last executing test programs: 3.135394137s ago: executing program 2 (id=3956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000c000000ffdbdf255300000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x24044810}, 0x4000000) 2.93138513s ago: executing program 2 (id=3958): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 2.283456635s ago: executing program 4 (id=3961): socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) 1.916577203s ago: executing program 4 (id=3966): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e0776f8ee906be", "4000000000020800", "0000b3f88813da82b4cf00"}, 0x3ead, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) 1.810087605s ago: executing program 1 (id=3968): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 1.666285985s ago: executing program 4 (id=3970): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) get_robust_list(r0, 0x0, 0x0) 1.611030432s ago: executing program 1 (id=3972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x40}}, 0x0) 1.51544483s ago: executing program 1 (id=3973): r0 = syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x167}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x1}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 1.411265172s ago: executing program 0 (id=3974): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.393136032s ago: executing program 4 (id=3975): syz_open_dev$sndctrl(&(0x7f0000000280), 0x200, 0x80) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.3227692s ago: executing program 1 (id=3976): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 1.269713508s ago: executing program 2 (id=3977): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x1, 0x7, 0x10, 0x6, 0xa0, 0x1}) 1.210486191s ago: executing program 3 (id=3978): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x8000000000000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffde, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x5, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.173564261s ago: executing program 1 (id=3979): bind$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlockall() 1.143441841s ago: executing program 0 (id=3980): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xb, 0xffee}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 1.107929251s ago: executing program 3 (id=3981): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) 1.040678822s ago: executing program 2 (id=3982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x8, 0x1, 0x0, 0x0, @sint={0x1, 0x8}}]}) 923.37225ms ago: executing program 0 (id=3983): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 915.4165ms ago: executing program 3 (id=3984): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x41000, 0x0, 0x0, 0x0, 0x0, 0x0) 736.623072ms ago: executing program 0 (id=3985): setitimer(0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 735.658983ms ago: executing program 3 (id=3986): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={0x0}) 696.942427ms ago: executing program 2 (id=3987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r1, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x30000, 0x0, 0x40040}, 0x0) 586.745513ms ago: executing program 0 (id=3988): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 580.291422ms ago: executing program 2 (id=3989): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x8, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x100, 0x1}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 400.185315ms ago: executing program 0 (id=3990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000540)={0x1, 0x1, 0x7, 0x7, @vifc_lcl_ifindex, @broadcast}, 0x10) 385.934061ms ago: executing program 3 (id=3991): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 297.039115ms ago: executing program 4 (id=3992): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000793000/0x3000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004b7000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000870000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000d26000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1c891, 0x8, 0xd1}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 190.447966ms ago: executing program 3 (id=3993): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000002200)="11", 0x1, 0x4003b10, 0x0, 0x0) 65.193049ms ago: executing program 1 (id=3994): r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') preadv(r1, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) 0s ago: executing program 4 (id=3995): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x303001, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x20000004}}], 0x1, 0x20044800) kernel console output (not intermixed with test programs): P'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 180.715891][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1479'. [ 180.873507][ T9063] tipc: Cannot configure node identity twice [ 181.150075][ T9072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1487'. [ 181.426699][ T9085] tipc: Enabled bearer , priority 18 [ 183.281023][ T9146] tipc: MTU too low for tipc bearer [ 183.835706][ T9174] overlayfs: missing 'lowerdir' [ 184.072190][ T9187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.250050][ T9193] [U] ^C [ 184.287114][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 184.468359][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.560210][ T9210] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 184.624632][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.626301][ T10] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 184.640301][ T10] usb 2-1: string descriptor 0 read error: -22 [ 184.640445][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 184.640467][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.745585][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 184.745623][ T9218] openvswitch: netlink: nsh attr 12336 is out of range max 3 [ 184.894045][ T10] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 184.937823][ T9226] tipc: Disabling bearer [ 185.445137][ T9250] usb usb8: selecting invalid altsetting 56942 [ 185.598405][ T10] usb 2-1: device descriptor read/64, error -71 [ 185.868480][ T10] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 186.029902][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 186.105264][ T10] usb 2-1: device firmware changed [ 186.141915][ T10] usb 2-1: USB disconnect, device number 9 [ 186.348431][ T5873] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 186.508380][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 186.528756][ T5873] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.528784][ T5873] usb 3-1: config 0 has no interface number 0 [ 186.553637][ T5873] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 186.553665][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.553681][ T5873] usb 3-1: Product: syz [ 186.553694][ T5873] usb 3-1: Manufacturer: syz [ 186.553707][ T5873] usb 3-1: SerialNumber: syz [ 186.596146][ T5873] usb 3-1: config 0 descriptor?? [ 186.615431][ T5873] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 186.615459][ T5873] usb 3-1: selecting invalid altsetting 1 [ 186.615474][ T5873] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 186.647024][ T5873] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 186.647358][ T5873] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 186.647422][ T5873] usb 3-1: media controller created [ 186.693761][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.777529][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 186.858158][ T9309] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 186.858186][ T9309] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.920845][ T9309] vhci_hcd vhci_hcd.0: Device attached [ 187.101691][ T9318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1605'. [ 187.174425][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 187.208687][ T43] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 187.331060][ T10] usb 5-1: config 0 has no interfaces? [ 187.331096][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 187.331118][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.340055][ T10] usb 5-1: config 0 descriptor?? [ 187.554620][ T5844] usb 5-1: USB disconnect, device number 15 [ 187.556771][ T9310] usbip_core: unknown command [ 187.556784][ T9310] vhci_hcd: unknown pdu 0 [ 187.556793][ T9310] usbip_core: unknown command [ 187.608392][ T1108] vhci_hcd vhci_hcd.4: stop threads [ 187.615110][ T1108] vhci_hcd vhci_hcd.4: release socket [ 187.629438][ T1108] vhci_hcd vhci_hcd.4: disconnect device [ 187.760883][ T5873] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 187.760960][ T5873] zl10353_read_register: readreg error (reg=127, ret==-110) [ 187.778805][ T9279] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 187.851123][ T5873] usb 3-1: USB disconnect, device number 10 [ 188.246528][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1625'. [ 188.320507][ T5844] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 188.336611][ T9363] syz_tun: entered promiscuous mode [ 188.358723][ T9363] syz_tun: left promiscuous mode [ 188.468424][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 188.475275][ T5844] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 188.475303][ T5844] usb 2-1: config 0 has no interface number 0 [ 188.475355][ T5844] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.485432][ T5844] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 188.485462][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.485481][ T5844] usb 2-1: Product: syz [ 188.485495][ T5844] usb 2-1: Manufacturer: syz [ 188.485508][ T5844] usb 2-1: SerialNumber: syz [ 188.507834][ T5844] usb 2-1: config 0 descriptor?? [ 188.584454][ T5844] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 188.779482][ T102] usb 2-1: Failed to submit usb control message: -71 [ 188.779519][ T102] usb 2-1: unable to send the bmi data to the device: -71 [ 188.779533][ T102] usb 2-1: unable to get target info from device [ 188.779566][ T102] usb 2-1: could not get target info (-71) [ 188.779894][ T102] usb 2-1: could not probe fw (-71) [ 188.787321][ T9] usb 2-1: USB disconnect, device number 10 [ 188.900279][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 189.795399][ T9431] netlink: 'syz.3.1659': attribute type 10 has an invalid length. [ 189.862174][ T9434] netlink: 'syz.3.1659': attribute type 10 has an invalid length. [ 189.908825][ T9431] team0: Port device dummy0 added [ 190.017780][ T9434] team0: Port device dummy0 removed [ 190.041842][ T9434] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.539672][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'. [ 190.638181][ T9460] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 190.672808][ T9460] bond1 (unregistering): Released all slaves [ 190.733385][ T9464] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1675'. [ 191.238417][ T5806] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 191.283734][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'. [ 191.390955][ T5806] usb 5-1: Using ep0 maxpacket: 8 [ 191.396659][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.396712][ T5806] usb 5-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 191.396735][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.444812][ T5806] usb 5-1: config 0 descriptor?? [ 191.461737][ T5806] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 191.692025][ T5806] usb 5-1: USB disconnect, device number 16 [ 191.874037][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'. [ 191.920463][ T9504] bridge0: entered promiscuous mode [ 191.920733][ T9504] macvlan2: entered allmulticast mode [ 191.920748][ T9504] bridge0: entered allmulticast mode [ 191.930392][ T9504] bridge0: port 3(macvlan2) entered blocking state [ 191.930586][ T9504] bridge0: port 3(macvlan2) entered disabled state [ 191.983816][ T9504] bridge0: left allmulticast mode [ 191.983863][ T9504] bridge0: left promiscuous mode [ 192.198417][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 192.368969][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 192.370009][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 192.371144][ T10] usb 4-1: config 6 has an invalid interface number: 22 but max is 1 [ 192.371166][ T10] usb 4-1: config 6 has an invalid interface number: 100 but max is 1 [ 192.371184][ T10] usb 4-1: config 6 has no interface number 0 [ 192.371199][ T10] usb 4-1: config 6 has no interface number 1 [ 192.371271][ T10] usb 4-1: config 6 interface 22 has no altsetting 0 [ 192.371289][ T10] usb 4-1: config 6 interface 100 has no altsetting 0 [ 192.374773][ T10] usb 4-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=ec.ab [ 192.374799][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.374817][ T10] usb 4-1: Product: syz [ 192.374831][ T10] usb 4-1: Manufacturer: syz [ 192.374844][ T10] usb 4-1: SerialNumber: syz [ 192.597157][ T10] uvcvideo 4-1:6.22: Found UVC 0.00 device syz (174f:8a33) [ 192.597178][ T10] uvcvideo 4-1:6.22: No valid video chain found. [ 192.664843][ T10] usb 4-1: USB disconnect, device number 10 [ 193.093489][ T9547] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 193.093515][ T9547] CIFS mount error: No usable UNC path provided in device string! [ 193.093515][ T9547] [ 193.093765][ T9547] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 193.251408][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 193.251427][ T36] audit: type=1800 audit(1772319474.621:199): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1715" name="bus" dev="tmpfs" ino=1667 res=0 errno=0 [ 193.388395][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 193.550609][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.550635][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.552942][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.552971][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.552990][ T10] usb 2-1: Product: syz [ 193.553004][ T10] usb 2-1: Manufacturer: syz [ 193.553017][ T10] usb 2-1: SerialNumber: syz [ 193.790059][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1725'. [ 193.797567][ T10] usb 2-1: 0:2 : does not exist [ 