last executing test programs: 3.332066059s ago: executing program 3 (id=4369): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 3.331393982s ago: executing program 3 (id=4370): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xfef, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) 3.29553446s ago: executing program 3 (id=4371): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) 3.21944818s ago: executing program 3 (id=4372): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@iv={0x28, 0x117, 0x2, 0x10, "eead20e340d9d445cf07fd9f4e73e96d"}], 0x28, 0x40000}], 0x1, 0x20000801) 3.212780753s ago: executing program 3 (id=4373): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x3ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 3.095360181s ago: executing program 3 (id=4376): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) 1.790693867s ago: executing program 0 (id=4401): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.22396331s ago: executing program 2 (id=4406): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x40000) 1.158125948s ago: executing program 2 (id=4407): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 835.361937ms ago: executing program 0 (id=4409): r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) 718.959709ms ago: executing program 1 (id=4410): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000fcff71000040"]) 678.157473ms ago: executing program 0 (id=4411): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b2c, &(0x7f0000000040)) 583.270397ms ago: executing program 2 (id=4412): r0 = socket(0x11, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2]}}) 532.902927ms ago: executing program 0 (id=4413): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x10) 464.89702ms ago: executing program 2 (id=4414): r0 = socket(0x11, 0xa, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x48, r3, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x3, 0xffb}, @value=@ver_80211n={0x0, 0xead, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x1, 0x1, 0x58, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008090) 434.541473ms ago: executing program 1 (id=4415): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={r1, 0x101}, 0x8) 335.270712ms ago: executing program 0 (id=4416): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x149380, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xfffe, 0x80, 0x2, 0x2b, 0x7, "041000"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 318.531149ms ago: executing program 2 (id=4417): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000002404"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRES8]) 286.655628ms ago: executing program 1 (id=4418): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 197.83986ms ago: executing program 1 (id=4419): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) socket(0x2, 0x80805, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x0, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x658}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x3a2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c084}, 0x80) 107.693097ms ago: executing program 1 (id=4420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000010005a800c00650358ab8f3a29470000"], 0x38}}, 0x0) 79.368609ms ago: executing program 2 (id=4421): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 8.45862ms ago: executing program 1 (id=4422): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x109080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) close(0x3) 0s ago: executing program 0 (id=4423): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): conflicting options: userxattr,metacopy=on [ 209.431928][ T5830] Bluetooth: hci4: command 0x1003 tx timeout [ 209.436836][ T5843] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 209.859184][ T3079] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 209.890138][ T3079] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 209.950214][ T9623] overlayfs: conflicting options: userxattr,metacopy=on [ 210.149349][ T5837] usb 1-1: USB disconnect, device number 30 [ 210.252327][ T5837] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 210.685789][ T9660] overlayfs: conflicting options: userxattr,metacopy=on [ 211.111932][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 211.164476][ T9682] kvm: user requested TSC rate below hardware speed [ 211.302222][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 211.322996][ T9] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 211.339947][ T9] usb 2-1: config 0 has no interface number 0 [ 211.352178][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 211.353643][ T9] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 211.373909][ T9693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.418949][ T9] usb 2-1: config 0 interface 196 has no altsetting 0 [ 211.461079][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 211.486907][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.518380][ T9] usb 2-1: Product: syz [ 211.534632][ T9] usb 2-1: Manufacturer: syz [ 211.539240][ T9] usb 2-1: SerialNumber: syz [ 211.562837][ T9] usb 2-1: config 0 descriptor?? [ 211.572410][ T9669] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.039343][ T9717] kvm: user requested TSC rate below hardware speed [ 212.210586][ T9727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.231460][ T9] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 212.259447][ T9726] kvm: user requested TSC rate below hardware speed [ 212.273319][ T9] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 212.414950][ T9734] loop6: detected capacity change from 0 to 524287999 [ 212.471358][ T9] usb 2-1: USB disconnect, device number 27 [ 212.623860][ T9] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 212.912704][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 212.931956][ T9752] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 213.172048][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 213.343738][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.369142][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.391948][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 213.412922][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.438127][ T24] usb 4-1: config 0 descriptor?? [ 213.873852][ T24] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 213.903229][ T24] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 213.913344][ T24] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 213.920743][ T24] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 213.944221][ T24] playstation 0003:054C:0DF2.0016: unknown main item tag 0x0 [ 213.966271][ T24] playstation 0003:054C:0DF2.0016: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 214.062622][ T24] playstation 0003:054C:0DF2.0016: Invalid reportID received, expected 9 got 32 [ 214.084035][ T24] playstation 0003:054C:0DF2.0016: Failed to retrieve DualSense pairing info: -22 [ 214.101961][ T24] playstation 0003:054C:0DF2.0016: Failed to get MAC address from DualSense [ 214.116625][ T24] playstation 0003:054C:0DF2.0016: Failed to create dualsense. [ 214.146506][ T24] playstation 0003:054C:0DF2.0016: probe with driver playstation failed with error -22 [ 214.274833][ T10] usb 4-1: USB disconnect, device number 26 [ 214.952080][ T5843] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 214.954394][ T5830] Bluetooth: hci4: command 0x1003 tx timeout [ 215.074686][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 215.251933][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 215.271996][ T24] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 215.280175][ T24] usb 4-1: config 0 has no interface number 0 [ 215.296191][ T24] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 215.308153][ T24] usb 4-1: config 0 interface 196 has no altsetting 0 [ 215.318517][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 215.338293][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.371499][ T24] usb 4-1: Product: syz [ 215.375966][ T24] usb 4-1: Manufacturer: syz [ 215.380817][ T24] usb 4-1: SerialNumber: syz [ 215.396982][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 215.413325][ T24] usb 4-1: config 0 descriptor?? [ 215.419082][ T9804] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 215.584342][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.607847][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.619443][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 215.641697][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 215.661422][ T9] usb 2-1: SerialNumber: syz [ 215.666549][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 215.835677][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.856470][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.869865][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 215.879928][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.909757][ T9] usb 2-1: 0:2 : does not exist [ 215.937042][ T9] usb 2-1: unit 255 not found! [ 215.942900][ T10] usb 1-1: config 0 descriptor?? [ 215.989737][ T9] usb 2-1: USB disconnect, device number 28 [ 216.043765][ T24] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 216.058089][ T6181] udevd[6181]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.094387][ T24] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 216.163592][ T9826] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1757'. [ 216.189688][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 216.202669][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 216.229849][ T10] usb 1-1: USB disconnect, device number 31 [ 216.263669][ T24] usb 4-1: USB disconnect, device number 27 [ 216.337412][ T24] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 216.921985][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 217.082746][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 217.090178][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 217.104578][ T9] usb 2-1: config 0 has no interface number 0 [ 217.110696][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.142015][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.153256][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 217.185898][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.226568][ T9] usb 2-1: config 0 descriptor?? [ 217.864186][ T9] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0017/input/input21 [ 217.901893][ T848] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 217.937559][ T9] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0017/input/input22 [ 217.972690][ T9] uclogic 0003:28BD:0071.0017: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 218.063558][ T848] usb 4-1: config 0 has no interfaces? [ 218.069508][ T848] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.078786][ T848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.084816][ T5837] usb 2-1: USB disconnect, device number 29 [ 218.095562][ T848] usb 4-1: config 0 descriptor?? [ 218.276331][ T9931] fuse: Bad value for 'fd' [ 218.281297][ T9931] fuse: Bad value for 'fd' [ 218.326742][ T848] usb 4-1: USB disconnect, device number 28 [ 218.580987][ T9947] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1803'. [ 218.592954][ T9947] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.1803'. [ 218.701943][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 218.851960][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 218.868241][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 218.897523][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 218.910189][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 218.928322][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.939418][ T9] usb 1-1: Product: syz [ 218.946907][ T9] usb 1-1: Manufacturer: syz [ 218.952937][ T9] usb 1-1: SerialNumber: syz [ 218.964740][ T9] usb 1-1: config 0 descriptor?? [ 218.985085][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 218.995176][ T9] usb 1-1: Detected FT232R [ 219.000871][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'. [ 219.091896][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 219.104271][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 219.114044][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.130569][ T10] usb 2-1: config 0 descriptor?? [ 219.151123][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 219.200346][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 219.439122][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 219.638312][ T3079] usb 1-1: USB disconnect, device number 32 [ 219.669075][ T3079] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 219.692441][ T3079] ftdi_sio 1-1:0.0: device disconnected [ 219.848593][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 219.992828][ T10] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 220.059453][ T10] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 220.088202][ T10] usb 2-1: USB disconnect, device number 30 [ 220.308377][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 220.318776][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1842'. [ 220.996915][T10063] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1857'. [ 221.214268][T10075] o2cb: This node has not been configured. [ 221.220479][T10075] o2cb: Cluster check failed. Fix errors before retrying. [ 221.232228][T10075] (syz.1.1863,10075,1):user_dlm_register:674 ERROR: status = -22 [ 221.241578][T10075] (syz.1.1863,10075,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 221.422848][T10089] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1870'. [ 222.048897][T10114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1881'. [ 222.075021][T10114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1881'. [ 222.087085][T10114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1881'. [ 223.107380][T10171] kernel read not supported for file /file1 (pid: 10171 comm: syz.3.1908) [ 223.118654][ T30] audit: type=1800 audit(1750966502.910:15): pid=10171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1908" name="file1" dev="mqueue" ino=34648 res=0 errno=0 [ 223.161348][T10170] netlink: 'syz.2.1909': attribute type 29 has an invalid length. [ 223.261969][ T3079] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 223.357064][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 223.425106][ T3079] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.434914][ T3079] usb 1-1: config 0 has no interface number 0 [ 223.446712][ T3079] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 223.459477][ T3079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.469506][ T3079] usb 1-1: Product: syz [ 223.475534][ T3079] usb 1-1: Manufacturer: syz [ 223.480513][ T3079] usb 1-1: SerialNumber: syz [ 223.489770][ T3079] usb 1-1: config 0 descriptor?? [ 223.531881][ T848] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 223.692594][ T848] usb 2-1: Using ep0 maxpacket: 8 [ 223.699737][ T848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.713908][ T3079] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 223.713925][ T848] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 223.725086][ T3079] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 223.741734][ T848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.751303][ T3079] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 223.754126][ T848] usb 2-1: config 0 descriptor?? [ 223.767302][ T3079] usb 1-1: media controller created [ 223.791666][ T3079] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.832095][ T9] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 223.979340][ T848] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 223.994705][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.007051][ T9] usb 4-1: config 0 has no interface number 0 [ 224.016409][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 224.029414][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 224.044505][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 224.054484][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.067887][ T9] usb 4-1: config 0 descriptor?? [ 224.075780][T10199] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 224.095083][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 224.307520][ T5837] usb 4-1: USB disconnect, device number 29 [ 224.385160][ T9] usb 2-1: USB disconnect, device number 31 [ 224.500046][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 224.509664][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 224.875071][ T3079] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 224.968502][ T3079] usb 1-1: USB disconnect, device number 33 [ 225.028271][T10242] kernel read not supported for file /eth0 (pid: 10242 comm: syz.3.1942) [ 225.038916][ T30] audit: type=1800 audit(1750966504.830:16): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1942" name="eth0" dev="mqueue" ino=34745 res=0 errno=0 [ 225.086511][T10244] capability: warning: `syz.1.1943' uses 32-bit capabilities (legacy support in use) [ 225.442697][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 225.960739][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 226.142251][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 226.152873][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 226.170814][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.185273][ T24] usb 2-1: config 0 descriptor?? [ 226.431951][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 226.445140][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.471147][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 226.487734][ T24] usb 2-1: media controller created [ 226.554951][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.032348][ T24] az6027: usb out operation failed. (-71) [ 227.038104][ T24] stb0899_attach: Driver disabled by Kconfig [ 227.061704][ T24] az6027: no front-end attached [ 227.061704][ T24] [ 227.078653][ T24] az6027: usb out operation failed. (-71) [ 227.088260][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 227.101514][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 227.143737][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 227.150690][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 227.177299][ T24] usb 2-1: USB disconnect, device number 32 [ 227.252807][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 227.268853][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 227.411382][T10351] sctp: [Deprecated]: syz.2.1992 (pid 10351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.411382][T10351] Use struct sctp_sack_info instead [ 227.428162][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 227.435300][ T3079] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 227.436408][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.454005][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.463922][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.477026][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 227.486428][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.504121][ T9] usb 1-1: config 0 descriptor?? [ 227.616222][ T3079] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.638565][ T3079] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.659693][ T3079] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 227.681897][ T3079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 227.690022][ T3079] usb 4-1: SerialNumber: syz [ 227.740503][T10363] netlink: 'syz.1.1998': attribute type 4 has an invalid length. [ 227.748454][T10363] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1998'. [ 227.915397][ T3079] usb 4-1: 0:2 : does not exist [ 227.933576][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 227.941047][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 227.951765][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x4 [ 227.962067][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 227.964763][ T3079] usb 4-1: USB disconnect, device number 30 [ 227.969289][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 227.984898][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 227.998262][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 228.006434][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 228.037856][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.054374][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 228.062726][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 228.080933][ T9] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 228.108503][ T9] microsoft 0003:045E:07DA.0018: no inputs found [ 228.119877][ T9] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 228.150328][ T9] usb 1-1: USB disconnect, device number 34 [ 228.194619][T10372] fido_id[10372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 228.274208][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2004'. [ 228.732108][ T3079] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 228.891879][ T3079] usb 2-1: Using ep0 maxpacket: 32 [ 228.899314][ T3079] usb 2-1: config 0 has no interfaces? [ 228.908073][ T3079] usb 2-1: New USB device found, idVendor=046d, idProduct=c13a, bcdDevice= 0.00 [ 228.918701][ T3079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.935598][ T3079] usb 2-1: config 0 descriptor?? [ 229.163579][ T3079] usb 2-1: USB disconnect, device number 33 [ 229.699969][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 229.900844][T10458] mkiss: ax0: crc mode is auto. [ 232.032503][ T3079] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 232.187180][ T3079] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.217875][ T3079] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.245421][ T3079] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 232.269648][ T3079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.289044][ T3079] usb 1-1: config 0 descriptor?? [ 232.706707][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.715889][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.745492][ T3079] sony 0003:054C:024B.0019: invalid report_size 13143 [ 232.773111][ T3079] sony 0003:054C:024B.0019: item 0 2 1 7 parsing failed [ 232.780851][ T3079] sony 0003:054C:024B.0019: parse failed [ 232.810698][ T3079] sony 0003:054C:024B.0019: probe with driver sony failed with error -22 [ 232.940767][ T9] usb 1-1: USB disconnect, device number 35 [ 233.179079][ T9] hid_parser_main: 8 callbacks suppressed [ 233.179098][ T9] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 233.212627][ T9] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 233.220116][ T9] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 233.238013][ T9] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 233.248130][ T9] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 233.281913][ T9] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 233.309593][ T9] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 233.321907][ T9] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 233.349951][ T9] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 233.360056][ T9] hid-generic 009C:0008:0003.001A: unknown main item tag 0x0 [ 233.392475][ T9] hid-generic 009C:0008:0003.001A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 233.604417][T10619] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input28 [ 234.877181][ T30] audit: type=1326 audit(1750966514.670:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.3.2130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd16118e929 code=0x0 [ 235.868313][T10697] sctp: [Deprecated]: syz.3.2144 (pid 10697) Use of int in max_burst socket option deprecated. [ 235.868313][T10697] Use struct sctp_assoc_value instead [ 236.736707][T10744] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2175'. [ 237.274711][T10776] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2189'. [ 237.295903][T10776] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.2189'. [ 237.442189][ T3079] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 237.592095][ T3079] usb 2-1: Using ep0 maxpacket: 8 [ 237.602231][ T3079] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.622069][ T3079] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.632622][ T3079] usb 2-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 237.642221][ T3079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.676759][ T3079] usb 2-1: config 0 descriptor?? [ 237.732053][ T5899] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 237.881884][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 237.888547][ T5899] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.897508][ T5899] usb 4-1: config 0 has no interface number 0 [ 237.903701][ T5899] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.914674][ T5899] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.924593][ T5899] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 237.933985][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.946027][ T5899] usb 4-1: config 0 descriptor?? [ 238.109896][ T3079] logitech-hidpp-device 0003:046D:C343.001B: hidraw0: USB HID v3.0e Device [HID 046d:c343] on usb-dummy_hcd.1-1/input0 [ 238.304134][ T3079] usb 2-1: USB disconnect, device number 34 [ 238.577683][ T5899] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.001C/input/input29 [ 238.667999][ T5899] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.001C/input/input30 [ 238.706698][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2199'. [ 238.717005][ T5899] uclogic 0003:28BD:0071.001C: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 238.810717][ T5899] usb 4-1: USB disconnect, device number 31 [ 238.885426][T10820] fido_id[10820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 239.815672][T10864] overlayfs: missing 'workdir' [ 239.825037][T10868] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2224'. [ 239.894224][T10871] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2224'. [ 239.932081][T10868] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2224'. [ 240.606462][T10906] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2242'. [ 240.785602][T10916] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2247'. [ 240.873032][ T5837] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 241.053752][ T5837] usb 1-1: unable to get BOS descriptor or descriptor too short [ 241.054450][ T5843] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 241.061454][ T5837] usb 1-1: no configurations [ 241.061471][ T5837] usb 1-1: can't read configurations, error -22 [ 241.481192][T10940] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 241.538707][T10943] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2258'. [ 241.683535][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 241.904531][T10964] kernel read not supported for file /file1 (pid: 10964 comm: syz.1.2267) [ 241.917873][ T30] audit: type=1800 audit(1750966521.710:18): pid=10964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2267" name="file1" dev="mqueue" ino=39405 res=0 errno=0 [ 243.112417][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 243.219660][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2306'. [ 243.581979][ T3079] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 243.760094][ T3079] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 243.780186][ T3079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.805830][ T3079] usb 2-1: config 0 descriptor?? [ 243.818243][ T3079] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 243.829507][T11064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2315'. [ 243.839537][T11062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2315'. [ 243.851418][T11064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2315'. [ 244.226598][ T3079] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 244.427013][ T3079] gspca_cpia1: usb_control_msg 01, error -32 [ 244.453359][ T3079] gspca_cpia1: usb_control_msg 01, error -71 [ 244.466694][ T3079] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 244.489288][ T3079] usb 2-1: USB disconnect, device number 35 [ 244.610517][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2333'. [ 244.620661][T11099] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2333'. [ 244.682759][ T5899] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 244.856666][ T5899] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 244.874288][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.892742][ T5899] usb 4-1: Product: syz [ 244.897563][ T5899] usb 4-1: Manufacturer: syz [ 244.902868][ T5899] usb 4-1: SerialNumber: syz [ 244.910386][ T5899] usb 4-1: config 0 descriptor?? [ 245.124832][ T5899] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 245.191932][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 245.534734][ T5899] usb write operation failed. (-71) [ 245.545432][ T5899] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 245.558089][ T5899] usb write operation failed. (-71) [ 245.576471][ T5899] usb 4-1: USB disconnect, device number 32 [ 246.051981][ T5898] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 246.223471][ T5898] usb 2-1: config 0 has an invalid interface number: 220 but max is 0 [ 246.237727][ T5898] usb 2-1: config 0 has no interface number 0 [ 246.246363][ T5898] usb 2-1: config 0 interface 220 has no altsetting 0 [ 246.255632][ T5898] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=89.24 [ 246.269336][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.280097][ T5898] usb 2-1: Product: syz [ 246.284357][ T5898] usb 2-1: Manufacturer: syz [ 246.288956][ T5898] usb 2-1: SerialNumber: syz [ 246.298908][ T5898] usb 2-1: config 0 descriptor?? [ 246.337235][T11177] autofs: Bad value for 'fd' [ 246.528289][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 246.538214][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 246.545751][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 246.553213][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 246.564094][ T5898] usbtest 2-1:0.220: couldn't get endpoints, -22 [ 246.570501][ T5898] usbtest 2-1:0.220: probe with driver usbtest failed with error -22 [ 246.599591][ T5898] usb 2-1: USB disconnect, device number 36 [ 246.775709][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2380'. [ 