last executing test programs: 21m36.116567757s ago: executing program 3 (id=122): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl', 0x800, 0x0) 21m36.083823575s ago: executing program 3 (id=125): openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs', 0x1, 0x0) 21m36.035559075s ago: executing program 3 (id=128): syz_open_dev$drirender(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$drirender(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$drirender(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$drirender(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$drirender(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$drirender(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$drirender(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$drirender(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$drirender(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$drirender(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$drirender(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$drirender(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$drirender(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$drirender(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$drirender(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$drirender(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$drirender(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$drirender(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$drirender(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$drirender(&(0x7f0000000500), 0x4, 0x800) 21m36.012281037s ago: executing program 3 (id=131): clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) exit(0x0) 21m35.960172617s ago: executing program 3 (id=134): pause() 21m32.004528588s ago: executing program 3 (id=259): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 51.896619538s ago: executing program 1 (id=23118): writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 49.952433455s ago: executing program 1 (id=23140): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1], 0x50) r0 = syz_io_uring_setup(0x104, &(0x7f00000000c0)={0x0, 0xc2ce, 0x10000, 0x0, 0x105}, &(0x7f0000003000), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002180)=[{0x0}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x229) 49.82642692s ago: executing program 1 (id=23141): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x844}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d09000000f9b718810007000000", @ANYRES32, @ANYBLOB="20000280", @ANYRES32, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES8], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 49.604674125s ago: executing program 1 (id=23143): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 48.723574857s ago: executing program 1 (id=23153): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000280)={0x1, 0x100, 0x7}) 48.434528322s ago: executing program 1 (id=23159): r0 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xcc3d, 0x400, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000480)={0x80, 0x0, 0x0, 0x0}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) 48.028943174s ago: executing program 32 (id=23159): r0 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xcc3d, 0x400, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000480)={0x80, 0x0, 0x0, 0x0}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) 3.587947915s ago: executing program 5 (id=23703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000040)="2ef2dd0500800000260f8e1b0000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b900980000b805000000b96d0000000f01d90f01c965470f01c4410f79d226450f01cb660f013b", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.522592397s ago: executing program 4 (id=23705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [{0x400000b2, 0xbc9faef6, 0xbf}, {0x6a7}]}) 3.360822458s ago: executing program 5 (id=23707): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lseek(r0, 0x2000, 0x0) 3.268885979s ago: executing program 4 (id=23710): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) 3.067902174s ago: executing program 5 (id=23713): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183880, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 2.018714358s ago: executing program 0 (id=23722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xb, 0x5, 0x40, 0x1003}]}) 1.95258203s ago: executing program 6 (id=23723): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x8, 0x1}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x2}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x401, 0x5}], 0x8) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 1.931072609s ago: executing program 4 (id=23724): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x3ff, 0x8, 0x9}, 0x10) 1.764800347s ago: executing program 6 (id=23725): socket(0x840000000002, 0x3, 0xfa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x12, 0x4, 0x4}], 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket(0x18, 0x3, 0x3) 1.749566101s ago: executing program 0 (id=23727): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x0, 0x9, 0x40, 0x8, 0x5a, 0x0, 0xff, 0x9, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000005c0)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) 1.623428062s ago: executing program 2 (id=23728): open$dir(0x0, 0x1, 0x19d) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 1.568647805s ago: executing program 0 (id=23729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) close(r0) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) 1.479974157s ago: executing program 2 (id=23730): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026", 0x39}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40880) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.449846113s ago: executing program 6 (id=23731): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x22, 0x2, 0x24) r0 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.44082152s ago: executing program 0 (id=23732): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x0, 0x10a) r1 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1.283203836s ago: executing program 2 (id=23733): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000060000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 1.182744372s ago: executing program 2 (id=23734): r0 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x40000001, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 1.115886232s ago: executing program 0 (id=23735): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 1.091792754s ago: executing program 6 (id=23736): r0 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x2012, r0, 0x1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 964.010072ms ago: executing program 4 (id=23737): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 877.204343ms ago: executing program 6 (id=23738): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x5, 0x3, 0x0, 0x5}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) socket(0xa, 0x800, 0xfffffffb) 735.065853ms ago: executing program 6 (id=23739): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) 692.569769ms ago: executing program 5 (id=23740): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000021) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 636.351921ms ago: executing program 2 (id=23741): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) 599.009458ms ago: executing program 4 (id=23742): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98", 0x34}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 460.446992ms ago: executing program 5 (id=23743): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r0, 0x1, 0x70bd0a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x464}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb, 0x77}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) 67.299933ms ago: executing program 5 (id=23744): unshare(0x26000400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 65.543512ms ago: executing program 4 (id=23745): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r0 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2) 36.250545ms ago: executing program 0 (id=23746): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x0, 0x0) tkill(r0, 0x1b) 0s ago: executing program 2 (id=23747): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x22}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) kernel console output (not intermixed with test programs): vblank_simulate: vblank timer overrun [ 1214.524453][ T9747] bond0: Removing last ns target with arp_interval on [ 1214.534892][ T4115] bond0: (slave bond7): interface is now down [ 1214.548151][ T9747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.598565][ T3978] bond0: (slave bond7): interface is now down [ 1214.659850][ T3978] bond0: (slave bond7): interface is now down [ 1214.682797][ T3978] bond0: now running without any active interface! [ 1215.934692][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21843'. [ 1215.989323][ T9825] ip6gre1: entered promiscuous mode [ 1216.016014][ T9825] ip6gre1: entered allmulticast mode [ 1216.070358][ T3940] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1216.091343][ T3940] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1216.101084][T28230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1216.486721][T28230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1216.927136][T28230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1217.649699][ T9885] syzkaller1: entered promiscuous mode [ 1217.666008][ T9885] syzkaller1: entered allmulticast mode [ 1218.052165][ T9909] input: syz1 as /devices/virtual/input/input224 [ 1218.376583][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1218.536868][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1218.549823][ T24] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1218.578812][ T24] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1218.595446][ T24] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1218.618047][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1218.632754][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1218.643659][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.664284][ T24] usb 6-1: Product: syz [ 1218.717874][ T24] usb 6-1: Manufacturer: syz [ 1218.724179][ T24] usb 6-1: SerialNumber: syz [ 1218.737010][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1218.737026][ T30] audit: type=1326 audit(1764844105.160:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.2.21883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54a778f749 code=0x0 [ 1218.926492][T28230] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1219.027532][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1219.111606][T28230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.160602][T28230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.183830][T28230] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1219.209806][T28230] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1219.221376][T28230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.241681][T28230] usb 5-1: config 0 descriptor?? [ 1219.649819][ T24] usb 6-1: USB disconnect, device number 28 [ 1219.658759][ T9975] netlink: 'syz.2.21890': attribute type 4 has an invalid length. [ 1219.681293][ T24] usblp0: removed [ 1219.682438][T28230] plantronics 0003:047F:FFFF.00C7: reserved main item tag 0xe [ 1219.727399][T28230] plantronics 0003:047F:FFFF.00C7: unknown main item tag 0x0 [ 1219.761866][T28230] plantronics 0003:047F:FFFF.00C7: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1219.937987][T28230] usb 5-1: USB disconnect, device number 15 [ 1219.956304][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1220.866681][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1221.016730][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1221.029619][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1221.044020][ T24] usb 5-1: config 0 has no interface number 0 [ 1221.053988][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1221.064771][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.073808][ T24] usb 5-1: Product: syz [ 1221.080154][ T24] usb 5-1: Manufacturer: syz [ 1221.084828][ T24] usb 5-1: SerialNumber: syz [ 1221.098534][ T24] usb 5-1: config 0 descriptor?? [ 1221.109528][ T24] smsc95xx v2.0.0 [ 1221.516715][ T9130] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1221.678913][ T9130] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.691243][ T9130] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1221.701437][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21911'. [ 1221.707859][ T9130] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1221.720732][T10066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21911'. [ 1221.733010][ T9130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.742417][ T9130] usb 6-1: Product: syz [ 1221.747198][ T9130] usb 6-1: Manufacturer: syz [ 1221.752932][ T9130] usb 6-1: SerialNumber: syz [ 1221.777243][ T9130] cdc_mbim 6-1:1.0: skipping garbage [ 1221.988541][T10051] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1222.136315][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1222.163596][T10084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1222.172085][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1222.183096][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1222.197710][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1222.231536][ T24] usb 5-1: USB disconnect, device number 16 [ 1222.568426][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21918'. [ 1222.608353][T10051] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1222.627047][ T9130] cdc_mbim 6-1:1.0: setting rx_max = 16384 [ 1222.835318][ T9130] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 1222.875415][ T9130] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1222.947093][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21923'. [ 1222.950860][ T9130] wwan wwan0: port wwan0mbim0 attached [ 1222.984865][ T9130] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, ce:59:a8:6f:96:ec [ 1223.062454][ T9130] usb 6-1: USB disconnect, device number 29 [ 1223.115081][ T9130] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1223.143372][T20373] IPVS: starting estimator thread 0... [ 1223.227492][ T9130] wwan wwan0: port wwan0mbim0 disconnected [ 1223.237283][T10162] IPVS: using max 31 ests per chain, 74400 per kthread [ 1223.486384][T28230] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1223.524991][T10194] macvlan1: entered promiscuous mode [ 1223.539858][T10194] macvlan1: left promiscuous mode [ 1223.656406][T28230] usb 3-1: Using ep0 maxpacket: 8 [ 1223.672313][T28230] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1223.692338][T28230] usb 3-1: config 0 has no interface number 0 [ 