193.805053][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 194.061663][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1732'. [ 194.071443][ T10] usb 2-1: USB disconnect, device number 11 [ 194.264188][ T8258] udevd[8258]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.312499][ T9588] [U]  [ 194.334925][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.334967][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.714356][ T5844] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 194.815425][ T9614] F2FS-fs: Conflicting test_dummy_encryption options [ 194.877626][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.877659][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.877680][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.877719][ T5844] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.877739][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.912738][ T5844] usb 4-1: config 0 descriptor?? [ 195.271862][ T9629] netlink: 'syz.1.1752': attribute type 1 has an invalid length. [ 195.406692][ T5844] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 195.505580][ T36] audit: type=1326 audit(1772319476.901:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9636 comm="syz.2.1757" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f093001c799 code=0x0 [ 195.571893][ T5806] usb 4-1: USB disconnect, device number 11 [ 195.639840][ T9639] fido_id[9639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 196.587599][ T36] audit: type=1326 audit(1772319477.981:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9679 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 196.587653][ T36] audit: type=1326 audit(1772319477.981:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9679 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 196.633042][ T36] audit: type=1326 audit(1772319478.031:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9679 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 196.633093][ T36] audit: type=1326 audit(1772319478.031:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9679 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 196.633133][ T36] audit: type=1326 audit(1772319478.031:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9679 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 196.633171][ T36] audit: type=1326 audit(1772319478.031:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9679 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 196.633213][ T36] audit: type=1326 audit(1772319478.031:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9679 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 196.637688][ T36] audit: type=1326 audit(1772319478.031:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9679 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 197.025763][ T9689] tipc: Started in network mode [ 197.025792][ T9689] tipc: Node identity 225af1b5846, cluster identity 4711 [ 197.025946][ T9689] tipc: Enabled bearer , priority 17 [ 197.316581][ T9703] netlink: 'syz.1.1785': attribute type 28 has an invalid length. [ 197.845267][ T9729] tmpfs: Cannot disable swap on remount [ 197.898457][ T5806] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 198.075242][ T5806] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 198.075273][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.075292][ T5806] usb 4-1: Product: syz [ 198.075305][ T5806] usb 4-1: Manufacturer: syz [ 198.075318][ T5806] usb 4-1: SerialNumber: syz [ 198.138674][ T5873] tipc: Node number set to 2788880821 [ 198.155270][ T5806] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 198.352843][ T5873] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 198.530280][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1806'. [ 198.569750][ T9753] veth1_macvtap: left promiscuous mode [ 198.860642][ T9] usb 4-1: USB disconnect, device number 12 [ 199.443510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.684211][ T5873] usb 4-1: Service connection timeout for: 256 [ 199.684235][ T5873] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 199.686886][ T5873] ath9k_htc: Failed to initialize the device [ 199.708480][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 200.058368][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 200.097217][ T9809] netlink: 'syz.1.1833': attribute type 30 has an invalid length. [ 200.101619][ T9809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.191398][ T9816] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1838'. [ 200.208407][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 200.210303][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.210327][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.213543][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.213564][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.213575][ T9] usb 4-1: Product: syz [ 200.213582][ T9] usb 4-1: Manufacturer: syz [ 200.213589][ T9] usb 4-1: SerialNumber: syz [ 200.442886][ T9] usb 4-1: 0:2 : does not exist [ 200.465073][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 200.620250][ T9] usb 4-1: USB disconnect, device number 13 [ 200.790256][ T8258] udevd[8258]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.521941][ T9789] Bluetooth: hci1: command 0x0406 tx timeout [ 201.522211][ T9789] Bluetooth: hci0: command 0x0406 tx timeout [ 201.523708][ T9789] Bluetooth: hci2: command 0x0406 tx timeout [ 201.523735][ T9789] Bluetooth: hci3: command 0x0406 tx timeout [ 201.525573][ T9858] Invalid source name [ 202.107246][ T9875] EXT4-fs: Conflicting test_dummy_encryption options [ 202.818795][ T5873] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 202.969923][ T5873] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 202.971171][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.971243][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.971270][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.972620][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.972670][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.972697][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.973884][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.973932][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.973957][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.974971][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.975019][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.975044][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.976260][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.976308][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.976333][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.977532][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.977579][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.977603][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.028893][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.028946][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.028968][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.048743][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.048809][ T5873] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.048833][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.071940][ T5873] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 203.071969][ T5873] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 203.071988][ T5873] usb 4-1: Product: syz [ 203.072000][ T5873] usb 4-1: Manufacturer: syz [ 203.072014][ T5873] usb 4-1: SerialNumber: syz [ 203.247854][ T5873] usb 4-1: config 0 descriptor?? [ 203.322463][ T5873] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 203.484162][ T9916] netlink: 'syz.1.1885': attribute type 2 has an invalid length. [ 203.484240][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 203.577864][ T9919] Bluetooth: MGMT ver 1.23 [ 203.589893][ T9] usb 4-1: USB disconnect, device number 14 [ 203.630552][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 203.805351][ T9926] netlink: 'syz.1.1890': attribute type 1 has an invalid length. [ 204.178925][ T5806] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 204.331235][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.331263][ T5806] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 204.365247][ T5806] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 204.365277][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.365297][ T5806] usb 5-1: Product: syz [ 204.365313][ T5806] usb 5-1: Manufacturer: syz [ 204.365327][ T5806] usb 5-1: SerialNumber: syz [ 204.401628][ T5806] usb 5-1: config 0 descriptor?? [ 204.614388][ T5110] Bluetooth: hci3: unknown advertising packet type: 0x17 [ 204.614419][ T5110] Bluetooth: hci3: Dropping invalid advertising data [ 204.614443][ T5110] Bluetooth: hci3: Malformed LE Event: 0x02 [ 204.616211][ T5873] usb 5-1: USB disconnect, device number 17 [ 204.879506][ T9953] syz.0.1903 (9953) used greatest stack depth: 18592 bytes left [ 205.073895][ T9969] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1910'. [ 205.570213][ T9982] sctp: [Deprecated]: syz.2.1915 (pid 9982) Use of int in max_burst socket option. [ 205.570213][ T9982] Use struct sctp_assoc_value instead [ 206.478443][ T5802] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 206.479389][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 207.335243][T10060] pim6reg: entered allmulticast mode [ 207.364753][T10060] pim6reg: left allmulticast mode [ 207.488404][ T809] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 207.660298][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 207.665613][ T809] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 207.665644][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.665664][ T809] usb 4-1: Product: syz [ 207.665677][ T809] usb 4-1: Manufacturer: syz [ 207.665691][ T809] usb 4-1: SerialNumber: syz [ 207.724403][ T809] usb 4-1: config 0 descriptor?? [ 207.750879][ T809] gspca_main: se401-2.14.0 probing 047d:5003 [ 208.308821][ T809] gspca_se401: Bayer format not supported! [ 208.319595][ T825] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 208.392980][ T5844] usb 4-1: USB disconnect, device number 15 [ 208.478387][ T825] usb 2-1: Using ep0 maxpacket: 8 [ 208.480929][ T825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 208.483719][ T825] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 208.483743][ T825] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 208.529055][ T825] usb 2-1: string descriptor 0 read error: -22 [ 208.529233][ T825] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 208.529255][ T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.805933][ T825] usb 2-1: USB disconnect, device number 12 [ 208.904104][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'. [ 209.393036][T10111] netlink: 5268 bytes leftover after parsing attributes in process `syz.4.1976'. [ 209.828887][ T809] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 209.981047][ T809] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 209.981074][ T809] usb 5-1: config 0 has no interface number 0 [ 209.981115][ T809] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.981145][ T809] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 209.981170][ T809] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 209.981195][ T809] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 209.981220][ T809] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 209.981261][ T809] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 209.981283][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.081348][ T809] usb 5-1: config 0 descriptor?? [ 210.082661][T10117] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 210.131426][ T809] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 210.188430][ T5844] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 210.359781][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 210.366275][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.366421][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.366443][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.366480][ T5844] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 210.366501][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.445510][ T5844] usb 4-1: config 0 descriptor?? [ 210.447797][ T10] usb 5-1: USB disconnect, device number 18 [ 210.461078][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 210.722799][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 210.743215][T10149] vlan2: entered allmulticast mode [ 210.743238][T10149] team0: entered allmulticast mode [ 210.743309][T10149] team_slave_0: entered allmulticast mode [ 210.743328][T10149] team_slave_1: entered allmulticast mode [ 210.758888][ T825] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 210.899528][ T5844] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 210.899561][ T5844] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 210.899585][ T5844] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 210.899607][ T5844] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 210.899629][ T5844] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 210.899651][ T5844] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 210.899674][ T5844] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 210.899700][ T5844] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 210.899725][ T5844] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 210.899750][ T5844] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 210.911545][ T825] usb 2-1: Using ep0 maxpacket: 16 [ 210.913178][ T5844] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 210.913211][ T5844] microsoft 0003:045E:07DA.000C: no inputs found [ 210.913224][ T5844] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 210.947998][ T825] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.948025][ T825] usb 2-1: config 0 has no interface number 0 [ 210.954693][ T825] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 210.954725][ T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.954743][ T825] usb 2-1: Product: syz [ 210.954757][ T825] usb 2-1: Manufacturer: syz [ 210.954770][ T825] usb 2-1: SerialNumber: syz [ 210.973315][ T825] usb 2-1: config 0 descriptor?? [ 