246.785355][T11197] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2380'. [ 246.795237][T11197] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2380'. [ 246.937908][T11204] tipc: Started in network mode [ 246.943726][T11204] tipc: Node identity ac1414aa, cluster identity 4711 [ 246.951038][T11204] tipc: Enabling of bearer rejected, failed to enable media [ 247.082684][T11212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2387'. [ 247.161166][T11216] overlay: ./file0 is not a directory [ 247.371966][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 247.535764][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.547783][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.560331][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 247.571265][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.581259][ T10] usb 4-1: SerialNumber: syz [ 247.803400][ T10] usb 4-1: 0:2 : does not exist [ 247.808377][ T10] usb 4-1: unit 255 not found! [ 247.821022][ T10] usb 4-1: USB disconnect, device number 33 [ 247.848576][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.494718][T11273] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 248.494718][T11273] The task syz.0.2412 (11273) triggered the difference, watch for misbehavior. [ 248.685406][ T30] audit: type=1326 audit(1750966528.480:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.3.2419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd16118e929 code=0x0 [ 248.804808][ T5898] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 248.963765][ T5898] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 248.975283][ T5898] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 248.986048][ T5898] usb 2-1: config 0 has no interface number 0 [ 248.996161][ T5898] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 249.008459][ T5898] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 249.020074][ T5898] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 249.030965][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.046325][ T5898] usb 2-1: config 0 descriptor?? [ 249.683783][ T5898] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input31 [ 249.729176][ T5898] input: failed to attach handler kbd to device input31, error: -5 [ 249.851975][ T3079] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 249.878624][ T5898] usb 2-1: USB disconnect, device number 37 [ 250.001867][ T3079] usb 4-1: Using ep0 maxpacket: 16 [ 250.008457][ T3079] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.020205][ T3079] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.029999][ T3079] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.043155][ T3079] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 250.053089][ T3079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.062928][ T3079] usb 4-1: config 0 descriptor?? [ 250.378942][T11332] Invalid source name [ 250.492830][ T3079] hid_parser_main: 5 callbacks suppressed [ 250.492850][ T3079] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 250.524731][ T3079] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 250.545191][ T3079] microsoft 0003:045E:07DA.001D: unknown main item tag 0x4 [ 250.556208][ T3079] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 250.566758][ T3079] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 250.575161][ T3079] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 250.585301][ T3079] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 250.592628][ T3079] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 250.599911][ T3079] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 250.607749][ T3079] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 250.621998][ T3079] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 250.638043][ T3079] microsoft 0003:045E:07DA.001D: no inputs found [ 250.644461][ T3079] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 250.718452][ T3079] usb 4-1: USB disconnect, device number 34 [ 250.769133][T11343] fido_id[11343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 251.003676][ T30] audit: type=1326 audit(1750966530.800:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11350 comm="syz.0.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567338e929 code=0x7fc00000 [ 251.029415][ T30] audit: type=1326 audit(1750966530.800:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11350 comm="syz.0.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f567338e929 code=0x7fc00000 [ 251.060860][ T30] audit: type=1326 audit(1750966530.800:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11350 comm="syz.0.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567338e929 code=0x7fc00000 [ 251.083698][ T30] audit: type=1326 audit(1750966530.800:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11350 comm="syz.0.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567338e929 code=0x7fc00000 [ 251.106829][ T30] audit: type=1326 audit(1750966530.800:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11350 comm="syz.0.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567338e929 code=0x7fc00000 [ 251.129259][ T30] audit: type=1326 audit(1750966530.800:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11350 comm="syz.0.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567338e929 code=0x7fc00000 [ 251.160156][ T30] audit: type=1326 audit(1750966530.800:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11350 comm="syz.0.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567338e929 code=0x7fc00000 [ 251.182729][ T30] audit: type=1326 audit(1750966530.800:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11350 comm="syz.0.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567338e929 code=0x7fc00000 [ 251.207535][ T30] audit: type=1326 audit(1750966530.800:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11350 comm="syz.0.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567338e929 code=0x7fc00000 [ 251.820878][T11389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.895480][T11392] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2469'. [ 252.441947][ T5898] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 252.531950][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 252.593568][ T5898] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.610154][ T5898] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 252.621731][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.634190][ T5898] usb 2-1: Product: syz [ 252.638509][ T5898] usb 2-1: Manufacturer: syz [ 252.644228][ T5898] usb 2-1: SerialNumber: syz [ 252.684861][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 252.704349][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 252.719721][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.728964][ T9] usb 4-1: Product: syz [ 252.738103][ T9] usb 4-1: Manufacturer: syz [ 252.743442][ T9] usb 4-1: SerialNumber: syz [ 252.759117][ T9] usb 4-1: config 0 descriptor?? [ 252.869881][ T5898] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 253.076837][ T5898] usb 2-1: USB disconnect, device number 38 [ 253.102357][ T5898] usblp0: removed [ 253.177666][ T9] airspy 4-1:0.0: Board ID: 00 [ 253.187756][ T9] airspy 4-1:0.0: Firmware version: [ 253.440303][T11449] Invalid source name [ 253.579978][ T9] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 253.611044][ T9] airspy 4-1:0.0: Registered as swradio24 [ 253.632695][ T9] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 253.657742][T11462] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2500'. [ 253.664149][ T9] usb 4-1: USB disconnect, device number 35 [ 254.249335][T11497] syz.1.2509: attempt to access beyond end of device [ 254.249335][T11497] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 254.263507][T11497] syz.1.2509: attempt to access beyond end of device [ 254.263507][T11497] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 254.279450][T11497] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 254.289645][T11497] syz.1.2509: attempt to access beyond end of device [ 254.289645][T11497] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 254.302753][T11497] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 254.314092][T11497] syz.1.2509: attempt to access beyond end of device [ 254.314092][T11497] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 254.327473][T11497] syz.1.2509: attempt to access beyond end of device [ 254.327473][T11497] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 254.340831][T11497] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 254.350530][T11497] syz.1.2509: attempt to access beyond end of device [ 254.350530][T11497] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 254.363652][T11497] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 254.374400][T11497] syz.1.2509: attempt to access beyond end of device [ 254.374400][T11497] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 254.387556][T11497] syz.1.2509: attempt to access beyond end of device [ 254.387556][T11497] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 254.400663][T11497] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 254.410572][T11497] syz.1.2509: attempt to access beyond end of device [ 254.410572][T11497] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 254.425331][T11497] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 254.435227][T11497] syz.1.2509: attempt to access beyond end of device [ 254.435227][T11497] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 254.448837][T11497] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 254.458532][T11497] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 254.468133][T11497] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 254.588122][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 254.588136][ T30] audit: type=1326 audit(1750966534.380:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.3.2514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd16118e929 code=0x0 [ 254.822246][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2524'. [ 255.054603][T11533] vxcan1: tx address claim with dlc 0 [ 255.072576][T11535] netlink: 'syz.2.2533': attribute type 11 has an invalid length. [ 255.596563][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.602958][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.014494][T11591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2561'. [ 256.268433][T11605] pimreg: entered allmulticast mode [ 256.330455][T11612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2571'. [ 256.365210][T11607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2571'. [ 256.394069][T11612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2571'. [ 256.752216][T11639] Zero length message leads to an empty skb [ 258.255182][T11736] batadv_slave_1: entered promiscuous mode [ 258.273888][T11735] batadv_slave_1: left promiscuous mode [ 258.646977][ T5898] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 258.740546][T11766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2642'. [ 258.749590][T11766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2642'. [ 258.816739][ T5898] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.837015][ T5898] usb 4-1: config 0 has no interface number 0 [ 258.858509][ T5898] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 258.859744][T11772] 9pnet_fd: Insufficient options for proto=fd [ 258.877558][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.890448][ T5898] usb 4-1: Product: syz [ 258.897606][ T5898] usb 4-1: Manufacturer: syz [ 258.902591][ T5898] usb 4-1: SerialNumber: syz [ 258.916669][ T5898] usb 4-1: config 0 descriptor?? [ 259.139209][ T5898] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 259.163847][ T5898] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 259.192879][ T5898] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 259.201544][ T5898] usb 4-1: media controller created [ 259.251233][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.651843][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 259.804456][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 259.816974][ T10] usb 2-1: config 5 has an invalid interface number: 5 but max is 0 [ 259.825238][ T10] usb 2-1: config 5 has no interface number 0 [ 259.834298][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=5e.6e [ 259.854023][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.863780][ T10] usb 2-1: Product: syz [ 259.870628][ T10] usb 2-1: Manufacturer: syz [ 259.875608][ T10] usb 2-1: SerialNumber: syz [ 260.098317][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.5/input/input33 [ 260.111711][ T5188] bcm5974 2-1:5.5: could not read from device [ 260.129017][T11813] macvlan0: entered promiscuous mode [ 260.132181][ T10] usb 2-1: USB disconnect, device number 39 [ 260.135966][T11812] macvlan0: left promiscuous mode [ 260.312423][ T5898] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 260.373774][ T5898] usb 4-1: USB disconnect, device number 36 [ 261.811946][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 261.983859][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.994868][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.004943][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 262.013996][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.029433][ T10] usb 4-1: config 0 descriptor?? [ 262.210824][T11906] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2708'. [ 262.235311][T11906] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2708'. [ 262.250955][T11906] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2708'. [ 262.360785][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 262.455773][ T10] hid_parser_main: 7 callbacks suppressed [ 262.455793][ T10] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 262.469219][ T10] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 262.492052][ T10] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 262.499037][ T10] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 262.532021][ T10] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 262.538993][ T10] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 262.564527][ T10] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 262.579791][ T10] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 262.671456][ T10] cp2112 0003:10C4:EA90.001E: Part Number: 0x82 Device Version: 0x01 [ 262.870807][ T10] cp2112 0003:10C4:EA90.001E: error requesting SMBus config [ 262.892212][ T10] cp2112 0003:10C4:EA90.001E: probe with driver cp2112 failed with error -71 [ 262.926091][ T10] usb 4-1: USB disconnect, device number 37 [ 263.381867][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 263.532646][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 263.541465][ T10] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 263.553222][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.561228][ T10] usb 2-1: Product: syz [ 263.568052][ T10] usb 2-1: Manufacturer: syz [ 263.572913][ T10] usb 2-1: SerialNumber: syz [ 263.580626][ T10] usb 2-1: config 0 descriptor?? [ 