last executing test programs: 1m48.172844816s ago: executing program 1 (id=1304): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f00000c2000/0x1000)=nil, 0x1000}) 1m47.953437498s ago: executing program 1 (id=1309): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, 0x8, 0x2, 0x3, 0x500, 0xc, 0x41d0002}) 1m47.659026748s ago: executing program 1 (id=1314): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x1, 0x6576, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) 1m47.344107851s ago: executing program 1 (id=1318): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m46.9789207s ago: executing program 1 (id=1324): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000200)=""/58, 0x3a) getdents64(r1, 0xfffffffffffffffe, 0x29) 1m46.589385197s ago: executing program 1 (id=1328): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1m46.065323432s ago: executing program 32 (id=1328): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1m33.854674137s ago: executing program 5 (id=1330): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x80) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0xfffffffffffffffe, 0x29) 1m33.583132292s ago: executing program 5 (id=1408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x6, 0x0, &(0x7f0000000000)) 1m33.341422781s ago: executing program 5 (id=1410): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x46) 1m33.012441338s ago: executing program 5 (id=1412): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) 1m32.570909319s ago: executing program 5 (id=1414): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 1m32.031844267s ago: executing program 33 (id=1414): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 3.807217387s ago: executing program 2 (id=2167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="670f209566b83e000f00d00f0766baf80cb8ee03a381ef66bafc0c66ed440f20c0350c000000440f22c0c7442400bb000000c744240200480000ff1c2448b807480000000000000f23c80f21f835080070000f23f8f30f96cf466c66b8ab000f00d0", 0x62}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.344817787s ago: executing program 2 (id=2172): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 2.608419521s ago: executing program 6 (id=2184): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 2.408386695s ago: executing program 4 (id=2187): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001380)=0x2, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 2.384698422s ago: executing program 6 (id=2188): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x100, r2, 0x700, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xa0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xbc70ffec22e45011}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x100}}, 0x10) 2.219998767s ago: executing program 4 (id=2190): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x400, 0x2) 2.187254742s ago: executing program 2 (id=2191): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ppoll(&(0x7f0000000080)=[{r0, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) 1.962304971s ago: executing program 2 (id=2193): r0 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x11, &(0x7f00000002c0), 0x2) r1 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000, 0x0, 0x2f4, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f0000001780)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000001740)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.808594432s ago: executing program 3 (id=2194): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x60}}, 0x4000000) 1.759063358s ago: executing program 4 (id=2195): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r1) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8", 0x1}], 0x1}], 0x1, 0x0) 1.600331851s ago: executing program 3 (id=2196): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r0, 0x0, 0x0) 1.594217652s ago: executing program 4 (id=2197): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff3a, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x587fc1425463de81) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.356023239s ago: executing program 6 (id=2199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0xfb, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x40, 0x2, 0x0, 0x0, {[@md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) 1.300369508s ago: executing program 2 (id=2200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000280)={0x80a0000, 0x14000}) close(r1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.187088041s ago: executing program 3 (id=2201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000500)="650f797fc80f01c566b80500000066b9520000000f01d966b9d004000066b87e00000066ba000000000f303e0f909c0080ea78a94b00670f01cf0f50eb0f3801e26766c7442400060000006766c7442402f54f00006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.186676057s ago: executing program 6 (id=2202): socket(0x22, 0x800, 0x0) statfs(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800dd8d00000000000000000200000400000006"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 1.093379178s ago: executing program 0 (id=2203): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) sendmmsg$sock(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="15", 0x1}], 0x1}}], 0x1, 0x40001) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) 1.052038312s ago: executing program 4 (id=2204): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b519"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 992.657948ms ago: executing program 6 (id=2205): r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0) 875.000477ms ago: executing program 2 (id=2206): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={0x2, 0x5, 0x1, 0x0, 'syz1\x00'}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) 843.02743ms ago: executing program 3 (id=2207): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0xd44c) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1}, 0x6e) 808.188398ms ago: executing program 0 (id=2208): unshare(0x400) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0) 719.471854ms ago: executing program 3 (id=2209): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="68000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c00028005000100000000002c0003801400018008000000ac1414aa08000200ac"], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 674.439481ms ago: executing program 0 (id=2210): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 562.968869ms ago: executing program 3 (id=2211): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x6]}, 0x8) syz_fuse_handle_req(r0, &(0x7f0000003000)="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", 0x2000, &(0x7f0000005900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) 532.833723ms ago: executing program 0 (id=2212): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffff7f00000000feffffff611051c5029729edad8953"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x0, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 336.29662ms ago: executing program 0 (id=2213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 118.95385ms ago: executing program 0 (id=2214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x400000}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 23.914773ms ago: executing program 4 (id=2215): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff], [0x0, 0xa82, 0x0, 0x0, 0x2, 0x733, 0x3, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008000, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x1, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 0s ago: executing program 6 (id=2216): setrlimit(0xf, &(0x7f0000000000)={0x0, 0x3}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x40000000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {r1, r2+60000000}}, 0x0) kernel console output (not intermixed with test programs): =ffff, bcdDevice= 0.00 [ 229.694155][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.728428][ T5884] usb 1-1: config 0 descriptor?? [ 230.181960][ T5884] plantronics 0003:047F:FFFF.001C: reserved main item tag 0xd [ 230.214397][ T5884] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 230.317670][ T5884] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 230.504220][ T5884] usb 1-1: USB disconnect, device number 20 [ 231.490560][ T5885] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 231.490651][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 231.568517][ T8939] netlink: 'syz.0.1195': attribute type 4 has an invalid length. [ 231.702670][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.726435][ T5885] usb 4-1: config 0 has no interfaces? [ 231.759656][ T5885] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 231.786351][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.809043][ T5885] usb 4-1: config 0 descriptor?? [ 232.096422][ T5885] usb 4-1: USB disconnect, device number 22 [ 232.392694][ T8965] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1207'. [ 232.420680][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.430066][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.446412][ T8966] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1207'. [ 232.754375][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 234.423473][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 234.482718][ T9034] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.492121][ T9034] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.501038][ T9034] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.509950][ T9034] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.536720][ T9034] vxlan0: entered promiscuous mode [ 234.646714][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 235.450439][ T8993] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 235.456854][ T8993] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 235.460119][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 235.735925][ T2150] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 235.769285][ T2150] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.082206][ T8993] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.088204][ T8993] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 236.177228][ T8993] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.205322][ T8993] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 236.262026][ T8993] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.270031][ T8993] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 236.368831][ T8993] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.425660][ T8993] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 238.075616][ T9157] netlink: 'syz.3.1256': attribute type 11 has an invalid length. [ 238.480056][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 238.650009][ T5885] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 238.666934][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 238.687465][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.719021][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.754123][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.808264][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.852940][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.862279][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.883574][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.923954][ T10] usb 2-1: config 0 descriptor?? [ 238.937169][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.954015][ T5885] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.994025][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.028138][ T5885] usb 4-1: config 0 descriptor?? [ 239.362267][ T10] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 239.400170][ T10] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 239.468823][ T5885] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 239.518907][ T5885] plantronics 0003:047F:FFFF.001F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 239.743195][ T5889] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 239.948861][ T5889] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 239.974454][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.004968][ T5889] usb 1-1: Product: syz [ 240.019965][ T5889] usb 1-1: Manufacturer: syz [ 240.031267][ T5889] usb 1-1: SerialNumber: syz [ 240.050947][ T5889] usb 1-1: config 0 descriptor?? [ 240.368200][ T5887] usb 1-1: USB disconnect, device number 21 [ 240.585561][ T5885] usb 4-1: USB disconnect, device number 23 [ 241.180144][ T2150] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 241.342268][ T9244] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.377663][ T2150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.414376][ T2150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.445033][ T2150] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 241.484120][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.502364][ T2150] usb 1-1: config 0 descriptor?? [ 241.910207][ T10] usb 2-1: reset high-speed USB device number 18 using dummy_hcd [ 241.930250][ T10] usb 2-1: device reset changed ep0 maxpacket size! [ 241.944853][ T2150] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 241.953033][ T2150] pyra 0003:1E7D:2CF6.0020: item fetching failed at offset 6/7 [ 241.965860][ T2150] pyra 0003:1E7D:2CF6.0020: parse failed [ 241.973219][ T2150] pyra 0003:1E7D:2CF6.0020: probe with driver pyra failed with error -22 [ 241.979407][ T5887] usb 2-1: USB disconnect, device number 18 [ 242.030052][ T47] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 242.140023][ T5887] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 242.208561][ T9258] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.249512][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 242.278088][ T47] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 242.313722][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.333570][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 242.347998][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.351274][ T47] usb 5-1: config 0 descriptor?? [ 242.372929][ T5887] usb 2-1: config 0 has no interfaces? [ 242.399282][ T9251] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 242.411397][ T5887] usb 2-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 242.440502][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.457542][ T5887] usb 2-1: Product: syz [ 242.463848][ T5887] usb 2-1: Manufacturer: syz [ 242.483131][ T5887] usb 2-1: SerialNumber: syz [ 242.504626][ T5887] usb 2-1: config 0 descriptor?? [ 242.748163][ T5887] usb 2-1: USB disconnect, device number 19 [ 242.854406][ T47] elan 0003:04F3:0755.0021: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 243.081448][ T5887] usb 5-1: USB disconnect, device number 16 [ 244.011205][ T2150] usb 1-1: USB disconnect, device number 22 [ 244.410646][ T9307] syz.2.1311 (9307) used greatest stack depth: 19512 bytes left [ 245.350359][ T6770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.375675][ T6770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.400335][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 245.571728][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 245.579439][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.592760][ T6770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.604392][ T6770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.619039][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.630593][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 245.649085][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.660652][ T9] usb 1-1: config 0 descriptor?? [ 245.808243][ T6770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.850562][ T6770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.961871][ T6770] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.981167][ T6770] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.995710][ T9355] input: syz1 as /devices/virtual/input/input31 [ 246.101143][ T9] playstation 0003:054C:05C4.0022: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 246.284404][ T6770] bridge_slave_1: left allmulticast mode [ 246.305340][ T6770] bridge_slave_1: left promiscuous mode [ 246.321286][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.350338][ T6770] bridge_slave_0: left allmulticast mode [ 246.361816][ T6770] bridge_slave_0: left promiscuous mode [ 246.374068][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.422227][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.432763][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.441771][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.452568][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.471823][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.494655][ T9] playstation 0003:054C:05C4.0022: Failed to retrieve feature with reportID 163: -32 [ 246.507439][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.515035][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.524137][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.531360][ T9] playstation 0003:054C:05C4.0022: Failed to retrieve DualShock4 firmware info: -32 [ 246.541560][ T9] playstation 0003:054C:05C4.0022: Failed to get firmware info from DualShock4 [ 246.550767][ T9] playstation 0003:054C:05C4.0022: HW/FW version data in sysfs will be invalid. [ 246.561004][ T9] playstation 0003:054C:05C4.0022: Invalid gyro calibration data for axis (5), disabling calibration. [ 246.576906][ T9] playstation 0003:054C:05C4.0022: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 246.577005][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.597603][ T9] playstation 0003:054C:05C4.0022: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 246.614734][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.621994][ T9] playstation 0003:054C:05C4.0022: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 246.637593][ T9] input: HID 054c:05c4 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.0022/input/input32 [ 246.698357][ T9] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.0022/input/input33 [ 246.719347][ T9] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.0022/input/input34 [ 246.753235][ T9] playstation 0003:054C:05C4.0022: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 246.792878][ T10] usb 1-1: USB disconnect, device number 23 [ 247.108361][ T9372] loop8: detected capacity change from 0 to 1 [ 247.128525][ T9372] Dev loop8: unable to read RDB block 1 [ 247.138157][ T6770] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 247.140158][ T9372] loop8: unable to read partition table [ 247.155655][ T9372] loop8: partition table beyond EOD, truncated [ 247.163020][ T9372] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 247.178144][ T6770] ip6gre1 (unregistering): left promiscuous mode [ 247.669115][ T9387] input: syz0 as /devices/virtual/input/input35 [ 248.094013][ T6770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.107772][ T6770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.119621][ T6770] bond0 (unregistering): Released all slaves [ 248.287123][ T6770] bond1 (unregistering): Released all slaves [ 248.478410][ T6770] bond2 (unregistering): Released all slaves [ 248.539638][ T9380] batadv_slave_1: entered promiscuous mode [ 248.553026][ T9384] batadv_slave_1: left promiscuous mode [ 248.730640][ T5838] Bluetooth: hci4: command tx timeout [ 248.894063][ T30] audit: type=1326 audit(1743578908.252:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1ac78d169 code=0x7fc00000 [ 248.949721][ T6770] batman_adv: batadv0: Interface deactivated: macsec1 [ 248.959370][ T6770] mac80211_hwsim hwsim10 wlan0 (unregistering): left allmulticast mode [ 248.988199][ T6770] batman_adv: batadv0: Removing interface: macsec1 [ 249.103138][ T5889] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 249.262147][ T5889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.299256][ T5889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.318883][ T6770] hsr_slave_0: left promiscuous mode [ 249.334120][ T5889] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.356525][ T6770] hsr_slave_1: left promiscuous mode [ 249.367758][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.390856][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.395045][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'. [ 249.418946][ T5889] usb 5-1: SerialNumber: syz [ 249.425021][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.448410][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.466164][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.535181][ T6770] veth1_macvtap: left promiscuous mode [ 249.559529][ T30] audit: type=1326 audit(1743578908.912:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1ac78d169 code=0x7fc00000 [ 249.584001][ T6770] veth0_macvtap: left promiscuous mode [ 249.682248][ T5889] usb 5-1: 0:2 : does not exist [ 249.694509][ T5889] usb 5-1: unit 253 not found! [ 249.753005][ T5889] usb 5-1: USB disconnect, device number 17 [ 250.001791][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.381075][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 250.404969][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 250.553552][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.568075][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 250.580057][ T6770] team0 (unregistering): Port device team_slave_1 removed [ 250.582987][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.596871][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.614232][ T9453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.633751][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.658130][ T6770] team0 (unregistering): Port device team_slave_0 removed [ 250.820506][ T5838] Bluetooth: hci4: command tx timeout [ 250.847811][ T5887] usb 3-1: USB disconnect, device number 21 [ 251.336846][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1361'. [ 251.534291][ T9363] chnl_net:caif_netlink_parms(): no params data found [ 251.856034][ T9480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.980012][ T5887] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 252.131893][ T9363] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.139105][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.165953][ T9363] bridge_slave_0: entered allmulticast mode [ 252.181242][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 252.181973][ T9363] bridge_slave_0: entered promiscuous mode [ 252.197114][ T5887] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 252.230062][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.249622][ T5887] usb 4-1: Product: syz [ 252.253074][ T9363] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.258884][ T5887] usb 4-1: Manufacturer: syz [ 252.277469][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.279919][ T5887] usb 4-1: SerialNumber: syz [ 252.297519][ T9363] bridge_slave_1: entered allmulticast mode [ 252.331906][ T9363] bridge_slave_1: entered promiscuous mode [ 252.339644][ T5887] usb 4-1: config 0 descriptor?? [ 252.368302][ T5887] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 252.530321][ T9504] program syz.2.1380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.588319][ T9363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.662324][ T9363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.831711][ T9363] team0: Port device team_slave_0 added [ 252.863028][ T9363] team0: Port device team_slave_1 added [ 252.890601][ T5838] Bluetooth: hci4: command tx timeout [ 253.032810][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.052977][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.091419][ T9363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.183113][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.206709][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.232975][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.260047][ T9363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.431355][ T9363] hsr_slave_0: entered promiscuous mode [ 253.438483][ T9363] hsr_slave_1: entered promiscuous mode [ 253.460227][ T9363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.467949][ T9363] Cannot create hsr debugfs directory [ 253.593855][ T5887] gspca_sonixj: reg_w1 err -71 [ 253.598857][ T5887] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 253.634105][ T5887] usb 4-1: USB disconnect, device number 24 [ 253.673500][ T47] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 253.840028][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 253.852000][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.895090][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.928759][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 253.962405][ T47] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 253.989926][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.024880][ T47] usb 5-1: config 0 descriptor?? [ 254.437481][ T9363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 254.472045][ T47] shield 0003:0955:7214.0023: unknown main item tag 0x1 [ 254.494686][ T9549] xt_CT: No such helper "pptp" [ 254.523577][ T47] shield 0003:0955:7214.0023: item fetching failed at offset 1/5 [ 254.536307][ T9363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 254.558221][ T47] shield 0003:0955:7214.0023: Parse failed [ 254.568044][ T47] shield 0003:0955:7214.0023: probe with driver shield failed with error -22 [ 254.584401][ T9363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 254.639193][ T9363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.702525][ T47] usb 5-1: USB disconnect, device number 18 [ 254.982050][ T5838] Bluetooth: hci4: command tx timeout [ 254.990844][ T9562] cgroup: fork rejected by pids controller in /syz0 [ 255.158325][ T9363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.252022][ T9363] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.308982][ T6776] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.316252][ T6776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.401990][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.409237][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.766654][ T9363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.860174][ T5884] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 255.915507][ T9363] veth0_vlan: entered promiscuous mode [ 255.977386][ T9363] veth1_vlan: entered promiscuous mode [ 256.063318][ T5884] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 256.110256][ T5884] usb 5-1: config 0 has no interface number 0 [ 256.137352][ T5884] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 256.149794][ T9363] veth0_macvtap: entered promiscuous mode [ 256.170990][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.195045][ T9363] veth1_macvtap: entered promiscuous mode [ 256.205467][ T5884] usb 5-1: Product: syz [ 256.209697][ T5884] usb 5-1: Manufacturer: syz [ 256.230370][ T5884] usb 5-1: SerialNumber: syz [ 256.246305][ T5884] usb 5-1: config 0 descriptor?? [ 256.292804][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.313750][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.340034][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.359983][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.380005][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.410538][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.429938][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.450005][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.485270][ T9363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.496160][ T5884] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 256.513173][ T5884] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 256.524618][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.558331][ T5884] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 256.578517][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.599385][ T5884] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 256.619451][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.641069][ T5884] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 256.669973][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.718800][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.759948][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.787441][ T9363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.828605][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.870695][ T9363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.915241][ T5884] usb 5-1: USB disconnect, device number 19 [ 256.930769][ T9363] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.957417][ T5884] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 256.974395][ T9363] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.990943][ T5884] keyspan 5-1:0.133: device disconnected [ 257.007026][ T9363] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.037112][ T9363] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.228883][ T9363] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 257.263538][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.290782][ T9363] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 257.310041][ T9363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.352198][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.395014][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.471198][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.483565][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.484543][ T9596] syz_tun: entered allmulticast mode [ 257.498356][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.511129][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.520895][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.524579][ T9595] syz_tun: left allmulticast mode [ 257.596191][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.605180][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.716692][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 258.758857][ T9598] chnl_net:caif_netlink_parms(): no params data found [ 258.909991][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 258.935505][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.955671][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.969156][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.980821][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.995026][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.004233][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.236760][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 259.248718][ T10] usbtmc 5-1:16.0: can't read capabilities [ 259.332708][ T9598] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.352532][ T9598] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.372415][ T9598] bridge_slave_0: entered allmulticast mode [ 259.390525][ T9598] bridge_slave_0: entered promiscuous mode [ 259.411506][ T9598] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.418731][ T9598] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.440131][ T9598] bridge_slave_1: entered allmulticast mode [ 259.452987][ T9598] bridge_slave_1: entered promiscuous mode [ 259.480286][ T9] usb 5-1: USB disconnect, device number 20 [ 259.620538][ T5838] Bluetooth: hci1: command tx timeout [ 259.636946][ T9598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.676293][ T9598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.882941][ T9598] team0: Port device team_slave_0 added [ 259.931171][ T9598] team0: Port device team_slave_1 added [ 260.053499][ T9598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.076337][ T9598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.164052][ T9598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.204147][ T9598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.230220][ T9598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.260453][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 260.303956][ T9598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.440200][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 260.457226][ T10] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 260.480143][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 260.531814][ T10] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 260.556936][ T10] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 260.572719][ T9598] hsr_slave_0: entered promiscuous mode [ 260.588777][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.597384][ T9598] hsr_slave_1: entered promiscuous mode [ 260.611126][ T9598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.618741][ T9598] Cannot create hsr debugfs directory [ 260.639974][ T5887] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 260.640616][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.655431][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 260.671995][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.681447][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.688711][ T10] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 260.700765][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.718095][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.727479][ T10] usb 4-1: Product: syz [ 260.742810][ T10] usb 4-1: Manufacturer: syz [ 260.764104][ T10] usb 4-1: SerialNumber: syz [ 260.786923][ T10] usb 4-1: config 0 descriptor?? [ 260.808186][ T10] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 260.832903][ T10] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 260.846219][ T5887] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 260.858275][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.866939][ T5887] usb 5-1: Product: syz [ 260.871571][ T5887] usb 5-1: Manufacturer: syz [ 260.881484][ T5887] usb 5-1: SerialNumber: syz [ 260.901599][ T5887] usb 5-1: config 0 descriptor?? [ 260.916900][ T5887] ch341 5-1:0.0: ch341-uart converter detected [ 260.980290][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.987154][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.053902][ T10] usb 4-1: USB disconnect, device number 25 [ 261.060029][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 261.086056][ T10] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 261.306900][ T9644] ldusb: No device or device unplugged -19 [ 261.432810][ T9598] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.546340][ T9598] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.704159][ T5838] Bluetooth: hci1: command tx timeout [ 261.705631][ T9598] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.876994][ T9598] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.929471][ T5887] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 261.995664][ T9664] chnl_net:caif_netlink_parms(): no params data found [ 262.138193][ T5887] usb 5-1: USB disconnect, device number 21 [ 262.158039][ T5887] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 262.196164][ T5887] ch341 5-1:0.0: device disconnected [ 262.514927][ T9664] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.543207][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.576180][ T9664] bridge_slave_0: entered allmulticast mode [ 262.589024][ T9664] bridge_slave_0: entered promiscuous mode [ 262.635045][ T9664] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.653942][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.668787][ T9664] bridge_slave_1: entered allmulticast mode [ 262.685900][ T9664] bridge_slave_1: entered promiscuous mode [ 262.820759][ T5838] Bluetooth: hci4: command tx timeout [ 262.857500][ T9664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.934988][ T9664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.031267][ T9723] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1434'. [ 263.079739][ T9598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 263.116848][ T9664] team0: Port device team_slave_0 added [ 263.128708][ T9598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 263.151530][ T9598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 263.172614][ T9664] team0: Port device team_slave_1 added [ 263.179624][ T9598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.382979][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.396445][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.474475][ T9664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.507304][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.559341][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.610129][ T9664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.776246][ T5838] Bluetooth: hci1: command tx timeout [ 263.850228][ T5884] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 263.855094][ T9664] hsr_slave_0: entered promiscuous mode [ 263.885655][ T9664] hsr_slave_1: entered promiscuous mode [ 263.901923][ T9664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.915450][ T9664] Cannot create hsr debugfs directory [ 264.014448][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.036516][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 264.058419][ T5884] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 264.068886][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.097904][ T5884] usb 3-1: config 0 descriptor?? [ 264.324912][ T9742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.362820][ T9742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.387124][ T9598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.412030][ T5884] usbhid 3-1:0.0: can't add hid device: -71 [ 264.438179][ T5884] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 264.477140][ T5884] usb 3-1: USB disconnect, device number 22 [ 264.585755][ T9598] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.615733][ T9664] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 264.678396][ T9664] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 264.699348][ T9664] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 264.721450][ T9664] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 264.745143][ T6780] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.752450][ T6780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.792765][ T6780] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.800120][ T6780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.900103][ T5838] Bluetooth: hci4: command tx timeout [ 264.950209][ T5884] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 265.009375][ T9598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.111268][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 265.171382][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.206287][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 265.288103][ T5884] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 265.317884][ T9598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.334838][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.393704][ T5884] usb 3-1: config 0 descriptor?? [ 265.442342][ T5884] hub 3-1:0.0: USB hub found [ 265.507397][ T9664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.598648][ T9664] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.629552][ T9783] tipc: Enabled bearer , priority 10 [ 265.643123][ T5884] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 265.659472][ T9783] tipc: Disabling bearer [ 265.739361][ T6776] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.746811][ T6776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.791281][ T9598] veth0_vlan: entered promiscuous mode [ 265.810860][ T6776] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.818130][ T6776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.849443][ T5884] usbhid 3-1:0.0: can't add hid device: -71 [ 265.864088][ T5838] Bluetooth: hci1: command tx timeout [ 265.892031][ T9598] veth1_vlan: entered promiscuous mode [ 265.911234][ T5884] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 266.033606][ T5884] usb 3-1: USB disconnect, device number 23 [ 266.095787][ T9795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.127723][ T9598] veth0_macvtap: entered promiscuous mode [ 266.185981][ T9598] veth1_macvtap: entered promiscuous mode [ 266.246457][ T9664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.265192][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.289685][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.300347][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.312746][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.323376][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.334645][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.345091][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.355800][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.366004][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.378978][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.393139][ T9598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.529489][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.555161][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.571296][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.583391][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.594213][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.605301][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.617536][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.632261][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.643242][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.655763][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.688805][ T9598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.796253][ T9598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.834709][ T9598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.857432][ T9813] loop2: detected capacity change from 0 to 7 [ 266.863688][ T9598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.879972][ T9598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.889300][ T9813] Dev loop2: unable to read RDB block 7 [ 266.910084][ T9813] loop2: AHDI p1 p2 p3 [ 266.914528][ T9813] loop2: partition table partially beyond EOD, truncated [ 266.931045][ T9815] netlink: 'syz.2.1462': attribute type 1 has an invalid length. [ 266.945120][ T9813] loop2: p1 size 403767296 extends beyond EOD, truncated [ 266.955798][ T9813] loop2: p3 start 335544320 is beyond EOD, truncated [ 266.968255][ T9664] veth0_vlan: entered promiscuous mode [ 266.981438][ T5838] Bluetooth: hci4: command tx timeout [ 267.004386][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 267.136281][ T9818] bond1 (unregistering): Released all slaves [ 267.228565][ T9815] bond1: entered promiscuous mode [ 267.235331][ T9815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.341286][ T9664] veth1_vlan: entered promiscuous mode [ 267.568382][ T9598] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 267.586280][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.607829][ T9598] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 