211.019336][ T825] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 211.099301][ T10] usb 4-1: USB disconnect, device number 16 [ 211.149428][T10156] veth0_to_bridge: default FDB implementation only supports local addresses [ 211.215401][T10158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.215459][T10158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.298853][T10158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.298882][T10158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.443381][T10154] fido_id[10154]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 211.694457][ T825] gspca_spca1528: reg_w err -71 [ 211.708571][ T825] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 211.758489][ T825] usb 2-1: USB disconnect, device number 13 [ 212.196545][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'. [ 212.232611][T10188] batadv_slave_1: entered promiscuous mode [ 212.232760][T10188] macsec1: entered promiscuous mode [ 212.232941][T10188] macsec1: entered allmulticast mode [ 212.232951][T10188] batadv_slave_1: entered allmulticast mode [ 212.294230][T10188] batadv_slave_1: left allmulticast mode [ 212.300393][T10188] batadv_slave_1: left promiscuous mode [ 212.714744][T10212] tipc: Enabled bearer , priority 10 [ 212.815271][T10215] team_slave_0: entered promiscuous mode [ 212.815321][T10215] team_slave_1: entered promiscuous mode [ 212.815447][T10215] macsec1: entered promiscuous mode [ 212.815458][T10215] team0: entered promiscuous mode [ 212.816007][T10215] macsec1: entered allmulticast mode [ 212.816020][T10215] team0: entered allmulticast mode [ 212.816030][T10215] team_slave_0: entered allmulticast mode [ 212.816044][T10215] team_slave_1: entered allmulticast mode [ 212.817582][T10215] team0: Device macsec1 is already an upper device of the team interface [ 212.903730][T10215] team0: left allmulticast mode [ 212.903751][T10215] team_slave_0: left allmulticast mode [ 212.903769][T10215] team_slave_1: left allmulticast mode [ 212.903806][T10215] team0: left promiscuous mode [ 212.904523][T10215] team_slave_0: left promiscuous mode [ 212.904588][T10215] team_slave_1: left promiscuous mode [ 213.589478][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2044'. [ 213.712313][T10259] CIFS mount error: No usable UNC path provided in device string! [ 213.712313][T10259] [ 213.712336][T10259] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 214.132702][T10287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2059'. [ 214.496006][ T5873] IPVS: starting estimator thread 0... [ 214.588967][T10309] IPVS: using max 9 ests per chain, 21600 per kthread [ 214.671434][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2072'. [ 214.671481][T10317] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 214.987796][T10331] netlink: 8548 bytes leftover after parsing attributes in process `syz.2.2080'. [ 215.569707][T10361] UHID_CREATE from different security context by process 907 (syz.2.2094), this is not allowed. [ 216.028386][ T809] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 216.152825][T10392] program syz.0.2108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.198964][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 216.202905][ T809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.202976][ T809] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 216.203015][ T809] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.205304][ T809] usb 3-1: New USB device found, idVendor=1d6b, idProduct=1101, bcdDevice= 0.40 [ 216.205333][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.205352][ T809] usb 3-1: Product: syz [ 216.205365][ T809] usb 3-1: Manufacturer: syz [ 216.205380][ T809] usb 3-1: SerialNumber: syz [ 216.485915][ T809] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 216.619839][ T809] usb 3-1: USB disconnect, device number 11 [ 216.742336][ T8258] udevd[8258]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.828424][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 216.829720][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2120'. [ 216.979193][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 216.982816][ T10] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 216.982834][ T10] usb 2-1: config 2 has no interface number 0 [ 216.982859][ T10] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 216.982872][ T10] usb 2-1: config 2 interface 88 has no altsetting 0 [ 216.985075][ T10] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 216.985100][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.985110][ T10] usb 2-1: Product: syz [ 216.985117][ T10] usb 2-1: Manufacturer: syz [ 216.985125][ T10] usb 2-1: SerialNumber: syz [ 217.050363][T10405] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.267179][T10405] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.504751][T10438] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2132'. [ 217.504781][T10438] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2132'. [ 217.505296][T10438] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 217.678434][ T10] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 217.678716][ T10] asix 2-1:2.88: probe with driver asix failed with error -71 [ 217.750353][ T10] usb 2-1: USB disconnect, device number 14 [ 218.190011][T10462] fuse: Bad value for 'group_id' [ 218.190031][T10462] fuse: Bad value for 'group_id' [ 218.337051][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2145'. [ 218.353173][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2145'. [ 218.391446][T10471] No buffer was provided with the request [ 218.417237][T10472] netlink: 'syz.3.2147': attribute type 1 has an invalid length. [ 218.958524][ T5110] Bluetooth: hci0: command 0x0406 tx timeout [ 218.958640][T10415] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 220.064257][T10484] syz.2.2153 (10484): drop_caches: 2 [ 220.182263][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'. [ 221.234698][T10563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2189'. [ 221.234753][T10563] netlink: 30 bytes leftover after parsing attributes in process `syz.0.2189'. [ 221.234764][T10563] tipc: Invalid UDP bearer configuration [ 221.234792][T10563] tipc: Enabling of bearer rejected, failed to enable media [ 221.814416][T10593] netlink: 'syz.4.2204': attribute type 12 has an invalid length. [ 221.897389][T10595] binder_alloc: binder_alloc_mmap_handler: 10594 200000ffb000-200000fff000 already mapped failed -16 [ 222.079145][T10601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2208'. [ 222.107508][T10605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2209'. [ 222.551763][T10628] overlayfs: conflicting options: nfs_export=on,index=off [ 222.668395][ T825] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 222.805213][T10642] netlink: 'syz.1.2227': attribute type 10 has an invalid length. [ 222.820485][ T825] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.820513][ T825] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.820531][ T825] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.820578][ T825] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.826177][ T825] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 222.826206][ T825] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.826225][ T825] usb 3-1: Product: syz [ 222.826239][ T825] usb 3-1: Manufacturer: syz [ 222.837952][T10642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.852978][T10642] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 223.073201][T10623] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2219'. [ 223.095659][ T825] usb 3-1: USB disconnect, device number 12 [ 223.355960][T10662] bond0: option all_slaves_active: invalid value (4) [ 223.395986][T10664] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2239'. [ 223.396043][T10664] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2239'. [ 223.580888][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 223.580906][ T36] audit: type=1326 audit(1772319504.981:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10669 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 223.581027][ T36] audit: type=1326 audit(1772319504.981:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10669 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 223.581976][ T36] audit: type=1326 audit(1772319504.981:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10669 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 223.582217][ T36] audit: type=1326 audit(1772319504.981:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10669 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 223.582870][ T36] audit: type=1326 audit(1772319504.981:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10669 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 223.802803][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2244'. [ 224.244977][T10690] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2253'. [ 224.245638][T10690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.868470][ T825] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 224.995565][ T10] IPVS: starting estimator thread 0... [ 225.030241][ T825] usb 2-1: Using ep0 maxpacket: 32 [ 225.032054][ T825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.032085][ T825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.032108][ T825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 225.032136][ T825] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 225.032148][ T825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.056647][ T825] usb 2-1: config 0 descriptor?? [ 225.090456][T10721] IPVS: using max 15 ests per chain, 36000 per kthread [ 225.178378][ T809] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 225.330573][ T809] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 225.332049][ T809] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.332077][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 225.332097][ T809] usb 4-1: SerialNumber: syz [ 225.627831][ T825] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000D/input/input16 [ 225.762325][ T825] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000D/input/input17 [ 225.951944][ T825] kye 0003:0458:5011.000D: input,hiddev0,hidraw0: USB HID v0.04 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 226.042503][ T825] usb 2-1: USB disconnect, device number 15 [ 226.401158][T10745] fido_id[10745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 227.116501][T10759] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.665377][T10759] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.976572][ T809] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 228.023595][ T809] usb 4-1: USB disconnect, device number 17 [ 228.224120][T10759] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.390581][T10801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.630611][T10759] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.710745][T10806] ip6gretap0: entered promiscuous mode [ 228.981291][ T1134] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.044220][ T1134] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.057947][T10827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2318'. [ 229.086394][ T1134] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.109037][ T1134] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.171054][ T36] audit: type=1326 audit(1772319510.571:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 229.171103][ T36] audit: type=1326 audit(1772319510.571:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 229.171142][ T36] audit: type=1326 audit(1772319510.571:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 229.171175][ T36] audit: type=1326 audit(1772319510.571:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 229.171208][ T36] audit: type=1326 audit(1772319510.571:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 229.171241][ T36] audit: type=1326 audit(1772319510.571:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 229.171273][ T36] audit: type=1326 audit(1772319510.571:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 229.171305][ T36] audit: type=1326 audit(1772319510.571:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 229.171336][ T36] audit: type=1326 audit(1772319510.571:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 229.321386][T10837] bridge0: entered promiscuous mode [ 229.331567][T10837] bridge0: port 3(macsec1) entered blocking state [ 229.331737][T10837] bridge0: port 3(macsec1) entered disabled state [ 229.331944][T10837] macsec1: entered allmulticast mode [ 229.331960][T10837] bridge0: entered allmulticast mode [ 229.431221][T10837] macsec1: left allmulticast mode [ 229.431242][T10837] bridge0: left allmulticast mode [ 229.490503][T10837] bridge0: left promiscuous mode [ 229.566466][T10847] netlink: 'syz.4.2325': attribute type 10 has an invalid length. [ 229.606223][T10847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.625137][T10847] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 229.911701][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2331'. [ 229.912146][T10859] mac80211_hwsim hwsim4 wlan1: Device is already in use. [ 230.367821][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'. [ 230.398589][T10886] syz.1.2342: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 230.399055][T10886] CPU: 1 UID: 0 PID: 10886 Comm: syz.1.2342 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 230.399092][T10886] Tainted: [L]=SOFTLOCKUP [ 230.399100][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.399116][T10886] Call Trace: [ 230.399127][T10886] [ 230.399136][T10886] dump_stack_lvl+0xe8/0x150 [ 230.399182][T10886] warn_alloc+0x263/0x3e0 [ 230.399218][T10886] ? stack_trace_save+0xa9/0x100 [ 230.399249][T10886] ? __pfx_warn_alloc+0x10/0x10 [ 230.399288][T10886] ? kasan_save_track+0x4f/0x80 [ 230.399313][T10886] ? kasan_save_track+0x3e/0x80 [ 230.399337][T10886] ? __kasan_kmalloc+0x93/0xb0 [ 230.399363][T10886] ? xskq_create+0x56/0x170 [ 230.399385][T10886] ? xsk_init_queue+0x8a/0xe0 [ 230.399404][T10886] ? xsk_setsockopt+0x54c/0x990 [ 230.399424][T10886] ? do_sock_setsockopt+0x17c/0x1b0 [ 230.399453][T10886] __vmalloc_node_range_noprof+0x132/0x1730 [ 230.399513][T10886] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 230.399551][T10886] ? __kasan_kmalloc+0x93/0xb0 [ 230.399582][T10886] vmalloc_user_noprof+0xad/0xe0 [ 230.399611][T10886] ? xskq_create+0xbf/0x170 [ 230.399635][T10886] xskq_create+0xbf/0x170 [ 230.399662][T10886] xsk_init_queue+0x8a/0xe0 [ 230.399687][T10886] xsk_setsockopt+0x54c/0x990 [ 230.399711][T10886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 230.399747][T10886] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 230.399774][T10886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 230.399798][T10886] do_sock_setsockopt+0x17c/0x1b0 [ 230.399829][T10886] __x64_sys_setsockopt+0x143/0x1b0 [ 230.399860][T10886] do_syscall_64+0x14d/0xf80 [ 230.399886][T10886] ? trace_irq_disable+0x3b/0x150 [ 230.399906][T10886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.399927][T10886] ? clear_bhb_loop+0x40/0x90 [ 230.399951][T10886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.399971][T10886] RIP: 0033:0x7efd8d95c799 [ 230.399995][T10886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.400014][T10886] RSP: 002b:00007efd8bbae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 230.400033][T10886] RAX: ffffffffffffffda RBX: 00007efd8dbd5fa0 RCX: 00007efd8d95c799 [ 230.400048][T10886] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 230.400060][T10886] RBP: 00007efd8d9f2bd9 R08: 0000000000000004 R09: 0000000000000000 [ 230.400077][T10886] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.400090][T10886] R13: 00007efd8dbd6038 R14: 00007efd8dbd5fa0 R15: 00007ffed586a958 [ 230.400124][T10886] [ 230.400135][T10886] Mem-Info: [ 230.400148][T10886] active_anon:260 inactive_anon:6818 isolated_anon:0 [ 230.400148][T10886] active_file:5837 inactive_file:46740 isolated_file:0 [ 230.400148][T10886] unevictable:768 dirty:360 writeback:0 [ 230.400148][T10886] slab_reclaimable:9224 slab_unreclaimable:99281 [ 230.400148][T10886] mapped:30217 shmem:1359 pagetables:1395 [ 230.400148][T10886] sec_pagetables:0 bounce:0 [ 230.400148][T10886] kernel_misc_reclaimable:0 [ 230.400148][T10886] free:1325035 free_pcp:3539 free_cma:0 [ 230.400204][T10886] Node 0 active_anon:1040kB inactive_anon:27272kB active_file:23004kB inactive_file:186960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120800kB dirty:1432kB writeback:0kB shmem:3900kB kernel_stack:13208kB pagetables:5468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 230.400253][T10886] Node 1 active_anon:0kB inactive_anon:0kB active_file:344kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:8kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 230.400298][T10886] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.400361][T10886] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 230.400396][T10886] Node 0 DMA32 free:1348120kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1040kB inactive_anon:27272kB active_file:23004kB inactive_file:186960kB unevictable:1536kB writepending:1432kB zspages:0kB present:3129332kB managed:2566628kB mlocked:0kB bounce:0kB free_pcp:14156kB local_pcp:9484kB free_cma:0kB [ 230.400460][T10886] lowmem_reserve[]: 0 0 0 0 0 [ 230.400492][T10886] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.400550][T10886] lowmem_reserve[]: 0 0 0 0 0 [ 230.400582][T10886] Node 1 Normal free:3936660kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:344kB inactive_file:0kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.400642][T10886] lowmem_reserve[]: 0 0 0 0 0 [ 230.400673][T10886] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 230.400789][T10886] Node 0 DMA32: 2494*4kB (UME) 2506*8kB (UME) 1269*16kB (UME) 537*32kB (UME) 301*64kB (UME) 172*128kB (UME) 113*256kB (UME) 64*512kB (UME) 32*1024kB (UME) 5*2048kB (M) 277*4096kB (UM) = 1348088kB [ 230.400948][T10886] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 230.401051][T10886] Node 1 Normal: 9*4kB (UME) 6*8kB (UM) 10*16kB (UE) 9*32kB (UME) 6*64kB (UME) 4*128kB (UE) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 3*2048kB (UME) 958*4096kB (M) = 3936660kB [ 230.401208][T10886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.401224][T10886] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 230.401240][T10886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.401257][T10886] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 230.401272][T10886] 53932 total pagecache pages [ 230.401285][T10886] 0 pages in swap cache [ 230.401291][T10886] Free swap = 124996kB [ 230.401299][T10886] Total swap = 124996kB [ 230.401307][T10886] 2097051 pages RAM [ 230.401314][T10886] 0 pages HighMem/MovableOnly [ 230.401320][T10886] 423674 pages reserved [ 230.401327][T10886] 0 pages cma reserved [ 230.662972][T10896] syz.0.2347 (10896): /proc/10893/oom_adj is deprecated, please use /proc/10893/oom_score_adj instead. [ 230.728830][ T809] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 230.880865][ T809] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 230.880894][ T809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.880912][ T809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 230.880957][ T809] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 230.880980][ T809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 230.882873][ T809] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 230.882899][ T809] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 230.882918][ T809] usb 4-1: Product: syz [ 230.882931][ T809] usb 4-1: Manufacturer: syz [ 230.972783][ T809] cdc_wdm 4-1:1.0: skipping garbage [ 230.972804][ T809] cdc_wdm 4-1:1.0: skipping garbage [ 231.006968][ T809] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 231.007006][ T809] cdc_wdm 4-1:1.0: Unknown control protocol [ 231.030591][ T5873] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 231.182074][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 231.184690][ T5873] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 231.184716][ T5873] usb 2-1: config 0 has no interface number 0 [ 231.184757][ T5873] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 231.184782][ T5873] usb 2-1: config 0 interface 196 has no altsetting 0 [ 231.222936][ T5873] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 231.222966][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.222985][ T5873] usb 2-1: Product: syz [ 231.222998][ T5873] usb 2-1: Manufacturer: syz [ 231.223010][ T5873] usb 2-1: SerialNumber: syz [ 231.247706][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.247973][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.248281][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.248300][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.248521][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.248539][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.248763][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.248782][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.248999][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.249023][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.249236][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.249253][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.249465][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.249483][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.249693][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.249711][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.249921][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.249938][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.250151][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 231.250168][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 231.335602][ T5873] usb 2-1: config 0 descriptor?? [ 231.355481][T10902] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.435939][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 231.437543][ T825] usb 4-1: USB disconnect, device number 18 [ 231.820172][ T5873] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 231.820471][ T5873] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 231.862384][ T5873] usb 2-1: USB disconnect, device number 16 [ 232.155359][T10975] dvmrp0: entered allmulticast mode [ 232.162544][T10974] dvmrp0: left allmulticast mode [ 232.458635][ T5901] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 232.639829][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 232.639874][ T5901] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.643654][ T5901] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 232.643683][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.643702][ T5901] usb 4-1: Product: syz [ 232.643715][ T5901] usb 4-1: Manufacturer: syz [ 232.643729][ T5901] usb 4-1: SerialNumber: syz [ 232.904327][ T5901] usbhid 4-1:1.0: can't add hid device: -71 [ 232.904443][ T5901] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 232.919844][ T5901] usb 4-1: USB disconnect, device number 19 [ 233.912914][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2398'. [ 234.248635][ T5901] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 234.319022][T11047] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 234.411068][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.411095][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.412315][ T5901] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 234.412341][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 234.412360][ T5901] usb 2-1: SerialNumber: syz [ 234.518401][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 234.668385][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 234.683373][ T5901] usb 2-1: 0:2 : does not exist [ 234.702197][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.702230][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.731760][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 234.731791][ T10] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 234.731810][ T10] usb 3-1: Product: syz [ 234.731823][ T10] usb 3-1: Manufacturer: syz [ 234.800613][ T10] hub 3-1:4.0: USB hub found [ 234.919630][ T5901] usb 2-1: USB disconnect, device number 17 [ 235.050418][ T8258] udevd[8258]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.118432][ T10] hub 3-1:4.0: 5 ports detected [ 235.124085][ T10] hub 3-1:4.0: insufficient power available to use all downstream ports [ 235.550083][ T10] hub 3-1:4.0: set hub depth failed [ 235.606675][ T10] usb 3-1: USB disconnect, device number 13 [ 236.315853][T11182] netlink: 'syz.4.2425': attribute type 1 has an invalid length. [ 236.730793][T11206] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2434'. [ 236.838742][ T825] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 236.992675][ T825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.992723][ T825] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 236.992744][ T825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.034917][ T825] usb 4-1: config 0 descriptor?? [ 237.251917][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2442'. [ 237.489188][ T825] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 237.528852][ T825] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000E/input/input19 [ 237.548722][ T5901] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 237.718594][ T5901] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.718621][ T5901] usb 3-1: config 0 has no interface number 0 [ 237.718659][ T5901] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.718682][ T5901] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.718702][ T5901] usb 3-1: config 0 interface 1 has no altsetting 0 [ 237.718732][ T5901] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 237.718751][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.723000][ T5901] usb 3-1: config 0 descriptor?? [ 237.937022][ T825] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 237.976971][ T825] usb 4-1: USB disconnect, device number 20 [ 238.245389][T11271] fido_id[11271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 238.419449][ T5901] uclogic 0003:2179:0053.000F: failed retrieving string descriptor #100: -71 [ 238.419512][ T5901] uclogic 0003:2179:0053.000F: failed retrieving pen parameters: -71 [ 238.419542][ T5901] uclogic 0003:2179:0053.000F: pen probing failed: -71 [ 238.419559][ T5901] uclogic 0003:2179:0053.000F: failed probing parameters: -71 [ 238.419667][ T5901] uclogic 0003:2179:0053.000F: probe with driver uclogic failed with error -71 [ 238.559049][ T5901] usb 3-1: USB disconnect, device number 14 [ 239.008412][ T825] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 239.160384][ T825] usb 4-1: Using ep0 maxpacket: 16 [ 239.162583][ T825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.162607][ T825] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 239.166405][ T825] usb 4-1: New USB device found, idVendor=0489, idProduct=e003, bcdDevice=dd.d1 [ 239.166432][ T825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.166451][ T825] usb 4-1: Product: syz [ 239.166465][ T825] usb 4-1: Manufacturer: syz [ 239.166479][ T825] usb 4-1: SerialNumber: syz [ 239.484076][ T825] usb 4-1: USB disconnect, device number 21 [ 240.089365][T11388] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'. [ 240.096288][T11388] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'. [ 240.225611][T11397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2481'. [ 240.481059][ T36] audit: type=1800 audit(1772319521.881:229): pid=11412 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2488" name="bus" dev="tmpfs" ino=2705 res=0 errno=0 [ 241.653022][T11479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2516'. [ 241.862923][T11487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2519'. [ 241.879311][T11487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2519'. [ 242.342884][T11511] netlink: 436 bytes leftover after parsing attributes in process `syz.4.2527'. [ 242.343002][T11511] netlink: 436 bytes leftover after parsing attributes in process `syz.4.2527'. [ 243.551128][T11587] exFAT-fs (loop4): unable to read boot sector [ 243.551146][T11587] exFAT-fs (loop4): failed to read boot sector [ 243.551155][T11587] exFAT-fs (loop4): failed to recognize exfat type [ 243.959225][T11608] netlink: 