1223.704248][T28230] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1223.720437][T28230] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1223.732939][T28230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.753978][T28230] usb 3-1: config 0 descriptor?? [ 1223.783423][T28230] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1224.004402][T28230] usb 3-1: USB disconnect, device number 31 [ 1224.179738][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21944'. [ 1224.197547][T10245] netlink: 'syz.1.21944': attribute type 7 has an invalid length. [ 1224.207288][T10245] netlink: 'syz.1.21944': attribute type 8 has an invalid length. [ 1224.215673][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21944'. [ 1224.476670][ T9130] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1224.679702][ T9130] usb 6-1: Using ep0 maxpacket: 8 [ 1224.688032][ T9130] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1224.705042][ T9130] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1224.742415][ T9130] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1224.772507][ T9130] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1224.789421][ T9130] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1224.805367][ T9130] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1224.815719][ T9130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.842278][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21956'. [ 1225.226312][T28230] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1225.305968][T10323] netlink: 7 bytes leftover after parsing attributes in process `syz.1.21965'. [ 1225.321381][T10323] netlink: 7 bytes leftover after parsing attributes in process `syz.1.21965'. [ 1225.418488][T28230] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1225.432457][T28230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.451451][T28230] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1225.462303][T28230] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1225.471446][T28230] usb 5-1: Manufacturer: syz [ 1225.497569][T28230] usb 5-1: config 0 descriptor?? [ 1225.586419][T28230] rc_core: IR keymap rc-hauppauge not found [ 1225.621456][T10335] usbtmc 6-1:16.0: simple control status returned 4b [ 1225.623421][T28230] Registered IR keymap rc-empty [ 1225.652001][T28230] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1225.675775][T28230] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input226 [ 1225.839254][ T9130] usb 6-1: USB disconnect, device number 30 [ 1226.422258][ T24] usb 5-1: USB disconnect, device number 17 [ 1226.739991][T10382] syzkaller1: entered promiscuous mode [ 1226.757503][T10382] syzkaller1: entered allmulticast mode [ 1226.876722][T28230] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1226.896313][T10389] netlink: 'syz.0.21977': attribute type 1 has an invalid length. [ 1227.010753][T10389] bond1: entered promiscuous mode [ 1227.028481][T10389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1227.052661][T28230] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1227.061817][T28230] usb 2-1: config 0 has no interface number 0 [ 1227.069870][T28230] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1227.082492][T28230] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1227.092211][T28230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.101243][T28230] usb 2-1: Product: syz [ 1227.107131][T28230] usb 2-1: Manufacturer: syz [ 1227.112505][T28230] usb 2-1: SerialNumber: syz [ 1227.127854][T28230] usb 2-1: config 0 descriptor?? [ 1227.135818][T10408] bond1: (slave bridge1): making interface the new active one [ 1227.165484][T10408] bridge1: entered promiscuous mode [ 1227.176995][ T9130] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1227.190049][T10408] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1227.246243][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1227.326423][ T9130] usb 3-1: Using ep0 maxpacket: 32 [ 1227.334535][ T9130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.356945][ T9130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.387698][ T9130] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1227.416642][ T9130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.453351][ T9130] usb 3-1: config 0 descriptor?? [ 1227.864211][T10470] input: syz0 as /devices/virtual/input/input227 [ 1227.920781][ T9130] savu 0003:1E7D:2D5A.00C8: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1228.163217][T28230] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1228.189685][ T9130] usb 3-1: USB disconnect, device number 32 [ 1228.194294][T28230] usb 2-1: USB disconnect, device number 27 [ 1229.740563][ T5465] syz_tun (unregistering): left allmulticast mode [ 1229.757080][ T5465] syz_tun (unregistering): left promiscuous mode [ 1229.776196][ T5465] bridge0: port 3(syz_tun) entered disabled state [ 1230.439727][T10601] netlink: 'syz.2.22018': attribute type 13 has an invalid length. [ 1230.691115][ T6178] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1230.705194][ T6178] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1230.715766][ T6178] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1230.725596][ T6178] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1230.738297][ T6178] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1231.185960][T10620] chnl_net:caif_netlink_parms(): no params data found [ 1231.455700][T10801] tap0: tun_chr_ioctl cmd 1074025675 [ 1231.462630][T10801] tap0: persist enabled [ 1231.470863][T10774] tap0: tun_chr_ioctl cmd 1074025675 [ 1231.480060][T10774] tap0: persist disabled [ 1231.485400][T10620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.507541][T10620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.519411][T10620] bridge_slave_0: entered allmulticast mode [ 1231.529639][T10620] bridge_slave_0: entered promiscuous mode [ 1231.578625][T10620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.599921][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.615435][T10620] bridge_slave_1: entered allmulticast mode [ 1231.625243][T10620] bridge_slave_1: entered promiscuous mode [ 1231.690284][T10786] netlink: 'syz.2.22030': attribute type 6 has an invalid length. [ 1231.780219][T10620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.819982][T10620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.933029][T10620] team0: Port device team_slave_0 added [ 1231.959274][T10620] team0: Port device team_slave_1 added [ 1232.089768][T10620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.109663][T10915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1232.127541][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.166410][T10620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.184126][T10620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.195347][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.223034][ C0] vkms_vblank_simulate: vblank timer overrun [ 1232.232699][T10620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.511945][T10620] hsr_slave_0: entered promiscuous mode [ 1232.697725][T10620] hsr_slave_1: entered promiscuous mode [ 1232.713658][T10620] debugfs: 'hsr0' already exists in 'hsr' [ 1232.729173][T10620] Cannot create hsr debugfs directory [ 1232.756927][ T6178] Bluetooth: hci1: command tx timeout [ 1232.859690][ T30] audit: type=1326 audit(1764844119.280:8978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.5.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfab8f749 code=0x7ffc0000 [ 1232.917563][ T30] audit: type=1326 audit(1764844119.310:8979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.5.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfab8f749 code=0x7ffc0000 [ 1232.949075][ T30] audit: type=1326 audit(1764844119.310:8980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.5.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7facfab8f749 code=0x7ffc0000 [ 1232.975267][ T30] audit: type=1326 audit(1764844119.310:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.5.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfab8f749 code=0x7ffc0000 [ 1233.010611][ T30] audit: type=1326 audit(1764844119.310:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.5.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfab8f749 code=0x7ffc0000 [ 1233.109132][ T30] audit: type=1326 audit(1764844119.310:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.5.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7facfab8f749 code=0x7ffc0000 [ 1233.138735][ T30] audit: type=1326 audit(1764844119.310:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.5.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfab8f749 code=0x7ffc0000 [ 1233.163510][ T30] audit: type=1326 audit(1764844119.310:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.5.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfab8f749 code=0x7ffc0000 [ 1233.297128][ T30] audit: type=1326 audit(1764844119.310:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.5.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7facfab8f749 code=0x7ffc0000 [ 1233.356601][ T30] audit: type=1326 audit(1764844119.310:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.5.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfab8f749 code=0x7ffc0000 [ 1233.520035][T10620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.545250][T10620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.686855][T10620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.713350][T10620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.844305][T10620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.859388][T10620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.007891][T10620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.018753][T10620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.121561][T11094] tmpfs: Unknown parameter 'ZmHSuLVόGU9Q1' [ 1234.274247][T10620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1234.300375][T10620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1234.335475][T10620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1234.342231][T11113] input: syz0 as /devices/virtual/input/input228 [ 1234.388093][T10620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1234.430415][T20373] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1234.799883][T10620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.838007][ T6178] Bluetooth: hci1: command tx timeout [ 1234.852212][T10620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.911765][T26708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.920724][T26708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.009464][T26708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.017692][T26708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.062744][T11173] batadv_slave_1: entered promiscuous mode [ 1235.088040][T11171] batadv_slave_1: left promiscuous mode [ 1235.285920][T10620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.403001][T10620] veth0_vlan: entered promiscuous mode [ 1235.420740][T10620] veth1_vlan: entered promiscuous mode [ 1235.464577][T10620] veth0_macvtap: entered promiscuous mode [ 1235.474669][T10620] veth1_macvtap: entered promiscuous mode [ 1235.508948][T10620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.535029][T10620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.565134][ T3978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.576690][ T3978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.597092][ T3978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.607605][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1235.618041][ T3978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.646635][ T1852] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1235.768520][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.786946][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1235.807873][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1235.819620][ T1852] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1235.837468][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1235.845754][ T24] usb 3-1: SerialNumber: syz [ 1235.853056][ T1852] usb 5-1: config 0 has no interface number 0 [ 1235.862250][ T1852] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1235.888026][ T1852] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1235.916957][ T1852] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1235.924385][ T1852] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1235.946363][ T1852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.959484][ T1852] usb 5-1: config 0 descriptor?? [ 1235.977377][ T1852] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 1236.101308][ T24] usb 3-1: 0:2 : does not exist [ 1236.132918][ T24] usb 3-1: USB disconnect, device number 33 [ 1236.177259][T28230] usb 5-1: USB disconnect, device number 18 [ 1236.198834][T15602] udevd[15602]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1236.596844][ T6178] Bluetooth: hci0: command 0x0c1a tx timeout [ 1236.605691][T20373] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1236.626654][T20373] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1236.918307][ T6178] Bluetooth: hci1: command tx timeout [ 1238.082561][T11283] netlink: 'syz.4.22097': attribute type 6 has an invalid length. [ 1238.093857][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22097'. [ 1238.758749][T20373] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1238.771367][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.780359][ T6178] Bluetooth: hci4: command 0x0c1a tx timeout [ 1238.796769][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.812681][T20373] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1238.996442][ T6184] Bluetooth: hci1: command tx timeout [ 1240.840975][ T6184] Bluetooth: hci4: command 0x0c1a tx timeout [ 1241.326331][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1242.917130][T20373] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1242.923773][T20373] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1242.926376][ T6178] Bluetooth: hci1: command 0x0c1a tx timeout [ 1243.131229][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.155390][T11347] sctp: [Deprecated]: syz.0.22102 (pid 11347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1243.155390][T11347] Use struct sctp_sack_info instead [ 1243.178418][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.233776][ T3978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.269460][ T3978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.768455][T11382] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.22111'. [ 1244.248956][T11407] input: syz0 as /devices/virtual/input/input229 [ 1244.395479][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1244.395506][ T30] audit: type=1326 audit(1764844130.810:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11416 comm="syz.2.22124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54a778f749 code=0x0 [ 1245.283752][T11433] input: syz0 as /devices/virtual/input/input230 [ 1245.952302][T11462] input: syz1 as /devices/virtual/input/input231 [ 1246.004267][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22140'. [ 1246.594716][T11490] lo: Caught tx_queue_len zero misconfig [ 1246.835653][T11506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1247.176453][ T6255] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1247.336609][ T6255] usb 6-1: Using ep0 maxpacket: 16 [ 1247.345011][ T6255] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.357909][ T6255] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.376580][ T6255] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1247.387371][ T6255] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1247.407570][ T6255] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1247.417553][ T6255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1247.426161][ T6255] usb 6-1: SerialNumber: syz [ 1247.445996][ T6255] hub 6-1:1.0: bad descriptor, ignoring hub [ 1247.455731][ T6255] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1247.464782][ T6255] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1247.871601][T11499] raw-gadget.1 gadget.5: fail, usb_ep_set_halt returned -11 [ 1247.996779][ T6255] usb 6-1: USB disconnect, device number 31 [ 1248.782395][ T30] audit: type=1326 audit(1764844135.200:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.5.22180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfab8f749 code=0x7fc00000 [ 1248.816976][T20373] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1248.986148][T20373] usb 3-1: Using ep0 maxpacket: 8 [ 1248.995641][T20373] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1249.007279][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1249.036128][T20373] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1249.056533][T20373] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1249.071293][T20373] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1249.085598][T20373] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1249.125487][T20373] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1249.143512][T20373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.371361][ T30] audit: type=1326 audit(1764844135.790:8994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.5.22180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facfab2b829 code=0x7fc00000 [ 1249.438363][T20373] usb 3-1: usb_control_msg returned -32 [ 1249.464321][T20373] usbtmc 3-1:16.0: can't read capabilities [ 1249.835060][T11643] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1249.870969][ T6255] usb 3-1: USB disconnect, device number 34 [ 1250.221063][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22194'. [ 1250.243007][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22194'. [ 1250.876423][ T1859] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1251.050293][ T1859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.116891][ T1859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.135594][ T1859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1251.170566][ T1859] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1251.182903][ T1859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.214421][ T1859] usb 5-1: config 0 descriptor?? [ 1251.254545][T11693] netlink: 104 bytes leftover after parsing attributes in process `syz.2.22207'. [ 1251.349914][T11696] input: syz0 as /devices/virtual/input/input232 [ 1251.408385][ T9130] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1251.579101][ T9130] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.619257][ T9130] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.649925][ T9130] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1251.676769][ T1859] plantronics 0003:047F:FFFF.00C9: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1251.712013][ T9130] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1251.731429][ T9130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.763893][ T9130] usb 6-1: config 0 descriptor?? [ 1251.935851][ T1859] usb 5-1: USB disconnect, device number 19 [ 1252.227435][ T9130] plantronics 0003:047F:FFFF.00CA: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1252.254187][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22214'. [ 1252.268790][T11741] netlink: 'syz.1.22214': attribute type 30 has an invalid length. [ 1252.292790][ T3940] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.305217][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22214'. [ 1252.316683][T11741] netlink: 'syz.1.22214': attribute type 30 has an invalid length. [ 1252.340142][ T3940] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.350671][ T3940] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.363920][ T3940] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.492620][ T9134] usb 6-1: USB disconnect, device number 32 [ 1252.892444][T11782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1253.150935][T11809] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.22228'. [ 1253.246229][T20373] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1253.433844][T20373] usb 3-1: Using ep0 maxpacket: 8 [ 1253.443724][T20373] usb 3-1: config 162 has an invalid interface number: 197 but max is 0 [ 1253.467069][T20373] usb 3-1: config 162 has no interface number 0 [ 1253.474737][T20373] usb 3-1: config 162 interface 197 has no altsetting 0 [ 1253.518046][T20373] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 1253.546613][T20373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.554901][T20373] usb 3-1: Product: syz [ 1253.581651][T20373] usb 3-1: Manufacturer: syz [ 1253.595253][T20373] usb 3-1: SerialNumber: syz [ 1253.826529][ T1859] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1254.013819][ T1859] usb 6-1: config 0 has no interfaces? [ 1254.022749][ T1859] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1254.038815][ T1859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.049027][T11793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.068308][T11793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.070172][ T1859] usb 6-1: config 0 descriptor?? [ 1254.120359][T20373] usb 3-1: USB disconnect, device number 35 [ 1254.205094][T11883] binder: 11882:11883 ioctl c0306201 2000000003c0 returned -14 [ 1254.401822][T20373] usb 6-1: USB disconnect, device number 33 [ 1254.812979][T11918] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 1254.824374][T11918] batadv_slave_0: entered promiscuous mode [ 1254.832012][T11918] batadv_slave_0: left promiscuous mode [ 1254.840272][T11918] mac80211_hwsim hwsim39 wlan0: left promiscuous mode [ 1256.006388][ T1859] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 1256.169310][ T1859] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1256.186269][ T1859] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1256.200457][ T1859] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1256.215624][ T1859] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1256.228688][ T1859] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1256.240422][T20373] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1256.256884][ T1859] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1256.267528][ T1859] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1256.284521][ T1859] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1256.297079][ T1859] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1256.309767][ T1859] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1256.322981][ T1859] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1256.341945][ T1859] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1256.363524][ T1859] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1256.383141][ T1859] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1256.396535][ T1859] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1256.396979][T20373] usb 5-1: Using ep0 maxpacket: 16 [ 1256.412440][ T1859] usb 2-1: string descriptor 0 read error: -22 [ 1256.422919][ T1859] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1256.425877][T20373] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.433311][ T1859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.460141][T20373] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1256.482845][ T1859] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1256.498617][T20373] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1256.511023][T20373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.526877][T20373] usb 5-1: Product: syz [ 1256.544378][T20373] usb 5-1: Manufacturer: syz [ 1256.550803][T20373] usb 5-1: SerialNumber: syz [ 1256.690272][ T1859] usb 2-1: USB disconnect, device number 28 [ 1256.757102][ T9130] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1256.807857][T20373] usb 5-1: 0:2 : does not exist [ 1256.813058][T20373] usb 5-1: unit 6 not found! [ 1256.831517][T20373] usb 5-1: USB disconnect, device number 20 [ 1256.900753][T11963] adutux: No device or device unplugged -19 [ 1256.919208][ T9130] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1256.930606][ T9130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.942327][ T9130] usb 3-1: config 0 descriptor?? [ 1256.958744][ T9130] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1257.360457][ T9130] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1257.666308][ T6255] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1257.703021][T12069] cifs: Unknown parameter 'f,' [ 1257.778038][ T9130] gspca_cpia1: usb_control_msg 02, error -32 [ 1257.795224][T12074] input: syz0 as /devices/virtual/input/input234 [ 1257.805429][ T9130] gspca_cpia1: usb_control_msg 02, error -71 [ 1257.813988][ T9130] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1257.829786][ T9130] usb 3-1: USB disconnect, device number 36 [ 1257.838718][ T6255] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1257.857371][ T6255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1257.887330][ T6255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1257.907856][ T6255] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1257.956969][ T6255] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1257.974229][ T6255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.001320][ T6255] usb 5-1: config 0 descriptor?? [ 1258.448706][ T6255] plantronics 0003:047F:FFFF.00CB: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1258.490543][T12115] netlink: 6 bytes leftover after parsing attributes in process `syz.2.22299'. [ 1258.527111][T12115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1259.716530][ T6255] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1259.896394][ T6255] usb 3-1: Using ep0 maxpacket: 16 [ 1259.909617][ T6255] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1259.936428][ T6255] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.948490][ T6255] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1259.962127][ T6255] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1259.972077][ T6255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.982437][ T6255] usb 3-1: Product: syz [ 1259.987655][ T6255] usb 3-1: Manufacturer: syz [ 1259.992423][ T6255] usb 3-1: SerialNumber: syz [ 1260.392739][T12249] syzkaller1: entered promiscuous mode [ 1260.401762][T12249] syzkaller1: entered allmulticast mode [ 1260.409111][ T6255] usb 3-1: 0:2 : does not exist [ 1260.533238][ T1852] usb 5-1: USB disconnect, device number 21 [ 1261.052364][ T6255] usb 3-1: USB disconnect, device number 37 [ 1261.099030][ T1852] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1261.287853][ T1852] usb 2-1: Using ep0 maxpacket: 16 [ 1261.298299][ T1852] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.326711][ T1852] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.354273][ T1852] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1261.371130][ T1852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1261.378590][ T1852] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1261.390279][ T1852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.403919][ T1852] usb 2-1: config 0 descriptor?? [ 1262.025121][ T6255] usb 2-1: USB disconnect, device number 29 [ 1262.696456][ T9134] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1262.801435][T12402] syzkaller1: entered promiscuous mode [ 1262.810022][T12402] syzkaller1: entered allmulticast mode [ 1262.858412][ T9134] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1262.869067][ T9134] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1262.876638][ T1852] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1262.881405][ T9134] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1262.898391][ T9134] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1262.912436][ T9134] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1262.932481][ T9134] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1262.942891][ T9134] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1262.956450][ T9134] usb 5-1: Product: syz [ 1262.960838][ T9134] usb 5-1: Manufacturer: syz [ 1262.970668][T12412] bond_slave_0: entered promiscuous mode [ 1262.977032][T12412] bond_slave_1: entered promiscuous mode [ 1262.982299][ T9134] cdc_wdm 5-1:1.0: skipping garbage [ 1262.986544][T12411] bond_slave_0: left promiscuous mode [ 1262.994959][T12411] bond_slave_1: left promiscuous mode [ 1263.002009][ T9134] cdc_wdm 5-1:1.0: skipping garbage [ 1263.025925][ T9134] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1263.032954][ T9134] cdc_wdm 5-1:1.0: Unknown control protocol [ 1263.050376][ T1852] usb 6-1: Using ep0 maxpacket: 32 [ 1263.056928][ T6255] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1263.069193][ T1852] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1263.081680][ T1852] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1263.091905][ T1852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.102108][ T1852] usb 6-1: Product: syz [ 1263.106892][ T1852] usb 6-1: Manufacturer: syz [ 1263.111921][ T1852] usb 6-1: SerialNumber: syz [ 1263.119695][ T1852] usb 6-1: config 0 descriptor?? [ 1263.190684][ C0] wdm_int_callback: 187 callbacks suppressed [ 1263.190707][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1263.203618][ C0] wdm_int_callback: 187 callbacks suppressed [ 1263.203642][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1263.217859][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1263.225193][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1263.231665][ T1859] usb 5-1: USB disconnect, device number 22 [ 1263.238716][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1263.238754][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1263.238773][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1263.262854][ T6255] usb 2-1: Using ep0 maxpacket: 8 [ 1263.281264][ T6255] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1263.295741][ T6255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.304701][ T6255] usb 2-1: Product: syz [ 1263.309417][ T6255] usb 2-1: Manufacturer: syz [ 1263.314751][ T6255] usb 2-1: SerialNumber: syz [ 1263.326526][ T9134] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1263.340467][ T6255] usb 2-1: config 0 descriptor?? [ 1263.350469][ T6255] option 2-1:0.0: GSM modem (1-port) converter detected [ 1263.489693][ T9134] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1263.500806][ T9134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.522123][ T9134] usb 3-1: config 0 descriptor?? [ 1263.540611][ T1852] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1263.548850][ T9134] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1263.573230][ T6255] usb 2-1: USB disconnect, device number 30 [ 1263.583154][ T6255] option 2-1:0.0: device disconnected [ 1264.145588][ T9134] gspca_cpia1: usb_control_msg 01, error -32 [ 1264.177337][ T9134] gspca_cpia1: usb_control_msg 01, error -71 [ 1264.179637][ T1852] usb 6-1: USB disconnect, device number 34 [ 1264.184947][ T9134] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1264.229543][ T9134] usb 3-1: USB disconnect, device number 38 [ 1266.234557][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22396'. [ 1266.292938][ T30] audit: type=1326 audit(1764844152.710:8995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.5.22397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facfab8f749 code=0x0 [ 1266.706644][T20373] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1266.876834][T20373] usb 3-1: Using ep0 maxpacket: 32 [ 1266.913868][T20373] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.968154][T20373] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.981184][T20373] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1266.991110][T20373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.993766][T20373] usb 3-1: config 0 descriptor?? [ 1267.468559][T12643] netlink: 40 bytes leftover after parsing attributes in process `syz.5.22404'. [ 1267.498305][T20373] savu 0003:1E7D:2D5A.00CD: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1267.744458][T20373] usb 3-1: USB disconnect, device number 39 [ 1268.197753][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1269.495262][ T30] audit: type=1326 audit(1764844155.910:8996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.0.22436" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fc3d8f749 code=0x0 [ 1269.896846][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22441'. [ 1269.913958][T12761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.922894][ T1859] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1270.065568][T12761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.106525][ T1859] usb 6-1: Using ep0 maxpacket: 16 [ 1270.114218][ T1859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.138697][ T1859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.160867][ T1859] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1270.200906][ T1859] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1270.236450][ T1859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.265953][ T1859] usb 6-1: config 0 descriptor?? [ 1270.732567][ T1859] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.00CE/input/input236 [ 1270.882981][ T1859] appleir 0003:05AC:8241.00CE: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 1270.960776][ T1859] usb 6-1: USB disconnect, device number 35 [ 1271.131649][T12799] fido_id[12799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1271.887487][ T30] audit: type=1326 audit(1764844158.310:8997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12851 comm="syz.4.22463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0324f8f749 code=0x0 [ 1272.084177][T12862] netlink: 'syz.0.22467': attribute type 4 has an invalid length. [ 1272.097850][T12862] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22467'. [ 1272.358169][T12874] tmpfs: Unknown parameter 'smax' [ 1272.851740][T12899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1273.143089][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22488'. [ 1273.256659][T20373] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1273.446908][T20373] usb 5-1: Using ep0 maxpacket: 32 [ 1273.462576][T20373] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1273.493153][T20373] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1273.515016][T20373] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1273.551379][T20373] usb 5-1: config 1 has no interface number 0 [ 1273.578765][T20373] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1273.592037][T20373] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 1273.605987][T20373] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1273.634333][T20373] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1273.663640][T20373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.680379][T12938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1273.690273][T12915] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1273.757246][T20373] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1273.896371][ T1852] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1273.942830][T12915] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1273.958488][T20373] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1274.046814][ T1859] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1274.069589][ T1852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1274.082968][ T1852] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1274.095405][ T1852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.101892][T12971] netlink: 'syz.2.22500': attribute type 1 has an invalid length. [ 1274.113375][T12971] netlink: 76 bytes leftover after parsing attributes in process `syz.2.22500'. [ 1274.117607][ T1852] usb 2-1: config 0 descriptor?? [ 1274.146609][T12942] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1274.179214][ T6255] usb 5-1: USB disconnect, device number 23 [ 1274.199289][ T6255] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1274.209284][ T1859] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1274.227459][ T1859] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1274.239374][ T1859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1274.259363][ T1859] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1274.290628][ T1859] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1274.312785][ T1859] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1274.326513][ T1859] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1274.343082][ T1859] usb 6-1: Product: syz [ 1274.348164][ T1859] usb 6-1: Manufacturer: syz [ 1274.378971][ T1859] cdc_wdm 6-1:1.0: skipping garbage [ 1274.398149][ T1859] cdc_wdm 6-1:1.0: skipping garbage [ 1274.414188][ T1859] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1274.426685][ T1859] cdc_wdm 6-1:1.0: Unknown control protocol [ 1274.516589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 1274.609120][ T1852] elan 0003:04F3:0755.00CF: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1274.800896][ T1852] usb 2-1: USB disconnect, device number 31 [ 1275.339993][ T1859] usb 6-1: USB disconnect, device number 36 [ 1275.603218][ T1852] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 1275.619817][ T1852] hid-generic 0000:0000:0000.00D0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1276.266660][ T1852] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1276.976306][ T1852] usb 5-1: Using ep0 maxpacket: 8 [ 1277.010833][T13125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22531'. [ 1277.016630][ T1852] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1277.071730][ T1852] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1277.096855][ T1852] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1277.127036][ T1852] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1277.154989][ T1852] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1277.171285][ T1852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.402917][ T1852] usb 5-1: GET_CAPABILITIES returned 0 [ 1277.422118][ T1852] usbtmc 5-1:16.0: can't read capabilities [ 1277.571146][T20373] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1277.649670][ T9134] usb 5-1: USB disconnect, device number 24 [ 1277.768810][T20373] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1277.782279][T20373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1277.794848][T20373] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1277.818398][T20373] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1277.838896][T20373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.856196][T20373] usb 2-1: Product: syz [ 1277.860464][T20373] usb 2-1: Manufacturer: syz [ 1277.865174][T20373] usb 2-1: SerialNumber: syz [ 1277.887485][T20373] usb 2-1: config 0 descriptor?? [ 1277.893983][T13139] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1278.121312][T13139] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1278.374861][T20373] usb 2-1: USB disconnect, device number 32 [ 1278.558266][ T9134] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1278.634303][T13220] input: syz0 as /devices/virtual/input/input237 [ 1278.741317][ T9134] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1278.756699][ T9134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.776176][ T9134] usb 6-1: Product: syz [ 1278.780518][ T9134] usb 6-1: Manufacturer: syz [ 1278.785132][ T9134] usb 6-1: SerialNumber: syz [ 1278.794293][ T9134] usb 6-1: config 0 descriptor?? [ 1279.413877][ T9134] mos7840 6-1:0.0: required endpoints missing [ 1279.436830][ T9134] usb 6-1: USB disconnect, device number 37 [ 1279.516746][T20373] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1279.686311][T20373] usb 5-1: Using ep0 maxpacket: 8 [ 1279.693689][T20373] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1279.703477][T20373] usb 5-1: config 179 has no interface number 0 [ 1279.710738][T20373] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1279.729743][T20373] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1279.742688][T20373] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1279.757967][T20373] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1279.786625][T20373] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1279.812284][T20373] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1279.833466][T20373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.861559][T13250] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1280.024458][T13281] syzkaller1: entered promiscuous mode [ 1280.032217][T13281] syzkaller1: entered allmulticast mode [ 1280.130984][T20373] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input238 [ 1280.328685][ T1859] usb 5-1: USB disconnect, device number 25 [ 1280.328779][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1280.343302][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1280.890357][ T1859] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1281.046402][ T1859] usb 2-1: Using ep0 maxpacket: 16 [ 1281.059808][ T1859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.077910][ T1859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1281.095139][ T1859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1281.115034][ T1859] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1281.125297][ T1859] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1281.141601][ T1859] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1281.151479][ T1859] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1281.163368][ T1859] usb 2-1: Manufacturer: syz [ 1281.186891][ T1859] usb 2-1: config 0 descriptor?? [ 1281.487422][ T1859] rc_core: IR keymap rc-hauppauge not found [ 1281.498105][ T1859] Registered IR keymap rc-empty [ 1281.503153][ T1859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1281.526229][ T1859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1281.549379][ T1859] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1281.578089][ T1859] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input240 [ 1281.603225][ T1859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1281.637267][ T1859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1281.676476][ T1859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1281.696703][ T1859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1281.716485][ T1859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1281.749371][ T1859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1281.790403][ T1859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1281.816458][ T1859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1281.846256][ T1859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1281.880181][ T1859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1281.911179][ T1859] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1281.933065][ T1859] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1281.962528][ T1859] usb 2-1: USB disconnect, device number 33 [ 1282.413448][T13444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22609'. [ 1282.488220][T20373] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1282.676121][T20373] usb 5-1: Using ep0 maxpacket: 32 [ 1282.684129][T20373] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1282.699336][T20373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.719620][T20373] usb 5-1: config 0 descriptor?? [ 1282.956641][T20373] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1282.983144][T20373] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1283.027736][T20373] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1283.035397][T20373] usb 5-1: media controller created [ 1283.075805][T20373] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1283.083923][T13473] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.22618'. [ 1283.155654][T20373] az6027: usb out operation failed. (-71) [ 1283.173536][T20373] az6027: usb out operation failed. (-71) [ 1283.182289][T20373] stb0899_attach: Driver disabled by Kconfig [ 1283.189559][T20373] az6027: no front-end attached [ 1283.189559][T20373] [ 1283.197623][T20373] az6027: usb out operation failed. (-71) [ 1283.203844][T20373] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1283.213410][T20373] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input241 [ 1283.235294][T20373] dvb-usb: schedule remote query interval to 400 msecs. [ 1283.244200][T20373] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1283.265931][T20373] usb 5-1: USB disconnect, device number 26 [ 1283.365730][T20373] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1283.402797][T13497] tmpfs: Unknown parameter './file0' [ 1283.772464][T13521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1283.943126][ T30] audit: type=1326 audit(1764844170.360:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13524 comm="syz.2.22631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54a778f749 code=0x0 [ 1284.327030][T20373] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1284.496986][T20373] usb 