267.624298][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.675555][ T6776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.689461][ T6776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.749656][ T9664] veth0_macvtap: entered promiscuous mode [ 267.767482][ T9664] veth1_macvtap: entered promiscuous mode [ 267.795750][ T6780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.822132][ T6780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.846201][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.873133][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.883288][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.894394][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.904627][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.966633][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.999914][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.013014][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.027087][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.038297][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.049293][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.084900][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.102413][ T9664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.139693][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.167190][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.179481][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.199736][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.217140][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.227911][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.239324][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.251855][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.262465][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.273075][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.283226][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.293935][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.309075][ T9664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.317715][ T2150] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 268.353644][ T9664] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.367230][ T9664] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.376242][ T9664] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.385046][ T9664] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.460477][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 268.480652][ T2150] usb 3-1: Using ep0 maxpacket: 8 [ 268.500648][ T2150] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.521445][ T2150] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 268.550093][ T2150] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 268.567760][ T9664] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 268.579216][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.585135][ T2150] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 268.589911][ T9664] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 268.608660][ T2150] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 268.619577][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.623738][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.638072][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 268.645860][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 268.658805][ T2150] hub 3-1:1.0: bad descriptor, ignoring hub [ 268.675730][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.676960][ T2150] hub 3-1:1.0: probe with driver hub failed with error -5 [ 268.700700][ T2150] cdc_wdm 3-1:1.0: skipping garbage [ 268.705992][ T2150] cdc_wdm 3-1:1.0: skipping garbage [ 268.712947][ T10] usb 4-1: config 0 descriptor?? [ 268.728902][ T2150] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 268.738992][ T6774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.749159][ T2150] cdc_wdm 3-1:1.0: Unknown control protocol [ 268.759632][ T6774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.776182][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 268.906342][ T6782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.927220][ T6782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.050761][ T5838] Bluetooth: hci4: command tx timeout [ 269.175617][ T24] usb 3-1: USB disconnect, device number 24 [ 269.530851][ T24] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 269.606108][ T10] gspca_sunplus: reg_r err -71 [ 269.617525][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 269.660525][ T10] usb 4-1: USB disconnect, device number 26 [ 269.692831][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.727010][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 269.769330][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 269.824617][ T24] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 269.852454][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.909469][ T9842] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.931566][ T24] hub 3-1:1.0: bad descriptor, ignoring hub [ 269.939548][ T24] hub 3-1:1.0: probe with driver hub failed with error -5 [ 269.979263][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 269.990111][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 270.040921][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 270.046956][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 270.138437][ T24] usb 3-1: USB disconnect, device number 25 [ 272.744979][ T9952] kvm: Disabled LAPIC found during irq injection [ 273.546278][ T9964] netlink: 'syz.6.1513': attribute type 11 has an invalid length. [ 274.890218][ T2150] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 274.898106][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 275.052605][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.090273][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.101556][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.131217][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.149952][ T2150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.163582][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.180046][ T2150] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.197070][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.205928][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.218738][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.240625][ T2150] usb 3-1: config 0 descriptor?? [ 275.251198][ T24] usb 5-1: config 0 descriptor?? [ 275.470145][ T5884] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 275.644758][ T5884] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 275.672749][ T24] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 275.682222][ T2150] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 275.691855][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.720545][ T24] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 275.745916][ T2150] plantronics 0003:047F:FFFF.0024: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 275.767058][ T5884] usb 1-1: config 0 descriptor?? [ 275.777931][ T5884] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 276.624073][T10042] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1537'. [ 276.702247][T10042] syz.6.1537 (10042) used greatest stack depth: 18408 bytes left [ 276.894871][T10052] loop9: detected capacity change from 0 to 7 [ 276.913035][T10052] Dev loop9: unable to read RDB block 7 [ 276.920756][T10052] loop9: AHDI p2 p3 p4 [ 276.933278][T10052] loop9: partition table partially beyond EOD, truncated [ 276.947897][T10052] loop9: p2 start 304735 is beyond EOD, truncated [ 276.959649][T10052] loop9: p3 start 1748066164 is beyond EOD, truncated [ 276.997909][ T5884] gspca_sonixj: reg_w1 err -71 [ 277.003484][ C1] plantronics 0003:047F:FFFF.0025: usb_submit_urb(ctrl) failed: -1 [ 277.025896][ T2150] usb 3-1: USB disconnect, device number 26 [ 277.060599][ T5884] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 277.088356][ T5884] usb 1-1: USB disconnect, device number 24 [ 277.350001][ T5836] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 277.531519][ T5836] usb 7-1: Using ep0 maxpacket: 16 [ 277.572872][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.615490][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.680006][ T5836] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 277.740419][ T5836] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 277.777179][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.789698][ T47] usb 5-1: USB disconnect, device number 22 [ 277.857544][ T5836] usb 7-1: config 0 descriptor?? [ 278.035903][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1548'. [ 278.376492][ T5836] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0026/input/input36 [ 278.437979][ T5836] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 278.717536][ T5836] usb 7-1: USB disconnect, device number 2 [ 279.870566][T10143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.310469][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 280.519919][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.559979][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.588416][ T10] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 280.607989][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 280.645655][ T10] usb 7-1: SerialNumber: syz [ 280.880542][ T10] usb 7-1: 0:2 : does not exist [ 280.938809][ T10] usb 7-1: USB disconnect, device number 3 [ 281.284907][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.830096][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 281.838959][T10211] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 281.896979][T10211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.988588][T10211] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 282.019970][T10211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.053375][T10211] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 282.072637][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.100485][T10211] macsec1: entered promiscuous mode [ 282.106001][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 282.130520][T10211] macsec1: entered allmulticast mode [ 282.153809][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.176963][T10211] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 282.221750][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 282.294025][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 282.383054][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.429943][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.477033][ T9] usb 7-1: Product: syz [ 282.487593][ T9] usb 7-1: Manufacturer: syz [ 282.591965][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 282.632589][T10227] input: syz1 as /devices/virtual/input/input37 [ 282.637444][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 282.671152][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 282.728523][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 282.916073][ T9] usb 7-1: USB disconnect, device number 4 [ 283.084286][T10244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.040291][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 286.066424][T10322] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 286.149645][T10322] bond3: entered promiscuous mode [ 286.222356][ T9] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 286.233010][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.253119][ T9] usb 7-1: config 0 descriptor?? [ 286.255904][T10322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.365144][T10324] bond3: (slave veth3): making interface the new active one [ 286.414870][T10324] veth3: entered promiscuous mode [ 286.451089][T10324] bond3: (slave veth3): Enslaving as an active interface with an up link [ 286.687986][ T9] elan 0003:04F3:0755.0027: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 286.938774][ T5836] usb 7-1: USB disconnect, device number 5 [ 287.803623][ T30] audit: type=1326 audit(1743578947.162:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10355 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1ac78d169 code=0x7fc00000 [ 288.320127][ T47] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 288.499983][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 288.511470][ T30] audit: type=1326 audit(1743578947.872:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10355 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1ac78d169 code=0x7fc00000 [ 288.557681][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.584325][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.602195][ T47] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 288.615550][ T5836] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 288.634568][ T47] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 288.643999][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.671363][ T47] usb 7-1: config 0 descriptor?? [ 288.782396][ T5836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.800853][ T5836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.815124][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.823872][ T5836] usb 1-1: Product: syz [ 288.828153][ T5836] usb 1-1: Manufacturer: syz [ 288.834528][ T5836] usb 1-1: SerialNumber: syz [ 288.890071][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 289.066369][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 289.077982][ T24] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 289.097397][ T24] usb 4-1: config 0 has no interface number 0 [ 289.129001][ T24] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 289.141156][ T47] HID 045e:07da: Invalid code 65791 type 1 [ 289.166093][ T47] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0028/input/input38 [ 289.178290][ T24] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 289.188440][ T5889] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 289.196392][ T24] usb 4-1: config 0 interface 41 has no altsetting 0 [ 289.217236][ T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 289.237723][ T47] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 289.250723][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.258765][ T24] usb 4-1: Product: syz [ 289.270806][ T24] usb 4-1: Manufacturer: syz [ 289.286847][ T24] usb 4-1: SerialNumber: syz [ 