822 bytes leftover after parsing attributes in process `syz.0.2564'. [ 244.227107][T11625] trusted_key: encrypted_key: insufficient parameters specified [ 244.638526][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 244.788420][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 244.792276][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.792301][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 244.823340][ T10] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 244.823371][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.823390][ T10] usb 2-1: Product: syz [ 244.823404][ T10] usb 2-1: Manufacturer: syz [ 244.823418][ T10] usb 2-1: SerialNumber: syz [ 244.861983][ T10] usb 2-1: config 0 descriptor?? [ 245.664091][T11693] loop6: detected capacity change from 0 to 524288000 [ 246.123368][T11714] netlink: 'syz.2.2603': attribute type 195 has an invalid length. [ 246.502951][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'. [ 246.797778][T11744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2616'. [ 247.421513][ T10] usb 2-1: USB disconnect, device number 18 [ 247.630442][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 247.653475][ T10] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 247.877587][T11805] fido_id[11805]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 248.378507][ T5873] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 248.516939][T11853] overlayfs: regular lower layers cannot follow data lower layers [ 248.532256][ T5873] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 248.532313][ T5873] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.532339][ T5873] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.532377][ T5873] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.532398][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.553497][ T5873] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 248.554604][ T5873] usb 2-1: invalid MIDI out EP 0 [ 248.832028][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2656'. [ 249.109392][ T5873] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 249.119778][ T5873] usb 2-1: USB disconnect, device number 19 [ 249.345316][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2666'. [ 249.473725][T11918] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2670'. [ 250.045624][ T5110] Bluetooth: hci4: link tx timeout [ 250.045648][ T5110] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 250.162984][T11961] syz_tun: entered promiscuous mode [ 250.163121][T11959] syz_tun: left promiscuous mode [ 250.628428][ T825] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 250.778585][ T825] usb 4-1: Using ep0 maxpacket: 16 [ 250.781296][ T825] usb 4-1: config index 0 descriptor too short (expected 64967, got 165) [ 250.781325][ T825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.781344][ T825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.783963][ T825] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.783991][ T825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.784011][ T825] usb 4-1: Product: syz [ 250.784024][ T825] usb 4-1: Manufacturer: syz [ 250.784038][ T825] usb 4-1: SerialNumber: syz [ 250.954546][T12022] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2707'. [ 250.968474][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 251.035777][ T825] usb 4-1: 0:2 : does not exist [ 251.131556][ T10] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 251.131586][ T10] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 251.131605][ T10] usb 2-1: Product: syz [ 251.131618][ T10] usb 2-1: Manufacturer: syz [ 251.131632][ T10] usb 2-1: SerialNumber: syz [ 251.137699][ T825] usb 4-1: USB disconnect, device number 22 [ 251.164729][ T10] usb 2-1: config 0 descriptor?? [ 251.226904][ T10] ch341 2-1:0.0: ch341-uart converter detected [ 251.408913][ T10] usb 2-1: failed to receive control message: -71 [ 251.408975][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 251.434731][ T10] usb 2-1: USB disconnect, device number 20 [ 251.454753][ T10] ch341 2-1:0.0: device disconnected [ 252.078454][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 252.818560][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2736'. [ 253.275518][T12166] netlink: 'syz.1.2748': attribute type 11 has an invalid length. [ 253.480559][T12179] genirq: Flags mismatch irq 4. 00202000 (pcmmio) vs. 00202080 (ttyS0) [ 253.980038][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2761'. [ 253.980101][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2761'. [ 254.292634][T12231] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2771'. [ 254.294338][T12231] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2771'. [ 254.777717][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 254.889238][T12268] MPI: mpi too large (113288 bits) [ 255.062036][T12276] vlan2: entered promiscuous mode [ 255.062060][T12276] bridge0: entered promiscuous mode [ 255.062240][T12276] vlan2: entered allmulticast mode [ 255.062253][T12276] bridge0: entered allmulticast mode [ 255.450394][T12308] netlink: 'syz.0.2800': attribute type 3 has an invalid length. [ 255.714963][T12328] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2806'. [ 255.716178][T12328] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2806'. [ 255.762986][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.763070][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.992495][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 256.128397][ T10] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 256.194582][T12365] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2817'. [ 256.195119][T12365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.280126][ T10] usb 5-1: config 0 has no interfaces? [ 256.287701][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.287731][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 256.287749][ T10] usb 5-1: SerialNumber: syz [ 256.329819][ T10] usb 5-1: config 0 descriptor?? [ 256.544863][ T9] usb 5-1: USB disconnect, device number 19 [ 256.638073][T12391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2824'. [ 257.468455][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 257.626302][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 257.626333][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 257.626364][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 257.629726][ T9] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 257.629754][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.629773][ T9] usb 5-1: Product: syz [ 257.629786][ T9] usb 5-1: Manufacturer: syz [ 257.629799][ T9] usb 5-1: SerialNumber: syz [ 257.697177][ T9] usb 5-1: config 0 descriptor?? [ 257.700411][T12433] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 257.700586][T12433] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 257.703344][ T9] usb 5-1: ucan: probing device on interface #0 [ 258.319893][ T9] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 258.368050][ T9] usb 5-1: USB disconnect, device number 20 [ 260.004786][ T190] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.102542][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.107383][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.111335][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.113886][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.114593][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.373719][ T190] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.585035][ T190] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.745341][ T190] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.202495][T12672] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 261.440418][T12579] chnl_net:caif_netlink_parms(): no params data found [ 261.807301][T12739] __nla_validate_parse: 3 callbacks suppressed [ 261.807320][T12739] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2925'. [ 262.160365][ T5110] Bluetooth: hci4: command tx timeout [ 262.191585][T12579] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.191786][T12579] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.192025][T12579] bridge_slave_0: entered allmulticast mode [ 262.194494][T12579] bridge_slave_0: entered promiscuous mode [ 262.231231][ T190] bridge_slave_1: left allmulticast mode [ 262.231333][ T190] bridge_slave_1: left promiscuous mode [ 262.233481][ T190] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.391451][ T190] bridge_slave_0: left allmulticast mode [ 262.391479][ T190] bridge_slave_0: left promiscuous mode [ 262.391693][ T190] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.829208][ T190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.910812][ T190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.968951][ T190] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 263.994512][ T190] bond0 (unregistering): Released all slaves [ 264.034258][T12579] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.034328][T12579] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.034538][T12579] bridge_slave_1: entered allmulticast mode [ 264.036042][T12579] bridge_slave_1: entered promiscuous mode [ 264.246937][ T5802] Bluetooth: hci4: command tx timeout [ 264.299556][T12579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.303515][T12579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.397143][ T190] tipc: Left network mode [ 264.510587][T12579] team0: Port device team_slave_0 added [ 264.541525][T12579] team0: Port device team_slave_1 added [ 264.676023][T12903] xt_l2tp: v2 sid > 0xffff: 1114112 [ 264.790790][T12579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.790809][T12579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.790836][T12579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.807111][T12579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.807128][T12579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.807153][T12579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.688980][T12969] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2971'. [ 266.286793][T13013] xt_l2tp: missing protocol rule (udp|l2tpip) [ 266.318552][ T5802] Bluetooth: hci4: command tx timeout [ 266.417656][T12579] hsr_slave_0: entered promiscuous mode [ 266.425666][T12579] hsr_slave_1: entered promiscuous mode [ 266.427845][T12579] debugfs: 'hsr0' already exists in 'hsr' [ 266.427871][T12579] Cannot create hsr debugfs directory [ 267.166165][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 267.166247][T13067] netlink: 'syz.2.2994': attribute type 5 has an invalid length. [ 268.249829][ T190] hsr_slave_0: left promiscuous mode [ 268.289956][ T190] hsr_slave_1: left promiscuous mode [ 268.293912][ T190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.294020][ T190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.354343][ T190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.354364][ T190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.398517][ T5802] Bluetooth: hci4: command tx timeout [ 268.575451][ T190] veth1_macvtap: left promiscuous mode [ 268.575638][ T190] veth0_macvtap: left promiscuous mode [ 268.575951][ T190] veth1_vlan: left promiscuous mode [ 268.576217][ T190] veth0_vlan: left promiscuous mode [ 269.338923][ T190] team0 (unregistering): Port device team_slave_1 removed [ 269.378860][ T190] team0 (unregistering): Port device team_slave_0 removed [ 270.440569][T13255] netlink: 'syz.0.3034': attribute type 1 has an invalid length. [ 270.440593][T13255] netlink: 728 bytes leftover after parsing attributes in process `syz.0.3034'. [ 271.071704][T13300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3044'. [ 271.329541][ T5806] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 271.505004][ T5806] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 271.505057][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 271.505078][ T5806] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.505091][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.505104][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 271.507869][ T5806] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 271.507920][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 271.507946][ T5806] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.507969][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.507993][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 271.549555][ T5806] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 271.549607][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 271.549632][ T5806] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.549655][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.549680][ T5806] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 271.555535][ T5806] usb 4-1: string descriptor 0 read error: -22 [ 271.555668][ T5806] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 271.555689][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.614687][ T190] IPVS: stop unused estimator thread 0... [ 271.624205][ T5806] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 271.895253][ T9] usb 4-1: USB disconnect, device number 23 [ 272.486801][T12579] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.560165][T12579] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.640861][T12579] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.693530][T12579] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.020060][T12579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.127352][T12579] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.220919][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.221058][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.232627][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.236054][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.489848][T13420] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3069'. [ 273.685876][T13430] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3075'. [ 274.086089][T12579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.128513][ T36] audit: type=1326 audit(1772319555.521:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13452 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 274.128563][ T36] audit: type=1326 audit(1772319555.521:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13452 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 274.151167][ T36] audit: type=1326 audit(1772319555.551:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13452 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 274.151218][ T36] audit: type=1326 audit(1772319555.551:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13452 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 274.151256][ T36] audit: type=1326 audit(1772319555.551:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13452 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 274.172766][ T36] audit: type=1326 audit(1772319555.571:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13452 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 274.172816][ T36] audit: type=1326 audit(1772319555.571:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13452 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb67c799 code=0x7ffc0000 [ 274.316124][T12579] veth0_vlan: entered promiscuous mode [ 274.349754][T12579] veth1_vlan: entered promiscuous mode [ 274.472936][T12579] veth0_macvtap: entered promiscuous mode [ 274.522513][T12579] veth1_macvtap: entered promiscuous mode [ 274.585896][T12579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.615656][T12579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.715137][ T1130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.715383][ T1130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.715546][ T1130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.716072][ T1130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.068556][ T5806] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 275.161119][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.161140][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.229302][ T5806] usb 5-1: Using ep0 maxpacket: 16 [ 275.239003][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.239034][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.239055][ T5806] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.239094][ T5806] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 275.239115][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.286143][ T5806] usb 5-1: config 0 descriptor?? [ 275.417241][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.417261][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.778192][ T5806] wacom 0003:056A:0317.0011: item fetching failed at offset 0/11 [ 275.822738][ T5806] wacom 0003:056A:0317.0011: parse failed [ 275.822851][ T5806] wacom 0003:056A:0317.0011: probe with driver wacom failed with error -22 [ 276.003609][ T5901] usb 5-1: USB disconnect, device number 21 [ 276.083420][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2884'. [ 276.158099][ T36] audit: type=1326 audit(1772319557.551:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13542 comm="syz.0.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d00a9c799 code=0x7ffc0000 [ 276.185187][ T36] audit: type=1326 audit(1772319557.551:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13542 comm="syz.0.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d00a9c799 code=0x7ffc0000 [ 276.225989][ T36] audit: type=1326 audit(1772319557.621:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13542 comm="syz.0.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d00a9c799 code=0x7ffc0000 [ 276.335699][T13552] ipvlan2: entered promiscuous mode [ 276.448618][ T5901] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 276.491402][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3106'. [ 276.604417][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.604450][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.604490][ T5901] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 276.604510][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.631948][ T5901] usb 3-1: config 0 descriptor?? [ 276.932713][T13577] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3109'. [ 277.075453][ T5901] hid (null): unknown global tag 0xd [ 277.100478][ T5901] kye 0003:0458:5019.0012: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 277.100989][ T5901] kye 0003:0458:5019.0012: unknown main item tag 0x0 [ 277.101020][ T5901] kye 0003:0458:5019.0012: unknown main item tag 0x0 [ 277.101046][ T5901] kye 0003:0458:5019.0012: unknown main item tag 0x0 [ 277.101072][ T5901] kye 0003:0458:5019.0012: unknown main item tag 0x0 [ 277.101098][ T5901] kye 0003:0458:5019.0012: unknown global tag 0xd [ 277.101111][ T5901] kye 0003:0458:5019.0012: item 0 1 1 13 parsing failed [ 277.101870][ T5901] kye 0003:0458:5019.0012: parse failed [ 277.101937][ T5901] kye 0003:0458:5019.0012: probe with driver kye failed with error -22 [ 277.289034][ T10] usb 3-1: USB disconnect, device number 15 [ 277.656334][T13618] syz.4.3118 (13618) used greatest stack depth: 17736 bytes left [ 277.713759][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3120'. [ 278.154408][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3132'. [ 278.249818][T13650] gretap0: entered promiscuous mode [ 278.250016][T13650] macsec2: entered promiscuous mode [ 278.295613][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3137'. [ 278.310483][T13650] gretap0: left promiscuous mode [ 278.457725][ T5901] IPVS: starting estimator thread 0... [ 278.548542][T13673] IPVS: using max 8 ests per chain, 19200 per kthread [ 279.378680][ T5806] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 279.489212][T13732] bridge_slave_0: invalid flags given to default FDB implementation [ 279.530710][ T5806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.530742][ T5806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.530774][ T5806] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 279.530795][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.535954][ T5806] usb 4-1: config 0 descriptor?? [ 279.960513][ T5806] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x3 [ 279.960552][ T5806] cp2112 0003:10C4:EA90.0013: unbalanced delimiter at end of report description [ 279.961413][ T5806] cp2112 0003:10C4:EA90.0013: parse failed [ 279.961548][ T5806] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -22 [ 280.141200][T13768] vivid-007: disconnect [ 280.141779][T13766] vivid-007: reconnect [ 280.166084][ T10] usb 4-1: USB disconnect, device number 24 [ 280.248626][T13780] netlink: 'syz.0.3181': attribute type 1 has an invalid length. [ 280.248649][T13780] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3181'. [ 280.248664][T13780] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3181'. [ 280.248677][T13780] netlink: 'syz.0.3181': attribute type 1 has an invalid length. [ 280.248690][T13780] netlink: 'syz.0.3181': attribute type 8 has an invalid length. [ 280.248701][T13780] netlink: 606 bytes leftover after parsing attributes in process `syz.0.3181'. [ 280.872770][T13804] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 281.794094][T13852] program syz.3.3207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.990673][T13967] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3243'. [ 284.057339][T13971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3243'. [ 284.071391][T13976] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3243'. [ 284.194780][T13993] program syz.1.3253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.608625][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 284.760135][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 284.762388][ T10] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 284.762414][ T10] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 284.762434][ T10] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 284.762454][ T10] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 284.765006][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.765033][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.765053][ T10] usb 2-1: Product: syz [ 284.765066][ T10] usb 2-1: Manufacturer: syz [ 284.765080][ T10] usb 2-1: SerialNumber: syz [ 285.035996][T14046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3270'. [ 285.079538][ T10] usb 2-1: 0:2 : does not exist [ 285.098987][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 285.165247][ T10] usb 2-1: USB disconnect, device number 21 [ 285.299094][T14061] pim6reg: entered allmulticast mode [ 285.326148][ T8258] udevd[8258]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.343512][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 285.343529][ T36] audit: type=1326 audit(1772319566.741:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14071 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 285.343572][ T36] audit: type=1326 audit(1772319566.741:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14071 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 285.354640][ T36] audit: type=1326 audit(1772319566.741:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14071 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 285.370020][ T36] audit: type=1326 audit(1772319566.751:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14071 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 285.370078][ T36] audit: type=1326 audit(1772319566.761:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14071 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 285.370118][ T36] audit: type=1326 audit(1772319566.761:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14071 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 285.370157][ T36] audit: type=1326 audit(1772319566.761:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14071 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 285.373537][T14058] pim6reg: left allmulticast mode [ 285.390282][ T36] audit: type=1326 audit(1772319566.781:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14071 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 285.833658][T14083] tun0: tun_chr_ioctl cmd 1074025681 [ 286.158459][ T5901] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 286.175514][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3285'. [ 286.321874][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.321899][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.338036][ T5901] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.338065][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.338083][ T5901] usb 3-1: Product: syz [ 286.338097][ T5901] usb 3-1: Manufacturer: syz [ 286.338110][ T5901] usb 3-1: SerialNumber: syz [ 286.594703][ T5901] usb 3-1: 0:2 : does not exist [ 286.602408][ T5901] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 286.794040][ T5901] usb 3-1: USB disconnect, device number 16 [ 287.009183][ T8258] udevd[8258]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.371413][T14245] program syz.4.3326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.894882][T14280] tun0: tun_chr_ioctl cmd 1074025677 [ 288.894996][T14280] tun0: linktype set to 773 [ 288.982992][T14286] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 289.648437][ T5873] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 289.798474][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 289.800238][ T5873] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 289.800262][ T5873] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 289.807184][ T5873] usb 3-1: string descriptor 0 read error: -71 [ 289.807364][ T5873] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 289.807389][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.828205][ T5873] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 289.835996][ T5873] usb 3-1: no configuration chosen from 1 choice [ 289.856729][ T5873] usb 3-1: USB disconnect, device number 17 [ 289.913655][T14339] macvlan2: entered promiscuous mode [ 290.208436][T14372] serio: Serial port ttyS3 [ 290.678265][ T36] audit: type=1326 audit(1772319572.071:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d00a9c799 code=0x7ffc0000 [ 290.679536][ T36] audit: type=1326 audit(1772319572.081:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f8d00a9c799 code=0x7ffc0000 [ 290.679687][ T36] audit: type=1326 audit(1772319572.081:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d00a9c799 code=0x7ffc0000 [ 290.679802][ T36] audit: type=1326 audit(1772319572.081:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14410 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d00a9c799 code=0x7ffc0000 [ 291.228475][T14437] program syz.4.3389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.527322][T14450] macvlan2: entered promiscuous mode [ 291.804553][T14464] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 291.867915][T14464] pim6reg: entered allmulticast mode [ 292.141753][T14484] program syz.1.3405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.369589][ T36] audit: type=1326 audit(1772319573.761:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14496 comm="syz.1.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993e35c799 code=0x7ffc0000 [ 292.369641][ T36] audit: type=1326 audit(1772319573.761:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14496 comm="syz.1.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993e35c799 code=0x7ffc0000 [ 292.371281][ T36] audit: type=1326 audit(1772319573.771:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14496 comm="syz.1.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993e35c799 code=0x7ffc0000 [ 292.371326][ T36] audit: type=1326 audit(1772319573.771:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14496 comm="syz.1.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993e35c799 code=0x7ffc0000 [ 292.372412][ T36] audit: type=1326 audit(1772319573.771:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14496 comm="syz.1.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f993e35c799 code=0x7ffc0000 [ 292.372457][ T36] audit: type=1326 audit(1772319573.771:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14496 comm="syz.1.