last executing test programs: 7m45.290918422s ago: executing program 3 (id=553): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) 7m44.433245557s ago: executing program 3 (id=557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) unshare(0x60000600) 7m43.09592911s ago: executing program 3 (id=563): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 7m42.556997492s ago: executing program 3 (id=567): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_SETWSUBD(r0, 0x6411) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f24, 0x5, 0x2, 0xf0000, 0x4, 0x9, 0xfff, 0x4, 0x9, 0x400003bf, 0x805, 0x1600, 0x5, 0x20000001, 0x809, 0x400e1c8, 0x6, 0x3, 0x402, 0x199, 0x6, 0x20000004, 0xb, 0x1, 0x2000000, 0xffffffff, 0xef, 0x101, 0xa, 0x8000003, 0xdffffffd]}) 7m41.699348464s ago: executing program 3 (id=571): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x15, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x300, 0x3, 0xfffffffffffffffd, 0x0, 0x1000081, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc1, 0x0, 0x3db4, 0x7fffffff, 0x400}, 0x0, 0x0) 7m40.727771067s ago: executing program 3 (id=575): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x82) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setregid(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 7m25.29260466s ago: executing program 32 (id=575): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x82) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setregid(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 7m11.66646107s ago: executing program 2 (id=675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) arch_prctl$ARCH_SET_GS(0x1001, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) pipe(&(0x7f0000000500)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 7m10.687396208s ago: executing program 2 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}}, 0x14}}, 0x2000044) 7m10.005062046s ago: executing program 2 (id=681): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) 7m8.763207077s ago: executing program 2 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) 7m7.779535607s ago: executing program 2 (id=687): setreuid(0xee01, 0xee00) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) 7m6.806521772s ago: executing program 2 (id=690): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, 0x0, &(0x7f00000004c0)=0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) 6m50.567353204s ago: executing program 33 (id=690): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, 0x0, &(0x7f00000004c0)=0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) 7.971887467s ago: executing program 6 (id=2501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, 0x0, 0x42005}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd3b2}]}, 0x34}}, 0x8080) 7.699018073s ago: executing program 4 (id=2503): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 7.415655338s ago: executing program 6 (id=2504): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 7.257852189s ago: executing program 4 (id=2506): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000000c0)={0x20, 0x11, 0x4, '.#,J'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.694870725s ago: executing program 6 (id=2507): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x5, &(0x7f00000000c0)="0134c218", 0x68) 6.069664416s ago: executing program 6 (id=2509): ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000280)) 5.520437251s ago: executing program 6 (id=2512): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.18598947s ago: executing program 0 (id=2513): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x4) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) splice(r0, 0x0, r3, 0x0, 0x100000004, 0x0) 4.921386441s ago: executing program 6 (id=2515): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) creat(&(0x7f0000000100)='./file1/file0\x00', 0x0) 4.614370231s ago: executing program 4 (id=2516): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 4.574033095s ago: executing program 0 (id=2517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 4.038865678s ago: executing program 4 (id=2520): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0xc00000000, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 4.038554015s ago: executing program 0 (id=2521): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200102"], 0x0}) 3.443466073s ago: executing program 4 (id=2524): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.15256068s ago: executing program 1 (id=2526): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000000c0)={0x20, 0x11, 0x4, '.#,J'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.918663818s ago: executing program 5 (id=2527): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x4) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) splice(r0, 0x0, r3, 0x0, 0x100000004, 0x0) 2.850445054s ago: executing program 4 (id=2528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) ptrace(0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) 2.420488224s ago: executing program 5 (id=2529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x0) 2.178819752s ago: executing program 1 (id=2530): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 2.090599321s ago: executing program 5 (id=2531): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000400)={0x1d, 0x0, 0x2}, 0x18) r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/56, 0x8}], 0x1000000000000201) 1.884846635s ago: executing program 0 (id=2532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x40}, @local, @mcast2, 0x6afb, 0x5, 0x5a6, 0x100, 0x8, 0x8d0104}) 1.622730457s ago: executing program 1 (id=2533): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) 1.454861778s ago: executing program 5 (id=2534): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0xc00000000, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1.427320812s ago: executing program 0 (id=2535): r0 = syz_open_dev$loop(0x0, 0xffffffffffffffff, 0xc80) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000280)) 1.04997782s ago: executing program 1 (id=2536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0x100000, 0x0}) 904.303251ms ago: executing program 0 (id=2537): syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000001010902240001000000000904000002ffffff000905817a"], 0x0) 897.881088ms ago: executing program 5 (id=2538): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 434.613087ms ago: executing program 1 (id=2539): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x4) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) splice(r0, 0x0, r3, 0x0, 0x100000004, 0x0) 367.448608ms ago: executing program 5 (id=2540): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000000c0)={0x20, 0x11, 0x4, '.#,J'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=2541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) kernel console output (not intermixed with test programs): ubj=unconfined pid=6578 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 302.444134][ T30] audit: type=1326 audit(1763586441.459:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 302.467717][ T30] audit: type=1326 audit(1763586441.459:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 302.868775][ T5891] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 302.881434][ T5891] microsoft 0003:045E:07DA.0006: no inputs found [ 302.895276][ T5891] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 302.984176][ T5872] usb 1-1: USB disconnect, device number 4 [ 303.232680][ T6591] overlayfs: failed to resolve './file0': -2 [ 303.475416][ T6585] fido_id[6585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 304.846777][ T5891] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 304.880642][ T6611] random: crng reseeded on system resumption [ 305.110680][ T5891] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 305.121514][ T5891] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.133560][ T5891] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 305.143817][ T5891] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.157279][ T5891] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.167836][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.378955][ T5891] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.387788][ T5891] usb 4-1: invalid MIDI out EP 0 [ 305.789191][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.269'. [ 305.883688][ T6622] overlayfs: failed to resolve './file0': -2 [ 306.104599][ T5891] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 306.233748][ T5891] usb 4-1: USB disconnect, device number 4 [ 306.275403][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.677310][ T6628] netlink: 'syz.4.274': attribute type 19 has an invalid length. [ 307.345598][ T30] audit: type=1326 audit(1763586446.419:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.3.279" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x0 [ 308.695778][ T6660] overlayfs: failed to resolve './file0': -2 [ 308.962024][ T5872] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 309.183026][ T5872] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 309.193974][ T5872] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 309.209995][ T5872] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 309.220443][ T5872] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.234200][ T5872] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 309.243635][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.417342][ T5872] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 309.425696][ T5872] usb 1-1: invalid MIDI out EP 0 [ 309.798185][ T5872] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 309.821287][ T5891] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 309.867802][ T6673] mmap: syz.1.291 (6673) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 309.973327][ T5872] usb 1-1: USB disconnect, device number 5 [ 310.074322][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 310.086496][ T5891] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 310.095808][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.188141][ T5891] usb 3-1: config 0 descriptor?? [ 310.272803][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.721849][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 310.728969][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 310.864098][ T5891] usb 3-1: USB disconnect, device number 3 [ 312.101320][ T6693] overlayfs: overlapping lowerdir path [ 312.651191][ T6698] netlink: 'syz.3.305': attribute type 12 has an invalid length. [ 314.970316][ T6721] overlayfs: overlapping lowerdir path [ 317.319525][ T6750] overlayfs: overlapping lowerdir path [ 317.396592][ T5862] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 317.612300][ T5862] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 317.623119][ T5862] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 317.634748][ T5862] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 317.644984][ T5862] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.658482][ T5862] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 317.668105][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.788951][ T5862] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.797674][ T5862] usb 4-1: invalid MIDI out EP 0 [ 318.239404][ T5862] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 318.318292][ T6386] udevd[6386]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.408832][ T5862] usb 4-1: USB disconnect, device number 5 [ 318.830779][ T6760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'. [ 322.163362][ T6786] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 322.303655][ T6786] bond1 (unregistering): Released all slaves [ 323.248782][ T6793] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 323.377754][ T6797] netlink: 392 bytes leftover after parsing attributes in process `syz.3.349'. [ 324.588668][ T6807] netlink: 156 bytes leftover after parsing attributes in process `syz.3.355'. [ 328.137959][ T6838] netlink: 9 bytes leftover after parsing attributes in process `syz.0.368'. [ 328.175657][ T6838] gretap0: entered promiscuous mode [ 328.688158][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 329.115481][ T6844] batadv_slave_1: entered promiscuous mode [ 329.175824][ T6843] batadv_slave_1: left promiscuous mode [ 329.943567][ T6852] netlink: 'syz.2.375': attribute type 17 has an invalid length. [ 329.960343][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 330.836451][ T5872] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 331.030879][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 331.057703][ T5872] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 331.066319][ T5872] usb 2-1: config 179 has no interface number 0 [ 331.072818][ T5872] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 331.084496][ T5872] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 331.096511][ T5872] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 331.108637][ T5872] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 331.123445][ T5872] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 331.139211][ T5872] usb 2-1: config 179 interface 65 has no altsetting 0 [ 331.146585][ T5872] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 331.155886][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.448706][ T5872] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 331.663047][ T5872] usb 2-1: USB disconnect, device number 5 [ 331.967476][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.978031][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.443033][ T6879] netlink: 260 bytes leftover after parsing attributes in process `syz.0.388'. [ 333.452990][ T6879] netlink: 104 bytes leftover after parsing attributes in process `syz.0.388'. [ 333.462368][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 335.810821][ T6902] overlayfs: failed to resolve './file1/file0': -2 [ 337.066678][ T5872] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 337.290806][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 337.302775][ T5872] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 