11357'. [ 769.561789][ T43] usb 5-1: Product: syz [ 769.576024][ T43] usb 5-1: Manufacturer: syz [ 769.604499][ T43] usb 5-1: SerialNumber: syz [ 769.623186][ T43] usb 5-1: config 0 descriptor?? [ 769.670538][ T43] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 770.039550][ T5989] usb 5-1: USB disconnect, device number 50 [ 770.049643][ T5989] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 770.391753][T29907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11375'. [ 770.414234][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11375'. [ 770.649079][T29907] Zero length message leads to an empty skb [ 770.813745][T29917] geneve2: entered promiscuous mode [ 771.314827][T29932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 771.456986][T25205] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 771.475279][T29938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11390'. [ 771.489523][T29938] tipc: Started in network mode [ 771.494534][T29938] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 771.509606][T29938] tipc: Enabling of bearer rejected, failed to enable media [ 771.626746][T25205] usb 3-1: Using ep0 maxpacket: 32 [ 771.628699][T25205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.650711][T25205] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 771.650745][T25205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.653806][T25205] usb 3-1: config 0 descriptor?? [ 771.889525][T29946] netlink: 39 bytes leftover after parsing attributes in process `syz.3.11393'. [ 771.984118][T29950] [U]  [ 772.103531][T25205] magicmouse 0003:05AC:0265.0013: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 772.306152][ T5989] usb 3-1: USB disconnect, device number 34 [ 772.387079][ T43] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 772.549901][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 772.571238][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 772.598203][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.616216][ T43] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 772.627721][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.657574][ T43] usb 4-1: config 0 descriptor?? [ 773.082510][ T43] kye 0003:0458:500F.0014: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 773.117947][ T43] kye 0003:0458:500F.0014: hidraw0: USB HID v0.09 Device [HID 0458:500f] on usb-dummy_hcd.3-1/input0 [ 773.149227][ T43] kye 0003:0458:500F.0014: tablet-enabling feature report not found [ 773.157496][T29987] macsec1: entered promiscuous mode [ 773.157522][T29987] bond0: entered promiscuous mode [ 773.158089][T29987] bond0: (slave macsec1): no link monitoring support [ 773.197000][ T43] kye 0003:0458:500F.0014: tablet enabling failed [ 773.220836][T29987] bond0: left promiscuous mode [ 773.301590][ T43] usb 4-1: USB disconnect, device number 49 [ 773.380726][T29992] fido_id[29992]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 773.415886][T30000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.449794][T30000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.488593][T30000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.510801][T30000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.711249][ T30] audit: type=1326 audit(1757450126.014:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30011 comm="syz.4.11423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f179898ebe9 code=0x0 [ 774.291634][T30041] trusted_key: encrypted_key: key user:syz not found [ 775.183042][T30078] __nla_validate_parse: 1 callbacks suppressed [ 775.183063][T30078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11454'. [ 775.992353][ T30] audit: type=1326 audit(1757450128.294:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30104 comm="syz.2.11466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 776.035559][ T30] audit: type=1326 audit(1757450128.294:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30104 comm="syz.2.11466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 776.066818][ T30] audit: type=1326 audit(1757450128.374:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30104 comm="syz.2.11466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f426738d457 code=0x7ffc0000 [ 776.099421][T30107] support for cryptoloop has been removed. Use