last executing test programs: 2.879340832s ago: executing program 0 (id=4700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, 0x0) 2.713400661s ago: executing program 0 (id=4703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003540)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) 2.551433491s ago: executing program 0 (id=4708): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x247, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.41988095s ago: executing program 1 (id=4729): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x44, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}]}]}, 0x44}}, 0x0) 1.31012772s ago: executing program 3 (id=4731): syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x44, r1, 0x1, 0x0, 0x0, {0x37}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffc}]}, 0x44}}, 0x0) 1.231967512s ago: executing program 2 (id=4732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.231834123s ago: executing program 1 (id=4733): unshare(0x20000400) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000002c0)={0x70000000}) 1.182550579s ago: executing program 1 (id=4734): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300}) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 1.174284522s ago: executing program 3 (id=4735): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/1141], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000de00000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 1.127829528s ago: executing program 2 (id=4737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='xprt_reserve\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 1.068246564s ago: executing program 3 (id=4738): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x30) 1.005149911s ago: executing program 4 (id=4739): prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r0 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1fc}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001400)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd, 0x0, 0x0, 0x0, {0xc020}}) io_uring_enter(r0, 0xa3b, 0x400, 0x0, 0x0, 0x0) 913.382875ms ago: executing program 1 (id=4740): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7b4e47580a262622, 0x4008032, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) 863.911113ms ago: executing program 4 (id=4741): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="64e8f140046f", 0x6}, {&(0x7f00000000c0)='&\v', 0x2}], 0x2}}], 0x1, 0x4) 795.75393ms ago: executing program 4 (id=4742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0xa4bc, 0x9}}]}) 757.302114ms ago: executing program 2 (id=4743): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}, 0xc) 756.799555ms ago: executing program 3 (id=4744): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$kcm(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000020c0)={'syztnl1\x00', r2, 0x0, 0x7, 0x0, 0x1000, 0x5b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x51, 0x700, 0x7, 0x3c9}}) 618.779636ms ago: executing program 0 (id=4745): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x27, 0x0, 0x16, 0x0, 0x8000}}) ioctl$RTC_AIE_OFF(r0, 0x7002) 581.570937ms ago: executing program 2 (id=4746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000108500000082000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000580)='mm_page_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x12, 0xff, 0x4, 0xfff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 580.766528ms ago: executing program 3 (id=4747): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4048aecb, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 483.160807ms ago: executing program 0 (id=4748): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="51c70100000000001c0012800b0001006d616373656300000c00028005000d000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 472.992622ms ago: executing program 4 (id=4749): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='sysv\x00', 0x1005b, 0x0) 359.934379ms ago: executing program 3 (id=4750): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 329.333858ms ago: executing program 2 (id=4751): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000440)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 286.871346ms ago: executing program 1 (id=4752): r0 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x34ee, &(0x7f0000000300), &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x1280c0}) io_uring_enter(r0, 0x2003, 0x0, 0x0, 0x0, 0x0) 234.320318ms ago: executing program 4 (id=4753): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x10, 0x3}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x0) 118.555498ms ago: executing program 1 (id=4754): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f00000002c0)) 97.764944ms ago: executing program 2 (id=4755): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000001b40)={&(0x7f0000001800)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) 41.708228ms ago: executing program 4 (id=4756): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setresuid(0xee01, 0xee00, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) 0s ago: executing program 0 (id=4757): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES8=r0, @ANYRES16=r1], 0x0) kernel console output (not intermixed with test programs): T25] usb 3-1: config 0 descriptor?? [ 263.651644][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.668647][ T47] usb 5-1: config 0 has no interface number 0 [ 263.675380][ T47] usb 5-1: config 0 interface 224 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 263.687471][ T47] usb 5-1: config 0 interface 224 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 263.699261][ T47] usb 5-1: config 0 interface 224 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.712865][ T47] usb 5-1: config 0 interface 224 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.731563][ T47] usb 5-1: config 0 interface 224 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 263.741647][ T47] usb 5-1: config 0 interface 224 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 263.756543][T11402] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2675'. [ 263.757725][ T47] usb 5-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=69.e2 [ 263.769715][T11402] netlink: 'syz.3.2675': attribute type 6 has an invalid length. [ 263.787114][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.801501][ T47] usb 5-1: Product: syz [ 263.806244][ T47] usb 5-1: Manufacturer: syz [ 263.810972][ T47] usb 5-1: SerialNumber: syz [ 263.822306][ T47] usb 5-1: config 0 descriptor?? [ 263.832185][ T47] keyspan 5-1:0.224: Keyspan 4 port adapter converter detected [ 263.842876][ T47] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 87 [ 263.851144][ T47] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 7 [ 263.860750][ T47] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 81 [ 263.889727][ T47] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 263.899921][ T47] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 82 [ 263.908220][ T47] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 2 [ 263.922708][ T47] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 263.932990][ T47] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 83 [ 263.941633][ T47] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 3 [ 263.951425][ T47] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 263.975435][ T47] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 84 [ 263.983455][ T47] keyspan 5-1:0.224: found no endpoint descriptor for endpoint 4 [ 263.996761][ T47] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 264.152781][ T25] logitech 0003:046D:C294.0066: unknown main item tag 0x0 [ 264.204287][ T25] logitech 0003:046D:C294.0066: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.2-1/input0 [ 264.269750][ T25] logitech 0003:046D:C294.0066: no inputs found [ 264.302475][ T5345] usb 5-1: USB disconnect, device number 35 [ 264.328300][ T25] usb 3-1: USB disconnect, device number 28 [ 264.346827][ T5345] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 264.397275][ T5345] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 264.450265][ T5345] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 264.491838][ T5345] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 264.503074][ T5345] keyspan 5-1:0.224: device disconnected [ 264.772817][T11429] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2688'. [ 264.790754][T11429] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2688'. [ 265.127804][T11446] netlink: 'syz.4.2695': attribute type 10 has an invalid length. [ 265.648641][T11466] NILFS (loop0): device size too small [ 265.821139][T11474] netlink: 'syz.4.2710': attribute type 3 has an invalid length. [ 265.983951][ T5313] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 266.114872][T11488] delete_channel: no stack [ 266.196034][ T5313] usb 3-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 266.220560][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.244827][ T5313] usb 3-1: config 0 descriptor?? [ 266.430214][ T29] audit: type=1326 audit(1726544450.094:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.0.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 266.494143][ T29] audit: type=1326 audit(1726544450.094:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.0.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 266.532251][ T29] audit: type=1326 audit(1726544450.094:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.0.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 266.623815][ T29] audit: type=1326 audit(1726544450.094:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.0.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 266.754348][ T5313] aquacomputer_d5next 0003:0C70:F010.0067: hidraw0: USB HID vff.fd Device [HID 0c70:f010] on usb-dummy_hcd.2-1/input0 [ 267.036852][ T25] usb 3-1: USB disconnect, device number 29 [ 267.249762][T11533] usb usb8: usbfs: process 11533 (syz.4.2739) did not claim interface 0 before use [ 268.363812][ T5313] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 268.496500][T11585] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2763'. [ 268.509625][T11585] net_ratelimit: 223 callbacks suppressed [ 268.509643][T11585] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 268.565019][ T5313] usb 3-1: Using ep0 maxpacket: 8 [ 268.583076][ T5313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.613848][ T5313] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.651692][ T5313] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 268.661463][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.688830][ T5313] usb 3-1: config 0 descriptor?? [ 268.694313][ T25] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 268.883694][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 268.901223][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.928906][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.942356][ T25] usb 5-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 268.957856][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.988351][ T25] usb 5-1: config 0 descriptor?? [ 