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993e35c799 code=0x7ffc0000 [ 292.858813][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3418'. [ 292.881548][T14521] hsr_slave_0: left promiscuous mode [ 292.929728][T14521] hsr_slave_1: left promiscuous mode [ 294.094248][T14586] IPv6: Can't replace route, no match found [ 294.094574][T14586] IPv6: Can't replace route, no match found [ 294.922917][T14621] devpts: Bad value for 'max' [ 295.267024][T14646] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3452'. [ 296.009282][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 296.163194][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 296.165098][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.165122][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.165156][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 296.165179][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.220113][ T10] usb 2-1: config 0 descriptor?? [ 296.483633][T14713] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3473'. [ 296.483660][T14713] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 296.509278][ T1130] tipc: Resetting bearer [ 296.766009][T14721] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3476'. [ 296.766035][T14721] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3476'. [ 297.128785][T14738] program syz.2.3482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.398871][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 297.398889][ T36] audit: type=1107 audit(1772319578.711:275): pid=14743 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 297.404152][T14751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3487'. [ 297.875203][T14783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3500'. [ 298.353519][ T36] audit: type=1326 audit(1772319579.751:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14802 comm="syz.3.3508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x0 [ 298.799348][ T10] usb 2-1: USB disconnect, device number 22 [ 298.870554][T14826] program syz.1.3514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.918410][ T5806] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 299.068475][ T5806] usb 5-1: Using ep0 maxpacket: 16 [ 299.071945][ T5806] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 299.071972][ T5806] usb 5-1: config 0 has no interface number 0 [ 299.072015][ T5806] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.072037][ T5806] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 299.073966][ T5806] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 299.073993][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 299.074012][ T5806] usb 5-1: Product: syz [ 299.074025][ T5806] usb 5-1: SerialNumber: syz [ 299.082934][ T5806] usb 5-1: config 0 descriptor?? [ 299.134364][ T5806] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 299.139705][ T5806] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input21 [ 299.384363][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.384613][ T825] usb 5-1: USB disconnect, device number 22 [ 299.384722][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 299.428738][ T825] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 300.762927][T14902] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3537'. [ 302.708636][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 302.867957][T14991] ODEBUG: Out of memory. ODEBUG disabled [ 302.952432][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 302.956840][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.956866][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.994231][ T10] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 302.994263][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.994282][ T10] usb 4-1: Product: syz [ 302.994295][ T10] usb 4-1: Manufacturer: syz [ 302.994309][ T10] usb 4-1: SerialNumber: syz [ 303.508468][ T10] usb 4-1: config 0 descriptor?? [ 303.717036][ T9] usb 4-1: USB disconnect, device number 25 [ 305.117708][T15099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.414946][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3603'. [ 305.415059][T15129] tipc: Resetting bearer [ 305.451192][ T5802] Bluetooth: hci4: link tx timeout [ 305.451458][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.508696][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 305.512801][T15129] tipc: Disabling bearer [ 305.658448][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 305.660563][T15129] team0 (unregistering): Port device team_slave_0 removed [ 305.661650][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 305.663055][ T10] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 305.694627][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 305.694657][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.694676][ T10] usb 5-1: Product: syz [ 305.694690][ T10] usb 5-1: Manufacturer: syz [ 305.694704][ T10] usb 5-1: SerialNumber: syz [ 305.794245][T15129] team0 (unregistering): Port device team_slave_1 removed [ 305.848968][T15144] program syz.3.3610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.966288][ T10] usbtest 5-1:3.0: couldn't get endpoints, -22 [ 305.966375][ T10] usbtest 5-1:3.0: probe with driver usbtest failed with error -22 [ 305.998781][ T10] usb 5-1: USB disconnect, device number 23 [ 306.098398][ T809] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 306.184861][ T5802] Bluetooth: hci4: link tx timeout [ 306.184881][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.262534][ T809] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 306.262564][ T809] usb 3-1: config 160 has no interface number 0 [ 306.262610][ T809] usb 3-1: config 160 interface 200 has no altsetting 0 [ 306.267176][ T809] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 306.267205][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.267224][ T809] usb 3-1: Product: syz [ 306.267237][ T809] usb 3-1: Manufacturer: syz [ 306.267250][ T809] usb 3-1: SerialNumber: syz [ 306.535942][ T809] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.536015][ T809] usb 3-1: MIDIStreaming interface descriptor not found [ 306.762967][ T809] usb 3-1: USB disconnect, device number 18 [ 307.002988][ T6851] udevd[6851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.211371][T15244] cgroup: Unknown subsys name 'cpuset' [ 307.337414][T15255] autofs4:pid:15255:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1986356271.1937072943), cmd(0xc0189374) [ 307.337447][T15255] autofs4:pid:15255:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 307.463117][ T5802] Bluetooth: hci4: link tx timeout [ 307.463137][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 307.518750][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 307.518770][T15265] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 307.518770][T15265] The task syz.2.3634 (15265) triggered the difference, watch for misbehavior. [ 309.498747][T15369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3662'. [ 309.498771][T15369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3662'. [ 309.727834][T15388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3672'. [ 309.748110][T15388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3672'. [ 310.258484][ T5873] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 310.358405][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 310.410025][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.410052][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.411180][ T5873] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 310.411206][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 310.411224][ T5873] usb 4-1: SerialNumber: syz [ 310.542837][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 310.542866][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.542885][ T10] usb 2-1: Product: syz [ 310.542898][ T10] usb 2-1: Manufacturer: syz [ 310.542912][ T10] usb 2-1: SerialNumber: syz [ 310.580861][ T10] usb 2-1: config 0 descriptor?? [ 310.689076][ T5873] usb 4-1: 0:2 : does not exist [ 310.798913][ T5873] usb 4-1: USB disconnect, device number 26 [ 310.932015][ T8258] udevd[8258]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.990664][ T10] usb 2-1: Firmware: major: 101, minor: 191, hardware type: UNKNOWN (247) [ 311.197000][ T10] usb 2-1: failed to fetch extended address, random address set [ 311.197124][ T10] usb 2-1: atusb_probe: initialization failed, error = -524 [ 311.197956][ T10] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 311.244433][ T10] usb 2-1: USB disconnect, device number 23 [ 311.492876][T15476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3689'. [ 311.802773][T15488] sctp: [Deprecated]: syz.2.3694 (pid 15488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.802773][T15488] Use struct sctp_sack_info instead [ 312.084469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.762680][T15534] loop9: detected capacity change from 0 to 7 [ 312.781784][ T8258] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.781837][ T8258] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.781871][ T8258] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.781900][ T8258] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.781962][ T8258] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.782014][ T8258] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.782042][ T8258] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.782059][ T8258] ldm_validate_partition_table(): Disk read failed. [ 312.782084][ T8258] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.782112][ T8258] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.782138][ T8258] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.782169][ T8258] Dev loop9: unable to read RDB block 0 [ 312.782236][ T8258] loop9: unable to read partition table [ 312.782448][ T8258] loop9: partition table beyond EOD, truncated [ 312.789844][T15534] ldm_validate_partition_table(): Disk read failed. [ 312.789934][T15534] Dev loop9: unable to read RDB block 0 [ 312.790005][T15534] loop9: unable to read partition table [ 312.790186][T15534] loop9: partition table beyond EOD, truncated [ 312.790204][T15534] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 312.790204][T15534] ) failed (rc=-5) [ 313.165151][T15544] vlan2: entered promiscuous mode [ 313.165173][T15544] bond0: entered promiscuous mode [ 313.165186][T15544] bond_slave_0: entered promiscuous mode [ 313.165416][T15544] bond_slave_1: entered promiscuous mode [ 313.588435][ T5873] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 313.742782][ T5873] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 313.742812][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.742831][ T5873] usb 4-1: Product: syz [ 313.742843][ T5873] usb 4-1: Manufacturer: syz [ 313.742857][ T5873] usb 4-1: SerialNumber: syz [ 314.228685][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 314.388654][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 314.390971][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.391000][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.391023][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.391047][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.391087][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.391193][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.417306][ T5873] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 314.417364][ T5873] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 314.421417][ T5873] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 314.421484][ T5873] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 314.427885][ T5873] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 314.547519][ T5873] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 314.599117][ T5873] usb 4-1: USB disconnect, device number 27 [ 314.756915][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 314.756963][ T9] usbtmc 5-1:16.0: can't read capabilities [ 314.994926][ T9] usb 5-1: USB disconnect, device number 24 [ 316.508738][ T5873] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 316.664046][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 316.701337][ T5873] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 98, using maximum allowed: 30 [ 316.701382][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 316.701442][ T5873] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 316.701464][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.722419][ T5873] usb 4-1: config 0 descriptor?? [ 316.736810][ T5873] ums-jumpshot 4-1:0.0: USB Mass Storage device detected [ 316.784164][ T5873] ums-jumpshot 4-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 317.165343][ T36] audit: type=1326 audit(1772319598.551:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.1.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993e35c799 code=0x7fc00000 [ 317.165403][ T36] audit: type=1326 audit(1772319598.551:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.1.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f993e35c799 code=0x7fc00000 [ 317.165443][ T36] audit: type=1326 audit(1772319598.551:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.1.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993e35c799 code=0x7fc00000 [ 317.165482][ T36] audit: type=1326 audit(1772319598.551:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.1.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993e35c799 code=0x7fc00000 [ 317.165521][ T36] audit: type=1326 audit(1772319598.551:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.1.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993e35c799 code=0x7fc00000 [ 317.165560][ T36] audit: type=1326 audit(1772319598.551:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.1.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993e35c799 code=0x7fc00000 [ 317.165599][ T36] audit: type=1326 audit(1772319598.551:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.1.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993e35c799 code=0x7fc00000 [ 317.165637][ T36] audit: type=1326 audit(1772319598.551:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15714 comm="syz.1.