dm-crypt instead. [ 776.112263][ T30] audit: type=1326 audit(1757450128.374:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30104 comm="syz.2.11466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 776.171578][ T30] audit: type=1326 audit(1757450128.374:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30104 comm="syz.2.11466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 776.212167][ T30] audit: type=1326 audit(1757450128.374:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30104 comm="syz.2.11466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 776.246227][ T30] audit: type=1326 audit(1757450128.374:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30104 comm="syz.2.11466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 776.293668][ T30] audit: type=1326 audit(1757450128.374:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30104 comm="syz.2.11466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426738ebe9 code=0x7ffc0000 [ 777.150144][T30149] tipc: Started in network mode [ 777.171288][T30149] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 777.223274][T30149] tipc: Enabled bearer , priority 17 [ 777.308349][ T3548] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 777.329696][ T3548] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 777.337913][ T43] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 777.406789][ T5989] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 777.426878][ T5982] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 777.600842][T30175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11499'. [ 777.616635][T25209] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 777.617572][ T5982] usb 3-1: Using ep0 maxpacket: 8 [ 777.637953][ T5982] usb 3-1: unable to get BOS descriptor or descriptor too short [ 777.647733][ T5982] usb 3-1: config 4 interface 0 has no altsetting 0 [ 777.658620][ T5982] usb 3-1: string descriptor 0 read error: -22 [ 777.664965][ T5982] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 777.679197][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.703651][ T5982] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 777.716945][ T5989] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 777.758850][ T5982] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 777.770209][T25209] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.770249][T25209] usb 2-1: config 0 has no interface number 0 [ 777.770295][T25209] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 777.788277][ T5982] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 777.813521][ T5982] usb 3-1: media controller created [ 777.819534][ T43] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 777.832077][T25209] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 777.856674][T25209] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 777.859613][ T5982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.876658][T25209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.907273][T25209] usb 2-1: config 0 descriptor?? [ 777.913770][T30163] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 777.944883][ T5982] zl10353_read_register: readreg error (reg=127, ret==0) [ 777.961189][T25209] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 777.976861][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 777.993257][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 778.027765][ T43] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 778.043046][ T43] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 778.067012][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 778.067046][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.067068][ T43] usb 4-1: Product: syz [ 778.067083][ T43] usb 4-1: Manufacturer: syz [ 778.067099][ T43] usb 4-1: SerialNumber: syz [ 778.126878][ T5982] usb 3-1: USB disconnect, device number 35 [ 778.197027][T25209] usb 2-1: USB disconnect, device number 34 [ 778.291595][ T43] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 778.302922][ T43] cdc_ncm 4-1:1.0: bind() failure [ 778.323031][ T43] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 778.331712][ T43] cdc_ncm 4-1:1.1: bind() failure [ 778.338679][T25199] tipc: Node number set to 8432298 [ 778.343282][ T43] usb 4-1: USB