337.312376][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.346324][ T5872] usb 1-1: config 0 descriptor?? [ 337.797874][ T5872] usbhid 1-1:0.0: can't add hid device: -71 [ 337.804774][ T5872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 337.832161][ T5872] usb 1-1: USB disconnect, device number 6 [ 338.562618][ T6935] overlayfs: failed to resolve './file1/file0': -2 [ 339.892979][ T6953] binder: 6950:6953 ioctl c0306201 0 returned -14 [ 340.502039][ T6962] 9pnet_virtio: no channels available for device syz [ 340.586887][ T5872] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 340.809856][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 340.821920][ T5872] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 340.832017][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.902617][ T5872] usb 2-1: config 0 descriptor?? [ 341.013779][ T6966] overlayfs: failed to resolve './file1/file0': -2 [ 341.377898][ T5872] usbhid 2-1:0.0: can't add hid device: -71 [ 341.384632][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 341.449331][ T5872] usb 2-1: USB disconnect, device number 6 [ 341.465151][ T6970] Bluetooth: MGMT ver 1.23 [ 341.816568][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.434'. [ 342.477640][ T6982] binder: 6979:6982 ioctl c0306201 0 returned -14 [ 344.457361][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 344.464937][ T5098] Bluetooth: hci0: command 0x0406 tx timeout [ 344.472252][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 344.475238][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 344.479795][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 345.204344][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 345.590377][ T7016] ======================================================= [ 345.590377][ T7016] WARNING: The mand mount option has been deprecated and [ 345.590377][ T7016] and is ignored by this kernel. Remove the mand [ 345.590377][ T7016] option from the mount to silence this warning. [ 345.590377][ T7016] ======================================================= [ 345.628081][ T7016] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 345.645381][ T5872] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 345.748423][ T7018] binder: 7017:7018 ioctl c0306201 0 returned -14 [ 345.872130][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 345.884204][ T5872] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 345.894139][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.967637][ T5872] usb 2-1: config 0 descriptor?? [ 346.447707][ T5872] usbhid 2-1:0.0: can't add hid device: -71 [ 346.454383][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 346.527779][ T5872] usb 2-1: USB disconnect, device number 7 [ 347.900727][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 349.863647][ T5891] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 350.070888][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 350.083008][ T5891] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 350.092829][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.185733][ T5891] usb 5-1: config 0 descriptor?? [ 350.413597][ T7068] netlink: 36 bytes leftover after parsing attributes in process `syz.0.475'. [ 350.633795][ T5891] usbhid 5-1:0.0: can't add hid device: -71 [ 350.640867][ T5891] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 350.683071][ T5891] usb 5-1: USB disconnect, device number 5 [ 352.683057][ T7097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.488'. [ 353.511714][ T5891] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 353.692114][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 353.703855][ T5891] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 353.713410][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.795831][ T5891] usb 5-1: config 0 descriptor?? [ 354.334970][ T5891] usbhid 5-1:0.0: can't add hid device: -71 [ 354.342103][ T5891] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 354.418532][ T5891] usb 5-1: USB disconnect, device number 6 [ 357.572550][ T5872] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 357.798836][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.805505][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.847290][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 357.859049][ T5872] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 357.868456][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.947367][ T5872] usb 1-1: config 0 descriptor?? [ 358.444054][ T5872] usbhid 1-1:0.0: can't add hid device: -71 [ 358.450882][ T5872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 358.568011][ T5872] usb 1-1: USB disconnect, device number 7 [ 361.226642][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 363.723859][ T7234] netlink: 52 bytes leftover after parsing attributes in process `syz.3.550'. [ 367.071777][ T7270] comedi comedi3: 8255: I/O port conflict (0x40404f24,4) [ 367.079699][ T7270] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 367.086833][ T7270] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 367.093565][ T7270] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 367.100877][ T7270] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 367.107844][ T7270] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 367.114619][ T7270] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 367.121547][ T7270] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 367.128484][ T7270] comedi comedi3: 8255: I/O port conflict (0x400003bf,4) [ 367.135906][ T7270] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 367.142800][ T7270] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 367.150322][ T7270] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 367.160995][ T7270] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 367.168431][ T7270] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 367.175218][ T7270] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 367.183945][ T7270] comedi comedi3: 8255: I/O port conflict (0x20000004,4) [ 367.192092][ T7270] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 367.198958][ T7270] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 367.205677][ T7270] comedi comedi3: 8255: I/O port conflict (0x2000000,4) [ 367.213133][ T7270] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 367.221397][ T7270] comedi comedi3: 8255: I/O port conflict (0xef,4) [ 367.228461][ T7270] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 367.235190][ T7270] comedi comedi3: 8255: I/O port conflict (0x8000003,4) [ 367.242588][ T7270] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffd,4) [ 369.396653][ T7297] overlayfs: missing 'lowerdir' [ 371.284619][ T7310] netlink: 'syz.0.583': attribute type 13 has an invalid length. [ 373.902253][ T7328] overlayfs: missing 'lowerdir' [ 376.809581][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.598'. [ 376.870791][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.598'. [ 378.505931][ T7351] tipc: Failed to remove unknown binding: 66,1,1/0:1586929213/1586929215 [ 378.515074][ T7351] tipc: Failed to remove unknown binding: 66,1,1/0:1586929213/1586929215 [ 379.317619][ T7355] overlay: Unknown parameter '/' [ 381.023333][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.610'. [ 381.098357][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.610'. [ 381.164711][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 385.598775][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.612058][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.627474][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.654928][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.669512][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.938350][ T7419] fuse: Bad value for 'fd' [ 387.736824][ T5802] Bluetooth: hci5: command tx timeout [ 388.026408][ T7414] chnl_net:caif_netlink_parms(): no params data found [ 389.381938][ T7452] fuse: Bad value for 'fd' [ 389.817786][ T5802] Bluetooth: hci5: command tx timeout [ 390.207977][ T7460] mkiss: ax0: crc mode is auto. [ 390.316942][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.324561][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.333004][ T7414] bridge_slave_0: entered allmulticast mode [ 390.341883][ T7414] bridge_slave_0: entered promiscuous mode [ 390.521254][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.529071][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.540110][ T7414] bridge_slave_1: entered allmulticast mode [ 390.548879][ T7414] bridge_slave_1: entered promiscuous mode [ 391.082886][ T7414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.198477][ T7414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.783058][ T7414] team0: Port device team_slave_0 added [ 391.852011][ T7414] team0: Port device team_slave_1 added [ 391.900763][ T5802] Bluetooth: hci5: command tx timeout [ 392.050084][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.059067][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.085528][ T7414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.210697][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.218859][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.249605][ T7414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.120251][ T7414] hsr_slave_0: entered promiscuous mode [ 393.129740][ T7414] hsr_slave_1: entered promiscuous mode [ 393.138130][ T7414] debugfs: 'hsr0' already exists in 'hsr' [ 393.144074][ T7414] Cannot create hsr debugfs directory [ 393.990327][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 393.998801][ T5802] Bluetooth: hci5: command tx timeout [ 394.308056][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 394.344586][ T5872] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 394.353265][ T5872] usb 3-1: config 0 has no interface number 0 [ 394.425024][ T5872] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 394.434542][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.443073][ T5872] usb 3-1: Product: syz [ 394.447686][ T5872] usb 3-1: Manufacturer: syz [ 394.452531][ T5872] usb 3-1: SerialNumber: syz [ 394.509136][ T4511] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.515022][ T5872] usb 3-1: config 0 descriptor?? [ 394.699161][ T5872] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 394.862389][ T4511] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.076760][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 395.131248][ T4511] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.328703][ T4511] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.873596][ T7414] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 395.885935][ T5872] gspca_spca1528: reg_w err -71 [ 395.891571][ T5872] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 395.960514][ T5872] usb 3-1: USB disconnect, device number 4 [ 395.970389][ T7414] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 396.078142][ T7414] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 396.127762][ T4511] bridge_slave_1: left allmulticast mode [ 396.133632][ T4511] bridge_slave_1: left promiscuous mode [ 396.147220][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.245682][ T4511] bridge_slave_0: left allmulticast mode [ 396.251928][ T4511] bridge_slave_0: left promiscuous mode [ 396.259475][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.417570][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.462879][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.540099][ T4511] bond0 (unregistering): Released all slaves [ 397.655540][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 397.802438][ T7516] bond0: (slave bond_slave_1): Releasing backup interface [ 398.015404][ T7414] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 398.778937][ T4511] hsr_slave_0: left promiscuous mode [ 398.822395][ T4511] hsr_slave_1: left promiscuous mode [ 398.830998][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.838861][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.949655][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.957710][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.094313][ T4511] veth1_macvtap: left promiscuous mode [ 399.101996][ T4511] veth0_macvtap: left promiscuous mode [ 399.112574][ T4511] veth1_vlan: left promiscuous mode [ 399.118474][ T4511] veth0_vlan: left promiscuous mode [ 400.011677][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 400.078740][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 401.425948][ T7414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.629058][ T7414] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.739199][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.746983][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.883239][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.890929][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.411189][ T7414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.765545][ T7597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.933599][ T7610] overlayfs: missing 'lowerdir' [ 406.819278][ T7620] netlink: 244 bytes leftover after parsing attributes in process `syz.1.703'. [ 407.271982][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 407.509389][ T7414] veth0_vlan: entered promiscuous mode [ 407.610150][ T7414] veth1_vlan: entered promiscuous mode [ 407.961815][ T7414] veth0_macvtap: entered promiscuous mode [ 408.049073][ T7414] veth1_macvtap: entered promiscuous mode [ 408.304652][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.415093][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.538280][ T7633] netlink: 76 bytes leftover after parsing attributes in process `syz.1.707'. [ 408.544424][ T4511] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.639638][ T4119] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.691027][ T4119] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.750634][ T4119] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.296740][ T7649] netlink: 'syz.0.711': attribute type 4 has an invalid length. [ 410.335946][ T7649] netlink: 'syz.0.711': attribute type 4 has an invalid length. [ 410.416745][ T7651] overlayfs: missing 'lowerdir' [ 414.121936][ T7691] overlayfs: missing 'lowerdir' [ 416.399942][ T1843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.408766][ T1843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.717632][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.729529][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.928749][ T5891] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 417.136939][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 417.181844][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 417.210272][ T5891] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 417.219765][ T5891] usb 1-1: config 0 has no interface number 0 [ 417.226594][ T5891] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 55, changing to 9 [ 417.242555][ T5891] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 8496, setting to 1024 [ 417.255134][ T5891] usb 1-1: config 0 interface 88 has no altsetting 0 [ 417.492367][ T5891] usb 1-1: string descriptor 0 read error: -22 [ 417.499470][ T5891] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 417.508931][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 417.605606][ T5891] usb 1-1: config 0 descriptor?? [ 417.664839][ T5891] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input7 [ 417.871061][ T5891] usb 1-1: USB disconnect, device number 8 [ 417.946609][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.5.627'. [ 418.037810][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.5.627'. [ 419.212297][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.220946][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.722670][ T7734] overlayfs: missing 'lowerdir' [ 420.067851][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.102985][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.114320][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.133049][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.199106][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.980955][ T7752] process 'syz.5.740' launched './file0' with NULL argv: empty string added [ 422.385994][ T5808] Bluetooth: hci4: command tx timeout [ 422.414768][ T7735] chnl_net:caif_netlink_parms(): no params data found [ 423.010507][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.742'. [ 423.090149][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.742'. [ 424.459585][ T5808] Bluetooth: hci4: command tx timeout [ 425.079882][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.087888][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.095611][ T7735] bridge_slave_0: entered allmulticast mode [ 425.104761][ T7735] bridge_slave_0: entered promiscuous mode [ 425.186677][ T5891] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 425.243157][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.250766][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.258631][ T7735] bridge_slave_1: entered allmulticast mode [ 425.267655][ T7735] bridge_slave_1: entered promiscuous mode [ 425.379838][ T5891] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 425.388571][ T5891] usb 2-1: config 0 has no interface number 0 [ 425.394816][ T5891] usb 2-1: config 0 interface 205 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 425.596274][ T5891] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=59.e2 [ 425.605715][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.608549][ T7796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.750'. [ 425.614353][ T5891] usb 2-1: Product: syz [ 425.631509][ T5891] usb 2-1: Manufacturer: syz [ 425.637672][ T5891] usb 2-1: SerialNumber: syz [ 425.820566][ T5891] usb 2-1: config 0 descriptor?? [ 425.829025][ T7787] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 425.981023][ T5891] ftdi_sio 2-1:0.205: FTDI USB Serial Device converter detected [ 425.991479][ T5891] ftdi_sio ttyUSB0: unknown device type: 0x59e2 [ 426.190002][ T5891] usb 2-1: USB disconnect, device number 8 [ 426.199716][ T5891] ftdi_sio 2-1:0.205: device disconnected [ 426.327379][ T7735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.427517][ T7735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.537335][ T5808] Bluetooth: hci4: command tx timeout [ 426.892473][ T7802] fuse: Bad value for 'user_id' [ 426.897846][ T7802] fuse: Bad value for 'user_id' [ 426.980163][ T7735] team0: Port device team_slave_0 added [ 427.067525][ T7735] team0: Port device team_slave_1 added [ 427.428024][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.435200][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.461756][ T7735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.648948][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.656426][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.687357][ T7735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.781938][ T5891] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 427.946807][ T7809] XFS (nbd5): SB validate failed with error -5. [ 428.027416][ T7735] hsr_slave_0: entered promiscuous mode [ 428.037061][ T7735] hsr_slave_1: entered promiscuous mode [ 428.047268][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 428.102465][ T5891] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 428.113967][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 428.124551][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.134732][ T5891] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.150963][ T5891] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.160671][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.520487][ T5891] usb 5-1: GET_CAPABILITIES returned 0 [ 428.526891][ T5891] usbtmc 5-1:16.0: can't read capabilities [ 428.627432][ T5808] Bluetooth: hci4: command tx timeout [ 428.763501][ T5891] usb 5-1: USB disconnect, device number 7 [ 429.846414][ T7823] netlink: 'syz.5.759': attribute type 4 has an invalid length. [ 429.961479][ T7735] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 430.110443][ T7735] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 430.219428][ T7735] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 430.288487][ T7735] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 432.137540][ T7735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.458741][ T7735] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.597525][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.604931][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.750411][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.757976][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.819771][ T7863] veth0_virt_wifi: entered allmulticast mode [ 435.084769][ T7862] veth0_virt_wifi: left allmulticast mode [ 435.997465][ T7868] netlink: 540 bytes leftover after parsing attributes in process `syz.5.770'. [ 436.107161][ T7735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.663110][ T1843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.887507][ T1843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.080552][ T1843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.325713][ T1843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.053006][ T1843] bridge_slave_1: left allmulticast mode [ 438.061833][ T1843] bridge_slave_1: left promiscuous mode [ 438.068787][ T1843] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.207850][ T1843] bridge_slave_0: left allmulticast mode [ 438.213882][ T1843] bridge_slave_0: left promiscuous mode [ 438.230024][ T1843] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.331783][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 439.015972][ T1843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.036514][ T1843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.064688][ T1843] bond0 (unregistering): Released all slaves [ 439.942354][ T1843] hsr_slave_0: left promiscuous mode [ 439.985639][ T1843] hsr_slave_1: left promiscuous mode [ 439.994158][ T1843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.002623][ T1843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.109743][ T1843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.117728][ T1843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.217216][ T1843] veth1_macvtap: left promiscuous mode [ 440.223207][ T1843] veth0_macvtap: left promiscuous mode [ 440.229368][ T1843] veth1_vlan: left promiscuous mode [ 440.234934][ T1843] veth0_vlan: left promiscuous mode [ 441.673203][ T1843] team0 (unregistering): Port device team_slave_1 removed [ 441.748292][ T1843] team0 (unregistering): Port device team_slave_0 removed [ 442.824624][ T7735] veth0_vlan: entered promiscuous mode [ 442.931289][ T7735] veth1_vlan: entered promiscuous mode [ 443.300117][ T7735] veth0_macvtap: entered promiscuous mode [ 443.378655][ T7735] veth1_macvtap: entered promiscuous mode [ 443.641699][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.788702][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.930012][ T1144] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.999281][ T4119] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.046751][ T4119] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.055799][ T4119] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.100484][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 449.060180][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.805'. [ 449.519376][ T7997] netlink: 44 bytes leftover after parsing attributes in process `syz.4.806'. [ 450.873276][ T11] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 451.099059][ T11] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 451.109840][ T11] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 451.122163][ T11] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 451.136738][ T11] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.152069][ T11] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 451.161660][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.418030][ T11] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.426819][ T11] usb 6-1: invalid MIDI out EP 0 [ 451.974147][ T11] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 452.010490][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.105014][ T11] usb 6-1: USB disconnect, device number 2 [ 452.539864][ T1843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.548039][ T1843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.799137][ T1843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.807616][ T1843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.974978][ T8049] overlayfs: missing 'lowerdir' [ 454.863398][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.826'. [ 455.936378][ T5872] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 456.207776][ T5872] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 456.218713][ T5872] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 456.230173][ T5872] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 456.240571][ T5872] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.257396][ T5872] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 456.268290][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.596333][ T5872] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 456.604875][ T5872] usb 1-1: invalid MIDI out EP 0 [ 456.762636][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.6.833'. [ 456.828353][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.6.833'. [ 457.300773][ T5872] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 457.318547][ T6756] udevd[6756]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.406822][ T5872] usb 1-1: USB disconnect, device number 9 [ 458.596737][ T11] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 458.888479][ T11] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 458.898151][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.907022][ T11] usb 1-1: Product: syz [ 458.911422][ T11] usb 1-1: Manufacturer: syz [ 458.920587][ T11] usb 1-1: SerialNumber: syz [ 459.870372][ T8119] overlayfs: missing 'lowerdir' [ 461.346894][ T5891] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 461.550497][ T5891] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 461.561698][ T5891] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.577656][ T5891] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 461.589579][ T5891] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.603161][ T5891] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.612761][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.755644][ T5891] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 461.765414][ T5891] usb 5-1: invalid MIDI out EP 0 [ 462.420930][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 462.435384][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 462.447828][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 462.521505][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.537893][ T5891] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 462.627928][ T11] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 462.725524][ T5891] usb 5-1: USB disconnect, device number 8 [ 462.838592][ T11] usb 1-1: USB disconnect, device number 10 [ 464.471678][ T30] audit: type=1326 audit(1763586603.509:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.5.861" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0 [ 465.178045][ T8170] fuse: Bad value for 'group_id' [ 465.183535][ T8170] fuse: Bad value for 'group_id' [ 466.196456][ T5872] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 466.419001][ T5872] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 466.430033][ T5872] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 466.441493][ T5872] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 466.451729][ T5872] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.465250][ T5872] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 466.474685][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.730022][ T5872] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 466.738824][ T5872] usb 5-1: invalid MIDI out EP 0 [ 467.213371][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 467.272578][ T5872] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 467.397937][ T5872] usb 5-1: USB disconnect, device number 9 [ 467.452135][ T6386] udevd[6386]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.506744][ T5872] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 468.719098][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 468.798966][ T5872] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 468.807928][ T5872] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 468.818615][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 468.828304][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 468.838306][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 468.852053][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 468.866972][ T5872] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 468.876563][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.093583][ T5872] usb 1-1: config 0 descriptor?? [ 469.392488][ T5872] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 469.468914][ T5872] usb 1-1: USB disconnect, device number 11 [ 469.519431][ T5872] usblp0: removed [ 469.917096][ T5872] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 470.136381][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 470.208007][ T5872] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 470.216970][ T5872] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 470.226670][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 470.235920][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 470.246433][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 470.256755][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 470.270171][ T5872] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 470.283004][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.519602][ T5872] usb 1-1: config 0 descriptor?? [ 470.748907][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.884'. [ 470.774671][ T5872] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 471.323198][ T5891] usb 1-1: USB disconnect, device number 12 [ 471.363305][ T5891] usblp0: removed [ 471.557193][ T11] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 471.751872][ T11] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 471.762649][ T11] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 471.774237][ T11] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 471.784666][ T11] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.798380][ T11] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 471.807851][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.069436][ T11] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 472.079579][ T11] usb 7-1: invalid MIDI out EP 0 [ 472.872974][ T11] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 472.960521][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.149804][ T11] usb 7-1: USB disconnect, device number 2 [ 474.684699][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.897'. [ 476.646871][ T11] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 476.900272][ T11] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 476.911116][ T11] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 476.922415][ T11] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 476.936208][ T11] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.950896][ T11] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 476.960216][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.233599][ T11] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 477.252560][ T11] usb 6-1: invalid MIDI out EP 0 [ 477.263226][ T8296] netlink: 108 bytes leftover after parsing attributes in process `syz.0.907'. [ 477.817979][ T5872] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 477.908515][ T11] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 477.983275][ T11] usb 6-1: USB disconnect, device number 3 [ 478.041473][ T6386] udevd[6386]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.097335][ T5872] usb 5-1: device descriptor read/64, error -71 [ 478.376696][ T5872] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 478.572918][ T5872] usb 5-1: device descriptor read/64, error -71 [ 478.689807][ T5872] usb usb5-port1: attempt power cycle [ 478.900688][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.914'. [ 479.093189][ T5872] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 479.149135][ T5872] usb 5-1: device descriptor read/8, error -71 [ 479.218307][ T11] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 479.409426][ T5872] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 479.442173][ T5872] usb 5-1: device descriptor read/8, error -71 [ 479.451260][ T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.462063][ T11] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 479.475639][ T11] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.485112][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.505681][ T8319] netlink: 108 bytes leftover after parsing attributes in process `syz.6.916'. [ 479.562634][ T5872] usb usb5-port1: unable to enumerate USB device [ 479.623807][ T11] usb 6-1: config 0 descriptor?? [ 479.680392][ T11] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 479.840714][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.914'. [ 479.907002][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.914'. [ 479.957149][ T5872] usb 6-1: USB disconnect, device number 4 [ 480.696647][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.703297][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.898897][ T5872] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 482.145416][ T5872] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 482.159664][ T5872] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 482.172486][ T5872] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 482.182548][ T5872] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.195768][ T5872] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 482.205119][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.569915][ T5872] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.579365][ T5872] usb 5-1: invalid MIDI out EP 0 [ 483.154605][ T6386] udevd[6386]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.190597][ T5872] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 483.306711][ T5872] usb 5-1: USB disconnect, device number 14 [ 489.206771][ T8417] netlink: 64 bytes leftover after parsing attributes in process `syz.1.952'. [ 489.216299][ T8417] netlink: 60 bytes leftover after parsing attributes in process `syz.1.952'. [ 489.232297][ T8417] unsupported nlmsg_type 40 [ 492.837594][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.967'. [ 492.912058][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.967'. [ 495.685413][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 495.723827][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 496.518101][ T8506] netlink: 'syz.1.985': attribute type 33 has an invalid length. [ 496.526730][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 498.245871][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 498.326455][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 498.351772][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 501.380667][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1010'. [ 501.606775][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1011'. [ 501.708184][ T5891] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 502.084797][ T5891] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.095429][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 502.109556][ T5891] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 502.119196][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.244792][ T5891] usb 6-1: config 0 descriptor?? [ 502.271417][ T5891] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 502.503640][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1010'. [ 502.556447][ T5891] usb 6-1: USB disconnect, device number 5 [ 504.348067][ T8609] loop2: detected capacity change from 0 to 7 [ 504.380421][ T8609] loop2: [ 504.383713][ T8609] loop2: partition table partially beyond EOD, truncated [ 504.496693][ T5872] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 504.718878][ T5872] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 504.730715][ T5872] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.740944][ T5872] usb 7-1: config 0 interface 0 has no altsetting 0 [ 504.748107][ T5872] usb 7-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 504.758043][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.900276][ T5872] usb 7-1: config 0 descriptor?? [ 505.338855][ T5872] uclogic 0003:28BD:0075.0007: interface is invalid, ignoring [ 505.567401][ T5872] usb 7-1: USB disconnect, device number 3 [ 506.288565][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1026'. [ 506.997484][ T8632] netlink: 'syz.5.1028': attribute type 12 has an invalid length. [ 507.191213][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 507.519284][ T5872] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 507.790297][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.801159][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 507.814876][ T5872] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.824607][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.033885][ T5872] usb 5-1: config 0 descriptor?? [ 508.087189][ T5872] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 508.250916][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 508.300595][ T5802] Bluetooth: hci5: command 0x0406 tx timeout [ 508.322367][ T5872] usb 5-1: USB disconnect, device number 15 [ 509.807154][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 511.992432][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1048'. [ 512.306393][ T5872] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 512.495005][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 512.512378][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.523127][ T5872] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 512.536707][ T5872] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 512.546343][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.712861][ T5872] usb 6-1: config 0 descriptor?? [ 512.792142][ T5872] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 512.932020][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1048'. [ 512.964295][ T5872] usb 6-1: USB disconnect, device number 6 [ 513.893278][ T8703] loop2: detected capacity change from 0 to 7 [ 514.015234][ T8703] Dev loop2: unable to read RDB block 7 [ 514.021617][ T8703] loop2: AHDI p1 p2 p3 [ 514.026223][ T8703] loop2: partition table partially beyond EOD, truncated [ 514.034533][ T8703] loop2: p1 start 1601398130 is beyond EOD, truncated [ 514.041914][ T8703] loop2: p2 start 1702059890 is beyond EOD, truncated [ 514.334910][ T8710] fuse: Bad value for 'user_id' [ 514.340560][ T8710] fuse: Bad value for 'user_id' [ 514.994414][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 515.662487][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1067'. [ 516.430848][ T8735] loop2: detected capacity change from 0 to 7 [ 516.477388][ T8735] Dev loop2: unable to read RDB block 7 [ 516.483267][ T8735] loop2: AHDI p1 p2 p3 [ 516.488071][ T8735] loop2: partition table partially beyond EOD, truncated [ 516.497711][ T8735] loop2: p1 start 1601398130 is beyond EOD, truncated [ 516.504781][ T8735] loop2: p2 start 1702059890 is beyond EOD, truncated [ 516.637610][ T8741] fuse: Bad value for 'user_id' [ 516.642732][ T8741] fuse: Bad value for 'user_id' [ 517.357208][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1078'. [ 519.037751][ T8772] loop2: detected capacity change from 0 to 7 [ 519.051742][ T8772] Dev loop2: unable to read RDB block 7 [ 519.058428][ T8772] loop2: AHDI p1 p2 p3 [ 519.062992][ T8772] loop2: partition table partially beyond EOD, truncated [ 519.063696][ T8771] fuse: Bad value for 'user_id' [ 519.071739][ T8772] loop2: p1 start 1601398130 is beyond EOD, [ 519.075320][ T8771] fuse: Bad value for 'user_id' [ 519.075345][ T8772] truncated [ 519.089898][ T8772] loop2: p2 start 1702059890 is beyond EOD, truncated [ 519.822487][ T8779] sit0: entered promiscuous mode [ 519.850467][ T8779] netlink: 'syz.6.1093': attribute type 1 has an invalid length. [ 519.858632][ T8779] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1093'. [ 519.991033][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 522.424325][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 523.908026][ T8831] tipc: Enabling of bearer rejected, failed to enable media [ 524.806484][ T5872] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 525.056748][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 525.143766][ T5872] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 525.153560][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.165385][ T5872] usb 2-1: Product: syz [ 525.171244][ T5872] usb 2-1: Manufacturer: syz [ 525.176333][ T5872] usb 2-1: SerialNumber: syz [ 525.279979][ T5872] usb 2-1: config 0 descriptor?? [ 525.785021][ T5872] usb 2-1: USB disconnect, device number 9 [ 526.118518][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.248375][ T8904] fuse: Bad value for 'fd' [ 530.067478][ T8912] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1155'. [ 530.135287][ T8912] gretap0: entered promiscuous mode [ 531.334225][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 531.878819][ T8940] fuse: Bad value for 'fd' [ 533.095169][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1173'. [ 534.271731][ T8976] fuse: Bad value for 'fd' [ 534.966176][ T30] audit: type=1326 audit(1763586930.022:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 534.988689][ T30] audit: type=1326 audit(1763586930.022:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 535.216545][ T30] audit: type=1326 audit(1763586930.112:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 535.239108][ T30] audit: type=1326 audit(1763586930.112:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 535.261756][ T30] audit: type=1326 audit(1763586930.122:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 535.284429][ T30] audit: type=1326 audit(1763586930.122:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 535.311380][ T30] audit: type=1326 