269.132888][ T5313] nti 0003:0757:0A00.0068: item fetching failed at offset 6/70 [ 269.164108][ T5313] nti 0003:0757:0A00.0068: probe with driver nti failed with error -22 [ 269.407508][ T944] usb 3-1: USB disconnect, device number 30 [ 269.474345][ T25] nzxt-smart2 0003:1E71:200F.0069: unknown main item tag 0xe [ 269.507575][ T25] nzxt-smart2 0003:1E71:200F.0069: hidraw0: USB HID v0.00 Device [HID 1e71:200f] on usb-dummy_hcd.4-1/input0 [ 269.782627][ T944] usb 5-1: USB disconnect, device number 36 [ 270.281934][T11641] netlink: 'syz.1.2791': attribute type 1 has an invalid length. [ 270.324430][T11641] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2791'. [ 270.744720][ T5345] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 270.967808][ T5345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.994302][ T5345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.005197][ T5345] usb 2-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 271.016283][ T5345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.035718][ T5345] usb 2-1: config 0 descriptor?? [ 271.173668][ T5313] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 271.363856][ T5313] usb 1-1: Using ep0 maxpacket: 32 [ 271.386253][ T5313] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 271.409938][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.432643][ T5313] usb 1-1: Product: syz [ 271.441997][ T5313] usb 1-1: Manufacturer: syz [ 271.450731][ T5313] usb 1-1: SerialNumber: syz [ 271.461591][ T5313] usb 1-1: config 0 descriptor?? [ 271.475953][ T5345] wacom 0003:056A:0303.006A: Unknown device_type for 'HID 056a:0303'. Assuming pen. [ 271.544101][ T5345] wacom 0003:056A:0303.006A: hidraw0: USB HID v0.00 Device [HID 056a:0303] on usb-dummy_hcd.1-1/input0 [ 271.577878][ T5345] input: Wacom Intuos PT M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0303.006A/input/input63 [ 271.779224][ T5345] usb 2-1: USB disconnect, device number 31 [ 271.790461][ T5313] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 271.819041][ T5313] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 271.934491][ T5313] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 271.986082][ T5313] usb 1-1: USB disconnect, device number 35 [ 272.363318][T11721] trusted_key: encrypted_key: key user:syz not found [ 272.414383][ T5267] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 272.633956][ T5267] usb 3-1: Using ep0 maxpacket: 16 [ 272.646876][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.681571][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.732713][ T5267] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 272.763686][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.801493][ T5267] usb 3-1: config 0 descriptor?? [ 273.141597][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'. [ 273.241514][ T5267] hid (null): bogus close delimiter [ 273.257528][ T5267] nzxt-kraken2 0003:1E71:170E.006B: bogus close delimiter [ 273.283606][ T5267] nzxt-kraken2 0003:1E71:170E.006B: item 0 0 2 10 parsing failed [ 273.310494][ T5267] nzxt-kraken2 0003:1E71:170E.006B: hid parse failed with -22 [ 273.331215][T11759] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2850'. [ 273.342166][ T5267] nzxt-kraken2 0003:1E71:170E.006B: probe with driver nzxt-kraken2 failed with error -22 [ 273.354104][T11759] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 273.527797][ T941] usb 3-1: USB disconnect, device number 31 [ 273.599702][T11765] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 274.453739][ T941] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 274.516474][T11810] mkiss: ax0: crc mode is auto. [ 274.663746][ T941] usb 1-1: Using ep0 maxpacket: 32 [ 274.686572][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.735617][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.772319][ T941] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 274.782466][T11820] bridge0: entered promiscuous mode [ 274.793818][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.803008][T11820] macsec1: entered promiscuous mode [ 274.812326][ T941] usb 1-1: config 0 descriptor?? [ 274.846432][T11820] bridge0: left promiscuous mode [ 275.310789][T11837] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.2886'. [ 275.333338][T11837] netlink: 'syz.2.2886': attribute type 1 has an invalid length. [ 275.364941][T11837] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2886'. [ 275.448307][ T941] ft260 0003:0403:6030.006C: failed to retrieve chip version [ 275.476130][ T941] ft260 0003:0403:6030.006C: probe with driver ft260 failed with error -71 [ 275.499104][ T941] usb 1-1: USB disconnect, device number 36 [ 275.501303][T11841] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 275.610947][T11841] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 276.022983][T11856] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 276.234465][ T5229] Bluetooth: hci2: command 0x040f tx timeout [ 277.117322][T11899] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 0, id = 0 [ 277.893811][ T47] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 278.083813][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.120887][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.158604][ T47] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 278.173127][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.191266][ T47] usb 5-1: config 0 descriptor?? [ 278.468088][T11956] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 278.475055][T11956] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 278.491123][T11956] vhci_hcd