disconnect, device number 50 [ 779.210710][T30235] vti1: entered promiscuous mode [ 779.223951][T30235] vti1: entered allmulticast mode [ 779.659047][T25205] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 779.821781][T25205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.842277][T25205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.874736][T25205] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 779.891337][T25205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.905027][T25205] usb 3-1: config 0 descriptor?? [ 780.069412][T30279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11547'. [ 780.349441][T25205] hid-led 0003:0FC5:B080.0015: item fetching failed at offset 1/3 [ 780.358724][T25205] hid-led 0003:0FC5:B080.0015: probe with driver hid-led failed with error -22 [ 780.531090][T25205] usb 3-1: USB disconnect, device number 36 [ 780.899049][T30317] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11566'. [ 781.016956][T25209] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 781.202039][T25209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.244893][T25209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.277099][T25209] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 781.306946][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 781.313098][ T30] audit: type=1400 audit(1757450133.604:5896): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="#" pid=30334 comm="syz.4.11575" [ 781.336530][T25209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.382248][T25209] usb 2-1: config 0 descriptor?? [ 781.821553][T25209] cm6533_jd 0003:0D8C:0022.0016: invalid report_count 1192232228 [ 781.835665][T25209] cm6533_jd 0003:0D8C:0022.0016: item 0 4 1 9 parsing failed [ 781.845957][T25209] cm6533_jd 0003:0D8C:0022.0016: parse failed [ 781.877099][T25209] cm6533_jd 0003:0D8C:0022.0016: probe with driver cm6533_jd failed with error -22 [ 781.957422][T25199] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 782.046933][T25175] usb 2-1: USB disconnect, device number 35 [ 782.130528][T25199] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 782.151732][T25199] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 782.162899][T25199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.184927][T25199] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 782.548030][T30391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11600'. [ 782.666915][T25175] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 782.687621][T30395] netlink: 'syz.1.11602': attribute type 27 has an invalid length. [ 782.839757][T25175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.867794][T25175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.896629][T25175] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 782.913884][T25175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.944922][T25175] usb 3-1: config 0 descriptor?? [ 783.229504][T25199] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 783.246444][T25199] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 783.263002][T25199] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 783.379259][T25175] cypress 0003:04B4:DE61.0017: unknown main item tag 0x0 [ 783.395828][T25175] cypress 0003:04B4:DE61.0017: unknown main item tag 0x0 [ 783.403947][T30423] netlink: 'syz.3.11615': attribute type 3 has an invalid length. [ 783.412985][T25175] cypress 0003:04B4:DE61.0017: unknown main item tag 0x0 [ 783.424624][T30423] netlink: 152988 bytes leftover after parsing attributes in process `syz.3.11615'. [ 783.436906][T25175] cypress 0003:04B4:DE61.0017: unknown main item tag 0x0 [ 783.444986][T25175] cypress 0003:04B4:DE61.0017: unknown main item tag 0x0 [ 783.456720][T25175] cypress 0003:04B4:DE61.0017: unknown main item tag 0x0 [ 783.466332][T25175] cypress 0003:04B4:DE61.0017: unknown main item tag 0x0 [ 783.496047][T25175] cypress 0003:04B4:DE61.0017: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.2-1/input0 [ 783.499349][T25199] usb 5-1: USB disconnect, device number 51 [ 783.528780][T30427] syz_tun: refused to change device tx_queue_len [ 783.575842][T25175] usb 3-1: USB disconnect, device number 37 [ 783.704539][T30428] fido_id[30428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 