289.304589][ T24] usb 4-1: config 0 descriptor?? [ 289.310545][T10389] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 289.317919][T10389] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 289.360397][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 289.368405][ T5889] usb 3-1: config index 0 descriptor too short (expected 30768, got 18) [ 289.385466][ T5889] usb 3-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 289.394697][ T5889] usb 3-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 289.405706][ T5889] usb 3-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 289.416819][ T10] usb 7-1: USB disconnect, device number 6 [ 289.433492][ T5889] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 289.443307][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.559022][T10389] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 289.567255][T10389] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 289.683608][ T5889] usb 3-1: string descriptor 0 read error: -22 [ 289.894442][ T5836] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 289.898956][ T10] usb 3-1: USB disconnect, device number 27 [ 289.904111][ T5836] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 289.915660][ T5836] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 290.106736][ T5836] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 290.139150][T10405] input: syz0 as /devices/virtual/input/input39 [ 290.186872][ T5836] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 290.203697][ T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 290.279243][ T5836] usb 1-1: USB disconnect, device number 25 [ 290.302761][ T5836] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 290.426839][ T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 290.444842][ T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 290.458503][ T24] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 290.487989][ T24] usb 4-1: USB disconnect, device number 27 [ 291.168890][T10430] loop9: detected capacity change from 0 to 8 [ 291.183398][T10430] Dev loop9: unable to read RDB block 8 [ 291.192130][T10430] loop9: unable to read partition table [ 291.198051][T10430] loop9: partition table beyond EOD, truncated [ 291.212780][T10430] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 291.330128][ T5836] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 291.492476][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.509249][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.532587][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.553878][ T5836] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.563632][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.585487][ T5836] usb 1-1: config 0 descriptor?? [ 292.069379][ T5836] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 292.142819][ T5836] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 292.412556][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 292.440016][ T5885] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 292.446782][ T5885] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 292.547632][T10457] input: syz0 as /devices/virtual/input/input40 [ 293.310016][ T5836] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 293.360059][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 293.464325][ T5836] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 293.476009][ T47] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 293.483979][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.494746][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 293.508914][ T5836] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 293.518872][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.535145][ T5836] usb 4-1: config 0 descriptor?? [ 293.553143][ T24] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 293.567701][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.593843][ T24] usb 3-1: config 0 descriptor?? [ 293.659811][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 293.670784][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 293.695138][ T47] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 293.706259][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.723569][ T47] usb 5-1: config 0 descriptor?? [ 293.735778][ T47] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 293.955277][ T5195] bcm5974 5-1:0.0: could not read from device [ 293.989625][ T5836] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 293.998946][ T5195] bcm5974 5-1:0.0: could not read from device [ 294.007096][ T5887] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 294.029609][ T5836] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 294.040896][ T47] bcm5974 5-1:0.0: could not read from device [ 294.048019][ T5836] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 294.069391][ T47] input: failed to attach handler mousedev to device input41, error: -5 [ 294.079064][ T5836] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 294.087753][ T5836] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 294.100620][ T47] usb 5-1: USB disconnect, device number 23 [ 294.106957][ T5836] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 294.117683][ T5195] bcm5974 5-1:0.0: could not read from device [ 294.121736][ T5836] holtek_kbd 0003:04D9:A055.002A: unknown main item tag 0x0 [ 294.143961][ T5836] holtek_kbd 0003:04D9:A055.002A: hidraw1: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 294.157197][ T5195] bcm5974 5-1:0.0: could not read from device [ 294.192151][ T5884] usb 1-1: USB disconnect, device number 26 [ 294.214236][ T5887] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 294.231315][ T5836] usb 4-1: USB disconnect, device number 28 [ 294.237666][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.252694][ T5887] usb 7-1: Product: syz [ 294.257249][ T5887] usb 7-1: Manufacturer: syz [ 294.278534][ T5887] usb 7-1: SerialNumber: syz [ 294.329350][ T5887] usb 7-1: config 0 descriptor?? [ 294.570540][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 294.577123][ T5885] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 294.588948][ T5885] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 294.750297][ T5887] airspy 7-1:0.0: Board ID: 00 [ 294.755162][ T5887] airspy 7-1:0.0: Firmware version: [ 294.850348][ T24] usb 3-1: Cannot set autoneg [ 294.855380][ T24] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 294.909435][ T24] usb 3-1: USB disconnect, device number 28 [ 295.130209][ T9] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 295.312487][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.333613][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 295.358907][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 295.389995][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 295.414103][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.445672][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.472154][ T9] usb 1-1: Product: syz [ 295.487392][ T9] usb 1-1: Manufacturer: syz [ 295.507061][ T9] usb 1-1: SerialNumber: syz [ 295.529140][T10498] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 295.570967][ T5887] airspy 7-1:0.0: usb_control_msg() failed -71 request 0f [ 295.606699][ T5887] airspy 7-1:0.0: Registered as swradio24 [ 295.625561][ T5887] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 295.682027][ T5887] usb 7-1: USB disconnect, device number 7 [ 295.778965][T10498] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 295.806049][T10498] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 296.150311][ T5836] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 296.319937][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 296.343941][ T5836] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 296.354885][ T5836] usb 4-1: config 0 has no interface number 0 [ 296.458140][ T5836] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 296.475393][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.493744][ T5836] usb 4-1: Product: syz [ 296.498465][T10498] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 296.507210][T10498] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 296.527465][ T5836] usb 4-1: Manufacturer: syz [ 296.540419][ T5836] usb 4-1: SerialNumber: syz [ 296.549114][ T5836] usb 4-1: config 0 descriptor?? [ 296.743989][ T9] cdc_mbim 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 296.760012][ T9] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 296.767558][ T9] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 296.822483][ T5836] kaweth 4-1:0.235: Firmware present in device. [ 296.951338][ T9] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 296.978954][ T9] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 296.996828][ T5836] kaweth 4-1:0.235: Statistics collection: 0 [ 297.029474][ T5836] kaweth 4-1:0.235: Multicast filter limit: 0 [ 297.044295][ T5836] kaweth 4-1:0.235: MTU: 0 [ 297.058189][ T5836] kaweth 4-1:0.235: Read MAC address 00:00:00:00:00:00 [ 297.071682][ T9] wwan wwan0: port wwan0mbim0 attached [ 297.116741][ T9] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42 [ 297.164227][ T9] usb 1-1: USB disconnect, device number 27 [ 297.185427][ T9] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 297.311294][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 297.389688][T10533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.396846][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 297.554596][ T10] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 50660, setting to 1024 [ 297.587752][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 297.639778][ T10] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 297.663607][ T5836] kaweth 4-1:0.235: kaweth interface created at eth5 [ 297.709907][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.731563][ T10] usb 7-1: config 0 descriptor?? [ 297.737362][T10531] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 297.803172][T10538] dccp_invalid_packet: P.type (SYNC) not Data || [Data]Ack, while P.X == 0 [ 297.879767][ T24] usb 4-1: USB disconnect, device number 29 [ 298.238671][ T10] nintendo 0003:057E:200E.002B: unknown main item tag 0x0 [ 298.273015][ T10] nintendo 0003:057E:200E.002B: unknown main item tag 0x0 [ 298.288847][ T10] nintendo 0003:057E:200E.002B: unknown main item tag 0x0 [ 298.302027][ T10] nintendo 0003:057E:200E.002B: hidraw0: USB HID v81.04 Device [HID 057e:200e] on usb-dummy_hcd.6-1/input0 [ 298.381457][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1713'. [ 298.396051][ T10] nintendo 0003:057E:200E.002B: Failed charging grip handshake [ 298.414815][ T10] nintendo 0003:057E:200E.002B: Failed to initialize controller; ret=-110 [ 298.491352][ T10] nintendo 0003:057E:200E.002B: probe - fail = -110 [ 298.498234][ T10] nintendo 0003:057E:200E.002B: probe with driver nintendo failed with error -110 [ 298.630395][ T10] usb 7-1: USB disconnect, device number 8 [ 299.697278][T10597] vivid-003: disconnect [ 300.020977][T10604] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 300.034587][T10590] vivid-003: reconnect [ 300.900381][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 301.082152][ T24] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 301.104720][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.167746][ T24] usb 5-1: config 0 descriptor?? [ 301.232709][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 301.604399][ T24] cpia1 5-1:0.0: unexpected state after lo power cmd: 01 [ 302.207307][ T24] gspca_cpia1: usb_control_msg 05, error -71 [ 302.232118][ T24] cpia1 5-1:0.0: unexpected systemstate: 01 [ 302.274782][ T24] usb 5-1: USB disconnect, device number 24 [ 302.430876][ T5836] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 302.606116][ T5836] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.634912][ T5836] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 302.680021][ T5836] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.697318][T10674] netlink: 'syz.2.1756': attribute type 4 has an invalid length. [ 302.709695][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.732836][T10661] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 302.742085][T10674] netlink: 'syz.2.1756': attribute type 4 has an invalid length. [ 302.763938][ T5836] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.039412][ T5887] usb 4-1: USB disconnect, device number 30 [ 303.190294][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 303.379014][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.405265][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 303.417842][ T7063] udevd[7063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.435014][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.466101][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.477168][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.485529][ T9] usb 3-1: Product: syz [ 303.490088][ T9] usb 3-1: Manufacturer: syz [ 303.497203][ T9] usb 3-1: SerialNumber: syz [ 303.509163][ T9] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 303.538038][ T9] cdc_ncm 3-1:1.0: bind() failure [ 303.739281][ T5836] usb 3-1: USB disconnect, device number 29 [ 304.401190][T10713] loop6: detected capacity change from 0 to 524287999 [ 304.419217][T10713] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 304.429403][T10713] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 304.449769][T10713] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 304.604815][T10716] kvm: emulating exchange as write [ 305.727427][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 305.748875][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 305.782532][T10766] netlink: 'syz.3.1791': attribute type 18 has an invalid length. [ 305.900347][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 306.070359][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 306.085354][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.118539][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 306.146439][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 306.170218][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.186043][ T9] usb 3-1: config 0 descriptor?? [ 306.276237][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 306.448586][T10783] bridge_slave_1: left allmulticast mode [ 