audit(1763586930.122:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 535.335423][ T30] audit: type=1326 audit(1763586930.122:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 535.574855][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 536.369292][ T9000] veth2: entered promiscuous mode [ 536.374639][ T9000] veth2: entered allmulticast mode [ 536.893652][ T9010] fuse: Invalid rootmode [ 537.271051][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 537.837553][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 539.490620][ T9047] fuse: Invalid rootmode [ 539.628494][ T9051] syz.6.1213: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 539.644257][ T9051] CPU: 0 UID: 0 PID: 9051 Comm: syz.6.1213 Not tainted syzkaller #0 PREEMPT(none) [ 539.644408][ T9051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.644507][ T9051] Call Trace: [ 539.644568][ T9051] [ 539.644632][ T9051] __dump_stack+0x26/0x30 [ 539.644814][ T9051] dump_stack_lvl+0x1df/0x270 [ 539.645000][ T9051] dump_stack+0x1e/0x25 [ 539.645161][ T9051] warn_alloc+0x470/0x690 [ 539.645388][ T9051] ? kmsan_get_metadata+0xfb/0x160 [ 539.645553][ T9051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.645738][ T9051] __vmalloc_node_range_noprof+0x133/0x2330 [ 539.645940][ T9051] ? kmsan_get_metadata+0xfb/0x160 [ 539.646099][ T9051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.646275][ T9051] ? should_fail_ex+0x45/0x8a0 [ 539.646442][ T9051] ? kmsan_get_metadata+0xfb/0x160 [ 539.646600][ T9051] ? kmsan_get_metadata+0xfb/0x160 [ 539.646762][ T9051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.646939][ T9051] ? kmsan_get_metadata+0xfb/0x160 [ 539.647107][ T9051] vmalloc_user_noprof+0xce/0x140 [ 539.647293][ T9051] ? xskq_create+0x11d/0x290 [ 539.647509][ T9051] xskq_create+0x11d/0x290 [ 539.647731][ T9051] xsk_init_queue+0xfd/0x1d0 [ 539.647940][ T9051] xsk_setsockopt+0x7f6/0xfe0 [ 539.648155][ T9051] ? __pfx_xsk_setsockopt+0x10/0x10 [ 539.648347][ T9051] __sys_setsockopt+0x43e/0x580 [ 539.648565][ T9051] __ia32_sys_setsockopt+0xf3/0x1a0 [ 539.648788][ T9051] ia32_sys_call+0x24c2/0x4310 [ 539.649002][ T9051] __do_fast_syscall_32+0xb0/0x150 [ 539.649221][ T9051] do_fast_syscall_32+0x38/0x80 [ 539.649423][ T9051] do_SYSENTER_32+0x1f/0x30 [ 539.649627][ T9051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 539.649845][ T9051] RIP: 0023:0xf70ad539 [ 539.649967][ T9051] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 539.650092][ T9051] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 539.650233][ T9051] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 539.650329][ T9051] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 539.650421][ T9051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 539.650507][ T9051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 539.650604][ T9051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 539.650731][ T9051] [ 539.896312][ T9051] Mem-Info: [ 539.899623][ T9051] active_anon:7228 inactive_anon:0 isolated_anon:0 [ 539.899623][ T9051] active_file:3916 inactive_file:39977 isolated_file:0 [ 539.899623][ T9051] unevictable:768 dirty:84 writeback:0 [ 539.899623][ T9051] slab_reclaimable:5168 slab_unreclaimable:20693 [ 539.899623][ T9051] mapped:30015 shmem:1364 pagetables:1782 [ 539.899623][ T9051] sec_pagetables:0 bounce:0 [ 539.899623][ T9051] kernel_misc_reclaimable:0 [ 539.899623][ T9051] free:371745 free_pcp:13692 free_cma:0 [ 539.952563][ T9051] Node 0 active_anon:28912kB inactive_anon:0kB active_file:15664kB inactive_file:159708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120060kB dirty:336kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5488kB pagetables:6772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 539.988593][ T9051] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 540.025000][ T9051] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 540.057236][ T9051] lowmem_reserve[]: 0 929 1242 1242 1242 [ 540.063487][ T9051] Node 0 DMA32 free:560900kB boost:0kB min:36800kB low:46000kB high:55200kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4876kB inactive_anon:0kB active_file:11776kB inactive_file:73268kB unevictable:0kB writepending:232kB zspages:0kB present:3129332kB managed:952040kB mlocked:0kB bounce:0kB free_pcp:41616kB local_pcp:18900kB free_cma:0kB [ 540.097058][ T9051] lowmem_reserve[]: 0 0 312 312 312 [ 540.102854][ T9051] Node 0 Normal free:17072kB boost:0kB min:12980kB low:16224kB high:19468kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24004kB inactive_anon:0kB active_file:3888kB inactive_file:86440kB unevictable:1536kB writepending:104kB zspages:0kB present:1048580kB managed:320476kB mlocked:0kB bounce:0kB free_pcp:13172kB local_pcp:6440kB free_cma:0kB [ 540.142167][ T9051] lowmem_reserve[]: 0 0 0 0 0 [ 540.149391][ T9051] Node 1 Normal free:904912kB boost:0kB min:40156kB low:50192kB high:60228kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:991252kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 540.182500][ T9051] lowmem_reserve[]: 0 0 0 0 0 [ 540.187891][ T9051] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 540.201317][ T9051] Node 0 DMA32: 829*4kB (UM) 150*8kB (UME) 58*16kB (UME) 54*32kB (UME) 38*64kB (UME) 25*128kB (UM) 17*256kB (UM) 12*512kB (UME) 9*1024kB (UME) 2*2048kB (UE) 128*4096kB (UM) = 560900kB [ 540.228008][ T9051] Node 0 Normal: 206*4kB (UME) 81*8kB (UME) 55*16kB (ME) 14*32kB (ME) 11*64kB (UME) 10*128kB (UME) 6*256kB (U) 7*512kB (U) 3*1024kB (UE) 0*2048kB 1*4096kB (U) = 17072kB [ 540.249433][ T9051] Node 1 Normal: 6*4kB (UME) 9*8kB (UME) 13*16kB (UE) 21*32kB (UME) 18*64kB (UME) 7*128kB (UME) 9*256kB (UME) 1*512kB (U) 4*1024kB (UME) 5*2048kB (UM) 216*4096kB (M) = 904912kB [ 540.269192][ T9051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 540.279350][ T9051] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 540.289064][ T9051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 540.300959][ T9051] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 540.308847][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 540.311083][ T9051] 45253 total pagecache pages [ 540.331799][ T9051] 0 pages in swap cache [ 540.336392][ T9051] Free swap = 124996kB [ 540.340705][ T9051] Total swap = 124996kB [ 540.345035][ T9051] 2097051 pages RAM [ 540.349151][ T9051] 0 pages HighMem/MovableOnly [ 540.353992][ T9051] 1530085 pages reserved [ 540.358606][ T9051] 0 pages cma reserved [ 542.084701][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.091595][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.700650][ T9081] fuse: Invalid rootmode [ 542.764933][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1228'. [ 544.137388][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 545.035008][ T9115] fuse: Bad value for 'rootmode' [ 545.149530][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 547.652247][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1258'. [ 547.709873][ T9150] fuse: Bad value for 'rootmode' [ 548.708568][ T9162] netlink: 284 bytes leftover after parsing attributes in process `syz.6.1261'. [ 550.723998][ T9178] fuse: Bad value for 'rootmode' [ 550.779211][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1272'. [ 553.680626][ T9212] fuse: Unknown parameter 'use00000000000000000000' [ 554.274997][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 556.835488][ T9237] fuse: Unknown parameter 'use00000000000000000000' [ 560.190001][ T9267] fuse: Unknown parameter 'use00000000000000000000' [ 560.785209][ T9273] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1314'. [ 561.692965][ T9286] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1319'. [ 563.752929][ T9299] fuse: Unknown parameter 'user_i00000000000000000000' [ 567.426316][ T5891] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 567.716412][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 567.766885][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.777765][ T5891] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 567.934731][ T5891] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 567.944275][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.952929][ T5891] usb 5-1: Product: syz [ 567.957500][ T5891] usb 5-1: Manufacturer: syz [ 567.962309][ T5891] usb 5-1: SerialNumber: syz [ 568.119534][ T5891] usb 5-1: config 0 descriptor?? [ 568.137722][ T9331] fuse: Unknown parameter 'user_i00000000000000000000' [ 570.479162][ T11] usb 5-1: USB disconnect, device number 16 [ 572.884091][ T11] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 573.063407][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 573.136587][ T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.147222][ T11] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 573.235319][ T11] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 573.245205][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.253710][ T11] usb 6-1: Product: syz [ 573.260004][ T11] usb 6-1: Manufacturer: syz [ 573.265189][ T11] usb 6-1: SerialNumber: syz [ 573.310890][ T11] usb 6-1: config 0 descriptor?? [ 576.021873][ T9403] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 576.226713][ T5872] usb 6-1: USB disconnect, device number 7 [ 579.866669][ T9443] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1389'. [ 580.506350][ T5872] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 580.706535][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 580.743347][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 580.782593][ T5872] usb 6-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 580.793123][ T5872] usb 6-1: config 12 interface 0 has no altsetting 0 [ 580.872167][ T5872] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 580.881757][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.890161][ T5872] usb 6-1: Product: syz [ 580.894532][ T5872] usb 6-1: Manufacturer: syz [ 580.899864][ T5872] usb 6-1: SerialNumber: syz [ 581.043322][ T9447] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 581.393452][ T5872] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 581.400766][ T5872] usb 6-1: selecting invalid altsetting 0 [ 581.826616][ T5872] usb 6-1: USB disconnect, device number 8 [ 582.275262][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.910787][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'. [ 582.927983][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.937872][ T9472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.992228][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.000256][ T9472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.384079][ T9478] netlink: 392 bytes leftover after parsing attributes in process `syz.6.1400'. [ 583.926423][ T5872] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 584.102446][ T9486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1403'. [ 584.172331][ T9486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1403'. [ 584.181257][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 584.203353][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 584.226306][ T5872] usb 6-1: not running at top speed; connect to a high speed hub [ 584.293060][ T5872] usb 6-1: config 1 has an invalid descriptor of length 152, skipping remainder of the config [ 584.303892][ T5872] usb 6-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.317430][ T5872] usb 6-1: config 1 interface 0 has no altsetting 0 [ 584.374491][ T5872] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 584.385386][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.394848][ T5872] usb 6-1: Product: ᐁ [ 584.400236][ T5872] usb 6-1: Manufacturer: Щ [ 584.733178][ T5872] usb 6-1: bad CDC descriptors [ 584.814986][ T5872] usb 6-1: USB disconnect, device number 9 [ 587.851001][ T30] audit: type=1326 audit(1763586982.892:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 587.873182][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.949348][ T9523] IPv6: NLM_F_CREATE should be specified when creating new route [ 588.006757][ T30] audit: type=1326 audit(1763586982.982:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 588.029374][ T30] audit: type=1326 audit(1763586982.982:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 588.059339][ T30] audit: type=1326 audit(1763586982.982:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 592.191753][ T9571] overlayfs: overlapping lowerdir path [ 601.328664][ T9640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.687992][ T9643] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1468'. [ 601.870223][ T9645] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 602.196865][ T9649] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1471'. [ 603.530995][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.538007][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 605.162426][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1485'. [ 609.618808][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1498'. [ 613.576868][ T5872] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 613.761592][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'. [ 613.786989][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 613.819075][ T5872] usb 6-1: config 9 has an invalid interface number: 236 but max is 0 [ 613.827769][ T5872] usb 6-1: config 9 has no interface number 0 [ 613.834097][ T5872] usb 6-1: config 9 interface 236 altsetting 0 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 613.847998][ T5872] usb 6-1: config 9 interface 236 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 613.860352][ T5872] usb 6-1: config 9 interface 236 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 613.872388][ T5872] usb 6-1: config 9 interface 236 altsetting 0 endpoint 0x1 has invalid maxpacket 18441, setting to 8 [ 613.883894][ T5872] usb 6-1: config 9 interface 236 altsetting 0 endpoint 0x9 is Bulk; changing to Interrupt [ 613.894278][ T5872] usb 6-1: config 9 interface 236 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.054232][ T5872] usb 6-1: string descriptor 0 read error: -22 [ 614.061454][ T5872] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=55.e2 [ 614.071143][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.128720][ T9751] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 614.177204][ T9751] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 614.216778][ T5872] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 614.459622][ T5891] usb 6-1: USB disconnect, device number 10 [ 615.367467][ T9761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1519'. [ 616.252093][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1522'. [ 616.939995][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1524'. [ 617.434728][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1527'. [ 620.733411][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'. [ 620.836736][ T9830] IPVS: length: 112 != 8 [ 624.041582][ T9868] 9pnet_fd: Insufficient options for proto=fd [ 624.944890][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1560'. [ 627.192670][ T9892] fuse: Bad value for 'group_id' [ 627.197975][ T9892] fuse: Bad value for 'group_id' [ 628.557830][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1575'. [ 629.858044][ T9930] fuse: Bad value for 'group_id' [ 629.864341][ T9930] fuse: Bad value for 'group_id' [ 633.059023][ T9969] fuse: Bad value for 'group_id' [ 633.064335][ T9969] fuse: Bad value for 'group_id' [ 633.936811][ T5872] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 634.140681][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 634.171833][ T5872] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 634.180776][ T5872] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 634.189823][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 634.199163][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 634.209962][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 634.224087][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 634.239257][ T5872] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 634.248874][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.356472][ T30] audit: type=1107 audit(1763587029.422:36): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 634.448980][ T5872] usb 1-1: config 0 descriptor?? [ 634.712374][ T5872] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 634.807649][ T5872] usb 1-1: USB disconnect, device number 13 [ 634.870374][ T5872] usblp0: removed [ 635.072354][ T9993] binfmt_misc: register: failed to install interpreter file ./file1 [ 635.247743][ T5872] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 635.416656][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 635.470516][ T5872] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 635.479454][ T5872] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 635.488476][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 635.501704][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 635.512411][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 635.522490][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 635.536072][ T5872] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 635.545372][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.646654][ T5872] usb 1-1: config 0 descriptor?? [ 635.899076][ T5872] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 636.256364][ T5872] usb 1-1: USB disconnect, device number 14 [ 636.492539][ T9977] usblp0: removed [ 640.461461][T10065] capability: warning: `syz.6.1637' uses 32-bit capabilities (legacy support in use) [ 642.004082][T10088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1648'. [ 643.463351][T10108] geneve2: entered promiscuous mode [ 643.469724][T10108] geneve2: entered allmulticast mode [ 645.140428][T10133] netlink: 'syz.0.1665': attribute type 33 has an invalid length. [ 645.148844][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'. [ 646.546453][ T5872] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 646.726201][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.736938][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 646.750667][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.760193][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.869490][ T5872] usb 1-1: config 0 descriptor?? [ 646.894482][ T5872] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 647.085610][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1673'. [ 647.105009][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1673'. [ 647.157567][ T5872] usb 1-1: USB disconnect, device number 15 [ 650.546430][ T5872] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 650.772358][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.783133][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 650.796836][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 650.809909][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.917956][ T5872] usb 1-1: config 0 descriptor?? [ 650.976750][ T5872] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 651.137188][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 651.189081][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 651.248727][ T5891] usb 1-1: USB disconnect, device number 16 [ 651.394934][T10200] fuse: Unknown parameter 'grou00000000000000000000' [ 653.208324][T10225] fuse: Unknown parameter 'grou00000000000000000000' [ 654.046632][ T5872] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 654.234121][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.244900][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 654.258671][ T5872] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 654.268115][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.379497][ T5872] usb 2-1: config 0 descriptor?? [ 654.428032][ T5872] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 654.616599][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 654.684371][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 654.789440][ T5891] usb 2-1: USB disconnect, device number 10 [ 655.859194][T10255] fuse: Unknown parameter 'grou00000000000000000000' [ 656.156658][T10262] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1722'. [ 656.196711][T10262] gretap0: entered promiscuous mode [ 657.746584][ T5872] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 657.939420][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.950401][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 657.963949][ T5872] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.976872][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.099027][ T5872] usb 5-1: config 0 descriptor?? [ 658.167729][ T5872] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 658.327852][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 658.362764][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 658.402863][T10288] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1733'. [ 658.438260][ T5891] usb 5-1: USB disconnect, device number 17 [ 658.924781][T10292] fuse: Unknown parameter 'group_i00000000000000000000' [ 660.883248][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 660.892776][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 661.438648][T10316] fuse: Unknown parameter 'group_i00000000000000000000' [ 662.444298][T10331] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1754'. [ 663.629974][T10346] fuse: Unknown parameter 'group_i00000000000000000000' [ 664.459014][T10355] fuse: Bad value for 'fd' [ 664.979969][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.986980][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 665.955678][T10374] fuse: Unknown parameter 'group_id00000000000000000000' [ 666.824725][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1779'. [ 666.834537][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1779'. [ 666.876622][T10359] Bluetooth: hci2: command 0x0406 tx timeout [ 668.149931][T10409] fuse: Unknown parameter 'group_id00000000000000000000' [ 668.692647][T10414] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1791'. [ 668.735674][T10414] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1791'. [ 669.888168][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1800'. [ 670.524416][T10440] fuse: Unknown parameter 'group_id00000000000000000000' [ 671.224900][T10450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1807'. [ 671.283008][T10450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1807'. [ 673.218108][T10468] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1816'. [ 673.738208][T10472] fuse: Bad value for 'user_id' [ 673.747049][T10472] fuse: Bad value for 'user_id' [ 674.346663][T10478] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1820'. [ 674.417597][T10478] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1820'. [ 674.518677][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'. [ 675.184517][T10491] tmpfs: Bad value for 'mpol' [ 676.096352][ T5872] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 676.231419][T10500] fuse: Bad value for 'user_id' [ 676.236782][T10500] fuse: Bad value for 'user_id' [ 676.317895][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.328397][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 676.341893][ T5872] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 676.351315][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.439240][ T5872] usb 2-1: config 0 descriptor?? [ 676.486950][ T5872] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 676.678763][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'. [ 676.749558][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'. [ 676.798392][ T5891] usb 2-1: USB disconnect, device number 11 [ 677.276227][T10505] netlink: 13 bytes leftover after parsing attributes in process `syz.6.1832'. [ 678.030807][T10511] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 678.061934][T10511] CIFS mount error: No usable UNC path provided in device string! [ 678.061934][T10511] [ 678.073900][T10511] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 679.835236][T10525] fuse: Bad value for 'user_id' [ 679.840742][T10525] fuse: Bad value for 'user_id' [ 681.514447][ T5891] kernel write not supported for file [eventfd] (pid: 5891 comm: kworker/0:5) [ 681.529669][T10544] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1847'. [ 682.768336][T10555] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 683.561783][T10569] warning: `syz.6.1857' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 686.137981][T10599] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1871'. [ 687.450209][T10614] veth0_to_hsr: entered promiscuous mode [ 687.456567][T10614] veth0_to_hsr: entered allmulticast mode [ 690.046185][T10643] veth0_to_hsr: entered promiscuous mode [ 690.052075][T10643] veth0_to_hsr: entered allmulticast mode [ 692.618437][T10673] veth0_to_hsr: entered promiscuous mode [ 692.624634][T10673] veth0_to_hsr: entered allmulticast mode [ 693.267627][T10688] tmpfs: Bad value for 'mpol' [ 694.522267][T10705] netlink: 'syz.4.1917': attribute type 6 has an invalid length. [ 701.988363][T10796] fuse: Bad value for 'fd' [ 705.082147][T10824] fuse: Invalid rootmode [ 705.396412][ T5872] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 705.608747][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.620411][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.630689][ T5872] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 705.640223][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.719840][ T5872] usb 1-1: config 0 descriptor?? [ 706.333484][ T5872] hid_parser_main: 30 callbacks suppressed [ 706.333592][ T5872] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 706.346994][ T5872] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 706.354088][ T5872] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 706.361305][ T5872] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 706.368536][ T5872] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 706.375634][ T5872] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 706.382948][ T5872] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 706.508677][ T5872] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 706.839196][ T5872] usb 1-1: USB disconnect, device number 17 [ 707.271914][T10839] fido_id[10839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 707.902578][T10853] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1977'. [ 710.012672][T10874] loop2: detected capacity change from 0 to 7 [ 710.035877][T10874] Dev loop2: unable to read RDB block 7 [ 710.042011][T10874] loop2: unable to read partition table [ 710.085358][T10874] loop2: partition table beyond EOD, truncated [ 710.092444][T10874] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 713.547360][T10907] loop2: detected capacity change from 0 to 7 [ 713.600122][T10907] Dev loop2: unable to read RDB block 7 [ 713.606282][T10907] loop2: unable to read partition table [ 713.632722][T10907] loop2: partition table beyond EOD, truncated [ 713.639691][T10907] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 714.638431][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 716.255211][T10926] overlayfs: failed to clone upperpath [ 717.244184][T10938] loop2: detected capacity change from 0 to 7 [ 717.296932][T10938] Dev loop2: unable to read RDB block 7 [ 717.302967][T10938] loop2: unable to read partition table [ 717.438979][T10938] loop2: partition table beyond EOD, truncated [ 717.445527][T10938] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 717.867214][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2017'. [ 718.032087][T10943] veth0_macvtap: left promiscuous mode [ 724.317149][T10988] trusted_key: encrypted_key: master key parameter '' is invalid [ 726.419237][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.426985][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 730.258118][T11032] loop2: detected capacity change from 0 to 7 [ 730.337399][T11032] Dev loop2: unable to read RDB block 7 [ 730.343440][T11032] loop2: unable to read partition table [ 730.398305][T11032] loop2: partition table beyond EOD, truncated [ 730.405031][T11032] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 734.606869][T11081] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2077'. [ 735.016774][ T11] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 735.210011][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 735.295527][ T11] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 