783.804155][T30438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11621'. [ 783.916907][T25205] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 784.077252][T25205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.096793][T25205] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.144699][T25205] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 784.156921][T25205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.187991][T25205] usb 4-1: config 0 descriptor?? [ 784.366654][T25209] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 784.539888][T25209] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 784.560623][T25209] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 784.572010][T25209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.582237][T25209] usb 5-1: Product: syz [ 784.586830][T25209] usb 5-1: Manufacturer: syz [ 784.592244][T25209] usb 5-1: SerialNumber: syz [ 784.617610][T25205] megaworld 0003:07B5:0312.0018: ignoring exceeding usage max [ 784.631402][T25209] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 784.647994][T25205] megaworld 0003:07B5:0312.0018: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.3-1/input0 [ 784.663679][T25205] megaworld 0003:07B5:0312.0018: no inputs found [ 784.857578][ T5989] usb 4-1: USB disconnect, device number 51 [ 785.280743][T25209] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 785.307542][T25209] usb 5-1: USB disconnect, device number 52 [ 785.957193][T25209] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 786.138777][T25209] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 786.138845][T25209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.140213][T25209] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 786.140243][T25209] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 786.140264][T25209] usb 4-1: Manufacturer: syz [ 786.143496][T25209] usb 4-1: config 0 descriptor?? [ 786.316693][T25205] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 786.336707][T25209] rc_core: IR keymap rc-hauppauge not found [ 786.336731][T25209] Registered IR keymap rc-empty [ 786.338272][T25209] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 786.340825][T25209] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input100 [ 786.489637][T25205] usb 2-1: unable to get BOS descriptor or descriptor too short [ 786.517544][T25205] usb 2-1: config 6 has an invalid interface number: 158 but max is 0 [ 786.532656][T25205] usb 2-1: config 6 has no interface number 0 [ 786.556606][T25205] usb 2-1: config 6 interface 158 has no altsetting 0 [ 786.577140][T25205] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 786.606794][T25205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.615992][ C0] igorplugusb 4-1:0.0: receive overflow invalid: 154 [ 786.638902][T25205] usb 2-1: Product: syz [ 786.643163][T25205] usb 2-1: Manufacturer: syz [ 786.657848][T25205] usb 2-1: SerialNumber: syz [ 786.825636][T25209] usb 4-1: USB disconnect, device number 52 [ 787.516818][ T5989] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 787.687028][ T5989] usb 5-1: Using ep0 maxpacket: 16 [ 787.698554][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.709460][ T5989] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 787.720025][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.738037][ T5989] usb 5-1: config 0 descriptor?? [ 787.896899][T25209] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 788.046696][T25209] usb 4-1: Using ep0 maxpacket: 16 [ 788.055863][T25209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.066131][T25209] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 788.075503][T25209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.093115][T25209] usb 4-1: config 0 descriptor?? [ 788.160631][ T5989] semitek 0003:1EA7:0907.0019: item fetching failed at offset 0/2 [ 788.169842][ T5989] semitek 0003:1EA7:0907.0019: probe with driver semitek failed with error -22 [ 788.360064][ T5989] usb 5-1: USB disconnect, device number 53 [ 788.512810][T25209] sony 0003:054C:024B.001A: bogus close delimiter [ 788.519994][T25209] sony 0003:054C:024B.001A: item 0 0 2 10 parsing failed [ 788.528828][T25209] sony 0003:054C:024B.001A: parse failed [ 788.534774][T25209] sony 0003:054C:024B.001A: probe with driver sony failed with error -22 [ 