306.467182][T10783] bridge_slave_1: left promiscuous mode [ 306.475515][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 306.486782][T10783] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.528291][T10783] bridge_slave_0: left allmulticast mode [ 306.539759][T10783] bridge_slave_0: left promiscuous mode [ 306.555883][T10783] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.625532][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 306.642626][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002C/input/input44 [ 306.675531][ T9] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 307.511677][ T5887] usb 3-1: USB disconnect, device number 30 [ 307.573680][ T5885] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 307.730197][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 307.761597][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 307.769753][ T5885] usb 4-1: config 0 has an invalid interface number: 60 but max is 0 [ 307.779134][ T5885] usb 4-1: config 0 has no interface number 0 [ 307.793844][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 307.806373][T10818] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 307.816954][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.840045][ T5885] usb 4-1: Product: syz [ 307.850755][ T5885] usb 4-1: Manufacturer: syz [ 307.859908][ T5885] usb 4-1: SerialNumber: syz [ 307.874189][ T5885] usb 4-1: config 0 descriptor?? [ 307.909407][ T5885] gspca_main: spca500-2.14.0 probing 046d:0900 [ 307.916452][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 307.928435][ T9] usb 1-1: config 252 has an invalid interface number: 57 but max is 0 [ 307.944312][ T9] usb 1-1: config 252 has no interface number 0 [ 307.954465][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810f, bcdDevice=82.8a [ 307.964845][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.980030][ T9] usb 1-1: Product: syz [ 307.984694][ T9] usb 1-1: Manufacturer: syz [ 307.991044][ T9] usb 1-1: SerialNumber: syz [ 308.233849][ T5885] gspca_spca500: reg write: error -71 [ 308.250181][ T5836] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 308.254936][ T5885] gspca_spca500: reg write: error -71 [ 308.300743][ T5885] gspca_spca500: reg write: error -71 [ 308.308060][ T5885] gspca_spca500: reg write: error -71 [ 308.323346][ T5885] gspca_spca500: reg write: error -71 [ 308.336920][ T5885] gspca_spca500: reg write: error -71 [ 308.352301][ T5885] gspca_spca500: reg write: error -71 [ 308.362181][ T5885] gspca_spca500: reg write: error -71 [ 308.379347][ T5885] gspca_spca500: reg write: error -71 [ 308.400406][ T5885] gspca_spca500: reg write: error -71 [ 308.406337][ T5885] gspca_spca500: reg write: error -71 [ 308.422176][ T5836] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 308.438422][ T5885] gspca_spca500: reg write: error -71 [ 308.445232][ T5885] gspca_spca500: reg write: error -71 [ 308.451889][ T5836] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 308.461151][ T5885] gspca_spca500: reg write: error -71 [ 308.477466][ T5836] usb 7-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 308.497019][ T5836] usb 7-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 308.516437][ T5885] usb 4-1: USB disconnect, device number 31 [ 308.533014][ T5836] usb 7-1: config 220 has no interface number 2 [ 308.567255][ T5836] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 308.605626][ T5836] usb 7-1: config 220 interface 0 has no altsetting 0 [ 308.620018][ T5836] usb 7-1: config 220 interface 76 has no altsetting 0 [ 308.631735][ T5836] usb 7-1: config 220 interface 1 has no altsetting 0 [ 308.647712][ T5836] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 308.658058][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.673035][ T5836] usb 7-1: Product: syz [ 308.680690][ T5836] usb 7-1: Manufacturer: syz [ 308.689097][ T5836] usb 7-1: SerialNumber: syz [ 308.935371][ T9] dvb-usb: found a 'Artec T14BR DVB-T' in cold state, will try to load a firmware [ 308.996293][ T5836] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 309.009601][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 309.030089][ T5836] usb 7-1: No valid video chain found. [ 309.035765][ T5836] usb 7-1: selecting invalid altsetting 0 [ 309.044233][ T9] dib0700: firmware download failed at 7 with -22 [ 309.061825][T10833] kernel read not supported for file /eth0 (pid: 10833 comm: syz.0.1816) [ 309.079990][ T9] usb 1-1: USB disconnect, device number 28 [ 309.138245][ T30] audit: type=1800 audit(1743578968.482:99): pid=10833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1816" name="eth0" dev="mqueue" ino=38972 res=0 errno=0 [ 309.142614][ T5836] usb 7-1: selecting invalid altsetting 0 [ 309.158165][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.249955][ T5836] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 309.306053][ T5836] usb 7-1: USB disconnect, device number 9 [ 311.294201][T10891] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=778909908 (6231279264 ns) > initial count (2900669840 ns). Using initial count to start timer. [ 311.400275][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 311.589032][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.600679][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 311.615073][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.624676][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.635262][ T9] usb 1-1: Product: syz [ 311.639481][ T9] usb 1-1: Manufacturer: syz [ 311.644340][ T9] usb 1-1: SerialNumber: syz [ 311.862222][T10888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 312.283255][ T5890] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 312.454346][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.478569][ T5890] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 312.513857][T10888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 312.518321][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.551253][ T5890] usb 4-1: config 0 descriptor?? [ 312.732445][T10918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.738474][ T9] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 312.780821][ T5890] usbhid 4-1:0.0: can't add hid device: -71 [ 312.786928][ T5890] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 312.807967][ T9] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 312.854066][ T5890] usb 4-1: USB disconnect, device number 32 [ 312.943156][ T9] usb 1-1: USB disconnect, device number 29 [ 312.963367][ T9] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 312.998632][ T30] audit: type=1800 audit(1743578972.352:100): pid=10920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1851" name="file1" dev="tmpfs" ino=466 res=0 errno=0 [ 313.310008][ T5890] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 313.480623][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 313.498167][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.548509][ T5890] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 313.614172][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.663782][ T5890] usb 4-1: config 0 descriptor?? [ 313.703625][ T5890] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 313.754618][ T5890] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 313.806102][T10942] kvm: kvm [10941]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x5d2b01eaee00b004 [ 313.908101][ T9] usb 4-1: USB disconnect, device number 33 [ 313.914363][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 313.949332][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 314.108053][T10906] ldusb: No device or device unplugged -19 [ 314.370013][ T5890] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 314.521246][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 314.553564][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 314.588796][ T5890] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 314.599788][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.628645][ T5890] usb 1-1: Product: syz [ 314.641257][ T5890] usb 1-1: Manufacturer: syz [ 314.650117][ T5890] usb 1-1: SerialNumber: syz [ 314.674521][ T5890] usb 1-1: config 0 descriptor?? [ 315.023271][T10981] netlink: 'syz.4.1867': attribute type 2 has an invalid length. [ 315.043738][T10981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1867'. [ 315.113552][ T5890] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 315.949787][ T5890] usb 1-1: USB disconnect, device number 30 [ 317.555900][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 317.770387][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 317.792030][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 317.816065][ T9] usb 3-1: config 0 has no interface number 0 [ 317.834429][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 317.866227][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 317.916611][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 317.928383][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 317.966639][ T9] usb 3-1: Product: syz [ 317.986327][ T9] usb 3-1: SerialNumber: syz [ 318.002521][ T9] usb 3-1: config 0 descriptor?? [ 318.050243][ T9] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 318.071980][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input45 [ 318.212912][T11087] ALSA: mixer_oss: invalid OSS volume ':' [ 318.218727][T11087] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 318.257412][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.262977][T11087] ALSA: mixer_oss: invalid OSS volume '3' [ 318.270638][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.278271][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.285496][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.292741][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.299929][ T9] usb 3-1: USB disconnect, device number 31 [ 318.300010][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.312880][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 318.322998][T11087] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 318.350325][T11087] ALSA: mixer_oss: invalid OSS volume '4' [ 318.352050][ T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 318.369987][T11087] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 318.416851][T11087] ALSA: mixer_oss: invalid OSS volume '5' [ 319.060179][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 319.279965][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 319.292569][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.325698][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.353855][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 319.380240][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.426412][ T9] usb 7-1: config 0 descriptor?? [ 319.442607][ T9] hub 7-1:0.0: USB hub found [ 319.684596][ T9] hub 7-1:0.0: 1 port detected [ 320.281692][ T9] hub 7-1:0.0: activate --> -90 [ 320.460043][ T5890] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 320.637328][ T5890] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 320.650288][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.673570][ T5890] usb 5-1: config 0 descriptor?? [ 320.681995][ T5890] cp210x 5-1:0.0: cp210x converter detected [ 320.686426][ T10] usb 7-1: USB disconnect, device number 10 [ 320.928969][ T9] usb 7-1-port1: config error [ 321.105106][ T5890] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 321.339292][ T5890] usb 5-1: cp210x converter now attached to ttyUSB0 [ 321.525370][ T10] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 321.541274][ T47] usb 5-1: USB disconnect, device number 25 [ 321.567708][ T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 321.572602][ T10] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.600714][ T47] cp210x 5-1:0.0: device disconnected [ 321.779948][ T5885] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 321.967206][ T5885] usb 3-1: config 0 has no interfaces? [ 321.978853][ T5885] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 322.008624][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.021111][ T5885] usb 3-1: Product: syz [ 322.025555][ T5885] usb 3-1: Manufacturer: syz [ 322.031566][ T5885] usb 3-1: SerialNumber: syz [ 322.042667][ T5885] usb 3-1: config 0 descriptor?? [ 322.282050][ T9] usb 3-1: USB disconnect, device number 32 [ 322.415952][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.436447][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.244339][T11198] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 323.901010][T11214] ip6tnl0: entered promiscuous mode [ 323.919532][T11212] ip6tnl0: left promiscuous mode [ 324.670041][ T47] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 324.849682][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.906793][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.935963][ T47] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 324.966382][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.012535][ T47] usb 1-1: config 0 descriptor?? [ 326.020689][ T5885] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 326.244332][ T5885] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 326.268375][ T5885] usb 4-1: config 0 has no interface number 0 [ 326.289112][ T47] uclogic 0003:256C:006D.002E: failed retrieving string descriptor #100: -71 [ 326.294106][ T5885] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 326.319897][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.327983][ T5885] usb 4-1: Product: syz [ 326.329105][ T47] uclogic 0003:256C:006D.002E: failed retrieving pen parameters: -71 [ 326.350467][ T5885] usb 4-1: Manufacturer: syz [ 326.356933][ T5885] usb 4-1: SerialNumber: syz [ 326.373842][ T5885] usb 4-1: config 0 descriptor?? [ 326.391912][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1969'. [ 326.410802][ T47] uclogic 0003:256C:006D.002E: failed probing pen v1 parameters: -71 [ 326.439466][ T47] uclogic 0003:256C:006D.002E: failed probing parameters: -71 [ 326.463675][ T47] uclogic 0003:256C:006D.002E: probe with driver uclogic failed with error -71 [ 326.540764][ T47] usb 1-1: USB disconnect, device number 31 [ 326.597746][T11262] bond4: entered promiscuous mode [ 326.600390][ T5885] usb 4-1: probing VID:PID(2201:012C) [ 326.622076][ T5885] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 326.631029][T11262] 8021q: adding VLAN 