264.006401][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 264.029835][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.032362][ T5898] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 264.041562][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 264.058886][ T10] usb 2-1: media controller created [ 264.095080][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.221928][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 264.226729][ T5898] usb 4-1: config 0 has no interfaces? [ 264.229833][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 264.277701][ T5898] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.297434][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.325499][ T5898] usb 4-1: config 0 descriptor?? [ 264.446934][ T5898] usb 2-1: USB disconnect, device number 40 [ 264.503202][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 264.553566][ T848] usb 4-1: USB disconnect, device number 38 [ 264.924785][T12013] netlink: 'syz.2.2757': attribute type 5 has an invalid length. [ 264.934585][T12013] netlink: 'syz.2.2757': attribute type 25 has an invalid length. [ 265.119362][T12024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.261857][ T5898] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 265.411835][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 265.423536][ T5898] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 265.430953][ T5898] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 265.461046][ T5898] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.480719][ T30] audit: type=1804 audit(1750966545.250:41): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2771" name="cgroup.controllers" dev="tmpfs" ino=4057 res=1 errno=0 [ 265.512260][ T5898] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.537321][ T5898] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 265.548693][ T30] audit: type=1800 audit(1750966545.250:42): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2771" name="cgroup.controllers" dev="tmpfs" ino=4057 res=0 errno=0 [ 265.575085][ T5898] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 265.599827][ T5898] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 265.622137][ T5898] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.644823][T12050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.645011][ T5898] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.667851][ T5898] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 265.680783][ T5898] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 265.689229][ T5898] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 265.700554][ T5898] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.712323][ T5898] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.723494][ T5898] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 265.738300][ T5898] usb 2-1: string descriptor 0 read error: -22 [ 265.754111][ T5898] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 265.763462][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.804516][ T5898] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 265.933332][ T30] audit: type=1326 audit(1750966545.730:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12059 comm="syz.0.2788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f567338e929 code=0x0 [ 266.046326][ T5837] usb 2-1: USB disconnect, device number 41 [ 267.037253][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.109016][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.159453][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.258008][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.269564][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 267.439995][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.456611][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.467126][ T5153] Bluetooth: hci3: adv larger than maximum supported [ 267.478201][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 267.550033][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.590021][ T10] usb 2-1: config 0 descriptor?? [ 267.630274][ T13] bridge_slave_1: left allmulticast mode [ 267.642077][ T13] bridge_slave_1: left promiscuous mode [ 267.648671][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.710139][ T13] bridge_slave_0: left allmulticast mode [ 267.724803][ T13] bridge_slave_0: left promiscuous mode [ 267.754684][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.842456][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.852734][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.866282][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.874778][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.885517][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.026597][ T10] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 268.044315][ T10] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 268.061018][ T10] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 268.078520][ T10] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 268.096899][ T10] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 268.122562][ T10] playstation 0003:054C:0DF2.001F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 268.224376][ T10] playstation 0003:054C:0DF2.001F: Invalid byte count transferred, expected 20 got 0 [ 268.250672][ T10] playstation 0003:054C:0DF2.001F: Failed to retrieve DualSense pairing info: -22 [ 268.279879][ T10] playstation 0003:054C:0DF2.001F: Failed to get MAC address from DualSense [ 268.305866][ T10] playstation 0003:054C:0DF2.001F: Failed to create dualsense. [ 268.324994][ T5830] Bluetooth: hci0: unexpected cc 0x0809 length: 68 > 4 [ 268.332028][ T5830] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 268.365912][ T10] playstation 0003:054C:0DF2.001F: probe with driver playstation failed with error -22 [ 268.457216][ T5837] usb 2-1: USB disconnect, device number 42 [ 268.539346][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2824'. [ 268.555919][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2824'. [ 268.707608][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.719687][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.729528][ T13] bond0 (unregistering): Released all slaves [ 268.745213][T12170] wireguard: wg1: Could not create IPv4 socket [ 269.182968][T12185] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2829'. [ 269.197587][ T13] hsr_slave_0: left promiscuous mode [ 269.210242][ T13] hsr_slave_1: left promiscuous mode [ 269.232964][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.259828][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.271090][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.278898][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.379784][ T13] veth1_macvtap: left promiscuous mode [ 269.400559][ T13] veth0_macvtap: left promiscuous mode [ 269.420786][ T13] veth1_vlan: left promiscuous mode [ 269.436491][ T13] veth0_vlan: left promiscuous mode [ 269.912244][ T5830] Bluetooth: hci1: command tx timeout [ 270.130043][ T13] team0 (unregistering): Port device team_slave_1 removed [ 270.160049][ T13] team0 (unregistering): Port device team_slave_0 removed [ 270.363243][ T5899] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 270.531949][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 270.539132][ T5899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.549457][ T5899] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 270.558663][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.566778][ T5899] usb 2-1: Product: syz [ 270.571055][ T5899] usb 2-1: Manufacturer: syz [ 270.588873][ T5899] usb 2-1: SerialNumber: syz [ 270.609815][ T5899] usb 2-1: config 0 descriptor?? [ 270.887635][T12241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2850'. [ 270.933349][T12238] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2850'. [ 270.937504][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2851'. [ 270.980717][T12139] chnl_net:caif_netlink_parms(): no params data found [ 271.024409][T12241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2850'. [ 271.051263][ T5899] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 271.201066][ T13] IPVS: stop unused estimator thread 0... [ 271.328777][T12139] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.346959][T12139] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.356708][T12139] bridge_slave_0: entered allmulticast mode [ 271.381960][T12139] bridge_slave_0: entered promiscuous mode [ 271.400334][T12139] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.423913][T12139] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.431069][T12139] bridge_slave_1: entered allmulticast mode [ 271.452665][ T5899] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 271.472840][T12139] bridge_slave_1: entered promiscuous mode [ 271.480318][ T5899] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 271.515728][ T5899] usb 2-1: USB disconnect, device number 43 [ 271.592360][T12139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.611238][T12139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.696675][T12139] team0: Port device team_slave_0 added [ 271.734035][T12139] team0: Port device team_slave_1 added [ 271.746809][ T30] audit: type=1326 audit(1750966551.540:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12271 comm="syz.0.2858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f567338e929 code=0x0 [ 271.786873][T12139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.795348][T12139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.821856][T12139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.836276][T12139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.844464][T12139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.870768][T12139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.935885][T12139] hsr_slave_0: entered promiscuous mode [ 271.947003][T12139] hsr_slave_1: entered promiscuous mode [ 271.995207][ T5830] Bluetooth: hci1: command tx timeout [ 272.338807][ T30] audit: type=1326 audit(1750966552.130:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12288 comm="syz.2.2863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b6c18e929 code=0x0 [ 272.856285][T12139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.895804][T12139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.922820][T12139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.968527][T12139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 273.175349][T12139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.231539][T12139] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.258695][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.265877][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.314726][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.321898][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.559804][T12348] C: renamed from team_slave_0 (while UP) [ 273.604307][T12348] netlink: 'syz.0.2882': attribute type 4 has an invalid length. [ 273.643475][T12348] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2882'. [ 273.670296][T12348] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 273.715001][T12355] sctp: [Deprecated]: syz.1.2884 (pid 12355) Use of int in max_burst socket option. [ 273.715001][T12355] Use struct sctp_assoc_value instead [ 273.951730][T12139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.070715][T12139] veth0_vlan: entered promiscuous mode [ 274.077654][ T5830] Bluetooth: hci1: command tx timeout [ 274.120799][T12139] veth1_vlan: entered promiscuous mode [ 274.190988][T12139] veth0_macvtap: entered promiscuous mode [ 274.216230][T12139] veth1_macvtap: entered promiscuous mode [ 274.225726][T12378] netlink: 'syz.1.2892': attribute type 29 has an invalid length. [ 274.276349][T12139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.316585][T12139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.340546][ T3490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.358168][ T3490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.384336][ T3490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.398067][ T3490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.524698][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.540870][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.596680][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.608508][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.626683][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 274.792140][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 274.808174][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.830799][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.853008][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 274.876705][ T24] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 274.891734][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.908061][ T24] usb 2-1: config 0 descriptor?? [ 274.949487][ T30] audit: type=1326 audit(1750966554.730:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.2.