788.729469][T25175] usb 4-1: USB disconnect, device number 53 [ 788.809735][T30569] netem: change failed [ 789.110776][T25205] rtsx_usb 2-1:6.158: probe with driver rtsx_usb failed with error -71 [ 789.142640][T25205] usb 2-1: USB disconnect, device number 36 [ 789.165497][T30580] netlink: 'syz.4.11685': attribute type 1 has an invalid length. [ 789.226790][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 789.477129][T30593] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 789.483732][T30593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 789.519723][T30593] vhci_hcd vhci_hcd.0: Device attached [ 789.610855][T30603] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.11693'. [ 789.622196][T30603] netlink: zone id is out of range [ 789.634744][T30603] netlink: get zone limit has 8 unknown bytes [ 789.776850][T25205] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 789.786894][T25175] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 789.787324][T25199] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 789.966636][T25205] usb 4-1: Using ep0 maxpacket: 16 [ 789.983651][T25199] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.999938][T25205] usb 4-1: config 0 has no interfaces? [ 790.015770][T25205] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 790.036185][T25199] usb 5-1: config 0 interface 0 has no altsetting 0 [ 790.044633][T25205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.074073][T25199] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 790.095046][T25199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.107113][T25205] usb 4-1: config 0 descriptor?? [ 790.140380][T25199] usb 5-1: config 0 descriptor?? [ 790.383823][T30594] usbip_core: unknown command [ 790.384749][ T5989] usb 4-1: USB disconnect, device number 54 [ 790.393439][T30594] vhci_hcd: unknown pdu 0 [ 790.420258][T30594] usbip_core: unknown command [ 790.427202][ T3028] vhci_hcd: stop threads [ 790.431507][ T3028] vhci_hcd: release socket [ 790.452247][ T3028] vhci_hcd: disconnect device [ 790.590466][T25199] sunplus 0003:04FC:05D8.001B: unknown main item tag 0x0 [ 790.605444][T25199] sunplus 0003:04FC:05D8.001B: unknown main item tag 0x0 [ 790.629873][T25199] sunplus 0003:04FC:05D8.001B: unknown main item tag 0x0 [ 790.642839][T25199] sunplus 0003:04FC:05D8.001B: unknown main item tag 0x0 [ 790.652755][T25199] sunplus 0003:04FC:05D8.001B: unknown main item tag 0x0 [ 790.677696][T25199] sunplus 0003:04FC:05D8.001B: unknown main item tag 0x0 [ 790.689351][ T5982] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 790.697520][T25199] sunplus 0003:04FC:05D8.001B: hidraw0: USB HID v0.05 Device [HID 04fc:05d8] on usb-dummy_hcd.4-1/input0 [ 790.849919][T25199] usb 5-1: USB disconnect, device number 54 [ 790.866045][T30646] fido_id[30646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 790.897103][ T5982] usb 3-1: Using ep0 maxpacket: 16 [ 790.916601][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.956810][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.992677][ T5982] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 791.038601][ T5982] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 791.063973][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.088100][ T5982] usb 3-1: config 0 descriptor?? [ 791.422277][T30671] No buffer was provided with the request [ 791.533805][ T5982] sony 0003:054C:0268.001C: unknown main item tag 0x0 [ 791.550322][ T5982] sony 0003:054C:0268.001C: unknown main item tag 0x0 [ 791.590168][ T5982] sony 0003:054C:0268.001C: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 791.633672][ T30] audit: type=1800 audit(1757450143.934:5897): pid=30679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11729" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 791.642135][ T5982] sony 0003:054C:0268.001C: failed to claim input [ 791.771517][T30680] ================================================================== [ 791.779935][T30680] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 791.780486][ T5982] usb 3-1: USB disconnect, device number 38 [ 791.788212][T30680] Read of size 2 at addr ffff888021e84c40 by task fido_id/30680 [ 791.788235][T30680] [ 791.788246][T30680] CPU: 0 UID: 0 PID: 30680 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 