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993e35c799 code=0x7fc00000 [ 317.207990][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.208056][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.235324][ T10] usb 4-1: USB disconnect, device number 28 [ 319.192248][T15820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3785'. [ 319.285353][T15824] netlink: 'syz.1.3788': attribute type 4 has an invalid length. [ 320.133931][T15872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3801'. [ 321.073152][T15931] loop5: detected capacity change from 0 to 7 [ 321.482833][T15931] Dev loop5: unable to read RDB block 7 [ 321.482890][T15931] loop5: unable to read partition table [ 321.483079][T15931] loop5: partition table beyond EOD, truncated [ 321.483118][T15931] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 321.623478][T15948] netlink: 'syz.3.3826': attribute type 4 has an invalid length. [ 322.159538][ T809] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 322.344699][ T809] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.344733][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 322.354138][ T809] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 322.354167][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.354186][ T809] usb 3-1: Product: syz [ 322.354199][ T809] usb 3-1: Manufacturer: syz [ 322.354212][ T809] usb 3-1: SerialNumber: syz [ 322.360772][ T809] usb 3-1: config 0 descriptor?? [ 322.363728][T15961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 322.603907][ T809] powermate: unknown product id 0240 [ 322.603927][ T809] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 322.631405][ T809] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 322.966713][ C1] powermate: config urb returned -71 [ 322.967723][ C1] powermate: config urb returned -71 [ 322.967924][ C1] powermate: config urb returned -71 [ 322.968130][ C1] powermate: config urb returned -71 [ 322.971611][ T809] usb 3-1: USB disconnect, device number 19 [ 322.971714][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 323.026384][ T5110] Bluetooth: Wrong link type (-57) [ 323.385628][T16019] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.3843'. [ 323.815112][T16040] pimreg3: entered allmulticast mode [ 323.821907][T16038] pimreg3: left allmulticast mode [ 323.922235][T16049] delete_channel: no stack [ 324.023017][ T36] audit: type=1326 audit(1772319605.421:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16055 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 324.023168][ T36] audit: type=1326 audit(1772319605.421:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16055 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 324.066321][T16058] binder: 16056:16058 unknown command 0 [ 324.066346][T16058] binder: 16056:16058 ioctl c0306201 200000000280 returned -22 [ 324.087554][ T36] audit: type=1326 audit(1772319605.481:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16055 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 324.087776][ T36] audit: type=1326 audit(1772319605.481:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16055 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 324.113346][ T36] audit: type=1326 audit(1772319605.481:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16055 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 324.113398][ T36] audit: type=1326 audit(1772319605.491:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16055 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 324.113437][ T36] audit: type=1326 audit(1772319605.491:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16055 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 324.113474][ T36] audit: type=1326 audit(1772319605.501:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16055 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 324.113510][ T36] audit: type=1326 audit(1772319605.501:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16055 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 324.113547][ T36] audit: type=1326 audit(1772319605.501:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16055 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc50cc799 code=0x7ffc0000 [ 324.898640][ T5844] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 325.062856][ T5844] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.062883][ T5844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 325.062903][ T5844] usb 4-1: config 1 has no interface number 0 [ 325.062944][ T5844] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.065269][ T5844] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.065297][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.065315][ T5844] usb 4-1: Product: syz [ 325.065329][ T5844] usb 4-1: Manufacturer: syz [ 325.065343][ T5844] usb 4-1: SerialNumber: syz [ 325.159502][ T5844] usb 4-1: selecting invalid altsetting 1 [ 325.564895][ T5844] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 325.564942][ T5844] cdc_ncm 4-1:1.1: bind() failure [ 325.598746][ T5844] usb 4-1: USB disconnect, device number 29 [ 326.358762][T16159] overlayfs: missing 'workdir' [ 326.364131][T16162] bridge0: entered promiscuous mode [ 326.364233][T16162] macvlan2: entered promiscuous mode [ 326.483248][T16172] program syz.3.3895 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.852860][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'. [ 326.854628][T16196] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3901'. [ 326.854665][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'. [ 327.063965][T16209] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3906'. [ 327.091273][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3905'. [ 327.091294][T16206] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3905'. [ 327.091315][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3905'. [ 327.336112][T16230] netlink: 'syz.0.3914': attribute type 16 has an invalid length. [ 327.336138][T16230] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3914'. [ 327.428447][ T5806] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 327.578442][ T5806] usb 2-1: Using ep0 maxpacket: 16 [ 327.582089][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.582121][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.582143][ T5806] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.582183][ T5806] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.582205][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.657476][ T5806] usb 2-1: config 0 descriptor?? [ 328.010210][T16252] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.3920'. [ 328.112256][ T5806] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 328.112293][ T5806] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 328.114416][ T5806] microsoft 0003:045E:07DA.0014: unbalanced collection at end of report description [ 328.115696][ T5806] microsoft 0003:045E:07DA.0014: parse failed [ 328.115798][ T5806] microsoft 0003:045E:07DA.0014: probe with driver microsoft failed with error -22 [ 328.205456][T16263] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3922'. [ 328.355610][ T5806] usb 2-1: USB disconnect, device number 24 [ 328.615294][T16290] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 329.309206][T16329] netlink: 'syz.2.3947': attribute type 11 has an invalid length. [ 329.521113][T16338] CUSE: unknown device info "" [ 329.521131][T16338] CUSE: unknown device info "/4n%kx [j& '|? F^A^CY _m@ֺ:&wun" [ 329.521142][T16338] CUSE: DEVNAME unspecified [ 330.598351][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 330.748446][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 330.751156][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.751187][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.751211][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.751241][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.751279][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.751301][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.072146][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 331.072194][ T9] usbtmc 3-1:16.0: can't read capabilities [ 331.276570][ T5844] usb 3-1: USB disconnect, device number 20 [ 331.953525][T16427] __nla_validate_parse: 1 callbacks suppressed [ 331.953546][T16427] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3974'. [ 332.502005][T16457] syz.0.3985 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 333.198967][ C0] ------------[ cut here ]------------ [ 333.198981][ C0] 1 [ 333.199000][ C0] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#0: ktimers/0/16 [ 333.199037][ C0] Modules linked in: [ 333.199060][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 333.199091][ C0] Tainted: [L]=SOFTLOCKUP [ 333.199098][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 333.199112][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 333.199132][ C0] Code: 0f 94 c0 5b 41 5e e9 05 1d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 333.199151][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 333.199168][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801c6f0000 [ 333.199183][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 333.199195][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 333.199208][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 333.199223][ C0] R13: 0000000100000c40 R14: 1ffff9200002af4c R15: ffff888065289f38 [ 333.199238][ C0] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 333.199253][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.199267][ C0] CR2: 00005555640af4e8 CR3: 000000003442a000 CR4: 00000000003526f0 [ 333.199285][ C0] Call Trace: [ 333.199293][ C0] [ 333.199302][ C0] call_timer_fn+0x192/0x640 [ 333.199322][ C0] ? __pfx_stub_timer+0x10/0x10 [ 333.199338][ C0] ? call_timer_fn+0xd4/0x640 [ 333.199354][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 333.199369][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 333.199409][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.199440][ C0] ? __pfx_stub_timer+0x10/0x10 [ 333.199462][ C0] __run_timer_base+0x6a3/0x9f0 [ 333.199511][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 333.199541][ C0] ? rt_spin_lock+0x1e0/0x400 [ 333.199583][ C0] run_timer_softirq+0xb7/0x170 [ 333.199616][ C0] handle_softirqs+0x1de/0x6f0 [ 333.199651][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 333.199680][ C0] run_ktimerd+0x69/0x100 [ 333.199714][ C0] smpboot_thread_fn+0x541/0xa50 [ 333.199748][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 333.199793][ C0] kthread+0x388/0x470 [ 333.199817][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 333.199849][ C0] ? __pfx_kthread+0x10/0x10 [ 333.199874][ C0] ret_from_fork+0x51e/0xb90 [ 333.199910][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 333.199940][ C0] ? __switch_to+0xc7d/0x1450 [ 333.199972][ C0] ? __pfx_kthread+0x10/0x10 [ 333.200004][ C0] ret_from_fork_asm+0x1a/0x30 [ 333.200045][ C0] [ 333.200061][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 333.200079][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 333.200109][ C0] Tainted: [L]=SOFTLOCKUP [ 333.200116][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 333.200129][ C0] Call Trace: [ 333.200137][ C0] [ 333.200146][ C0] vpanic+0x56c/0xa60 [ 333.200181][ C0] ? __pfx__printk+0x10/0x10 [ 333.200205][ C0] ? __pfx_vpanic+0x10/0x10 [ 333.200235][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 333.200267][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 333.200307][ C0] panic+0xc5/0xd0 [ 333.200339][ C0] ? __pfx_panic+0x10/0x10 [ 333.200382][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 333.200410][ C0] __warn+0x315/0x4f0 [ 333.200441][ C0] ? stub_timer+0xa/0x20 [ 333.200462][ C0] ? stub_timer+0xa/0x20 [ 333.200483][ C0] __report_bug+0x29a/0x540 [ 333.200520][ C0] ? stub_timer+0xa/0x20 [ 333.200540][ C0] ? __pfx___report_bug+0x10/0x10 [ 333.200567][ C0] ? add_lock_to_list+0xc7/0x100 [ 333.200595][ C0] ? lockdep_unlock+0x5d/0xd0 [ 333.200625][ C0] ? __lock_acquire+0x146e/0x2cf0 [ 333.200654][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 333.200685][ C0] ? stub_timer+0xa/0x20 [ 333.200704][ C0] report_bug+0x16a/0x220 [ 333.200733][ C0] ? stub_timer+0xa/0x20 [ 333.200749][ C0] ? stub_timer+0xc/0x20 [ 333.200767][ C0] handle_bug+0x98/0x200 [ 333.200802][ C0] exc_invalid_op+0x1a/0x50 [ 333.200834][ C0] asm_exc_invalid_op+0x1a/0x20 [ 333.200857][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 333.200876][ C0] Code: 0f 94 c0 5b 41 5e e9 05 1d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 333.200895][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 333.200914][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801c6f0000 [ 333.200931][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 333.200945][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 333.200959][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 333.200975][ C0] R13: 0000000100000c40 R14: 1ffff9200002af4c R15: ffff888065289f38 [ 333.201008][ C0] ? __pfx_stub_timer+0x10/0x10 [ 333.201030][ C0] ? stub_timer+0x9/0x20 [ 333.201056][ C0] ? stub_timer+0x9/0x20 [ 333.201073][ C0] call_timer_fn+0x192/0x640 [ 333.201094][ C0] ? __pfx_stub_timer+0x10/0x10 [ 333.201113][ C0] ? call_timer_fn+0xd4/0x640 [ 333.201133][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 333.201152][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 333.201195][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.201223][ C0] ? __pfx_stub_timer+0x10/0x10 [ 333.201246][ C0] __run_timer_base+0x6a3/0x9f0 [ 333.201295][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 333.201326][ C0] ? rt_spin_lock+0x1e0/0x400 [ 333.201369][ C0] run_timer_softirq+0xb7/0x170 [ 333.201403][ C0] handle_softirqs+0x1de/0x6f0 [ 333.201445][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 333.201477][ C0] run_ktimerd+0x69/0x100 [ 333.201512][ C0] smpboot_thread_fn+0x541/0xa50 [ 333.201548][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 333.201593][ C0] kthread+0x388/0x470 [ 333.201616][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 333.201648][ C0] ? __pfx_kthread+0x10/0x10 [ 333.201674][ C0] ret_from_fork+0x51e/0xb90 [ 333.201708][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 333.201738][ C0] ? __switch_to+0xc7d/0x1450 [ 333.201770][ C0] ? __pfx_kthread+0x10/0x10 [ 333.201795][ C0] ret_from_fork_asm+0x1a/0x30 [ 333.201835][ C0] [ 333.202228][ C0] Kernel Offset: disabled