2-1: Using ep0 maxpacket: 32 [ 1284.516798][ T1859] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1284.527707][T20373] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1284.539178][T20373] usb 2-1: config 0 has no interface number 0 [ 1284.559113][T20373] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1284.576540][T20373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.585059][T20373] usb 2-1: Product: syz [ 1284.591033][T20373] usb 2-1: Manufacturer: syz [ 1284.595832][T20373] usb 2-1: SerialNumber: syz [ 1284.609701][T20373] usb 2-1: config 0 descriptor?? [ 1284.622169][T20373] smsc95xx v2.0.0 [ 1284.688961][ T1859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.703164][ T1859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.717775][ T1859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1284.746448][ T1859] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1284.755983][ T1859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.793095][ T1859] usb 5-1: config 0 descriptor?? [ 1285.035820][T20373] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1285.055066][T20373] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1285.218897][T13582] sctp: [Deprecated]: syz.2.22645 (pid 13582) Use of int in max_burst socket option deprecated. [ 1285.218897][T13582] Use struct sctp_assoc_value instead [ 1285.254322][ T1859] plantronics 0003:047F:FFFF.00D1: reserved main item tag 0xd [ 1285.284081][ T1859] plantronics 0003:047F:FFFF.00D1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1285.487051][T20373] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1285.517299][T20373] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1285.520473][T13603] input: syz0 as /devices/virtual/input/input242 [ 1285.550467][T20373] usb 2-1: USB disconnect, device number 34 [ 1285.559193][ T1859] usb 5-1: USB disconnect, device number 27 [ 1286.346732][T13654] team_slave_0: Caught tx_queue_len zero misconfig [ 1286.563690][ T30] audit: type=1326 audit(1764844172.980:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.22667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54a772b829 code=0x7ffc0000 [ 1286.604318][ T30] audit: type=1326 audit(1764844173.010:9000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.22667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54a772b829 code=0x7ffc0000 [ 1286.637211][ T30] audit: type=1326 audit(1764844173.010:9001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.22667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54a772b829 code=0x7ffc0000 [ 1286.666433][ T30] audit: type=1326 audit(1764844173.010:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.22667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54a772b829 code=0x7ffc0000 [ 1286.735965][ T30] audit: type=1326 audit(1764844173.010:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.22667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54a772b829 code=0x7ffc0000 [ 1286.761259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1286.786473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1286.811681][ T30] audit: type=1326 audit(1764844173.010:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.22667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54a772b829 code=0x7ffc0000 [ 1286.882078][ T30] audit: type=1326 audit(1764844173.010:9005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.22667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54a772b829 code=0x7ffc0000 [ 1286.966626][ T30] audit: type=1326 audit(1764844173.010:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.22667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54a772b829 code=0x7ffc0000 [ 1287.032969][ T30] audit: type=1326 audit(1764844173.010:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.2.22667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54a772b829 code=0x7ffc0000 [ 1287.307716][ T1852] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1287.486484][ T1852] usb 6-1: Using ep0 maxpacket: 16 [ 1287.503111][ T1852] usb 6-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.535816][ T1852] usb 6-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.587674][ T1852] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1287.599534][ T1852] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1287.616897][ T1852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.634127][ T1852] usb 6-1: config 0 descriptor?? [ 1288.088369][ T1852] mcp2221 0003:04D8:00DD.00D2: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1288.309117][ T1852] usb 6-1: USB disconnect, device number 38 [ 1288.396571][ T1859] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1288.584693][ T1859] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.609888][ T1859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1288.625914][ T1859] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1288.652984][ T1859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.672591][ T1859] usb 3-1: Product: syz [ 1288.694912][ T1859] usb 3-1: Manufacturer: syz [ 1288.703580][ T1859] usb 3-1: SerialNumber: syz [ 1288.731777][ T1859] usb 3-1: config 0 descriptor?? [ 1288.770500][ T1859] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1288.802370][ T1859] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1288.824734][ T1859] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1288.854418][ T1859] usb 3-1: media controller created [ 1288.922869][ T1859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1288.990947][ T1859] DVB: Unable to find symbol tda10046_attach() [ 1288.999306][ T1859] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1289.038085][ T1859] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1289.262553][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22703'. [ 1289.747670][T13850] loop8: detected capacity change from 0 to 8 [ 1289.778976][T13850] Dev loop8: unable to read RDB block 8 [ 1289.785298][T13850] loop8: unable to read partition table [ 1289.797229][ T1852] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1289.812950][T13850] loop8: partition table beyond EOD, truncated [ 1289.822107][T13850] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1289.857918][ T1859] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1289.906617][ T1859] usb 3-1: USB disconnect, device number 40 [ 1289.997596][ T1852] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1290.017542][ T1852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.032547][ T1852] usb 2-1: Product: syz [ 1290.047304][ T1852] usb 2-1: Manufacturer: syz [ 1290.063464][ T1852] usb 2-1: SerialNumber: syz [ 1290.079752][ T1852] usb 2-1: config 0 descriptor?? [ 1290.092200][ T1852] ch341 2-1:0.0: ch341-uart converter detected [ 1290.178095][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22723'. [ 1290.266352][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1290.431902][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1290.458107][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.470496][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.482013][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1290.508820][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1290.526683][ T24] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1290.535451][ T24] usb 6-1: Manufacturer: syz [ 1290.559335][ T24] usb 6-1: config 0 descriptor?? [ 1290.706920][T20373] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1290.827208][T13910] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.22730'. [ 1290.868901][T20373] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1290.885142][T20373] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1290.900717][T20373] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1290.913533][T20373] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1290.930172][T20373] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1290.941350][T20373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.960206][T20373] usb 3-1: config 0 descriptor?? [ 1290.988712][ T24] appleir 0003:05AC:8243.00D3: unknown main item tag 0x0 [ 1291.005833][ T24] appleir 0003:05AC:8243.00D3: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1291.100489][ T1852] ch341-uart ttyUSB0: failed to read break control: -71 [ 1291.108503][ T1852] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1291.134643][ T1852] usb 2-1: USB disconnect, device number 35 [ 1291.155756][ T1852] ch341 2-1:0.0: device disconnected [ 1291.289844][ T6255] usb 6-1: USB disconnect, device number 39 [ 1291.381049][T20373] plantronics 0003:047F:FFFF.00D4: ignoring exceeding usage max [ 1291.402882][T20373] plantronics 0003:047F:FFFF.00D4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1291.578263][T13965] batadv_slave_0: entered promiscuous mode [ 1291.585799][T13964] batadv_slave_0: left promiscuous mode [ 1292.035240][T13990] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1292.061157][T13990] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1292.503006][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22755'. [ 1292.869639][ T30] kauditd_printk_skb: 537 callbacks suppressed [ 1292.869657][ T30] audit: type=1326 audit(1764844179.290:9545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.4.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324f8f749 code=0x7ffc0000 [ 1292.913144][ T30] audit: type=1326 audit(1764844179.320:9546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.4.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0324f2b829 code=0x7ffc0000 [ 1292.938213][ C0] vkms_vblank_simulate: vblank timer overrun [ 1293.006353][ T30] audit: type=1326 audit(1764844179.320:9547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.4.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0324f2b829 code=0x7ffc0000 [ 1293.077617][ T30] audit: type=1326 audit(1764844179.320:9548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.4.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324f8f749 code=0x7ffc0000 [ 1293.126216][ T30] audit: type=1326 audit(1764844179.320:9549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.4.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0324f2b829 code=0x7ffc0000 [ 1293.196153][ T30] audit: type=1326 audit(1764844179.320:9550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.4.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0324f2b829 code=0x7ffc0000 [ 1293.219724][ T6255] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1293.248740][ T30] audit: type=1326 audit(1764844179.320:9551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.4.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324f8f749 code=0x7ffc0000 [ 1293.274719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1293.377711][ T6255] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1293.395507][ T6255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1293.416381][ T30] audit: type=1326 audit(1764844179.320:9552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.4.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0324f2b829 code=0x7ffc0000 [ 1293.442357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1293.472982][ T6255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1293.506276][ T6255] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1293.506535][ T1852] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1293.546669][ T30] audit: type=1326 audit(1764844179.320:9553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.4.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324f8f749 code=0x7ffc0000 [ 1293.557383][ T6255] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1293.626536][ T30] audit: type=1326 audit(1764844179.330:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.4.22762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0324f8f749 code=0x7ffc0000 [ 1293.632012][ T6255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.716910][ T6255] usb 2-1: config 0 descriptor?? [ 1293.786780][ T1852] usb 6-1: Using ep0 maxpacket: 16 [ 1293.795593][ T1852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.814763][ T1852] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1293.839900][ T1852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.854208][ T1852] usb 6-1: config 0 descriptor?? [ 1293.886970][ T9130] usb 3-1: reset high-speed USB device number 41 using dummy_hcd [ 1293.900740][ T9130] usb 3-1: device reset changed ep0 maxpacket size! [ 1293.919434][T20373] usb 3-1: USB disconnect, device number 41 [ 1294.096707][T20373] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1294.171114][ T6255] plantronics 0003:047F:FFFF.00D5: ignoring exceeding usage max [ 1294.207051][ T6255] plantronics 0003:047F:FFFF.00D5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1294.266557][T20373] usb 3-1: Using ep0 maxpacket: 16 [ 1294.299692][T20373] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1294.322837][ T1852] mcp2221 0003:04D8:00DD.00D6: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1294.344774][T20373] usb 3-1: config 0 has no interface number 0 [ 1294.363237][T20373] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1294.395353][T20373] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1294.416711][T20373] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1294.460322][T20373] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1294.512245][T20373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.546578][T20373] usb 3-1: Product: syz [ 1294.551867][T20373] usb 3-1: Manufacturer: syz [ 1294.558240][T20373] usb 3-1: SerialNumber: syz [ 1294.581540][T20373] usb 3-1: config 0 descriptor?? [ 1294.588359][ T1852] usb 6-1: USB disconnect, device number 40 [ 1294.613980][T14056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1294.623775][T14056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1294.859544][T14056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1294.889341][T14056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1295.341239][T20373] Error reading MAC address [ 1295.366903][T14056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1295.385695][T14056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1295.408917][T14143] loop7: detected capacity change from 0 to 1 [ 1295.474564][T14143] Dev loop7: unable to read RDB block 1 [ 1295.484243][T14143] loop7: unable to read partition table [ 1295.494500][T14143] loop7: partition table beyond EOD, truncated [ 1295.502685][T14143] loop_reread_partitions: partition scan of loop7 (ݷU@:B${Wɴ) failed (rc=-5) [ 1295.611578][T20373] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1295.655806][T20373] usb 3-1: USB disconnect, device number 42 [ 1296.280765][T14188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22796'. [ 1296.399202][ T9134] usb 2-1: USB disconnect, device number 36 [ 1296.568384][T14213] dlm: non-version read from control device 4 [ 1297.563477][T14232] bridge0: entered promiscuous mode [ 1298.144977][T14288] loop4: detected capacity change from 0 to 4 [ 1298.155230][T14288] Dev loop4: unable to read RDB block 4 [ 1298.163209][T14288] loop4: unable to read partition table [ 1298.170795][T14288] loop4: partition table beyond EOD, truncated [ 1298.186112][T14288] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1298.496619][ T9134] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1298.656522][ T9134] usb 6-1: Using ep0 maxpacket: 8 [ 1298.665714][ T9134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1298.680387][ T9134] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1298.692751][ T9134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.704646][ T9134] usb 6-1: config 0 descriptor?? [ 1299.126738][ T9134] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1299.337705][T20373] usb 6-1: USB disconnect, device number 41 [ 1299.688467][ T9134] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1299.846619][ T9134] usb 5-1: Using ep0 maxpacket: 8 [ 1299.868106][ T9134] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1299.887107][ T9134] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1299.901170][ T9134] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1299.912851][ T9134] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1299.924022][ T9134] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1299.938102][ T9134] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1299.964344][ T9134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.191481][ T9134] usb 5-1: usb_control_msg returned -32 [ 1300.204967][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.205029][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.236558][ T9134] usbtmc 5-1:16.0: can't read capabilities [ 1300.808500][ T9134] usb 5-1: USB disconnect, device number 28 [ 1300.819013][T14414] netlink: 40 bytes leftover after parsing attributes in process `syz.5.22847'. [ 1300.832978][T14414] netlink: 80 bytes leftover after parsing attributes in process `syz.5.22847'. [ 1300.849822][T14414] netlink: 40 bytes leftover after parsing attributes in process `syz.5.22847'. [ 1300.861688][T14414] netlink: 80 bytes leftover after parsing attributes in process `syz.5.22847'. [ 1300.872674][T14414] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1301.003932][T14429] netlink: 48 bytes leftover after parsing attributes in process `syz.2.22850'. [ 1301.717118][ T1852] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1301.781034][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22864'. [ 1301.883161][ T1852] usb 5-1: Using ep0 maxpacket: 32 [ 1301.891590][ T1852] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1301.906925][ T1852] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1301.926547][ T1852] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1301.935689][ T1852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.960267][ T1852] usb 5-1: config 0 descriptor?? [ 1302.366837][T20373] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1302.404650][ T1852] corsair-cpro 0003:1B1C:0C10.00D7: unknown main item tag 0x0 [ 1302.412731][ T1852] corsair-cpro 0003:1B1C:0C10.00D7: unknown main item tag 0x0 [ 1302.421193][ T1852] corsair-cpro 0003:1B1C:0C10.00D7: unknown main item tag 0x0 [ 1302.431245][ T1852] corsair-cpro 0003:1B1C:0C10.00D7: unknown main item tag 0x0 [ 1302.439575][ T1852] corsair-cpro 0003:1B1C:0C10.00D7: unknown main item tag 0x0 [ 1302.454423][ T1852] corsair-cpro 0003:1B1C:0C10.00D7: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1302.530450][T20373] usb 6-1: Using ep0 maxpacket: 32 [ 1302.540640][ T1852] corsair-cpro 0003:1B1C:0C10.00D7: probe with driver corsair-cpro failed with error -38 [ 1302.567370][T20373] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.584613][T20373] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1302.610142][ T9134] usb 5-1: USB disconnect, device number 29 [ 1302.612897][T20373] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1302.638524][T20373] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1302.655427][T20373] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1302.665422][T20373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.673945][T20373] usb 6-1: Product: syz [ 1302.681392][T20373] usb 6-1: Manufacturer: syz [ 1302.687120][T20373] usb 6-1: SerialNumber: syz [ 1303.230922][T14545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1303.394791][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22892'. [ 1303.729115][T20373] cdc_ncm 6-1:1.0: bind() failure [ 1303.753120][T20373] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1303.775718][T20373] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1303.824110][T20373] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1303.847465][T20373] usb 6-1: USB disconnect, device number 42 [ 1304.570148][T14642] netlink: 64 bytes leftover after parsing attributes in process `syz.4.22908'. [ 1305.313378][T14680] syzkaller1: entered promiscuous mode [ 1305.320704][T14680] syzkaller1: entered allmulticast mode [ 1305.896114][ T1859] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1306.086386][ T1859] usb 2-1: Using ep0 maxpacket: 16 [ 1306.107866][ T1859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.146354][ T1859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.162180][ T1859] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1306.181369][ T1859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.238900][ T1859] usb 2-1: config 0 descriptor?? [ 1306.481367][T14747] macvlan0: entered promiscuous mode [ 1306.493507][T14747] batman_adv: batadv0: Adding interface: macvlan0 [ 1306.502963][T14747] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.530052][T14747] batman_adv: batadv0: Not using interface macvlan0 (retrying later): interface not active [ 1306.636205][ T9134] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1306.708959][ T1859] usbhid 2-1:0.0: can't add hid device: -71 [ 1306.726803][ T1859] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1306.756787][ T1859] usb 2-1: USB disconnect, device number 37 [ 1306.813213][ T9134] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1306.833858][ T9134] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1306.850236][ T9134] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1306.861709][ T9134] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1306.871906][ T9134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.885003][ T9134] usb 5-1: Product: syz [ 1306.914510][ T9134] usb 5-1: Manufacturer: syz [ 1306.933659][ T9134] usb 5-1: SerialNumber: syz [ 1306.963288][T14742] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1306.983478][T14742] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1308.029713][ T9134] (unnamed net_device) (uninitialized): Assigned a random MAC address: 26:5e:93:25:12:26 [ 1308.085557][ T9134] rtl8150 5-1:1.0: eth1: rtl8150 is detected [ 1308.125657][ T9134] usb 5-1: USB disconnect, device number 30 [ 1308.167707][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22970'. [ 1308.202292][T14832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22970'. [ 1308.213179][T14832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22970'. [ 1308.854915][T14866] bond0: Caught tx_queue_len zero misconfig [ 1309.977355][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22995'. [ 1310.437169][ T9134] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1310.566726][ T9130] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1310.606451][ T9134] usb 5-1: Using ep0 maxpacket: 8 [ 1310.615774][ T9134] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1310.628882][ T9134] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1310.656558][ T9134] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1310.676473][ T9134] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1310.706440][ T9134] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1310.726356][ T9134] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1310.735740][ T9130] usb 6-1: Using ep0 maxpacket: 32 [ 1310.735746][ T9134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.763620][ T9130] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.785636][ T9130] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.798685][ T9130] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1310.878752][ T9130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.897413][ T9130] usb 6-1: config 0 descriptor?? [ 1310.977060][ T9134] usb 5-1: usb_control_msg returned -32 [ 1310.982721][ T9134] usbtmc 5-1:16.0: can't read capabilities [ 1311.245448][T14970] all (unregistering): Released all slaves [ 1311.360544][ T9130] savu 0003:1E7D:2D5A.00D8: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1311.383813][T15039] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 1311.557697][ T9130] usb 6-1: USB disconnect, device number 43 [ 1311.589442][ T9134] usb 5-1: USB disconnect, device number 31 [ 1312.057086][T15096] loop5: detected capacity change from 0 to 5583 [ 1312.094571][T15096] loop5: detected capacity change from 5583 to 6823 [ 1312.235765][T15602] Buffer I/O error on dev loop5, logical block 852, async page read [ 1312.845584][T15124] netlink: 420 bytes leftover after parsing attributes in process `syz.4.23026'. [ 1313.051019][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23029'. [ 1313.061074][T15133] sock: sock_set_timeout: `syz.5.23028' (pid 15133) tries to set negative timeout [ 1313.101574][T15132] netlink: 'syz.4.23029': attribute type 1 has an invalid length. [ 1313.796886][ T9134] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1313.947473][ T9134] usb 3-1: Using ep0 maxpacket: 8 [ 1313.973509][ T9134] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1313.995770][ T9134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.023889][ T9134] usb 3-1: Product: syz [ 1314.036423][ T9134] usb 3-1: Manufacturer: syz [ 1314.041150][ T9134] usb 3-1: SerialNumber: syz [ 1314.069350][ T9134] usb 3-1: config 0 descriptor?? [ 1314.325313][ T9134] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1314.486836][ T1859] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1314.658808][ T1859] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1314.705014][ T1859] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1314.735688][ T1859] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1314.757097][ T1859] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1314.761033][T15219] input: syz1 as /devices/virtual/input/input244 [ 1314.779020][ T1859] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1314.816223][ T1859] usb 2-1: Product: syz [ 1314.842622][ T1859] usb 2-1: Manufacturer: syz [ 1314.872517][ T1859] usb 2-1: SerialNumber: syz [ 1314.910445][ T1859] usb 2-1: config 0 descriptor?? [ 1314.928143][ T1859] hub 2-1:0.0: bad descriptor, ignoring hub [ 1314.934734][ T1859] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1314.983053][ T1859] usb 2-1: selecting invalid altsetting 0 [ 1315.145468][ T9134] gspca_sunplus: reg_w_riv err -71 [ 1315.156257][ T9134] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1315.178474][ T9134] usb 3-1: USB disconnect, device number 43 [ 1315.596597][ T1852] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1315.705881][T15276] netlink: 48 bytes leftover after parsing attributes in process `syz.4.23059'. [ 1315.786992][ T1852] usb 6-1: Using ep0 maxpacket: 8 [ 1315.794835][ T1852] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1315.805280][ T1852] usb 6-1: config 0 has no interface number 0 [ 1315.814830][ T1852] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1315.824413][ T1852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.833170][ T1852] usb 6-1: Product: syz [ 1315.838174][ T1852] usb 6-1: Manufacturer: syz [ 1315.842872][ T1852] usb 6-1: SerialNumber: syz [ 1315.850860][ T1852] usb 6-1: config 0 descriptor?? [ 1315.999332][T15199] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 1316.061878][ T1852] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 1316.081864][ T1852] usb 6-1: USB disconnect, device number 44 [ 1316.533994][T15292] input: syz1 as /devices/virtual/input/input245 [ 1316.541155][T15292] input: failed to attach handler leds to device input245, error: -6 [ 1316.583292][ T9134] usb 2-1: USB disconnect, device number 38 [ 1317.501390][T15375] netlink: 'syz.2.23083': attribute type 29 has an invalid length. [ 1317.515154][T15375] netlink: 'syz.2.23083': attribute type 29 has an invalid length. [ 1317.525749][T15375] netlink: 500 bytes leftover after parsing attributes in process `syz.2.23083'. [ 1318.625050][T15435] geneve2: entered promiscuous mode [ 1318.637757][T15435] geneve2: entered allmulticast mode [ 1318.832876][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23105'. [ 1318.943076][T15457] netlink: 'syz.0.23109': attribute type 21 has an invalid length. [ 1318.952601][T15457] netlink: 128 bytes leftover after parsing attributes in process `syz.0.23109'. [ 1318.964037][T15457] netlink: 3 bytes leftover after parsing attributes in process `syz.0.23109'. [ 1318.983873][T15457] netlink: 'syz.0.23109': attribute type 21 has an invalid length. [ 1319.004008][T15457] netlink: 128 bytes leftover after parsing attributes in process `syz.0.23109'. [ 1319.020079][T15457] netlink: 3 bytes leftover after parsing attributes in process `syz.0.23109'. [ 1319.439869][T15489] syzkaller1: entered promiscuous mode [ 1319.457325][T15489] syzkaller1: entered allmulticast mode [ 1319.537817][T15501] ip6tnl2: entered promiscuous mode [ 1319.543059][T15501] ip6tnl2: entered allmulticast mode [ 1319.566736][ T1852] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1319.737897][ T1852] usb 2-1: Using ep0 maxpacket: 8 [ 1319.747786][ T1852] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1319.758686][ T1852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.776664][ T1852] usb 2-1: Product: syz [ 1319.780883][ T1852] usb 2-1: Manufacturer: syz [ 1319.785501][ T1852] usb 2-1: SerialNumber: syz [ 1319.809882][ T1852] usb 2-1: config 0 descriptor?? [ 1319.819350][ T1852] gspca_main: se401-2.14.0 probing 047d:5003 [ 1320.423782][ T1852] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input246 [ 1320.624697][ T6255] usb 2-1: USB disconnect, device number 39 [ 1320.676300][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1320.883202][T20373] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1320.910004][T15567] veth1_to_bond: Caught tx_queue_len zero misconfig [ 1321.056806][T20373] usb 6-1: Using ep0 maxpacket: 32 [ 1321.064300][T20373] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1321.077470][T20373] usb 6-1: config 0 has no interface number 0 [ 1321.100240][T20373] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1321.131612][T20373] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1321.160140][T20373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.180525][T20373] usb 6-1: Product: syz [ 1321.184751][T20373] usb 6-1: Manufacturer: syz [ 1321.208914][T20373] usb 