791.788266][T30680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 791.788277][T30680] Call Trace: [ 791.788287][T30680] [ 791.788295][T30680] dump_stack_lvl+0x189/0x250 [ 791.788318][T30680] ? __virt_addr_valid+0x1c8/0x5c0 [ 791.788340][T30680] ? rcu_is_watching+0x15/0xb0 [ 791.788357][T30680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.788377][T30680] ? rcu_is_watching+0x15/0xb0 [ 791.788393][T30680] ? lock_release+0x4b/0x3e0 [ 791.788418][T30680] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 791.788446][T30680] ? __virt_addr_valid+0x1c8/0x5c0 [ 791.788467][T30680] ? __virt_addr_valid+0x4a5/0x5c0 [ 791.788490][T30680] print_report+0xca/0x240 [ 791.788508][T30680] ? report_descriptor_read+0xb5/0x100 [ 791.788529][T30680] kasan_report+0x118/0x150 [ 791.788556][T30680] ? report_descriptor_read+0xb5/0x100 [ 791.788581][T30680] kasan_check_range+0x2b0/0x2c0 [ 791.788606][T30680] ? report_descriptor_read+0xb5/0x100 [ 791.788628][T30680] __asan_memcpy+0x29/0x70 [ 791.788648][T30680] report_descriptor_read+0xb5/0x100 [ 791.788671][T30680] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 791.788689][T30680] kernfs_fop_read_iter+0x3fb/0x640 [ 791.788713][T30680] vfs_read+0x557/0xa30 [ 791.788736][T30680] ? __pfx_vfs_read+0x10/0x10 [ 791.788757][T30680] ? do_sys_openat2+0x154/0x1c0 [ 791.788774][T30680] ? kmem_cache_free+0x18f/0x400 [ 791.788800][T30680] ksys_read+0x145/0x250 [ 791.788821][T30680] ? __pfx_ksys_read+0x10/0x10 [ 791.788839][T30680] ? rcu_is_watching+0x15/0xb0 [ 791.788856][T30680] ? do_syscall_64+0xbe/0x3b0 [ 791.788875][T30680] do_syscall_64+0xfa/0x3b0 [ 791.788891][T30680] ? lockdep_hardirqs_on+0x9c/0x150 [ 791.788907][T30680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.788923][T30680] ? clear_bhb_loop+0x60/0xb0 [ 791.788941][T30680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.788957][T30680] RIP: 0033:0x7f4acc4a7407 [ 791.788974][T30680] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 791.788989][T30680] RSP: 002b:00007ffc3143fbc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 791.789008][T30680] RAX: ffffffffffffffda RBX: 00007f4accb70880 RCX: 00007f4acc4a7407 [ 791.789021][T30680] RDX: 0000000000001000 RSI: 00007ffc3143fc10 RDI: 0000000000000004 [ 791.789033][T30680] RBP: 000055b3c8606730 R08: 0000000000000000 R09: 0000000000000000 [ 791.789044][T30680] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b3c8605930 [ 791.789055][T30680] R13: 00007ffc3143fc10 R14: 0000000000000004 R15: 000055b38b7644d8 [ 791.789073][T30680] [ 791.789080][T30680] [ 792.067069][T30680] Allocated by task 5982: [ 792.071393][T30680] kasan_save_track+0x3e/0x80 [ 792.076074][T30680] __kasan_kmalloc+0x93/0xb0 [ 792.080661][T30680] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 792.087162][T30680] kmemdup_noprof+0x2b/0x70 [ 792.091670][T30680] hid_open_report+0x208/0xee0 [ 792.096429][T30680] sony_probe+0x19c/0x5f0 [ 792.100768][T30680] hid_device_probe+0x3a0/0x710 [ 792.105700][T30680] really_probe+0x26d/0x9e0 [ 792.110204][T30680] __driver_probe_device+0x18c/0x2f0 [ 792.115488][T30680] driver_probe_device+0x4f/0x430 [ 792.120554][T30680] __device_attach_driver+0x2ce/0x530 [ 792.125994][T30680] bus_for_each_drv+0x24e/0x2e0 [ 792.130905][T30680] __device_attach+0x2b8/0x400 [ 792.135683][T30680] bus_probe_device+0x185/0x260 [ 792.140542][T30680] device_add+0x7b6/0xb50 [ 792.144872][T30680] hid_add_device+0x398/0x540 [ 792.149563][T30680] usbhid_probe+0xe13/0x12a0 [ 792.154167][T30680] usb_probe_interface+0x665/0xc30 [ 792.159286][T30680] really_probe+0x26d/0x9e0 [ 792.163790][T30680] __driver_probe_device+0x18c/0x2f0 [ 792.169076][T30680] driver_probe_device+0x4f/0x430 [ 792.174100][T30680] __device_attach_driver+0x2ce/0x530 [ 792.179558][T30680] bus_for_each_drv+0x24e/0x2e0 [ 792.184406][T30680] __device_attach+0x2b8/0x400 [ 792.189170][T30680] bus_probe_device+0x185/0x260 [ 792.194020][T30680] device_add+0x7b6/0xb50 [ 792.198362][T30680] usb_set_configuration+0x1a87/0x20e0 [ 792.203837][T30680] usb_generic_driver_probe+0x8d/0x150 [ 792.209296][T30680] usb_probe_device+0x1c4/0x390 [ 792.214152][T30680] really_probe+0x26d/0x9e0 [ 792.218741][T30680] __driver_probe_device+0x18c/0x2f0 [ 792.224037][T30680] driver_probe_device+0x4f/0x430 [ 