vhci_hcd.0: Device attached [ 278.513349][T11957] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 278.531903][ T65] vhci_hcd: stop threads [ 278.548127][ T65] vhci_hcd: release socket [ 278.554529][ T5267] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 278.572732][ T65] vhci_hcd: disconnect device [ 278.642545][ T47] hid-multitouch 0003:0EEF:72D0.006D: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.4-1/input0 [ 278.684482][ T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 278.769010][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.783952][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.795640][ T5267] usb 2-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 278.804880][ T5267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.830990][ T5267] usb 2-1: config 0 descriptor?? [ 278.863653][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 278.888416][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.901955][ T5254] usb 5-1: USB disconnect, device number 37 [ 278.919550][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.935334][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 278.944778][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.958205][ T25] usb 3-1: config 0 descriptor?? [ 279.250148][ T47] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 279.307455][ T5267] wacom 0003:056A:030A.006E: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.1-1/input0 [ 279.406244][ T25] savu 0003:1E7D:2D5A.006F: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 279.445687][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.460183][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.475591][ T47] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 279.513821][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.559307][ T47] usb 1-1: config 0 descriptor?? [ 279.572473][ T25] usb 2-1: USB disconnect, device number 32 [ 279.660207][ T5254] usb 3-1: USB disconnect, device number 32 [ 279.800624][T11987] program syz.3.2957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.862439][T11989] PKCS7: Unknown OID: [5] 0.0 [ 279.870896][T11989] PKCS7: Only support pkcs7_signedData type [ 280.016766][ T47] belkin 0003:1020:0006.0070: item fetching failed at offset 2/5 [ 280.031410][ T47] belkin 0003:1020:0006.0070: parse failed [ 280.038227][ T47] belkin 0003:1020:0006.0070: probe with driver belkin failed with error -22 [ 280.260919][ T941] usb 1-1: USB disconnect, device number 37 [ 280.944336][ T941] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 281.094943][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'. [ 281.143841][ T941] usb 4-1: Using ep0 maxpacket: 16 [ 281.181106][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.213661][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.239305][T12034] bridge_slave_0: left allmulticast mode [ 281.249418][ T941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 281.268083][T12034] bridge_slave_0: left promiscuous mode [ 281.273812][ T941] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 281.284700][T12034] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.302061][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.333794][ T941] usb 4-1: config 0 descriptor?? [ 281.743794][ T47] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 281.778689][ T941] HID 045e:07da: Invalid code 65791 type 1 [ 281.797820][ T941] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0071/input/input69 [ 281.853411][ T941] microsoft 0003:045E:07DA.0071: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 281.945717][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.962378][T12061] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2991'. [ 281.973744][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.991172][T12061] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.2991'. [ 282.003839][ T47] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 282.030371][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.067638][ T47] usb 1-1: config 0 descriptor?? [ 282.092934][ T5313] usb 4-1: USB disconnect, device number 26 [ 282.509456][ T47] hid-thrustmaster 0003:044F:B65D.0072: unbalanced collection at end of report description [ 282.555773][ T47] hid-thrustmaster 0003:044F:B65D.0072: parse failed with error -22 [ 282.582000][ T47] hid-thrustmaster 0003:044F:B65D.0072: probe with driver hid-thrustmaster failed with error -22 [ 282.753103][ T47] usb 1-1: USB disconnect, device number 38 [ 282.853201][T12083] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3002'. [ 282.936181][T12086] netlink: 'syz.3.3003': attribute type 2 has an invalid length. [ 282.945187][T12086] netlink: 16142 bytes leftover after parsing attributes in process `syz.3.3003'. [ 283.073687][ T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 283.274645][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 283.282383][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.308304][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.336663][ T25] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 283.357096][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.367849][ T25] usb 2-1: Product: syz [ 283.377414][ T25] usb 2-1: Manufacturer: syz [ 283.382779][ T25] usb 2-1: SerialNumber: syz [ 284.018471][ T25] usbhid 2-1:1.0: can't add hid device: -71 [ 284.030455][T12118] IPv6: NLM_F_REPLACE set, but no existing node found! [ 284.040879][ T25] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 284.092933][ T25] usb 2-1: USB disconnect, device number 33 [ 284.554026][T12139] netlink: 