735.305208][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.313689][ T11] usb 2-1: Product: syz [ 735.318205][ T11] usb 2-1: Manufacturer: syz [ 735.323006][ T11] usb 2-1: SerialNumber: syz [ 735.439470][ T11] usb 2-1: config 0 descriptor?? [ 735.459187][ T11] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 735.470138][ T11] usb 2-1: Detected FT-X [ 735.699175][ T11] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 735.819555][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2084'. [ 735.878169][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2084'. [ 735.896666][ T11] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 735.945360][ T11] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 735.980692][ T11] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 736.027761][ T11] usb 2-1: USB disconnect, device number 12 [ 736.069759][ T11] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 736.082496][ T11] ftdi_sio 2-1:0.0: device disconnected [ 737.226593][ T30] audit: type=1804 audit(1763587132.292:37): pid=11113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2089" name="/newroot/429/file0" dev="tmpfs" ino=2319 res=1 errno=0 [ 737.694949][T11118] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2094'. [ 738.832254][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2100'. [ 740.776419][ T11] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 740.955036][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 740.995711][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.005773][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 741.014253][ T11] usb 1-1: SerialNumber: syz [ 741.075609][ T11] cdc_acm 1-1:1.0: skipping garbage [ 741.086167][ T11] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 741.248555][T11162] loop2: detected capacity change from 0 to 7 [ 741.283013][T11162] Dev loop2: unable to read RDB block 7 [ 741.288328][ T11] usb 1-1: USB disconnect, device number 18 [ 741.289858][T11162] loop2: unable to read partition table [ 741.324097][T11162] loop2: partition table beyond EOD, truncated [ 741.336742][T11162] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 741.526367][T11156] orangefs_mount: mount request failed with -4 [ 743.490342][T11183] macvlan0: entered promiscuous mode [ 744.272005][T11190] loop2: detected capacity change from 0 to 7 [ 744.309971][T11190] Dev loop2: unable to read RDB block 7 [ 744.316073][T11190] loop2: unable to read partition table [ 744.361311][T11190] loop2: partition table beyond EOD, truncated [ 744.368187][T11190] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 745.237647][ T5872] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 745.421504][ T5872] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 745.467456][ T5872] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 745.477118][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 745.485431][ T5872] usb 2-1: SerialNumber: syz [ 745.582438][ T5872] cdc_acm 2-1:1.0: skipping garbage [ 745.592452][ T5872] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 745.844320][ T5891] usb 2-1: USB disconnect, device number 13 [ 747.796570][T11218] loop2: detected capacity change from 0 to 7 [ 747.833358][T11218] Dev loop2: unable to read RDB block 7 [ 747.839621][T11218] loop2: unable to read partition table [ 747.902341][T11218] loop2: partition table beyond EOD, truncated [ 747.909310][T11218] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 748.932034][T11227] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2143'. [ 749.933668][ T5872] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 750.158799][ T5872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 750.222582][ T5872] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 750.232206][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 750.244872][ T5872] usb 5-1: SerialNumber: syz [ 750.383894][ T5872] cdc_acm 5-1:1.0: skipping garbage [ 750.396923][ T5872] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 750.568586][ T5872] usb 5-1: USB disconnect, device number 18 [ 753.469656][T11267] overlayfs: failed to clone upperpath [ 753.577478][ T30] audit: type=1326 audit(1763587148.622:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 753.600016][ T30] audit: type=1326 audit(1763587148.672:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 753.871276][ T30] audit: type=1326 audit(1763587148.712:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 753.894198][ T30] audit: type=1326 audit(1763587148.712:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 753.916921][ T30] audit: type=1326 audit(1763587148.712:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 753.941188][ T30] audit: type=1326 audit(1763587148.732:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 753.964094][ T30] audit: type=1326 audit(1763587148.732:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 753.986728][ T30] audit: type=1326 audit(1763587148.762:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 754.009012][ T30] audit: type=1326 audit(1763587148.762:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 754.033253][ T30] audit: type=1326 audit(1763587148.792:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 754.849110][T11278] loop2: detected capacity change from 0 to 7 [ 754.882233][T11278] Dev loop2: unable to read RDB block 7 [ 754.888530][T11278] loop2: unable to read partition table [ 754.936462][T11278] loop2: partition table beyond EOD, truncated [ 754.943106][T11278] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 757.743330][T11308] loop2: detected capacity change from 0 to 7 [ 757.786983][T11308] Dev loop2: unable to read RDB block 7 [ 757.793009][T11308] loop2: AHDI p1 p2 p3 [ 757.797809][T11308] loop2: partition table partially beyond EOD, truncated [ 757.806453][T11308] loop2: p1 start 1601398130 is beyond EOD, truncated [ 757.818192][T11308] loop2: p2 start 1702059890 is beyond EOD, truncated [ 761.446790][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 761.446874][ T30] audit: type=1326 audit(1763587156.502:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 761.475951][ T30] audit: type=1326 audit(1763587156.512:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 761.498489][ T30] audit: type=1326 audit(1763587156.512:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 761.628128][ T30] audit: type=1326 audit(1763587156.622:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 761.651801][ T30] audit: type=1326 audit(1763587156.642:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 761.674488][ T30] audit: type=1326 audit(1763587156.642:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 761.697107][ T30] audit: type=1326 audit(1763587156.652:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 761.722310][ T30] audit: type=1326 audit(1763587156.652:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 761.745703][ T30] audit: type=1326 audit(1763587156.652:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 761.768532][ T30] audit: type=1326 audit(1763587156.652:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11352 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 762.140684][T11356] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 763.930894][T11380] binder: 11379:11380 ioctl c0306201 800001c0 returned -14 [ 764.905267][T11393] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 765.208829][T11400] sctp: [Deprecated]: syz.1.2222 (pid 11400) Use of int in maxseg socket option. [ 765.208829][T11400] Use struct sctp_assoc_value instead [ 765.673220][T11407] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 768.141235][T11437] loop2: detected capacity change from 0 to 7 [ 768.184016][T11437] Dev loop2: unable to read RDB block 7 [ 768.190100][T11437] loop2: AHDI p1 p2 p3 [ 768.190714][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2241'. [ 768.194688][T11437] loop2: partition table partially beyond EOD, truncated [ 768.212335][T11437] loop2: p1 start 1601398130 is beyond EOD, truncated [ 768.219627][T11437] loop2: p2 start 1702059890 is beyond EOD, truncated [ 768.279288][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2241'. [ 771.527419][T11463] loop2: detected capacity change from 0 to 7 [ 771.584722][T11463] Dev loop2: unable to read RDB block 7 [ 771.590847][T11463] loop2: AHDI p1 p2 p3 [ 771.595495][T11463] loop2: partition table partially beyond EOD, truncated [ 771.604192][T11463] loop2: p1 start 1601398130 is beyond EOD, truncated [ 771.611450][T11463] loop2: p2 start 1702059890 is beyond EOD, truncated [ 771.729990][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2253'. [ 771.789371][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2253'. [ 774.373126][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2264'. [ 777.713323][ T5891] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 777.955396][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.966188][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 777.979882][ T5891] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 777.992166][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.129242][ T5891] usb 5-1: config 0 descriptor?? [ 778.204752][ T5891] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 778.355375][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'. [ 778.392697][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'. [ 778.486677][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2275'. [ 778.521902][ T42] usb 5-1: USB disconnect, device number 19 [ 782.044593][ T3830] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.116651][ T3830] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.125726][ T3830] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.226893][ T3830] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.426348][ T5891] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 782.634779][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.645412][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 782.659055][ T5891] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 782.668654][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.787283][ T5891] usb 2-1: config 0 descriptor?? [ 782.836581][ T5891] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 782.951390][T11553] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2293'. [ 782.964674][T11553] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2293'. [ 783.021505][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 783.057740][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 783.120495][ T42] usb 2-1: USB disconnect, device number 14 [ 785.572242][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2308'. [ 785.857221][ T42] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 785.967916][T11592] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 786.117636][ T42] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 786.127519][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.208067][ T42] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 786.217670][ T42] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 786.226119][ T42] usb 1-1: Manufacturer: syz [ 786.278119][ T42] usb 1-1: config 0 descriptor?? [ 786.867291][ T42] rc_core: IR keymap rc-hauppauge not found [ 786.873452][ T42] Registered IR keymap rc-empty [ 786.881778][ T42] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 786.910807][ T42] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 787.097710][ C1] igorplugusb 1-1:0.0: receive overflow invalid: 44 [ 787.326592][ T5891] usb 1-1: USB disconnect, device number 19 [ 787.859289][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.868515][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 788.972997][T11627] overlayfs: missing 'lowerdir' [ 790.169617][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 790.169701][ T30] audit: type=1326 audit(1763587185.242:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.6.2330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 790.205223][ T30] audit: type=1326 audit(1763587185.242:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.6.2330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 790.950410][T11658] cifs: Unknown parameter '@' [ 792.328784][T11680] overlayfs: conflicting lowerdir path [ 792.571842][ T30] audit: type=1326 audit(1763587187.632:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11683 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 792.594755][ T30] audit: type=1326 audit(1763587187.642:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11683 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 792.617527][ T30] audit: type=1326 audit(1763587187.642:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11683 comm="syz.5.2348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 794.252718][ T30] audit: type=1326 audit(1763587189.322:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11707 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 794.366218][ T30] audit: type=1326 audit(1763587189.392:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11707 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 794.393230][ T30] audit: type=1326 audit(1763587189.392:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11707 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 794.417684][ T30] audit: type=1326 audit(1763587189.412:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11707 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 794.440350][ T30] audit: type=1326 audit(1763587189.432:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11707 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 795.093186][ T42] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 795.278424][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 795.343863][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short [ 795.358558][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.369212][ T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 795.424811][ T42] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 795.434484][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.443042][ T42] usb 1-1: Product: syz [ 795.447919][ T42] usb 1-1: Manufacturer: syz [ 795.452738][ T42] usb 1-1: SerialNumber: syz [ 795.867564][ T42] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 795.927824][ T42] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 795.993518][ T42] usb 1-1: USB disconnect, device number 20 [ 796.141572][ T8087] udevd[8087]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 796.346859][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2372'. [ 797.483386][ T42] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 797.661779][ T42] usb 2-1: device descriptor read/64, error -71 [ 797.906474][ T42] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 798.062954][ T42] usb 2-1: device descriptor read/64, error -71 [ 798.187192][ T42] usb usb2-port1: attempt power cycle [ 798.587297][ T42] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 798.632833][ T42] usb 2-1: device descriptor read/8, error -71 [ 798.926484][ T42] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 798.985125][ T42] usb 2-1: device descriptor read/8, error -71 [ 799.106787][ T42] usb usb2-port1: unable to enumerate USB device [ 802.546417][ T42] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 802.716337][ T42] usb 1-1: device descriptor read/64, error -71 [ 802.956661][ T42] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 803.121692][ T42] usb 1-1: device descriptor read/64, error -71 [ 803.240380][ T42] usb usb1-port1: attempt power cycle [ 803.652059][ T42] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 803.702314][ T42] usb 1-1: device descriptor read/8, error -71 [ 803.721196][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2414'. [ 803.981668][ T42] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 804.048899][ T42] usb 1-1: device descriptor read/8, error -71 [ 804.158335][ T42] usb usb1-port1: unable to enumerate USB device [ 806.860183][T11874] bridge0: entered promiscuous mode [ 806.877695][T11874] bridge0: port 3(vlan2) entered blocking state [ 806.884664][T11874] bridge0: port 3(vlan2) entered disabled state [ 806.891982][T11874] vlan2: entered allmulticast mode [ 806.897439][T11874] bridge0: entered allmulticast mode [ 806.977282][T11874] vlan2: left allmulticast mode [ 806.982379][T11874] bridge0: left allmulticast mode [ 807.005706][T11874] bridge0: left promiscuous mode [ 807.610440][T11883] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2439'. [ 807.656719][ T11] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 807.880473][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.894180][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.979803][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 807.992499][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 808.001822][ T11] usb 1-1: SerialNumber: syz [ 808.103857][ T11] cdc_acm 1-1:1.0: skipping garbage [ 808.339910][ T11] usb 1-1: USB disconnect, device number 25 [ 808.806795][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.862429][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.904104][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.967076][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.557471][T11901] tipc: Started in network mode [ 809.562567][T11901] tipc: Node identity 4, cluster identity 4711 [ 809.569293][T11901] tipc: Node number set to 4 [ 813.307349][T11935] bridge0: entered promiscuous mode [ 813.322952][T11935] bridge0: port 3(vlan2) entered blocking state [ 813.329943][T11935] bridge0: port 3(vlan2) entered disabled state [ 813.337172][T11935] vlan2: entered allmulticast mode [ 813.342490][T11935] bridge0: entered allmulticast mode [ 813.517045][T11935] vlan2: left allmulticast mode [ 813.527387][T11935] bridge0: left allmulticast mode [ 813.611298][T11935] bridge0: left promiscuous mode [ 814.024161][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2465'. [ 815.142375][T11948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2469'. [ 815.258286][T11711] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 815.657623][T11711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.672421][T11711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.683632][T11711] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 815.693075][T11711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.746292][T11711] usb 2-1: config 0 descriptor?? [ 816.267556][T11711] usbhid 2-1:0.0: can't add hid device: -71 [ 816.274325][T11711] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 816.327541][T11711] usb 2-1: USB disconnect, device number 19 [ 818.646573][T11711] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 818.853609][T11711] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 818.862930][T11711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.905797][T11711] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 818.916015][T11711] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 818.924274][T11711] usb 1-1: Manufacturer: syz [ 818.994767][T11711] usb 1-1: config 0 descriptor?? [ 819.556282][T11711] rc_core: IR keymap rc-hauppauge not found [ 819.565589][T11711] Registered IR keymap rc-empty [ 819.575836][T11711] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 819.591545][T11711] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 819.883644][ T42] usb 1-1: USB disconnect, device number 26 [ 821.796451][T11711] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 822.016634][T11711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.030145][T11711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.042455][T11711] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 822.052532][T11711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.172146][T11711] usb 2-1: config 0 descriptor?? [ 822.673181][T11711] usbhid 2-1:0.0: can't add hid device: -71 [ 822.680768][T11711] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 822.695229][ T11] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 822.748020][T11711] usb 2-1: USB disconnect, device number 20 [ 822.890977][ T11] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 822.899971][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.964576][ T11] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 822.974678][ T11] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 822.983320][ T11] usb 5-1: Manufacturer: syz [ 823.009932][ T11] usb 5-1: config 0 descriptor?? [ 823.316173][ T11] rc_core: IR keymap rc-hauppauge not found [ 823.322302][ T11] Registered IR keymap rc-empty [ 823.330495][ T11] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 823.428903][ T11] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 823.803935][ T42] usb 5-1: USB disconnect, device number 20 [ 825.756530][ T42] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 825.776822][T12065] QAT: Device 9 not found [ 825.982122][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.993612][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.003864][ T42] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 826.017365][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.133493][ T42] usb 1-1: config 0 descriptor?? [ 826.584689][ T42] usbhid 1-1:0.0: can't add hid device: -71 [ 826.591711][ T42] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 826.647874][ T42] usb 1-1: USB disconnect, device number 27 [ 828.897300][ T11] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 829.087573][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 829.113384][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.124342][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.137144][ T11] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 829.147563][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 829.246584][ T11] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 829.256494][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 829.264728][ T11] usb 1-1: SerialNumber: syz [ 829.324090][ T11] usb 1-1: config 0 descriptor?? [ 829.368336][ T11] hso 1-1:0.0: Can't find BULK OUT endpoint [ 829.573343][T12104] ===================================================== [ 829.580853][T12104] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 829.589458][T12104] bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 829.595433][T12104] do_xdp_generic+0xd52/0x1690 [ 829.600601][T12104] tun_get_user+0x45c0/0x6d70 [ 829.605525][T12104] tun_chr_write_iter+0x3e9/0x5c0 [ 829.611046][T12104] vfs_write+0xbe2/0x15d0 [ 829.615543][T12104] __ia32_sys_write+0x1f9/0x4d0 [ 829.620859][T12104] ia32_sys_call+0x35bc/0x4310 [ 829.626021][T12104] __do_fast_syscall_32+0xb0/0x150 [ 829.631384][T12104] do_fast_syscall_32+0x38/0x80 [ 829.636826][T12104] do_SYSENTER_32+0x1f/0x30 [ 829.641575][T12104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 829.648275][T12104] [ 829.650697][T12104] Uninit was stored to memory at: [ 829.656241][T12104] pskb_expand_head+0x310/0x1610 [ 829.660919][ T42] usb 1-1: USB disconnect, device number 28 [ 829.661407][T12104] do_xdp_generic+0xa79/0x1690 [ 829.672394][T12104] tun_get_user+0x45c0/0x6d70 [ 829.677418][T12104] tun_chr_write_iter+0x3e9/0x5c0 [ 829.682665][T12104] vfs_write+0xbe2/0x15d0 [ 829.687354][T12104] __ia32_sys_write+0x1f9/0x4d0 [ 829.692379][T12104] ia32_sys_call+0x35bc/0x4310 [ 829.697523][T12104] __do_fast_syscall_32+0xb0/0x150 [ 829.702900][T12104] do_fast_syscall_32+0x38/0x80 [ 829.708145][T12104] do_SYSENTER_32+0x1f/0x30 [ 829.712895][T12104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 829.719684][T12104] [ 829.722187][T12104] Uninit was created at: [ 829.726906][T12104] __kmalloc_node_track_caller_noprof+0xb4b/0x1ba0 [ 829.733644][T12104] kmalloc_reserve+0x22f/0x4b0 [ 829.738750][T12104] __alloc_skb+0x347/0x7d0 [ 829.743377][T12104] alloc_skb_with_frags+0xc5/0xa60 [ 829.749025][T12104] sock_alloc_send_pskb+0xacc/0xc60 [ 829.754478][T12104] tun_get_user+0x1142/0x6d70 [ 829.759553][T12104] tun_chr_write_iter+0x3e9/0x5c0 [ 829.764817][T12104] vfs_write+0xbe2/0x15d0 [ 829.769478][T12104] __ia32_sys_write+0x1f9/0x4d0 [ 829.774506][T12104] ia32_sys_call+0x35bc/0x4310 [ 829.779650][T12104] __do_fast_syscall_32+0xb0/0x150 [ 829.785023][T12104] do_fast_syscall_32+0x38/0x80 [ 829.790309][T12104] do_SYSENTER_32+0x1f/0x30 [ 829.795069][T12104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 829.801879][T12104] [ 829.804333][T12104] CPU: 0 UID: 0 PID: 12104 Comm: syz.1.2541 Not tainted syzkaller #0 PREEMPT(none) [ 829.814034][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 829.824384][T12104] ===================================================== [ 829.831623][T12104] Disabling lock debugging due to kernel taint [ 829.838087][T12104] Kernel panic - not syncing: kmsan.panic set ... [ 829.844933][T12104] CPU: 0 UID: 0 PID: 12104 Comm: syz.1.2541 Tainted: G B syzkaller #0 PREEMPT(none) [ 829.856250][T12104] Tainted: [B]=BAD_PAGE [ 829.860529][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 829.870745][T12104] Call Trace: [ 829.874152][T12104] [ 829.877192][T12104] __dump_stack+0x26/0x30 [ 829.881734][T12104] dump_stack_lvl+0x53/0x270 [ 829.886544][T12104] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 829.892677][T12104] dump_stack+0x1e/0x25 [ 829.897047][T12104] vpanic+0x435/0xd30 [ 829.901268][T12104] panic+0x15d/0x160 [ 829.905428][T12104] kmsan_report+0x31c/0x320 [ 829.910133][T12104] ? __msan_warning+0x1b/0x30 [ 829.914997][T12104] ? bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 829.921240][T12104] ? do_xdp_generic+0xd52/0x1690 [ 829.926426][T12104] ? tun_get_user+0x45c0/0x6d70 [ 829.931584][T12104] ? tun_chr_write_iter+0x3e9/0x5c0 [ 829.936999][T12104] ? vfs_write+0xbe2/0x15d0 [ 829.941676][T12104] ? __ia32_sys_write+0x1f9/0x4d0 [ 829.946880][T12104] ? ia32_sys_call+0x35bc/0x4310 [ 829.952087][T12104] ? __do_fast_syscall_32+0xb0/0x150 [ 829.957618][T12104] ? do_fast_syscall_32+0x38/0x80 [ 829.962890][T12104] ? do_SYSENTER_32+0x1f/0x30 [ 829.967818][T12104] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 829.974569][T12104] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 829.980608][T12104] ? ___bpf_prog_run+0xea65/0xeba0 [ 829.985958][T12104] ? __bpf_prog_run32+0xc2/0xf0 [ 829.991015][T12104] ? kmsan_get_metadata+0xfb/0x160 [ 829.996357][T12104] __msan_warning+0x1b/0x30 [ 830.001038][T12104] bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 830.007092][T12104] do_xdp_generic+0xd52/0x1690 [ 830.012105][T12104] ? tun_get_user+0x40d1/0x6d70 [ 830.017276][T12104] ? filter_irq_stacks+0x49/0x190 [ 830.022577][T12104] ? kmsan_get_metadata+0xfb/0x160 [ 830.027927][T12104] ? tun_get_user+0x453f/0x6d70 [ 830.033452][T12104] tun_get_user+0x45c0/0x6d70 [ 830.038354][T12104] ? stack_depot_save_flags+0x35/0x7b0 [ 830.044032][T12104] ? kmsan_get_metadata+0xfb/0x160 [ 830.049362][T12104] ? kmsan_get_metadata+0xfb/0x160 [ 830.054684][T12104] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 830.061277][T12104] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 830.067685][T12104] tun_chr_write_iter+0x3e9/0x5c0 [ 830.072968][T12104] vfs_write+0xbe2/0x15d0 [ 830.077518][T12104] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 830.083312][T12104] __ia32_sys_write+0x1f9/0x4d0 [ 830.088637][T12104] ia32_sys_call+0x35bc/0x4310 [ 830.093661][T12104] __do_fast_syscall_32+0xb0/0x150 [ 830.099031][T12104] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 830.104999][T12104] do_fast_syscall_32+0x38/0x80 [ 830.110101][T12104] do_SYSENTER_32+0x1f/0x30 [ 830.114839][T12104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 830.121413][T12104] RIP: 0023:0xf70cd539 [ 830.125618][T12104] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 830.145422][T12104] RSP: 002b:00000000f54bd520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 830.154047][T12104] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000240 [ 830.162181][T12104] RDX: 000000000000fdef RSI: 00000000f7466ff4 RDI: 0000000000000000 [ 830.170314][T12104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 830.178430][T12104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 830.186545][T12104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 830.194699][T12104] [ 830.198255][T12104] Kernel Offset: disabled [ 830.202690][T12104] Rebooting in 86400 seconds..