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6c18e929 code=0x7fc00000 [ 275.349173][ T24] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 275.369087][ T24] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 275.384619][ T24] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 275.401890][ T24] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x3 [ 275.419792][ T24] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 275.437666][ T24] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 275.455599][ T24] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 275.472066][ T24] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 275.490135][ T24] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 275.501828][ T24] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 275.519739][ T24] hid-multitouch 0003:0457:07DA.0020: item fetching failed at offset 33/34 [ 275.538840][ T24] hid-multitouch 0003:0457:07DA.0020: probe with driver hid-multitouch failed with error -22 [ 275.567575][ T24] usb 2-1: USB disconnect, device number 44 [ 276.161879][ T5830] Bluetooth: hci1: command tx timeout [ 276.838351][T12479] overlayfs: failed to clone upperpath [ 277.490601][T12503] TCP: TCP_TX_DELAY enabled [ 277.697510][T12511] netlink: 'syz.3.2925': attribute type 29 has an invalid length. [ 277.744688][T12511] netlink: 'syz.3.2925': attribute type 29 has an invalid length. [ 277.778465][T12511] netlink: 'syz.3.2925': attribute type 29 has an invalid length. [ 277.791400][T12511] netlink: 'syz.3.2925': attribute type 29 has an invalid length. [ 278.368132][T12529] netlink: 'syz.3.2932': attribute type 29 has an invalid length. [ 278.422293][T12531] netlink: 'syz.3.2932': attribute type 29 has an invalid length. [ 278.444333][T12529] netlink: 'syz.3.2932': attribute type 29 has an invalid length. [ 278.463236][T12529] netlink: 'syz.3.2932': attribute type 29 has an invalid length. [ 278.867882][T12545] netlink: 'syz.0.2937': attribute type 4 has an invalid length. [ 279.355601][ T5899] IPVS: starting estimator thread 0... [ 279.356681][T12564] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 279.451864][T12569] IPVS: using max 27 ests per chain, 64800 per kthread [ 280.607543][T12647] syzkaller1: entered promiscuous mode [ 280.615988][T12647] syzkaller1: entered allmulticast mode [ 280.624143][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2966'. [ 281.138573][T12683] program syz.3.2982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.591892][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 281.697811][T12721] overlayfs: failed to clone upperpath [ 281.755341][T12724] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3000'. [ 281.766433][T12724] gretap0: entered promiscuous mode [ 281.775685][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.789560][T12726] netlink: 'syz.2.3001': attribute type 29 has an invalid length. [ 281.792781][T12724] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3000'. [ 281.801219][T12726] netlink: 'syz.2.3001': attribute type 29 has an invalid length. [ 281.806590][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.819809][T12726] netlink: 'syz.2.3001': attribute type 29 has an invalid length. [ 281.832462][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.839295][T12726] netlink: 'syz.2.3001': attribute type 29 has an invalid length. [ 281.845778][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.862620][T12724] 0ªî{X¹¦: renamed from gretap0 [ 281.868411][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.878971][T12724] 0ªî{X¹¦: left promiscuous mode [ 281.884151][T12724] 0ªî{X¹¦: entered allmulticast mode [ 281.892854][T12724] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 281.911435][ T9] usb 2-1: config 0 descriptor?? [ 282.276493][ T30] audit: type=1800 audit(1750966562.070:47): pid=12745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3010" name="nullb0" dev="tmpfs" ino=4038 res=0 errno=0 [ 282.373588][ T9] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 282.482577][T12752] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3013'. [ 282.495157][T12752] gretap0: entered promiscuous mode [ 282.505719][T12752] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3013'. [ 282.515626][T12752] 0ªî{X¹¦: renamed from gretap0 [ 282.524919][T12752] 0ªî{X¹¦: left promiscuous mode [ 282.529936][T12752] 0ªî{X¹¦: entered allmulticast mode [ 282.537745][T12752] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 282.612863][T12754] syzkaller1: entered promiscuous mode [ 282.618470][T12754] syzkaller1: entered allmulticast mode [ 282.728314][T12756] syzkaller1: entered promiscuous mode [ 282.734068][T12756] syzkaller1: entered allmulticast mode [ 284.304934][T12804] netlink: 'syz.2.3035': attribute type 10 has an invalid length. [ 284.313118][T12804] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3035'. [ 284.385287][ T848] usb 2-1: USB disconnect, device number 45 [ 284.927433][T12838] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 285.146501][T12848] syzkaller1: entered promiscuous mode [ 285.152924][T12848] syzkaller1: entered allmulticast mode [ 285.322670][T12861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.337676][T12861] bond0: (slave rose0): Enslaving as an active interface with an up link [ 285.609217][T12870] syzkaller1: entered promiscuous mode [ 285.614968][T12870] syzkaller1: entered allmulticast mode [ 285.874726][T12881] input: syz1 as /devices/virtual/input/input34 [ 289.238974][T13059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.112470][ T848] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 291.281866][ T848] usb 2-1: Using ep0 maxpacket: 16 [ 291.299270][ T848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.321127][ T848] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.348740][ T848] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 291.358862][ T848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.367502][ T848] usb 2-1: Product: syz [ 291.371740][ T848] usb 2-1: Manufacturer: syz [ 291.378096][ T848] usb 2-1: SerialNumber: syz [ 291.390993][ T848] usb 2-1: config 0 descriptor?? [ 291.616565][ T848] usb 2-1: USB disconnect, device number 46 [ 292.444116][T13172] program syz.3.3173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.181856][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 293.331849][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 293.338362][ T24] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 293.346506][ T24] usb 4-1: config 0 has no interface number 0 [ 293.352789][ T24] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 293.363007][ T24] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 293.372979][ T24] usb 4-1: config 0 interface 41 has no altsetting 0 [ 293.381721][ T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 293.390908][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.398992][ T24] usb 4-1: Product: syz [ 293.403186][ T24] usb 4-1: Manufacturer: syz [ 293.407759][ T24] usb 4-1: SerialNumber: syz [ 293.421277][ T24] usb 4-1: config 0 descriptor?? [ 293.426884][T13189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.437594][T13189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.595797][T13202] syzkaller1: entered promiscuous mode [ 293.601365][T13202] syzkaller1: entered allmulticast mode [ 293.648644][T13189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.660990][T13189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 294.076821][ T24] Error reading MAC address [ 294.083096][T13189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 294.090309][T13189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 294.181840][ T848] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 294.298629][ T24] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 294.313241][ T24] usb 4-1: USB disconnect, device number 39 [ 294.331992][ T848] usb 2-1: Using ep0 maxpacket: 8 [ 294.338306][ T848] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 294.346740][ T848] usb 2-1: config 179 has no interface number 0 [ 294.353091][ T848] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 294.364649][ T848] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 294.376276][ T848] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 294.387687][ T848] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 294.399149][ T848] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 294.412467][ T848] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 294.421499][ T848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.436135][T13219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 294.615167][T13233] 9pnet_fd: Insufficient options for proto=fd [ 294.724578][ T848] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input35 [ 294.904495][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 295.057168][ T24] usb 2-1: USB disconnect, device number 47 [ 295.057182][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 295.071659][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 295.080584][ T24] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 295.567425][ T30] audit: type=1326 audit(1750966575.360:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.2.3220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b6c18e929 code=0x0 [ 295.735687][T13284] syzkaller1: entered promiscuous mode [ 295.735710][T13284] syzkaller1: entered allmulticast mode [ 295.886067][T13288] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xee [ 296.197501][T13303] tipc: Cannot configure node identity twice [ 296.694458][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3240'. [ 297.011886][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 297.112572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 297.206781][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.217106][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 297.237297][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.265434][ T24] usb 2-1: config 0 descriptor?? [ 297.285047][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 297.437790][T13343] input: syz1 as /devices/virtual/input/input36 [ 297.675130][T13357] netlink: 'syz.3.3256': attribute type 29 has an invalid length. [ 297.678119][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 297.686815][T13357] netlink: 'syz.3.3256': attribute type 29 has an invalid length. [ 297.693818][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 297.703061][T13357] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3256'. [ 297.915594][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 297.934980][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 297.956267][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 297.973659][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 297.987908][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 297.998178][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 298.012766][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 298.019770][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 298.052104][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 298.069136][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 298.087034][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 298.105712][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 298.115340][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 298.132205][ T24] pwc: Registered as video103. [ 298.156870][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 298.190996][ T24] usb 2-1: USB disconnect, device number 48 [ 298.781838][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 298.956797][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 298.984880][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 298.996610][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.011822][ T24] usb 2-1: Product: syz [ 299.015990][ T24] usb 2-1: Manufacturer: syz [ 299.020565][ T24] usb 2-1: SerialNumber: syz [ 299.028127][ T24] usb 2-1: config 0 descriptor?? [ 299.260050][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 299.671545][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 299.694526][ T24] usb 2-1: USB disconnect, device number 49 [ 299.842066][ T5898] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 299.912819][T13444] overlayfs: failed to clone upperpath [ 300.004003][ T5898] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.022381][ T5898] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 300.032344][ T5898] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.045375][ T5898] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.054472][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.080499][ T5898] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 300.149710][T13456] tipc: Started in network mode [ 300.159900][T13456] tipc: Node identity 4, cluster identity 4711 [ 300.167767][T13456] tipc: Node number set to 4 [ 300.562098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 300.689604][T13477] overlayfs: failed to clone upperpath [ 300.708147][T13477] overlayfs: failed to clone lowerpath [ 301.021823][T13496] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3308'. [ 301.099716][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 301.527969][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3320'. [ 301.741669][ T5830] Bluetooth: hci3: unexpected cc 0x2002 length: 65 > 4 [ 301.748734][ T5830] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 302.612949][ T10] usb 4-1: USB disconnect, device number 40 [ 302.847264][T13561] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 302.892060][T13561] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 303.056370][T13570] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.214692][T13570] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.298540][T13570] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.415518][T13570] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.556282][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.635460][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.662021][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.683078][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.482514][ T10] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 304.621881][ T5899] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 304.654716][ T10] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 304.665286][ T10] usb 4-1: config 0 has no interface number 0 [ 304.671404][ T10] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 304.683593][ T10] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 304.694838][ T10] usb 4-1: config 0 interface 230 has no altsetting 0 [ 304.706095][ T10] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 304.716135][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.724739][ T10] usb 4-1: Product: syz [ 304.728909][ T10] usb 4-1: Manufacturer: syz [ 304.733890][ T10] usb 4-1: SerialNumber: syz [ 304.741596][ T10] usb 4-1: config 0 descriptor?? [ 304.752202][T13633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.759462][T13633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.769482][ T10] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 304.783881][ T10] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 304.794088][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.805355][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.815500][ T5899] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 304.825385][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.845021][ T5899] usb 2-1: config 0 descriptor?? [ 305.265209][ T5899] hid-steam 0003:28DE:1142.0022: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 305.331887][ T5899] hid-steam 0003:28DE:1142.0022: Steam wireless receiver connected [ 305.356336][ T5899] hid-steam 0003:28DE:1142.0023: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 307.094038][ T10] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 307.143752][ T5837] usb 2-1: USB disconnect, device number 50 [ 307.174738][ T5837] hid-steam 0003:28DE:1142.0022: Steam wireless receiver disconnected [ 307.284613][ T5898] usb 4-1: USB disconnect, device number 41 [ 308.359659][T13733] syzkaller1: entered promiscuous mode [ 308.365311][T13733] syzkaller1: entered allmulticast mode [ 308.946725][T13755] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.976113][T13755] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 308.997703][T13755] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 309.009491][T13755] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 309.083095][T13755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 309.095756][T13755] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 309.129793][T13755] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 309.435840][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3417'. [ 309.453383][ T30] audit: type=1800 audit(1750966589.230:49): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3418" name="nullb0" dev="tmpfs" ino=5104 res=0 errno=0 [ 310.527203][T13822] overlayfs: failed to clone lowerpath [ 