792.229062][T30680] __device_attach_driver+0x2ce/0x530 [ 792.234521][T30680] bus_for_each_drv+0x24e/0x2e0 [ 792.239407][T30680] __device_attach+0x2b8/0x400 [ 792.244177][T30680] bus_probe_device+0x185/0x260 [ 792.249026][T30680] device_add+0x7b6/0xb50 [ 792.253351][T30680] usb_new_device+0xa39/0x16f0 [ 792.258114][T30680] hub_event+0x2958/0x4a20 [ 792.262709][T30680] process_scheduled_works+0xae1/0x17b0 [ 792.268249][T30680] worker_thread+0x8a0/0xda0 [ 792.272833][T30680] kthread+0x70e/0x8a0 [ 792.276901][T30680] ret_from_fork+0x3fc/0x770 [ 792.281489][T30680] ret_from_fork_asm+0x1a/0x30 [ 792.286263][T30680] [ 792.288612][T30680] Freed by task 5982: [ 792.292584][T30680] kasan_save_track+0x3e/0x80 [ 792.297280][T30680] kasan_save_free_info+0x46/0x50 [ 792.302309][T30680] __kasan_slab_free+0x5b/0x80 [ 792.307253][T30680] kfree+0x18e/0x440 [ 792.311168][T30680] hid_close_report+0x632/0x720 [ 792.316139][T30680] hid_device_probe+0x5e9/0x710 [ 792.321026][T30680] really_probe+0x26d/0x9e0 [ 792.325629][T30680] __driver_probe_device+0x18c/0x2f0 [ 792.331088][T30680] driver_probe_device+0x4f/0x430 [ 792.336374][T30680] __device_attach_driver+0x2ce/0x530 [ 792.341746][T30680] bus_for_each_drv+0x24e/0x2e0 [ 792.346597][T30680] __device_attach+0x2b8/0x400 [ 792.351373][T30680] bus_probe_device+0x185/0x260 [ 792.356226][T30680] device_add+0x7b6/0xb50 [ 792.360579][T30680] hid_add_device+0x398/0x540 [ 792.365260][T30680] usbhid_probe+0xe13/0x12a0 [ 792.369850][T30680] usb_probe_interface+0x665/0xc30 [ 792.374964][T30680] really_probe+0x26d/0x9e0 [ 792.379465][T30680] __driver_probe_device+0x18c/0x2f0 [ 792.384751][T30680] driver_probe_device+0x4f/0x430 [ 792.389774][T30680] __device_attach_driver+0x2ce/0x530 [ 792.395145][T30680] bus_for_each_drv+0x24e/0x2e0 [ 792.399998][T30680] __device_attach+0x2b8/0x400 [ 792.404761][T30680] bus_probe_device+0x185/0x260 [ 792.409611][T30680] device_add+0x7b6/0xb50 [ 792.414008][T30680] usb_set_configuration+0x1a87/0x20e0 [ 792.419488][T30680] usb_generic_driver_probe+0x8d/0x150 [ 792.425035][T30680] usb_probe_device+0x1c4/0x390 [ 792.429911][T30680] really_probe+0x26d/0x9e0 [ 792.434508][T30680] __driver_probe_device+0x18c/0x2f0 [ 792.439880][T30680] driver_probe_device+0x4f/0x430 [ 792.444911][T30680] __device_attach_driver+0x2ce/0x530 [ 792.450290][T30680] bus_for_each_drv+0x24e/0x2e0 [ 792.455312][T30680] __device_attach+0x2b8/0x400 [ 792.460075][T30680] bus_probe_device+0x185/0x260 [ 792.464937][T30680] device_add+0x7b6/0xb50 [ 792.469300][T30680] usb_new_device+0xa39/0x16f0 [ 792.474084][T30680] hub_event+0x2958/0x4a20 [ 792.478502][T30680] process_scheduled_works+0xae1/0x17b0 [ 792.484048][T30680] worker_thread+0x8a0/0xda0 [ 792.488636][T30680] kthread+0x70e/0x8a0 [ 792.492700][T30680] ret_from_fork+0x3fc/0x770 [ 792.497290][T30680] ret_from_fork_asm+0x1a/0x30 [ 792.502055][T30680] [ 792.504375][T30680] The buggy address belongs to the object at ffff888021e84c40 [ 792.504375][T30680] which belongs to the cache kmalloc-8 of size 8 [ 792.518339][T30680] The buggy address is located 0 bytes inside of [ 792.518339][T30680] freed 8-byte region [ffff888021e84c40, ffff888021e84c48) [ 792.531790][T30680] [ 792.534123][T30680] The buggy address belongs to the physical page: [ 792.540530][T30680] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21e84 [ 792.549286][T30680] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 792.556394][T30680] page_type: f5(slab) [ 792.560377][T30680] raw: 00fff00000000000 ffff88801a441500 dead000000000100 dead000000000122 [ 792.568988][T30680] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 792.577568][T30680] page dumped because: kasan: bad access detected [ 792.584002][T30680] page_owner tracks the page as allocated [ 792.589730][T30680] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 3854551489, free_ts 0 [ 792.607275][T30680] post_alloc_hook+0x240/0x2a0 [ 792.612053][T30680] get_page_from_freelist+0x21e4/0x22c0 [ 792.617594][T30680] __alloc_frozen_pages_noprof+0x181/0x370 [ 792.623485][T30680] alloc_pages_mpol+0x232/0x4a0 [ 792.628421][T30680] allocate_slab+0x8a/0x370 [ 792.632974][T30680] ___slab_alloc+0xbeb/0x1420 [ 792.638105][T30680] __kmalloc_noprof+0x305/0x4f0 [ 792.642959][T30680] acpi_ex_get_name_string+0x564/0xc70 [ 