6-1: SerialNumber: syz [ 1321.232561][T20373] usb 6-1: config 0 descriptor?? [ 1321.755660][T15586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1322.073299][T20373] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 1322.096880][T20373] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1322.104349][T20373] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1322.134071][T20373] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1322.167969][T20373] usb 6-1: USB disconnect, device number 45 [ 1322.335579][T15615] input: syz0 as /devices/virtual/input/input247 [ 1322.823651][T15637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1322.971031][ T3004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.019180][ T3004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.171438][ T3004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.213605][ T3004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.399467][ T3004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.431272][ T3004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.630882][ T3004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.661631][ T3004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.890656][T15681] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1323.914029][T15681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1323.924962][T15681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1323.935863][T15681] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1323.944130][T15681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1324.062813][ T3004] bridge_slave_1: left allmulticast mode [ 1324.098883][ T3004] bridge_slave_1: left promiscuous mode [ 1324.123939][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.155921][ T3004] bridge_slave_0: left allmulticast mode [ 1324.173708][ T3004] bridge_slave_0: left promiscuous mode [ 1324.189017][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.804851][T15730] input: syz0 as /devices/virtual/input/input248 [ 1325.397906][ T6255] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1325.454711][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.481363][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.495120][ T3004] bond0 (unregistering): Released all slaves [ 1325.568083][ T6255] usb 3-1: config 0 has an invalid interface number: 195 but max is 0 [ 1325.582991][ T6255] usb 3-1: config 0 has no interface number 0 [ 1325.612479][ T6255] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=fd.08 [ 1325.656911][ T6255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.664957][ T6255] usb 3-1: Product: syz [ 1325.680656][ T6255] usb 3-1: Manufacturer: syz [ 1325.685304][ T6255] usb 3-1: SerialNumber: syz [ 1325.709563][ T6255] usb 3-1: config 0 descriptor?? [ 1325.759027][ T6255] asix 3-1:0.195: probe with driver asix failed with error -22 [ 1325.943339][T20373] usb 3-1: USB disconnect, device number 44 [ 1326.036893][ T6178] Bluetooth: hci1: command tx timeout [ 1326.220546][T15830] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.23191'. [ 1326.336472][ T3004] hsr_slave_0: left promiscuous mode [ 1326.349223][ T3004] hsr_slave_1: left promiscuous mode [ 1326.364454][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.391019][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.469424][ T3004] veth1_macvtap: left promiscuous mode [ 1326.486620][ T3004] veth0_macvtap: left promiscuous mode [ 1326.496342][ T3004] veth1_vlan: left promiscuous mode [ 1326.501996][ T3004] veth0_vlan: left promiscuous mode [ 1326.934032][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 1326.934050][ T30] audit: type=1326 audit(1764844213.350:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15866 comm="syz.4.23198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0324f8f749 code=0x0 [ 1327.502581][T15883] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1327.857560][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 1327.939952][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 1328.116556][ T6178] Bluetooth: hci1: command tx timeout [ 1329.172725][ T6255] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1329.197316][T15694] chnl_net:caif_netlink_parms(): no params data found [ 1329.346200][ T6255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.372120][ T6255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.395850][ T6255] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1329.464866][ T6255] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1329.534577][ T6255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.581868][ T6255] usb 5-1: config 0 descriptor?? [ 1329.689156][T15694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.708790][T15694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.732007][T15694] bridge_slave_0: entered allmulticast mode [ 1329.750094][ T1852] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1329.750487][T15694] bridge_slave_0: entered promiscuous mode [ 1329.789907][T15694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.797884][T15694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.808289][T15694] bridge_slave_1: entered allmulticast mode [ 1329.817401][T15694] bridge_slave_1: entered promiscuous mode [ 1329.906977][ T1852] usb 6-1: Using ep0 maxpacket: 32 [ 1329.921154][ T1852] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1329.930293][T15694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.949700][ T1852] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1329.965863][T15694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.977169][ T1852] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1329.985459][ T1852] usb 6-1: Product: syz [ 1330.004648][ T1852] usb 6-1: Manufacturer: syz [ 1330.014772][ T1852] usb 6-1: SerialNumber: syz [ 1330.034261][ T1852] usb 6-1: config 0 descriptor?? [ 1330.037125][ T6255] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1330.058067][ T6255] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1330.063180][T16035] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1330.071549][ T6255] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1330.099217][ T6255] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1330.111792][ T6255] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1330.122298][ T6255] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1330.128508][T16140] netlink: 104 bytes leftover after parsing attributes in process `syz.2.23217'. [ 1330.139975][T15694] team0: Port device team_slave_0 added [ 1330.143934][T15694] team0: Port device team_slave_1 added [ 1330.152714][ T6255] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1330.176580][ T6255] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1330.195502][ T6255] plantronics 0003:047F:FFFF.00D9: unknown main item tag 0x0 [ 1330.205534][ T6178] Bluetooth: hci1: command tx timeout [ 1330.241988][ T6255] plantronics 0003:047F:FFFF.00D9: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1330.267763][ T6255] usb 5-1: USB disconnect, device number 32 [ 1330.300680][T15694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.316907][T15694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.361473][ T9134] usb 6-1: USB disconnect, device number 46 [ 1330.383131][T15694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.399954][T15694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.412391][T15694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.432426][T16182] fido_id[16182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1330.473199][T15694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.671463][T15694] hsr_slave_0: entered promiscuous mode [ 1330.681227][T15694] hsr_slave_1: entered promiscuous mode [ 1330.688760][T15694] debugfs: 'hsr0' already exists in 'hsr' [ 1330.695073][T15694] Cannot create hsr debugfs directory [ 1331.488964][T15694] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1331.523804][T15694] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1331.555401][T15694] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1331.591330][T16343] batman_adv: batadv0: Adding interface: vlan2 [ 1331.598305][T16343] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.625630][T16343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.638377][T16343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.649517][T16343] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1331.661612][T15694] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1331.932028][T15694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.004574][T15694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.023480][T14900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.031606][T14900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.072706][T14900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.080069][T14900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.252032][T15694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.277012][ T6178] Bluetooth: hci1: command tx timeout [ 1332.381557][T15694] veth0_vlan: entered promiscuous mode [ 1332.413934][T15694] veth1_vlan: entered promiscuous mode [ 1332.542635][T15694] veth0_macvtap: entered promiscuous mode [ 1332.603734][T15694] veth1_macvtap: entered promiscuous mode [ 1332.716132][T15694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1332.733349][T16395] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1332.754448][T15694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.790018][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.828324][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.866222][ T6870] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.893863][ T6870] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.113218][ T6870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.142231][ T6870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.202503][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.230452][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.455331][T16435] syzkaller1: entered promiscuous mode [ 1333.496548][T16435] syzkaller1: entered allmulticast mode [ 1335.016537][T20373] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1335.223829][T20373] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1335.272319][T20373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.337948][T20373] usb 3-1: config 0 descriptor?? [ 1335.348923][T20373] cp210x 3-1:0.0: cp210x converter detected [ 1335.677179][T16570] netlink: 104 bytes leftover after parsing attributes in process `syz.5.23286'. [ 1335.752435][T20373] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1335.799733][T20373] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 1335.851021][T20373] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1336.012864][T20373] usb 3-1: USB disconnect, device number 45 [ 1336.059360][T20373] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1336.081910][T20373] cp210x 3-1:0.0: device disconnected [ 1336.226203][ T4595] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1336.357367][ T30] audit: type=1326 audit(1764844222.780:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.5.23291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facfab8f749 code=0x0 [ 1336.406292][ T4595] usb 5-1: Using ep0 maxpacket: 32 [ 1336.423930][ T4595] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1336.435083][ T4595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.444884][ T4595] usb 5-1: Product: syz [ 1336.450830][ T4595] usb 5-1: Manufacturer: syz [ 1336.455578][ T4595] usb 5-1: SerialNumber: syz [ 1336.462742][ T4595] usb 5-1: config 0 descriptor?? [ 1336.474913][ T4595] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1336.908574][T16629] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x32314142, 4, 0, 0, 0) [ 1337.288705][ T4595] gspca_ov534_9: reg_w failed -71 [ 1337.385142][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23305'. [ 1337.509417][T16657] netlink: 20 bytes leftover after parsing attributes in process `syz.6.23307'. [ 1337.599243][ T4595] gspca_ov534_9: Unknown sensor 0000 [ 1337.599336][ T4595] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1337.644216][ T4595] usb 5-1: USB disconnect, device number 33 [ 1337.867181][ T6253] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1338.048192][ T6253] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1338.059191][ T6253] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1338.072821][ T6253] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1338.092285][ T6253] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1338.103577][ T6253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.112001][ T6253] usb 6-1: Product: syz [ 1338.117405][ T6253] usb 6-1: Manufacturer: syz [ 1338.123328][ T6253] usb 6-1: SerialNumber: syz [ 1338.137443][ T6253] usb 6-1: config 0 descriptor?? [ 1338.143556][T16661] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1338.152388][T16661] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1338.163010][ T6253] usb 6-1: ucan: probing device on interface #0 [ 1338.439622][T16702] syzkaller1: entered promiscuous mode [ 1338.445909][T16702] syzkaller1: entered allmulticast mode [ 1338.799229][ T6253] ucan 6-1:0.0 can0: registered device [ 1338.845699][T16721] ALSA: mixer_oss: invalid OSS volume 'y:' [ 1338.852218][T16721] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:' [ 1338.861419][T16721] ALSA: mixer_oss: invalid OSS volume 'Sha' [ 1338.979780][ T6253] ucan 6-1:0.0 can0: firmware string: L>z^ɉw{f,=}̫eRJ(=#gE}ut+|H!R$8g[- }q>ArŴ,xp|JB *~|X8-eo! [ 1339.249479][ T6253] usb 6-1: USB disconnect, device number 47 [ 1340.078583][T16781] sg_read: process 9209 (syz.4.23338) changed security contexts after opening file descriptor, this is not allowed. [ 1340.517219][ T6253] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1340.682357][ T6253] usb 5-1: config 0 has no interfaces? [ 1340.696117][ T6253] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1340.715666][ T6253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.742505][ T6253] usb 5-1: config 0 descriptor?? [ 1341.181492][T16798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.214043][T16798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.249975][ T6253] usb 5-1: USB disconnect, device number 34 [ 1341.616976][ T6253] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1341.627678][T16872] syzkaller1: entered promiscuous mode [ 1341.633845][T16872] syzkaller1: entered allmulticast mode [ 1341.797020][ T6253] usb 6-1: Using ep0 maxpacket: 32 [ 1341.804963][ T6253] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1341.815377][ T6253] usb 6-1: config 0 has no interface number 0 [ 1341.829777][ T6253] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1341.840282][ T6253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.849399][ T6253] usb 6-1: Product: syz [ 1341.859543][ T6253] usb 6-1: Manufacturer: syz [ 1341.864413][ T6253] usb 6-1: SerialNumber: syz [ 1341.879943][ T6253] usb 6-1: config 0 descriptor?? [ 1341.890361][ T6253] smsc95xx v2.0.0 [ 1342.283658][T16907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1342.720895][ T6253] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1342.809585][T16933] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.23371'. [ 1342.918083][ T6253] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1342.960247][ T6253] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1343.015762][ T6253] usb 6-1: USB disconnect, device number 48 [ 1343.146882][T16952] syzkaller1: entered promiscuous mode [ 1343.162816][T16952] syzkaller1: entered allmulticast mode [ 1343.906686][T17014] netlink: 16 bytes leftover after parsing attributes in process `syz.5.23388'. [ 1344.969591][ T30] audit: type=1326 audit(1764844231.380:9655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.0.23392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc3d8f749 code=0x7fc00000 [ 1345.170094][T17119] netlink: 108 bytes leftover after parsing attributes in process `syz.5.23407'. [ 1345.596854][ T6253] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1345.770279][ T6253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1345.798103][ T6253] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1345.826680][ T6253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.855929][ T6253] usb 5-1: config 0 descriptor?? [ 1345.864662][T17127] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1346.330224][ T6253] elan 0003:04F3:0755.00DA: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1346.528501][T17127] elan 0003:04F3:0755.00DA: pid 17127 passed too short report [ 1346.574832][ T6253] usb 5-1: USB disconnect, device number 35 [ 1346.823619][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054b64400: rx timeout, send abort [ 1347.334328][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054b64400: abort rx timeout. Force session deactivation [ 1347.643215][T17256] syzkaller1: entered promiscuous mode [ 1347.650278][T17256] syzkaller1: entered allmulticast mode [ 1348.468235][T17316] xt_CT: No such helper "snmp_trap" [ 1348.708728][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23461'. [ 1349.057056][T17332] team0 (unregistering): Port device team_slave_0 removed [ 1349.071471][T17332] team0 (unregistering): Port device team_slave_1 removed [ 1349.382287][T17377] syzkaller1: entered promiscuous mode [ 1349.390099][ T6253] hid-generic 0003:0003:0000.00DB: unknown main item tag 0x0 [ 1349.404042][ T6253] hid-generic 0003:0003:0000.00DB: unknown main item tag 0x0 [ 1349.414947][T17377] syzkaller1: entered allmulticast mode [ 1349.421378][ T6253] hid-generic 0003:0003:0000.00DB: unknown main item tag 0x0 [ 1349.429500][ T6253] hid-generic 0003:0003:0000.00DB: unknown main item tag 0x0 [ 1349.441015][ T6253] hid-generic 0003:0003:0000.00DB: unknown main item tag 0x0 [ 1349.451819][ T6253] hid-generic 0003:0003:0000.00DB: unknown main item tag 0x0 [ 1349.508220][ T6253] hid-generic 0003:0003:0000.00DB: unknown main item tag 0x0 [ 1349.523131][ T6253] hid-generic 0003:0003:0000.00DB: unknown main item tag 0x0 [ 1349.532042][ T6253] hid-generic 0003:0003:0000.00DB: unknown main item tag 0x0 [ 1349.541168][ T6253] hid-generic 0003:0003:0000.00DB: unknown main item tag 0x0 [ 1349.571903][ T6253] hid-generic 0003:0003:0000.00DB: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1349.807994][T17405] fido_id[17405]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1350.096634][T17426] netlink: 566 bytes leftover after parsing attributes in process `syz.4.23480'. [ 1351.524822][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23509'. [ 1351.570495][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23509'. [ 1352.582685][T17563] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1354.552899][T17637] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.23551'. [ 1355.552321][T17681] syzkaller1: entered promiscuous mode [ 1355.566632][T17681] syzkaller1: entered allmulticast mode [ 1355.625352][T17691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1355.769929][T17702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1356.203473][T17717] dummy0: entered promiscuous mode [ 1356.215455][T17717] dummy0: left promiscuous mode [ 1356.804036][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23583'. [ 1357.196745][ T6253] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1357.348444][ T6253] usb 3-1: Using ep0 maxpacket: 8 [ 1357.355619][ T6253] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1357.376540][ T6253] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1357.390672][ T6253] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1357.402976][ T6253] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1357.414018][ T6253] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1357.436542][ T6253] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1357.456646][ T6253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.674369][ T6253] usb 3-1: GET_CAPABILITIES returned 0 [ 1357.680617][ T6253] usbtmc 3-1:16.0: can't read capabilities [ 1357.898031][ T6253] usb 3-1: USB disconnect, device number 46 [ 1358.610314][T17817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23607'. [ 1358.846954][ T6253] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1359.006476][ T6253] usb 3-1: Using ep0 maxpacket: 32 [ 1359.013461][ T6253] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1359.022324][ T6253] usb 3-1: config 0 has no interface number 0 [ 1359.035640][ T6253] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1359.047156][ T6253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.055458][ T6253] usb 3-1: Product: syz [ 1359.060237][ T6253] usb 3-1: Manufacturer: syz [ 1359.064953][ T6253] usb 3-1: SerialNumber: syz [ 1359.071945][ T6253] usb 3-1: config 0 descriptor?? [ 1359.085797][ T6253] smsc95xx v2.0.0 [ 1359.522843][T17851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23616'. [ 1360.102718][ T6253] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1360.114373][ T6253] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1360.128300][ T6253] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1360.140815][ T6253] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1360.159081][ T6253] usb 3-1: USB disconnect, device number 47 [ 1360.306639][ T9130] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1360.458588][ T9130] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1360.470331][ T9130] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1360.483021][ T9130] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1360.492674][ T9130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.504193][T17872] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1360.513054][T17872] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1360.524486][ T9130] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1360.737936][ T6253] usb 5-1: USB disconnect, device number 36 [ 1361.640625][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.649002][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.525723][T17956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23642'. [ 1362.592190][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23644'. [ 1364.263628][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23664'. [ 1364.365171][T18075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23664'. [ 1364.430728][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23664'. [ 1364.533918][T18075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23664'. [ 1364.790581][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23664'. [ 1364.849200][T18075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23664'. [ 1365.127016][T20373] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1365.304170][T20373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.340459][T20373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.351341][T20373] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1365.368966][T20373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.381906][T20373] usb 5-1: config 0 descriptor?? [ 1365.842882][T20373] hid_parser_main: 8 callbacks suppressed [ 1365.842904][T20373] arvo 0003:1E7D:30D4.00DC: unknown main item tag 0x0 [ 1365.868651][T20373] arvo 0003:1E7D:30D4.00DC: unknown main item tag 0x0 [ 1365.879010][T20373] arvo 0003:1E7D:30D4.00DC: unknown main item tag 0x0 [ 1365.888407][T20373] arvo 0003:1E7D:30D4.00DC: unknown main item tag 0x0 [ 1365.895424][T20373] arvo 0003:1E7D:30D4.00DC: unknown main item tag 0x0 [ 1365.902954][T20373] arvo 0003:1E7D:30D4.00DC: unknown main item tag 0x0 [ 1365.912811][T20373] arvo 0003:1E7D:30D4.00DC: unknown main item tag 0x0 [ 1365.923225][T20373] arvo 0003:1E7D:30D4.00DC: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 1366.042563][T20373] arvo 0003:1E7D:30D4.00DC: couldn't init struct arvo_device [ 1366.060994][T20373] arvo 0003:1E7D:30D4.00DC: couldn't install keyboard [ 1366.073995][T18149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1366.082147][T20373] arvo 0003:1E7D:30D4.00DC: probe with driver arvo failed with error -71 [ 1366.102004][T20373] usb 5-1: USB disconnect, device number 37 [ 1366.476639][T20373] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1366.626555][T20373] usb 3-1: Using ep0 maxpacket: 32 [ 1366.628478][T20373] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1366.628503][T20373] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1366.628521][T20373] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1366.628563][T20373] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1366.628584][T20373] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1366.628606][T20373] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1366.628647][T20373] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1366.628668][T20373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.631290][T20373] usb 3-1: config 0 descriptor?? [ 1366.858911][T20373] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1367.064698][ C1] usblp0: nonzero read bulk status received: -71 [ 1367.076806][T20373] usb 3-1: USB disconnect, device number 48 [ 1367.273703][T18166] usblp0: removed [ 1367.428460][T18222] loop9: detected capacity change from 0 to 7 [ 1367.447733][T15602] Dev loop9: unable to read RDB block 7 [ 1367.453460][T15602] loop9: AHDI p4 [ 1367.458185][T15602] loop9: partition table partially beyond EOD, truncated [ 1367.473889][T18222] Dev loop9: unable to read RDB block 7 [ 1367.504030][T18222] loop9: AHDI p4 [ 1367.508665][T18222] loop9: partition table partially beyond EOD, truncated [ 1367.722352][T18240] kvm: MWAIT instruction emulated as NOP! [ 1368.628356][ T30] audit: type=1326 audit(1764844255.050:9656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.2.23717" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54a778f749 code=0x0 [ 1370.015556][T18323] delete_channel: no stack [ 1370.768674][T18348] input: syz0 as /devices/virtual/input/input249 [ 1371.200369][T18361] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 1371.213015][T18361] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 1371.221527][T18361] CPU: 1 UID: 0 PID: 18361 Comm: syz.5.23744 Not tainted syzkaller #0 PREEMPT(full) [ 1371.231328][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1371.241494][T18361] RIP: 0010:fd_install+0x57/0x3d0 [ 1371.246548][T18361] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 47 50 e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 1371.266534][T18361] RSP: 0018:ffffc9000ee47ca0 EFLAGS: 00010202 [ 1371.272612][T18361] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 1371.280571][T18361] RDX: ffffc90011779000 RSI: 00000000000000a5 RDI: 00000000000000a6 [ 1371.288794][T18361] RBP: dffffc0000000000 R08: ffff8880116bc813 R09: 1ffff110022d7902 [ 1371.296932][T18361] R10: dffffc0000000000 R11: ffffed10022d7903 R12: 0000000000000003 [ 1371.305616][T18361] R13: 0000000000000003 R14: 0000000000000001 R15: ffff88807b16e580 [ 1371.313685][T18361] FS: 00007facfbaea6c0(0000) GS:ffff8881261a6000(0000) knlGS:0000000000000000 [ 1371.322812][T18361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1371.329570][T18361] CR2: 0000200000000280 CR3: 00000000619a4000 CR4: 00000000003526f0 [ 1371.338553][T18361] Call Trace: [ 1371.341842][T18361] [ 1371.344861][T18361] ? do_mq_open+0x595/0x770 [ 1371.349450][T18361] do_mq_open+0x5a0/0x770 [ 1371.353789][T18361] ? __pfx_do_mq_open+0x10/0x10 [ 1371.358633][T18361] ? __pfx_do_futex+0x10/0x10 [ 1371.363402][T18361] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1371.368773][T18361] ? do_timer_settime+0x497/0x4c0 [ 1371.373825][T18361] __x64_sys_mq_open+0x16a/0x1c0 [ 1371.378768][T18361] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1371.384830][T18361] ? do_syscall_64+0xbe/0xf80 [ 1371.389493][T18361] do_syscall_64+0xfa/0xf80 [ 1371.394016][T18361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.400137][T18361] ? clear_bhb_loop+0x60/0xb0 [ 1371.404829][T18361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.410803][T18361] RIP: 0033:0x7facfab8f749 [ 1371.415233][T18361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1371.436258][T18361] RSP: 002b:00007facfbaea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1371.444860][T18361] RAX: ffffffffffffffda RBX: 00007facfade5fa0 RCX: 00007facfab8f749 [ 1371.453472][T18361] RDX: 0000000000000110 RSI: 0000000000000040 RDI: 00002000000004c0 [ 1371.461887][T18361] RBP: 00007facfac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1371.470303][T18361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1371.478722][T18361] R13: 00007facfade6038 R14: 00007facfade5fa0 R15: 00007facfaf0fa28 [ 1371.487667][T18361] [ 1371.490791][T18361] Modules linked in: [ 1371.495879][T18361] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1371.619062][T18361] RIP: 0010:fd_install+0x57/0x3d0 [ 1371.624680][T18361] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 47 50 e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 1372.006371][T18361] RSP: 0018:ffffc9000ee47ca0 EFLAGS: 00010202 [ 1372.012496][T18361] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 1372.021559][T18361] RDX: ffffc90011779000 RSI: 00000000000000a5 RDI: 00000000000000a6 [ 1372.029780][T18361] RBP: dffffc0000000000 R08: ffff8880116bc813 R09: 1ffff110022d7902 [ 1372.117077][T18361] R10: dffffc0000000000 R11: ffffed10022d7903 R12: 0000000000000003 [ 1372.125294][T18361] R13: 0000000000000003 R14: 0000000000000001 R15: ffff88807b16e580 [ 1372.199897][T18361] FS: 00007facfbaea6c0(0000) GS:ffff8881261a6000(0000) knlGS:0000000000000000 [ 1372.266815][T18361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1372.273805][T18361] CR2: 00007facfbac9d58 CR3: 00000000619a4000 CR4: 00000000003526f0 [ 1372.286478][T18361] Kernel panic - not syncing: Fatal exception [ 1372.293405][T18361] Kernel Offset: disabled [ 1372.298275][T18361] Rebooting in 86400 seconds..