310.872547][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 310.872557][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 310.884748][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 311.001204][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3450'. [ 311.033505][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 311.112032][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 311.393309][T13871] netlink: 'syz.0.3459': attribute type 29 has an invalid length. [ 311.436013][T13871] netlink: 'syz.0.3459': attribute type 29 has an invalid length. [ 311.468341][T13871] netlink: 'syz.0.3459': attribute type 29 has an invalid length. [ 311.514945][T13871] netlink: 'syz.0.3459': attribute type 29 has an invalid length. [ 311.786863][T13864] netlink: 'syz.1.3456': attribute type 10 has an invalid length. [ 311.808986][T13864] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3456'. [ 312.738368][T13925] netlink: 'syz.2.3482': attribute type 29 has an invalid length. [ 312.759977][T13925] netlink: 'syz.2.3482': attribute type 29 has an invalid length. [ 312.777411][T13925] netlink: 'syz.2.3482': attribute type 29 has an invalid length. [ 312.793587][T13925] netlink: 'syz.2.3482': attribute type 29 has an invalid length. [ 312.852133][ T5899] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 312.952606][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 313.026476][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.047394][ T5899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.061115][ T5899] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 313.074660][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 313.094292][ T5899] usb 4-1: SerialNumber: syz [ 313.111928][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 313.192264][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 313.319615][ T5899] usb 4-1: 0:2 : does not exist [ 313.333566][ T5899] usb 4-1: USB disconnect, device number 42 [ 313.365378][T12791] udevd[12791]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.869792][T13967] netlink: 'syz.3.3501': attribute type 29 has an invalid length. [ 313.996263][T13973] program syz.1.3504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.364689][ T5837] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 314.535021][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 314.571842][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 314.597339][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 314.611387][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.627552][ T5837] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.646947][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.667823][ T5837] usb 4-1: config 0 descriptor?? [ 315.099164][ T5837] hid_parser_main: 7 callbacks suppressed [ 315.099186][ T5837] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 315.117622][ T5837] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 315.126067][ T5837] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 315.134803][ T5837] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 315.142782][ T5837] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 315.150520][ T5837] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 315.168421][ T5837] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 315.176290][ T5837] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 315.183882][ T5837] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 315.191278][ T5837] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 315.210077][ T5837] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 315.281861][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 315.385652][ T10] usb 4-1: USB disconnect, device number 43 [ 315.489536][T14024] autofs: Bad value for 'fd' [ 315.868801][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3538'. [ 316.791849][T14089] syzkaller1: entered promiscuous mode [ 316.797477][T14089] syzkaller1: entered allmulticast mode [ 317.038771][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.045323][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.206925][T14105] validate_nla: 3 callbacks suppressed [ 317.206964][T14105] netlink: 'syz.1.3561': attribute type 10 has an invalid length. [ 317.221552][T14105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3561'. [ 317.267602][T14105] team0: Port device geneve0 added [ 318.024011][T14128] program syz.1.3572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.231960][ T3079] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 318.385865][ T3079] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.408028][ T3079] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.419120][ T3079] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 318.432697][T14137] overlayfs: failed to clone lowerpath [ 318.433543][ T3079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.454077][ T3079] usb 4-1: config 0 descriptor?? [ 318.889791][ T3079] pyra 0003:1E7D:2CF6.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 319.088625][T14171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.478623][ T3079] pyra 0003:1E7D:2CF6.0025: couldn't init struct pyra_device [ 319.486290][ T3079] pyra 0003:1E7D:2CF6.0025: couldn't install mouse [ 319.495671][ T3079] pyra 0003:1E7D:2CF6.0025: probe with driver pyra failed with error -71 [ 319.501917][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 319.512341][ T3079] usb 4-1: USB disconnect, device number 44 [ 319.688540][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 319.704894][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.715697][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.726204][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.739346][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.772003][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 319.804571][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.837603][T14189] netlink: 'syz.0.3599': attribute type 29 has an invalid length. [ 319.847752][T14189] netlink: 'syz.0.3599': attribute type 29 has an invalid length. [ 319.869462][T14189] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3599'. [ 320.045227][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 320.059623][ T10] usbtmc 2-1:16.0: can't read capabilities [ 320.279480][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.313813][ T3079] usb 2-1: USB disconnect, device number 51 [ 320.611902][ T30] audit: type=1800 audit(1750966600.400:50): pid=14230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3616" name="nullb0" dev="tmpfs" ino=4038 res=0 errno=0 [ 321.391107][T14273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3635'. [ 321.493578][T14275] syzkaller1: entered promiscuous mode [ 321.509375][T14275] syzkaller1: entered allmulticast mode [ 321.703581][T14289] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3642'. [ 321.858261][T14297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3645'. [ 321.956091][T14301] [U] [ 321.959029][T14301] [U] [ 321.961721][T14301] [U] [ 321.964423][T14301] [U] [ 321.967312][T14301] [U] [ 321.970023][T14301] [U] [ 321.972722][T14301] [U] [ 321.975425][T14301] [U] [ 321.978989][T14301] [U] [ 321.981700][T14301] [U] [ 321.984404][T14301] [U] [ 321.987105][T14301] [U] [ 321.990437][T14301] [U] [ 321.993150][T14301] [U] [ 321.995848][T14301] [U] [ 321.998547][T14301] [U] [ 322.011849][T14301] [U] [ 322.014563][T14301] [U] [ 322.017272][T14301] [U] [ 322.019971][T14301] [U] [ 322.042625][T14301] [U] [ 322.045346][T14301] [U] [ 322.048045][T14301] [U] [ 322.050743][T14301] [U] [ 322.064428][T14301] [U] [ 322.067144][T14301] [U] [ 322.069844][T14301] [U] [ 322.072547][T14301] [U] [ 322.076712][T14301] [U] [ 322.079425][T14301] [U] [ 322.082125][T14301] [U] [ 322.084827][T14301] [U] [ 322.088829][T14301] [U] [ 322.091541][T14301] [U] [ 322.094240][T14301] [U] [ 322.096941][T14301] [U] [ 322.100265][T14301] [U] [ 322.102973][T14301] [U] [ 322.105675][T14301] [U] [ 322.108376][T14301] [U] [ 322.113192][T14301] [U] [ 322.115908][T14301] [U] [ 322.118613][T14301] [U] [ 322.121315][T14301] [U] [ 322.124750][T14301] [U] [ 322.127462][T14301] [U] [ 322.130162][T14301] [U] [ 322.132864][T14301] [U] [ 322.136892][T14301] [U] [ 322.139612][T14301] [U] [ 322.142316][T14301] [U] [ 322.145024][T14301] [U] [ 322.149222][T14301] [U] [ 322.151937][T14301] [U] [ 322.154642][T14301] [U] [ 322.157346][T14301] [U] [ 322.169363][T14301] [U] [ 322.172077][T14301] [U] [ 322.174780][T14301] [U] [ 322.177479][T14301] [U] [ 322.180996][T14301] [U] [ 322.183714][T14301] [U] [ 322.186415][T14301] [U] [ 322.189115][T14301] [U] [ 322.195528][T14301] [U] [ 322.198257][T14301] [U] [ 322.200955][T14301] [U] [ 322.203659][T14301] [U] [ 322.206970][T14301] [U] [ 322.209678][T14301] [U] [ 322.212381][T14301] [U] [ 322.215079][T14301] [U] [ 322.221184][T14301] [U] [ 322.223896][T14301] [U] [ 322.226609][T14301] [U] [ 322.229311][T14301] [U] [ 322.234424][T14301] [U] [ 322.237139][T14301] [U] [ 322.239839][T14301] [U] [ 322.242541][T14301] [U] [ 322.245944][T14301] [U] [ 322.248654][T14301] [U] [ 322.251358][T14301] [U] [ 322.254065][T14301] [U] [ 322.258635][T14301] [U] [ 322.261345][T14301] [U] [ 322.264042][T14301] [U] [ 322.266742][T14301] [U] [ 322.273197][T14301] [U] [ 322.275911][T14301] [U] [ 322.278616][T14301] [U] [ 322.281314][T14301] [U] [ 322.284710][T14301] [U] [ 322.287420][T14301] [U] [ 322.290117][T14301] [U] [ 322.292819][T14301] [U] [ 322.296202][T14301] [U] [ 322.298913][T14301] [U] [ 322.301621][T14301] [U] [ 322.304320][T14301] [U] [ 322.321862][T14301] [U] [ 322.324579][T14301] [U] [ 322.327274][T14301] [U] [ 322.329971][T14301] [U] [ 322.339550][T14301] [U] [ 322.342276][T14301] [U] [ 322.344974][T14301] [U] [ 322.347677][T14301] [U] [ 322.362445][T14301] [U] [ 322.365158][T14301] [U] [ 322.367857][T14301] [U] [ 322.370554][T14301] [U] [ 322.376609][T14301] [U] [ 322.379311][T14301] [U] [ 322.381993][T14301] [U] [ 322.384672][T14301] [U] [ 322.388014][T14301] [U] [ 322.390729][T14301] [U] [ 322.393427][T14301] [U] [ 322.396132][T14301] [U] [ 322.399873][T14301] [U] [ 322.402590][T14301] [U] [ 322.405294][T14301] [U] [ 322.407992][T14301] [U] [ 322.412399][T14301] [U] [ 322.415113][T14301] [U] [ 322.417810][T14301] [U] [ 322.475732][T14300] [U] [ 322.559277][T14316] sctp: [Deprecated]: syz.0.3650 (pid 14316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.559277][T14316] Use struct sctp_sack_info instead [ 322.873014][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 323.041888][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 323.057381][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 323.076312][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 323.095085][ T10] usb 2-1: can't read configurations, error -71 [ 323.999611][T14391] input: syz1 as /devices/virtual/input/input38 [ 324.577471][ T10] IPVS: starting estimator thread 0... [ 324.583954][T14423] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.671939][T14427] IPVS: using max 26 ests per chain, 62400 per kthread [ 324.891997][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 325.054762][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.073582][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.100854][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.114250][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.123509][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.147290][ T10] usb 4-1: config 0 descriptor?? [ 325.367755][T14447] netlink: 'syz.1.3709': attribute type 29 has an invalid length. [ 325.381543][T14447] netlink: 'syz.1.3709': attribute type 29 has an invalid length. [ 325.390738][T14447] netlink: 'syz.1.3709': attribute type 29 has an invalid length. [ 325.399955][T14447] netlink: 'syz.1.3709': attribute type 29 has an invalid length. [ 325.576712][ T10] plantronics 0003:047F:FFFF.0026: reserved main item tag 0xd [ 325.593708][ T10] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 325.750222][T14461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3715'. [ 325.823908][ T3079] usb 4-1: USB disconnect, device number 45 [ 327.156042][T14527] overlayfs: failed to clone upperpath [ 327.741505][ T30] audit: type=1326 audit(1750966607.520:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14542 comm="syz.3.3752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78e929 code=0x0 [ 328.239304][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3764'. [ 328.791934][ T3079] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 328.946323][ T3079] usb 2-1: config 0 has no interfaces? [ 328.952911][ T3079] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 328.971819][ T3079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.995359][ T3079] usb 2-1: config 0 descriptor?? [ 329.216386][ T3079] usb 2-1: USB disconnect, device number 54 [ 329.337192][T14608] netlink: 'syz.0.3780': attribute type 12 has an invalid length. [ 329.541914][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 329.703636][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.717826][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.733483][ T10] usb 4-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 329.743747][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.756098][ T10] usb 4-1: config 0 descriptor?? [ 330.176557][ T10] hid_parser_main: 7 callbacks suppressed [ 330.176578][ T10] ntrig 0003:1B96:000F.0027: unknown main item tag 0x0 [ 330.202742][ T10] ntrig 0003:1B96:000F.0027: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.3-1/input0 [ 330.373042][ T10] ntrig 0003:1B96:000F.0027: Firmware version: 5.10.12.37.6 (a9eb a68c) [ 330.590985][ T10] usb 4-1: USB disconnect, device number 46 [ 331.428026][T14702] syzkaller1: entered promiscuous mode [ 331.438985][T14702] syzkaller1: entered allmulticast mode [ 333.111924][ T5153] Bluetooth: hci1: command 0x0c1a tx timeout [ 333.630784][T14797] netlink: 'syz.2.3865': attribute type 29 has an invalid length. [ 333.647339][T14797] netlink: 'syz.2.3865': attribute type 29 has an invalid length. [ 333.660181][T14797] netlink: 'syz.2.3865': attribute type 29 has an invalid length. [ 333.670076][T14797] netlink: 'syz.2.3865': attribute type 29 has an invalid length. [ 334.300928][T14825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.842231][ T5899] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 335.001898][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 335.013673][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.029302][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.050053][ T5899] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 335.068021][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.085985][ T5899] usb 4-1: config 0 descriptor?? [ 335.174538][T14865] syzkaller1: entered promiscuous mode [ 335.180022][T14865] syzkaller1: entered allmulticast mode [ 335.191939][ T5153] Bluetooth: hci1: command 0x0c1a tx timeout [ 335.541324][ T5899] savu 0003:1E7D:2D5A.0028: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 335.803370][ T10] usb 4-1: USB disconnect, device number 47 [ 