792.648430][T30680] acpi_ds_create_operand+0x159/0x890 [ 792.653806][T30680] acpi_ds_evaluate_name_path+0x155/0x410 [ 792.659529][T30680] acpi_ds_exec_end_op+0x241/0x1120 [ 792.664729][T30680] acpi_ps_parse_loop+0xc33/0x1ab0 [ 792.669854][T30680] acpi_ps_parse_aml+0x22d/0x9b0 [ 792.674809][T30680] acpi_ps_execute_method+0x58d/0x7c0 [ 792.680192][T30680] acpi_ns_evaluate+0x5a6/0xa20 [ 792.685039][T30680] acpi_ut_evaluate_object+0x126/0x4c0 [ 792.690500][T30680] page_owner free stack trace missing [ 792.695859][T30680] [ 792.698178][T30680] Memory state around the buggy address: [ 792.703801][T30680] ffff888021e84b00: 05 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc [ 792.711867][T30680] ffff888021e84b80: 05 fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc [ 792.719925][T30680] >ffff888021e84c00: 06 fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc [ 792.727979][T30680] ^ [ 792.734128][T30680] ffff888021e84c80: 05 fc fc fc 06 fc fc fc 06 fc fc fc fa fc fc fc [ 792.742186][T30680] ffff888021e84d00: fa fc fc fc 06 fc fc fc 06 fc fc fc 00 fc fc fc [ 792.750244][T30680] ================================================================== [ 792.863434][T30680] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 792.870714][T30680] CPU: 0 UID: 0 PID: 30680 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 792.879952][T30680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.890044][T30680] Call Trace: [ 792.893365][T30680] [ 792.896320][T30680] dump_stack_lvl+0x99/0x250 [ 792.900944][T30680] ? __asan_memcpy+0x40/0x70 [ 792.905566][T30680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.910791][T30680] ? __pfx__printk+0x10/0x10 [ 792.915389][T30680] vpanic+0x281/0x750 [ 792.919370][T30680] ? preempt_schedule+0xae/0xc0 [ 792.924237][T30680] ? __pfx_vpanic+0x10/0x10 [ 792.928775][T30680] ? preempt_schedule_common+0x83/0xd0 [ 792.934269][T30680] ? preempt_schedule+0xae/0xc0 [ 792.939139][T30680] ? __pfx_preempt_schedule+0x10/0x10 [ 792.944543][T30680] panic+0xb9/0xc0 [ 792.948401][T30680] ? __pfx_panic+0x10/0x10 [ 792.952854][T30680] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 792.958778][T30680] ? is_module_address+0x17/0xf0 [ 792.963755][T30680] ? report_descriptor_read+0xb5/0x100 [ 792.969281][T30680] check_panic_on_warn+0x89/0xb0 [ 792.974249][T30680] ? report_descriptor_read+0xb5/0x100 [ 792.979714][T30680] end_report+0x78/0x160 [ 792.983975][T30680] kasan_report+0x129/0x150 [ 792.988485][T30680] ? report_descriptor_read+0xb5/0x100 [ 792.993978][T30680] kasan_check_range+0x2b0/0x2c0 [ 792.998939][T30680] ? report_descriptor_read+0xb5/0x100 [ 793.004415][T30680] __asan_memcpy+0x29/0x70 [ 793.008848][T30680] report_descriptor_read+0xb5/0x100 [ 793.014191][T30680] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 793.019688][T30680] kernfs_fop_read_iter+0x3fb/0x640 [ 793.024976][T30680] vfs_read+0x557/0xa30 [ 793.029160][T30680] ? __pfx_vfs_read+0x10/0x10 [ 793.033892][T30680] ? do_sys_openat2+0x154/0x1c0 [ 793.038739][T30680] ? kmem_cache_free+0x18f/0x400 [ 793.043680][T30680] ksys_read+0x145/0x250 [ 793.048019][T30680] ? __pfx_ksys_read+0x10/0x10 [ 793.052840][T30680] ? rcu_is_watching+0x15/0xb0 [ 793.057607][T30680] ? do_syscall_64+0xbe/0x3b0 [ 793.062304][T30680] do_syscall_64+0xfa/0x3b0 [ 793.066811][T30680] ? lockdep_hardirqs_on+0x9c/0x150 [ 793.072136][T30680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.078210][T30680] ? clear_bhb_loop+0x60/0xb0 [ 793.082905][T30680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.088801][T30680] RIP: 0033:0x7f4acc4a7407 [ 793.093231][T30680] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 793.112834][T30680] RSP: 002b:00007ffc3143fbc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 793.121249][T30680] RAX: ffffffffffffffda RBX: 00007f4accb70880 RCX: 00007f4acc4a7407 [ 793.129256][T30680] RDX: 0000000000001000 RSI: 00007ffc3143fc10 RDI: 0000000000000004 [ 793.137231][T30680] RBP: 000055b3c8606730 R08: 0000000000000000 R09: 0000000000000000 [ 793.145220][T30680] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b3c8605930 [ 793.153188][T30680] R13: 00007ffc3143fc10 R14: 0000000000000004 R15: 000055b38b7644d8 [ 793.161163][T30680] [ 793.164453][T30680] Kernel Offset: disabled [ 793.168790][T30680] Rebooting in 86400 seconds..