0 to HW filter on device bond4 [ 326.664107][ T5885] vub300 4-1:0.239: probe with driver vub300 failed with error -22 [ 326.677874][ T5885] usb 4-1: USB disconnect, device number 34 [ 326.777267][T11263] veth5: entered promiscuous mode [ 326.787289][T11263] bond4: (slave veth5): Enslaving as an active interface with an up link [ 327.291383][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 327.470110][T11291] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1978'. [ 327.497916][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.510134][ T47] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 327.519212][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.550806][ T10] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 327.580419][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.609650][ T10] usb 7-1: config 0 descriptor?? [ 327.682751][ T47] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 327.710673][ T47] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 327.737546][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 327.755643][ T47] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 327.769642][ T47] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 327.795783][ T47] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.825763][ T47] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.840503][ T47] usb 4-1: Product: syz [ 327.844739][ T47] usb 4-1: Manufacturer: syz [ 327.864230][ T47] cdc_wdm 4-1:1.0: skipping garbage [ 327.869508][ T47] cdc_wdm 4-1:1.0: skipping garbage [ 327.871486][T11299] program syz.0.1982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.881023][T11302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1983'. [ 327.893624][ T47] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 327.901473][ T47] cdc_wdm 4-1:1.0: Unknown control protocol [ 328.027902][ T10] hid-steam 0003:28DE:1142.002F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 328.110079][ T10] hid-steam 0003:28DE:1142.002F: Steam wireless receiver connected [ 328.142699][ T10] hid-steam 0003:28DE:1142.0030: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 328.272642][ T10] usb 7-1: USB disconnect, device number 11 [ 328.328903][ T10] hid-steam 0003:28DE:1142.002F: Steam wireless receiver disconnected [ 328.349584][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 328.356693][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 328.363448][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 328.370818][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 328.377497][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 328.383963][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 328.390615][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 328.396984][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 328.403724][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 328.410540][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 328.417198][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 328.423630][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 328.430278][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 328.437128][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 328.443788][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 328.450331][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 328.456967][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 328.463317][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 328.469969][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 328.476312][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 328.483022][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 328.495764][ T5885] usb 4-1: USB disconnect, device number 35 [ 328.502091][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 328.811324][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 328.821283][ T47] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 328.980231][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 329.001962][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 329.020046][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 329.040268][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 329.099980][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.153377][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 329.199952][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.472342][ T47] usb 5-1: GET_CAPABILITIES returned 0 [ 329.477925][ T47] usbtmc 5-1:16.0: can't read capabilities [ 329.673084][T11343] bridge0: port 3(geneve0) entered blocking state [ 329.681566][T11343] bridge0: port 3(geneve0) entered disabled state [ 329.720560][ T47] usb 5-1: USB disconnect, device number 26 [ 329.730728][T11343] geneve0: entered allmulticast mode [ 329.765328][T11343] geneve0: entered promiscuous mode [ 329.804635][T11344] geneve0: left allmulticast mode [ 329.824013][T11344] geneve0: left promiscuous mode [ 329.839748][T11344] bridge0: port 3(geneve0) entered disabled state [ 330.030450][ T5890] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 330.254794][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 330.272218][ T5890] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 330.315720][ T5890] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 330.341296][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 330.358358][ T5890] usb 7-1: Product: syz [ 330.369994][ T5890] usb 7-1: Manufacturer: syz [ 330.374913][ T5890] usb 7-1: SerialNumber: syz [ 330.390610][ T5890] usb 7-1: config 0 descriptor?? [ 330.400954][T11346] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 330.413102][ T5890] hub 7-1:0.0: bad descriptor, ignoring hub [ 330.429561][ T5890] hub 7-1:0.0: probe with driver hub failed with error -5 [ 330.860397][T11372] netlink: 'syz.3.2012': attribute type 11 has an invalid length. [ 330.977989][T11376] vlan0: entered allmulticast mode [ 330.993526][T11376] hsr0: entered allmulticast mode [ 331.012399][T11376] hsr_slave_0: entered allmulticast mode [ 331.031881][T11376] hsr_slave_1: entered allmulticast mode [ 331.183382][T11376] vlan0: entered allmulticast mode [ 331.957973][ T5890] usb 7-1: USB disconnect, device number 12 [ 332.082194][T11409] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 332.089086][T11409] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 332.104536][T11409] vhci_hcd vhci_hcd.0: Device attached [ 332.291349][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 332.300789][ T10] vhci_hcd: vhci_device speed not set [ 332.352748][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 332.364707][T11415] bridge_slave_1: left allmulticast mode [ 332.371508][ T10] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 332.387004][T11415] bridge_slave_1: left promiscuous mode [ 332.396720][T11415] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.425281][T11415] bridge_slave_0: left allmulticast mode [ 332.440244][T11415] bridge_slave_0: left promiscuous mode [ 332.454281][T11415] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.572256][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.588507][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.617948][ T24] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 332.674937][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.691874][ T24] usb 4-1: config 0 descriptor?? [ 332.907362][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 332.914240][T11410] usb 39-1: recv xbuf, 0 [ 332.921908][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 332.960335][ T6782] vhci_hcd: stop threads [ 332.988433][ T6782] vhci_hcd: release socket [ 333.002489][ T24] usb 4-1: USB disconnect, device number 36 [ 333.024676][ T10] vhci_hcd: vhci_device speed not set [ 333.057834][ T6782] vhci_hcd: disconnect device [ 333.130315][ T10] usb 39-1: device descriptor read/64, error -71 [ 333.261089][T11444] loop2: detected capacity change from 0 to 7 [ 333.281486][T11444] loop2: [POWERTEC] p1 p2 p3 [ 333.288794][T11444] loop2: p1 size 100663296 extends beyond EOD, truncated [ 333.306898][T11444] loop2: p2 size 43520 extends beyond EOD, truncated [ 333.319500][T11444] loop2: p3 start 1635021614 is beyond EOD, truncated [ 333.330278][ T10] vhci_hcd: vhci_device speed not set [ 333.330623][ T5890] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 333.407939][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 333.425213][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 333.521357][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 333.531849][ T5890] usb 7-1: config 0 has an invalid interface number: 40 but max is 0 [ 333.567003][ T5890] usb 7-1: config 0 has no interface number 0 [ 333.594048][ T5890] usb 7-1: config 0 interface 40 has no altsetting 0 [ 333.627314][ T5890] usb 7-1: New USB device found, idVendor=07a6, idProduct=8511, bcdDevice=9f.28 [ 333.659695][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.687717][ T5890] usb 7-1: Product: syz [ 333.700020][ T5890] usb 7-1: Manufacturer: syz [ 333.706168][ T5890] usb 7-1: SerialNumber: syz [ 333.743714][ T5890] usb 7-1: config 0 descriptor?? [ 333.910666][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2046'. [ 334.004621][ T30] audit: type=1326 audit(1743578993.342:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.0.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7fc00000 [ 334.059220][ T30] audit: type=1326 audit(1743578993.342:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.0.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9ef98d169 code=0x7fc00000 [ 334.151763][ T30] audit: type=1326 audit(1743578993.342:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.0.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7fc00000 [ 334.174169][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.247355][ T30] audit: type=1326 audit(1743578993.342:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.0.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7fc00000 [ 334.276998][ T30] audit: type=1326 audit(1743578993.342:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.0.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7fc00000 [ 334.318098][ T30] audit: type=1326 audit(1743578993.342:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.0.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7fc00000 [ 334.351670][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 334.369949][ T5887] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 334.387448][T11470] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.396348][T11470] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.405224][T11470] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.414339][T11470] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.427879][ T30] audit: type=1326 audit(1743578993.342:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.0.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7fc00000 [ 334.455488][ T30] audit: type=1326 audit(1743578993.342:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.0.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7fc00000 [ 334.478414][T11470] vxlan0: entered promiscuous mode [ 334.486909][ T30] audit: type=1326 audit(1743578993.342:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.0.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7fc00000 [ 334.539961][ T30] audit: type=1326 audit(1743578993.342:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.0.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7fc00000 [ 334.609909][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 334.617466][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.629130][ T5887] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 334.648960][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.671950][ T5887] usb 5-1: config 0 descriptor?? [ 334.888193][ T5887] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 335.036889][ T5890] pegasus 7-1:0.40: can't reset MAC [ 335.042848][ T5890] pegasus 7-1:0.40: probe with driver pegasus failed with error -5 [ 335.064042][ T5890] usb 7-1: USB disconnect, device number 13 [ 335.220220][ T5836] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 335.322944][ T5890] usb 5-1: USB disconnect, device number 27 [ 335.384355][ T5836] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.406043][ T5836] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.429983][ T5836] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.446775][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.500483][T11479] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 335.514500][ T5836] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.914785][ T5836] usb 4-1: USB disconnect, device number 37 [ 336.130283][ T5890] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 336.291956][T11496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.340254][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 336.356367][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.410015][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.420776][ T5890] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 336.440193][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.507173][ T5890] usb 7-1: config 0 descriptor?? [ 336.531873][ T5890] hub 7-1:0.0: USB hub found [ 336.542956][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 336.722156][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 336.745287][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.762976][ T5890] hub 7-1:0.0: config failed, hub has too many ports! (err -19) [ 336.786905][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.827603][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.853121][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.883541][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.904990][T11513] input: syz0 as /devices/virtual/input/input46 [ 336.916661][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.975026][ T5890] usbhid 7-1:0.0: can't add hid device: -71 [ 336.996540][ T5890] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 337.051857][ T5890] usb 7-1: USB disconnect, device number 14 [ 337.148072][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 337.154117][ T10] usbtmc 3-1:16.0: can't read capabilities [ 337.249121][T11518] xt_CT: No such helper "snmp_trap" [ 