336.441157][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3924'. [ 336.462693][ T3079] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 336.527876][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3926'. [ 336.642396][ T3079] usb 2-1: Using ep0 maxpacket: 8 [ 336.655361][ T3079] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 336.675899][ T3079] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.699592][ T3079] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.719837][ T3079] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.743561][ T3079] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.762942][ T3079] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 336.774987][ T3079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.011620][ T3079] usb 2-1: usb_control_msg returned -32 [ 337.017751][ T3079] usbtmc 2-1:16.0: can't read capabilities [ 337.070178][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3938'. [ 337.253204][T14982] program syz.3.3942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.372510][T14991] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 337.382043][ T3079] usb 2-1: USB disconnect, device number 55 [ 337.795580][T15016] overlayfs: failed to clone upperpath [ 337.850656][T15020] program syz.3.3960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.089741][T15035] netlink: 372 bytes leftover after parsing attributes in process `syz.2.3967'. [ 338.174307][T15039] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3968'. [ 339.091138][ T30] audit: type=1326 audit(1750966618.880:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15071 comm="syz.0.3982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f567338e929 code=0x0 [ 339.322191][ T3079] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 339.481932][ T3079] usb 2-1: Using ep0 maxpacket: 16 [ 339.498998][ T3079] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.509398][ T3079] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 339.519708][ T3079] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.534982][ T3079] usb 2-1: config 1 interface 0 has no altsetting 0 [ 339.558583][ T3079] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 339.568100][ T3079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.576267][ T3079] usb 2-1: Product: syz [ 339.580600][ T3079] usb 2-1: Manufacturer: syz [ 339.585376][ T3079] usb 2-1: SerialNumber: syz [ 339.668455][T15098] veth0: entered promiscuous mode [ 339.675800][T15096] veth0: left promiscuous mode [ 339.817038][ T3079] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 340.086235][T15074] usblp0:failed reading printer status (-32) [ 340.102898][ T5899] usb 2-1: USB disconnect, device number 56 [ 340.123004][ T5899] usblp0: removed [ 340.720411][T15138] netlink: 'syz.1.4011': attribute type 29 has an invalid length. [ 340.730729][T15138] netlink: 'syz.1.4011': attribute type 29 has an invalid length. [ 340.742618][T15138] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4011'. [ 340.752107][T15138] unsupported nla_type 58 [ 340.864920][T15148] netlink: 'syz.1.4017': attribute type 29 has an invalid length. [ 340.875796][T15148] netlink: 'syz.1.4017': attribute type 29 has an invalid length. [ 340.886284][T15148] netlink: 'syz.1.4017': attribute type 29 has an invalid length. [ 340.896323][T15148] netlink: 'syz.1.4017': attribute type 29 has an invalid length. [ 341.084244][T15160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.238765][ T30] audit: type=1326 audit(1750966621.020:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78e929 code=0x7ffc0000 [ 341.294039][ T30] audit: type=1326 audit(1750966621.020:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78e929 code=0x7ffc0000 [ 341.319536][ T30] audit: type=1326 audit(1750966621.030:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd82b78e929 code=0x7ffc0000 [ 341.341794][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.351678][ T30] audit: type=1326 audit(1750966621.030:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78e929 code=0x7ffc0000 [ 341.378937][ T30] audit: type=1326 audit(1750966621.030:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78e929 code=0x7ffc0000 [ 341.422364][ T30] audit: type=1326 audit(1750966621.030:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd82b78e929 code=0x7ffc0000 [ 341.444542][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.451280][ T30] audit: type=1326 audit(1750966621.060:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78e929 code=0x7ffc0000 [ 341.478236][ T30] audit: type=1326 audit(1750966621.070:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd82b78e929 code=0x7ffc0000 [ 341.511534][ T30] audit: type=1326 audit(1750966621.140:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.3.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78e929 code=0x7ffc0000 [ 341.659561][T15181] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4031'. [ 341.676497][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4031'. [ 341.816082][T15192] netlink: 'syz.3.4037': attribute type 29 has an invalid length. [ 341.831198][T15192] netlink: 'syz.3.4037': attribute type 29 has an invalid length. [ 341.843622][T15192] netlink: 'syz.3.4037': attribute type 29 has an invalid length. [ 341.852501][T15192] netlink: 'syz.3.4037': attribute type 29 has an invalid length. [ 342.471374][T15214] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 342.484400][T15214] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 342.508436][T15214] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.528072][T15214] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.595901][T15214] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 342.687556][T15232] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4055'. [ 342.777389][T15232] syz.2.4055 (15232) used greatest stack depth: 17992 bytes left [ 342.971854][ T3079] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 342.981972][ T5837] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 343.124369][ T3079] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.138068][ T3079] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 343.149929][ T3079] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 343.160280][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.173377][ T3079] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 343.186280][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 343.199473][ T3079] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.208623][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 343.220163][ T3079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.228484][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 343.243101][ T5837] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.253220][ T3079] usb 4-1: config 0 descriptor?? [ 343.258358][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.283585][ T5837] usb 2-1: config 0 descriptor?? [ 343.676592][ T3079] plantronics 0003:047F:FFFF.0029: ignoring exceeding usage max [ 343.695068][ T3079] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 343.717361][ T5837] plantronics 0003:047F:FFFF.002A: ignoring exceeding usage max [ 343.748124][ T5837] plantronics 0003:047F:FFFF.002A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 344.394617][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 344.551962][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 344.554866][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 344.632004][ T5153] Bluetooth: hci1: command 0x0c1a tx timeout [ 344.834162][T15312] overlayfs: failed to clone upperpath [ 344.994512][ T5837] usb 2-1: USB disconnect, device number 57 [ 345.803739][ T10] usb 4-1: USB disconnect, device number 48 [ 346.331905][ T5837] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 346.472138][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 346.493765][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.518489][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.536390][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.556295][ T5837] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.581504][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.609073][ T5837] usb 4-1: config 0 descriptor?? [ 347.028161][ T5837] plantronics 0003:047F:FFFF.002B: reserved main item tag 0xd [ 347.033887][T15405] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 347.042501][T15405] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 347.069922][ T5837] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 347.293242][ T5899] usb 4-1: USB disconnect, device number 49 [ 347.411991][ T5837] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 347.573607][ T5837] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 347.584702][ T5837] usb 2-1: config 0 has no interface number 0 [ 347.595061][ T5837] usb 2-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 347.607129][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.616090][ T5837] usb 2-1: Product: syz [ 347.620322][ T5837] usb 2-1: Manufacturer: syz [ 347.628806][ T5837] usb 2-1: SerialNumber: syz [ 347.642652][ T5837] usb 2-1: config 0 descriptor?? [ 347.655353][ T5837] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 347.796314][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 347.796331][ T30] audit: type=1326 audit(1750966627.590:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.2.4132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b6c18e929 code=0x0 [ 348.463870][ T5837] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41 [ 348.667948][ T24] usb 2-1: USB disconnect, device number 58 [ 349.463072][T15478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.131823][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 350.283469][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.295372][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 350.305797][ T24] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.324632][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.343900][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.361835][ T24] usb 2-1: Product: syz [ 350.366271][ T24] usb 2-1: Manufacturer: syz [ 350.370870][ T24] usb 2-1: SerialNumber: syz [ 350.508616][T15500] binder: 15499:15500 ioctl c0306201 200000001a80 returned -14 [ 351.409902][ T24] cdc_ncm 2-1:1.0: bind() failure [ 351.434536][ T24] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 351.452691][ T24] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 351.482356][ T24] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 351.532117][ T24] usb 2-1: USB disconnect, device number 59 [ 351.543168][ T30] audit: type=1326 audit(1750966631.320:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15546 comm="syz.2.4185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b6c18e929 code=0x0 [ 352.323352][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 352.491851][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 352.505406][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 352.516974][ T10] usb 2-1: config 0 has no interface number 0 [ 352.533565][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 352.545986][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.576321][ T10] usb 2-1: Product: syz [ 352.580524][ T10] usb 2-1: Manufacturer: syz [ 352.604374][ T10] usb 2-1: SerialNumber: syz [ 352.624044][ T10] usb 2-1: config 0 descriptor?? [ 352.647497][ T10] smsc95xx v2.0.0 [ 352.838158][ T30] audit: type=1800 audit(1750966632.630:66): pid=15596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4206" name="nullb0" dev="tmpfs" ino=4038 res=0 errno=0 [ 353.046349][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 353.057752][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 353.115615][T15609] netlink: 624 bytes leftover after parsing attributes in process `syz.2.4212'. [ 353.167591][T15611] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4213'. [ 353.312909][T15615] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 353.470266][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 353.498860][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 353.520736][ T10] usb 2-1: USB disconnect, device number 60 [ 353.791994][T15639] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4224'. [ 354.133799][T15658] syzkaller1: entered promiscuous mode [ 354.139401][T15658] syzkaller1: entered allmulticast mode [ 354.264176][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4238'. [ 354.633365][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 354.692137][ T5837] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 354.791945][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 354.798821][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.808910][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.826734][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.836928][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.850184][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 354.859281][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.867347][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 354.875639][ T5837] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 354.889883][ T5837] usb 2-1: config 0 has no interface number 0 [ 354.900316][ T5837] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 354.909649][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.917730][ T5837] usb 2-1: Product: syz [ 354.922962][ T5837] usb 2-1: Manufacturer: syz [ 354.927589][ T5837] usb 2-1: SerialNumber: syz [ 354.936195][ T5837] usb 2-1: config 0 descriptor?? [ 354.953726][ T5837] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 354.986388][T15698] overlayfs: failed to clone upperpath [ 355.100997][ T24] usb 4-1: usb_control_msg returned -32 [ 355.105713][T15673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.113645][ T24] usbtmc 4-1:16.0: can't read capabilities [ 355.124539][T15703] netlink: 'syz.2.4254': attribute type 21 has an invalid length. [ 355.131199][T15673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.136028][T15703] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4254'. [ 355.162790][ T24] usb 4-1: USB disconnect, device number 50 [ 355.183353][ T5837] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 355.213725][ T5837] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 355.498698][T15720] pimreg: entered allmulticast mode [ 355.506885][T15720] pimreg: left allmulticast mode [ 355.566783][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 355.574811][ T5837] usb 2-1: USB disconnect, device number 61 [ 355.601961][ T5837] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 355.647310][ T5837] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 355.680336][ T5837] quatech2 2-1:0.51: device disconnected [ 357.512671][T15795] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.949803][T15847] netlink: 'syz.1.4316': attribute type 27 has an invalid length. [ 359.868490][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 359.878470][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 359.896130][T15890] ceph: No mds server is up or the cluster is laggy [ 360.128164][T15899] program syz.3.4340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.270622][T15904] overlayfs: failed to resolve './file1/file0': -2 [ 360.390721][T15914] loop6: detected capacity change from 0 to 7 [ 360.401604][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.410823][ C1] buffer_io_error: 9 callbacks suppressed [ 360.410840][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.427029][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.436214][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.451876][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.461042][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.469089][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.478282][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.497993][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.507195][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.518012][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.527167][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.552213][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.561371][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.569432][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.578610][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.588405][T15914] ldm_validate_partition_table(): Disk read failed. [ 360.605942][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.615145][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.623861][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.633041][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.650993][T15914] Dev loop6: unable to read RDB block 0 [ 360.675565][T15923] 9pnet_fd: Insufficient options for proto=fd [ 360.683047][T15914] loop6: unable to read partition table [ 360.689492][T15914] loop6: partition table beyond EOD, truncated [ 360.703018][T15914] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 363.272713][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 363.282054][T15938] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 364.115458][T15938] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 364.128312][T15938] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 364.162154][T15938] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.421980][ T5837] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 364.596457][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 364.617953][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 364.638983][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 364.651422][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.674793][ T5837] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.705018][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.724754][ T5837] usb 4-1: config 0 descriptor?? [ 364.735830][T15983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 365.176243][ T5837] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 365.191499][ T5837] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 365.200343][ T5837] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 365.208188][ T5837] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 365.236007][ T5837] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 365.251819][ T5837] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 365.259221][ T5837] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 365.273658][ T5837] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 365.281131][ T5837] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 365.289419][ T5837] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 365.298757][T16084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.306705][T16085] ------------[ cut here ]------------ [ 365.312389][T16085] WARNING: ./include/net/mac80211.h:7769 at _ieee80211_sta_cur_vht_bw+0x524/0x6e0, CPU#0: syz.0.4423/16085 [ 365.319634][ T5837] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 365.323847][T16085] Modules linked in: [ 365.340837][T16085] CPU: 0 UID: 0 PID: 16085 Comm: syz.0.4423 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 365.353129][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 365.363397][T16085] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 365.368835][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 365.369829][T16085] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 70 f9 d5 f6 b8 04 00 00 00 eb 31 e8 64 f9 d5 f6 eb 28 e8 5d f9 d5 f6 90 <0f> 0b 90 eb 1d e8 52 f9 d5 f6 b8 02 00 00 00 eb 13 e8 46 f9 d5 f6 [ 365.396014][T16085] RSP: 0018:ffffc900187aef48 EFLAGS: 00010283 [ 365.402252][T16085] RAX: ffffffff8aea1323 RBX: ffff8880292d0000 RCX: 0000000000080000 [ 365.410233][T16085] RDX: ffffc90004c7b000 RSI: 0000000000000375 RDI: 0000000000000376 [ 365.418306][T16085] RBP: 0000000000000000 R08: ffff888021ebbc00 R09: 0000000000000007 [ 365.426298][T16085] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 365.434287][T16085] R13: 0000000000000007 R14: ffff8880292d0180 R15: 1ffff1100525a030 [ 365.442328][T16085] FS: 00007f56741a66c0(0000) GS:ffff8881259e6000(0000) knlGS:0000000000000000 [ 365.451435][T16085] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.452501][ T5837] usb 4-1: USB disconnect, device number 51 [ 365.458054][T16085] CR2: 0000200000001080 CR3: 0000000078f68000 CR4: 00000000003526f0 [ 365.458078][T16085] Call Trace: [ 365.475235][T16085] [ 365.478180][T16085] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 365.484229][T16085] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 365.490756][T16085] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 365.496441][T16085] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 365.502122][T16085] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 365.507779][T16085] ? ieee80211_get_link_sband+0x335/0x3e0 [ 365.513563][T16085] sta_link_apply_parameters+0xb75/0xf60 [ 365.519230][T16085] sta_apply_parameters+0x944/0x15b0 [ 365.524585][T16085] ieee80211_add_station+0x424/0x6a0 [ 365.529890][T16085] rdev_add_station+0x108/0x290 [ 365.534866][T16085] nl80211_new_station+0x1755/0x1b70 [ 365.540181][T16085] ? __pfx_nl80211_new_station+0x10/0x10 [ 365.545843][T16085] ? netdev_run_todo+0xe1d/0xea0 [ 365.551003][T16085] ? nl80211_pre_doit+0x4f1/0x930 [ 365.556134][T16085] genl_family_rcv_msg_doit+0x212/0x300 [ 365.561708][T16085] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 365.567858][T16085] ? bpf_lsm_capable+0x9/0x20 [ 365.572657][T16085] ? security_capable+0x7e/0x2e0 [ 365.577621][T16085] genl_rcv_msg+0x60e/0x790 [ 365.582198][T16085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 365.587310][T16085] ? ref_tracker_free+0x63a/0x7d0 [ 365.592486][T16085] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 365.597883][T16085] ? __pfx_nl80211_new_station+0x10/0x10 [ 365.603552][T16085] ? __pfx_nl80211_post_doit+0x10/0x10 [ 365.609037][T16085] ? __pfx_ref_tracker_free+0x10/0x10 [ 365.614467][T16085] netlink_rcv_skb+0x205/0x470 [ 365.619249][T16085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 365.624356][T16085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 365.629680][T16085] ? down_read+0x1ad/0x2e0 [ 365.634153][T16085] genl_rcv+0x28/0x40 [ 365.638168][T16085] netlink_unicast+0x758/0x8d0 [ 365.642994][T16085] netlink_sendmsg+0x805/0xb30 [ 365.647783][T16085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.653316][T16085] ? aa_sock_msg_perm+0xf1/0x1d0 [ 365.658278][T16085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.663631][T16085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.668927][T16085] __sock_sendmsg+0x219/0x270 [ 365.673744][T16085] ____sys_sendmsg+0x505/0x830 [ 365.678525][T16085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.683907][T16085] ? import_iovec+0x74/0xa0 [ 365.688430][T16085] ___sys_sendmsg+0x21f/0x2a0 [ 365.693185][T16085] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.698439][T16085] ? __fget_files+0x2a/0x420 [ 365.703085][T16085] ? __fget_files+0x3a0/0x420 [ 365.707781][T16085] __x64_sys_sendmsg+0x19b/0x260 [ 365.712762][T16085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.718251][T16085] ? rcu_is_watching+0x15/0xb0 [ 365.723058][T16085] ? do_syscall_64+0xbe/0x3b0 [ 365.727759][T16085] do_syscall_64+0xfa/0x3b0 [ 365.732297][T16085] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.737508][T16085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.743677][T16085] ? clear_bhb_loop+0x60/0xb0 [ 365.748381][T16085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.754650][T16085] RIP: 0033:0x7f567338e929 [ 365.759094][T16085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.778763][T16085] RSP: 002b:00007f56741a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.787228][T16085] RAX: ffffffffffffffda RBX: 00007f56735b5fa0 RCX: 00007f567338e929 [ 365.795273][T16085] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 365.803282][T16085] RBP: 00007f5673410b39 R08: 0000000000000000 R09: 0000000000000000 [ 365.811265][T16085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.819294][T16085] R13: 0000000000000000 R14: 00007f56735b5fa0 R15: 00007ffc2ffafcb8 [ 365.827322][T16085] [ 365.830352][T16085] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 365.837640][T16085] CPU: 0 UID: 0 PID: 16085 Comm: syz.0.4423 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 365.849189][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 365.859249][T16085] Call Trace: [ 365.862532][T16085] [ 365.865469][T16085] dump_stack_lvl+0x99/0x250 [ 365.870078][T16085] ? __asan_memcpy+0x40/0x70 [ 365.874690][T16085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.879908][T16085] ? __pfx__printk+0x10/0x10 [ 365.884531][T16085] panic+0x2db/0x790 [ 365.888439][T16085] ? __pfx_panic+0x10/0x10 [ 365.892872][T16085] __warn+0x334/0x4c0 [ 365.896843][T16085] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 365.902651][T16085] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 365.908458][T16085] report_bug+0x2be/0x4f0 [ 365.912781][T16085] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 365.918588][T16085] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 365.924389][T16085] ? _ieee80211_sta_cur_vht_bw+0x526/0x6e0 [ 365.930190][T16085] handle_bug+0x84/0x160 [ 365.934428][T16085] exc_invalid_op+0x1a/0x50 [ 365.938935][T16085] asm_exc_invalid_op+0x1a/0x20 [ 365.943784][T16085] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 365.950199][T16085] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 70 f9 d5 f6 b8 04 00 00 00 eb 31 e8 64 f9 d5 f6 eb 28 e8 5d f9 d5 f6 90 <0f> 0b 90 eb 1d e8 52 f9 d5 f6 b8 02 00 00 00 eb 13 e8 46 f9 d5 f6 [ 365.969793][T16085] RSP: 0018:ffffc900187aef48 EFLAGS: 00010283 [ 365.975855][T16085] RAX: ffffffff8aea1323 RBX: ffff8880292d0000 RCX: 0000000000080000 [ 365.983820][T16085] RDX: ffffc90004c7b000 RSI: 0000000000000375 RDI: 0000000000000376 [ 365.991788][T16085] RBP: 0000000000000000 R08: ffff888021ebbc00 R09: 0000000000000007 [ 365.999749][T16085] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 366.007711][T16085] R13: 0000000000000007 R14: ffff8880292d0180 R15: 1ffff1100525a030 [ 366.015678][T16085] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 366.021497][T16085] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 366.027301][T16085] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 366.033281][T16085] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 366.039778][T16085] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 366.045410][T16085] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 366.051040][T16085] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 366.056668][T16085] ? ieee80211_get_link_sband+0x335/0x3e0 [ 366.062395][T16085] sta_link_apply_parameters+0xb75/0xf60 [ 366.068034][T16085] sta_apply_parameters+0x944/0x15b0 [ 366.073324][T16085] ieee80211_add_station+0x424/0x6a0 [ 366.078604][T16085] rdev_add_station+0x108/0x290 [ 366.083451][T16085] nl80211_new_station+0x1755/0x1b70 [ 366.088739][T16085] ? __pfx_nl80211_new_station+0x10/0x10 [ 366.094357][T16085] ? netdev_run_todo+0xe1d/0xea0 [ 366.099316][T16085] ? nl80211_pre_doit+0x4f1/0x930 [ 366.104345][T16085] genl_family_rcv_msg_doit+0x212/0x300 [ 366.109894][T16085] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 366.115969][T16085] ? bpf_lsm_capable+0x9/0x20 [ 366.120636][T16085] ? security_capable+0x7e/0x2e0 [ 366.125569][T16085] genl_rcv_msg+0x60e/0x790 [ 366.130074][T16085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.135093][T16085] ? ref_tracker_free+0x63a/0x7d0 [ 366.140108][T16085] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 366.145476][T16085] ? __pfx_nl80211_new_station+0x10/0x10 [ 366.151093][T16085] ? __pfx_nl80211_post_doit+0x10/0x10 [ 366.156547][T16085] ? __pfx_ref_tracker_free+0x10/0x10 [ 366.161921][T16085] netlink_rcv_skb+0x205/0x470 [ 366.166680][T16085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.171709][T16085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.177009][T16085] ? down_read+0x1ad/0x2e0 [ 366.181422][T16085] genl_rcv+0x28/0x40 [ 366.185398][T16085] netlink_unicast+0x758/0x8d0 [ 366.190159][T16085] netlink_sendmsg+0x805/0xb30 [ 366.194923][T16085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.200206][T16085] ? aa_sock_msg_perm+0xf1/0x1d0 [ 366.205136][T16085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.210416][T16085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.215700][T16085] __sock_sendmsg+0x219/0x270 [ 366.220370][T16085] ____sys_sendmsg+0x505/0x830 [ 366.225134][T16085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.230421][T16085] ? import_iovec+0x74/0xa0 [ 366.234919][T16085] ___sys_sendmsg+0x21f/0x2a0 [ 366.239594][T16085] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.244819][T16085] ? __fget_files+0x2a/0x420 [ 366.249406][T16085] ? __fget_files+0x3a0/0x420 [ 366.254084][T16085] __x64_sys_sendmsg+0x19b/0x260 [ 366.259018][T16085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.264481][T16085] ? rcu_is_watching+0x15/0xb0 [ 366.269238][T16085] ? do_syscall_64+0xbe/0x3b0 [ 366.273910][T16085] do_syscall_64+0xfa/0x3b0 [ 366.278403][T16085] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.283591][T16085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.289648][T16085] ? clear_bhb_loop+0x60/0xb0 [ 366.294321][T16085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.300203][T16085] RIP: 0033:0x7f567338e929 [ 366.304608][T16085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.324204][T16085] RSP: 002b:00007f56741a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.332611][T16085] RAX: ffffffffffffffda RBX: 00007f56735b5fa0 RCX: 00007f567338e929 [ 366.340572][T16085] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 366.348530][T16085] RBP: 00007f5673410b39 R08: 0000000000000000 R09: 0000000000000000 [ 366.356489][T16085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.364446][T16085] R13: 0000000000000000 R14: 00007f56735b5fa0 R15: 00007ffc2ffafcb8 [ 366.372432][T16085] [ 366.375663][T16085] Kernel Offset: disabled [ 366.379977][T16085] Rebooting in 86400 seconds..