337.367677][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 337.388560][ T10] usb 3-1: USB disconnect, device number 33 [ 337.526792][T11523] vlan0: entered allmulticast mode [ 337.552688][T11523] hsr0: entered allmulticast mode [ 337.565723][T11523] hsr_slave_0: entered allmulticast mode [ 337.574923][T11523] hsr_slave_1: entered allmulticast mode [ 337.711730][T11523] vlan0: entered allmulticast mode [ 338.670740][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 338.787543][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2089'. [ 338.896357][T11561] bridge_slave_1: left allmulticast mode [ 338.898863][T11565] IPVS: set_ctl: invalid protocol: 112 0.0.0.0:768 [ 338.910272][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 338.912409][T11561] bridge_slave_1: left promiscuous mode [ 338.917532][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 338.935302][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 338.939428][T11561] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.950211][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.971081][ T24] usb 1-1: Product: syz [ 338.975406][ T24] usb 1-1: Manufacturer: syz [ 338.988066][ T24] usb 1-1: SerialNumber: syz [ 338.997503][T11561] bridge_slave_0: left allmulticast mode [ 339.014798][T11561] bridge_slave_0: left promiscuous mode [ 339.021750][T11561] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.029042][ T24] usb 1-1: config 0 descriptor?? [ 339.111957][ T5885] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 339.269911][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 339.283487][ T5885] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 339.292713][ T5885] usb 4-1: config 0 has no interface number 0 [ 339.306592][ T5885] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 339.316195][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.324873][ T5885] usb 4-1: Product: syz [ 339.329499][ T5885] usb 4-1: Manufacturer: syz [ 339.334797][ T5885] usb 4-1: SerialNumber: syz [ 339.361747][ T5885] usb 4-1: config 0 descriptor?? [ 339.372755][ T5885] smsc95xx v2.0.0 [ 339.457145][ T24] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 339.860264][ T24] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 340.126638][ T5887] usb 1-1: USB disconnect, device number 32 [ 340.621535][ T5885] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 340.656248][ T5885] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 340.667149][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 340.688511][ T5885] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 340.704430][ T5885] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 340.725039][ T5885] usb 4-1: USB disconnect, device number 38 [ 340.850134][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 340.927560][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 340.960143][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.968393][ T9] usb 5-1: Product: syz [ 340.988261][ T9] usb 5-1: Manufacturer: syz [ 341.000276][ T9] usb 5-1: SerialNumber: syz [ 341.005993][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2104'. [ 341.016030][ T9] usb 5-1: config 0 descriptor?? [ 341.270007][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 341.705301][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 341.705322][ T30] audit: type=1326 audit(1743579001.062:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7ffc0000 [ 341.923335][ T30] audit: type=1326 audit(1743579001.062:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7ffc0000 [ 341.965931][ T30] audit: type=1326 audit(1743579001.072:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fd9ef98d169 code=0x7ffc0000 [ 341.988663][ T30] audit: type=1326 audit(1743579001.072:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7ffc0000 [ 342.012488][ T30] audit: type=1326 audit(1743579001.072:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7ffc0000 [ 342.070513][ T30] audit: type=1326 audit(1743579001.072:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9ef98d169 code=0x7ffc0000 [ 342.099043][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 342.124550][ T9] usb 5-1: USB disconnect, device number 28 [ 342.139106][ T30] audit: type=1326 audit(1743579001.072:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7ffc0000 [ 342.170429][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 342.269917][ T30] audit: type=1326 audit(1743579001.072:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7ffc0000 [ 342.339357][ T30] audit: type=1326 audit(1743579001.092:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9ef98d169 code=0x7ffc0000 [ 342.369954][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 342.388371][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 342.423895][ T30] audit: type=1326 audit(1743579001.092:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef98d169 code=0x7ffc0000 [ 342.446570][ T24] usb 4-1: config 0 has no interface number 0 [ 342.446651][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 342.464534][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 342.481443][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.522083][ T24] usb 4-1: Product: syz [ 342.547349][ T24] usb 4-1: Manufacturer: syz [ 342.579237][ T24] usb 4-1: SerialNumber: syz [ 342.608830][ T24] usb 4-1: config 0 descriptor?? [ 342.648973][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 342.678376][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 343.046993][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 343.134203][ T5890] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 343.312278][ T5890] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 343.336160][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.397744][ T5890] usb 7-1: config 0 descriptor?? [ 343.438278][ T5890] cp210x 7-1:0.0: cp210x converter detected [ 343.670626][ T24] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 343.696446][ T24] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 343.720546][ T24] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 343.809970][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 343.817905][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 343.840536][ T47] em28xx 4-1:0.132: Registering V4L2 extension [ 343.873773][ T5890] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 343.889234][ T24] usb 4-1: USB disconnect, device number 39 [ 343.921969][ T24] em28xx 4-1:0.132: Disconnecting em28xx [ 343.940408][ T5890] usb 7-1: cp210x converter now attached to ttyUSB0 [ 344.138563][ T47] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 344.162473][ T47] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 344.172644][ T47] em28xx 4-1:0.132: No AC97 audio processor [ 344.181384][ T5890] usb 7-1: USB disconnect, device number 15 [ 344.196158][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 344.207131][ T47] usb 4-1: Decoder not found [ 344.212072][ T47] em28xx 4-1:0.132: failed to create media graph [ 344.219476][ T47] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 344.223112][T11691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2132'. [ 344.245919][ T5890] cp210x 7-1:0.0: device disconnected [ 344.275533][ T47] em28xx 4-1:0.132: Remote control support is not available for this card. [ 344.296740][ T24] em28xx 4-1:0.132: Closing input extension [ 344.357768][ T24] em28xx 4-1:0.132: Freeing device [ 345.129992][ T5890] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 345.319116][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 345.360960][ T5890] usb 3-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 345.380133][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.414490][ T5890] usb 3-1: Product: syz [ 345.418733][ T5890] usb 3-1: Manufacturer: syz [ 345.447998][ T5890] usb 3-1: SerialNumber: syz [ 345.481113][ T5890] usb 3-1: config 0 descriptor?? [ 345.495625][T11734] sctp: [Deprecated]: syz.0.2151 (pid 11734) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.495625][T11734] Use struct sctp_sack_info instead [ 345.499008][ T5890] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 345.580140][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 345.761366][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 345.781563][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.789046][T11744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.809182][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.837734][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 345.873028][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 345.893419][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 345.913935][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.943857][ T9] usb 4-1: config 0 descriptor?? [ 346.419986][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 346.427390][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5010.0031/input/input47 [ 346.523627][ T5890] gspca_sunplus: reg_w_riv err -71 [ 346.528968][ T5890] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 346.552369][ T5890] usb 3-1: USB disconnect, device number 34 [ 346.577356][ T9] kye 0003:0458:5010.0031: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 346.590029][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 346.595733][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 346.641245][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 346.690017][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 346.699181][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.785737][ T24] usb 5-1: config 0 descriptor?? [ 347.252176][ T24] kovaplus 0003:1E7D:2D50.0032: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 347.560231][ C1] kye 0003:0458:5010.0031: usb_submit_urb(ctrl) failed: -1 [ 348.077655][ T24] kovaplus 0003:1E7D:2D50.0032: couldn't init struct kovaplus_device [ 348.120487][ T24] kovaplus 0003:1E7D:2D50.0032: couldn't install mouse [ 348.145910][ T24] kovaplus 0003:1E7D:2D50.0032: probe with driver kovaplus failed with error -71 [ 348.179194][ T24] usb 5-1: USB disconnect, device number 29 [ 348.331667][ T5890] usb 4-1: USB disconnect, device number 40 [ 351.147977][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2209'. [ 351.885771][T11901] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 351.887040][T11898] input: syz0 as /devices/virtual/input/input48 [ 351.897711][T11901] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 351.897740][T11901] CPU: 0 UID: 0 PID: 11901 Comm: syz.0.2214 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) [ 351.897766][T11901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 351.897781][T11901] RIP: 0010:__se_sys_mremap+0x25fa/0x2c00 [ 351.897816][T11901] Code: c0 0f 85 0e 05 00 00 0f b6 9c 24 20 03 00 00 31 ff 89 de e8 d8 0d ab ff 85 db 0f 84 7b 01 00 00 e8 cb 0a ab ff e9 9e 00 00 00 <80> 78 04 00 74 0a bf 20 00 00 00 e8 26 2f 15 00 4c 8b 34 25 20 00 [ 351.897834][T11901] RSP: 0018:ffffc90017ff7b40 EFLAGS: 00010246 [ 351.897855][T11901] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff92002ffefca [ 351.897871][T11901] RDX: ffffc9000c139000 RSI: 00000000000000b9 RDI: 00000000000000ba [ 351.897886][T11901] RBP: ffffc90017ff7f00 R08: ffffffff821d1f24 R09: ffffffff8c271397 [ 351.989695][T11901] R10: 0000000000000004 R11: ffff88801ebf5a00 R12: 0000200000000000 [ 351.997790][T11901] R13: ffff888033ed7780 R14: 00000000180000fa R15: ffffc90017ff7cd0 [ 352.005803][T11901] FS: 00007fd9f087b6c0(0000) GS:ffff888124f99000(0000) knlGS:0000000000000000 [ 352.014767][T11901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.021903][T11901] CR2: 000000110c2826b5 CR3: 000000005421c000 CR4: 00000000003526f0 [ 352.029909][T11901] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000f0000 [ 352.037919][T11901] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 352.045950][T11901] Call Trace: [ 352.049288][T11901] [ 352.052274][T11901] ? __pfx___se_sys_mremap+0x10/0x10 [ 352.057637][T11901] ? do_futex+0x3d5/0x5a0 [ 352.062113][T11901] ? __pfx_do_futex+0x10/0x10 [ 352.066860][T11901] ? __x64_sys_mremap+0x20/0xc0 [ 352.071765][T11901] do_syscall_64+0xf3/0x230 [ 352.076318][T11901] ? clear_bhb_loop+0x45/0xa0 [ 352.081039][T11901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.086986][T11901] RIP: 0033:0x7fd9ef98d169 [ 352.091585][T11901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.111345][T11901] RSP: 002b:00007fd9f087b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 352.119811][T11901] RAX: ffffffffffffffda RBX: 00007fd9efba5fa0 RCX: 00007fd9ef98d169 [ 352.127836][T11901] RDX: 0000000000004000 RSI: 0000000000001000 RDI: 0000200000000000 [ 352.135960][T11901] RBP: 00007fd9efa0e2a0 R08: 0000200000001000 R09: 0000000000000000 [ 352.143987][T11901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.152003][T11901] R13: 0000000000000000 R14: 00007fd9efba5fa0 R15: 00007fd9efccfa28 [ 352.160071][T11901] [ 352.163159][T11901] Modules linked in: [ 352.168352][T11901] ---[ end trace 0000000000000000 ]--- [ 352.195671][T11901] RIP: 0010:__se_sys_mremap+0x25fa/0x2c00 [ 352.203349][T11901] Code: c0 0f 85 0e 05 00 00 0f b6 9c 24 20 03 00 00 31 ff 89 de e8 d8 0d ab ff 85 db 0f 84 7b 01 00 00 e8 cb 0a ab ff e9 9e 00 00 00 <80> 78 04 00 74 0a bf 20 00 00 00 e8 26 2f 15 00 4c 8b 34 25 20 00 [ 352.264650][T11901] RSP: 0018:ffffc90017ff7b40 EFLAGS: 00010246 [ 352.272733][T11901] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff92002ffefca [ 352.281734][T11901] RDX: ffffc9000c139000 RSI: 00000000000000b9 RDI: 00000000000000ba [ 352.290249][T11901] RBP: ffffc90017ff7f00 R08: ffffffff821d1f24 R09: ffffffff8c271397 [ 352.299164][T11901] R10: 0000000000000004 R11: ffff88801ebf5a00 R12: 0000200000000000 [ 352.347385][T11901] R13: ffff888033ed7780 R14: 00000000180000fa R15: ffffc90017ff7cd0 [ 352.358934][T11901] FS: 00007fd9f087b6c0(0000) GS:ffff888125099000(0000) knlGS:0000000000000000 [ 352.368773][T11901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.375836][T11901] CR2: 0000001b30d19ff8 CR3: 000000005421c000 CR4: 00000000003526f0 [ 352.387386][T11901] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.395962][T11901] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.404731][T11901] Kernel panic - not syncing: Fatal exception [ 352.411198][T11901] Kernel Offset: disabled [ 352.415552][T11901] Rebooting in 86400 seconds..