'syz.2.3027': attribute type 1 has an invalid length. [ 284.579522][T12139] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.3027'. [ 284.623904][T12139] netlink: 'syz.2.3027': attribute type 1 has an invalid length. [ 284.658502][T12139] netlink: 'syz.2.3027': attribute type 2 has an invalid length. [ 284.664414][T12143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3029'. [ 284.784026][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3030'. [ 284.882838][T12151] input: syz0 as /devices/virtual/input/input70 [ 285.484177][ T941] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 285.661939][T12181] program syz.4.3045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.683633][ T941] usb 3-1: Using ep0 maxpacket: 16 [ 285.705310][ T941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.776799][ T941] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 285.802504][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.821325][ T941] usb 3-1: Product: syz [ 285.843851][ T941] usb 3-1: Manufacturer: syz [ 285.848508][ T941] usb 3-1: SerialNumber: syz [ 285.858629][ T941] usb 3-1: config 0 descriptor?? [ 285.871969][ T941] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 286.737343][ T941] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 286.761235][ T941] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 286.786996][ T941] usb 3-1: USB disconnect, device number 33 [ 287.103672][ T5313] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 287.294064][ T5313] usb 5-1: Using ep0 maxpacket: 8 [ 287.314688][ T5313] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 287.333476][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.348798][ T5313] usb 5-1: Product: syz [ 287.353100][ T5313] usb 5-1: Manufacturer: syz [ 287.358429][ T5313] usb 5-1: SerialNumber: syz [ 287.372439][ T5313] usb 5-1: config 0 descriptor?? [ 287.392456][ T5313] option 5-1:0.0: GSM modem (1-port) converter detected [ 287.646644][ T5313] usb 5-1: USB disconnect, device number 38 [ 287.661556][ T5313] option 5-1:0.0: device disconnected [ 288.141320][T12273] netlink: 'syz.2.3088': attribute type 14 has an invalid length. [ 288.886310][T12306] netlink: 'syz.2.3104': attribute type 1 has an invalid length. [ 288.903768][T12306] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.3104'. [ 288.913468][T12306] netlink: 'syz.2.3104': attribute type 1 has an invalid length. [ 288.921434][T12306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3104'. [ 289.236409][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3109'. [ 289.674175][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 289.882672][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 289.912903][ T25] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 289.933796][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.941852][ T25] usb 2-1: Product: syz [ 289.964320][ T25] usb 2-1: Manufacturer: syz [ 289.974885][ T25] usb 2-1: SerialNumber: syz [ 289.990793][ T25] usb 2-1: config 0 descriptor?? [ 290.007115][ T25] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 290.043737][ T47] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 290.155819][ T5313] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 290.241738][ T5267] usb 2-1: USB disconnect, device number 34 [ 290.241888][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 290.273924][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 290.293089][ T47] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 290.321955][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB [ 290.352211][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 290.362456][ T47] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 290.381392][ T47] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 290.383715][ T5313] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 290.410696][ T47] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 290.420818][ T47] usb 5-1: Product: syz [ 290.440749][ T47] usb 5-1: Manufacturer: syz [ 290.447309][ T5313] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 290.452244][ T47] usb 5-1: SerialNumber: syz [ 290.468980][ T5313] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.487397][ T47] usb 5-1: config 0 descriptor?? [ 290.493639][ T5313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.504725][ T47] usb 5-1: NFC: intf ffff888021e8c000 id ffffffff8f0f7460 [ 290.525481][T12350] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 290.549183][ T5313] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 290.778173][ T5313] usb 1-1: USB disconnect, device number 39 [ 290.781312][ T47] usb 5-1: USB disconnect, device number 39 [ 291.169050][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3141'. [ 291.172402][T12384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.573035][T12400] ALSA: mixer_oss: invalid OSS volume '' [ 291.657712][T12406] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 292.035532][ T5254] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 292.095463][ T941] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 292.180605][T12416] netlink: 'syz.2.3155': attribute type 64 has an invalid length. [ 292.195038][T12418] syz.4.3156 (12418) used greatest stack depth: 18208 bytes left [ 292.200417][T12416] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 292.244326][ T5254] usb 2-1: Using ep0 maxpacket: 8 [ 292.251621][ T5254] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec [ 292.279664][ T5254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.295476][ T941] usb 4-1: Using ep0 maxpacket: 16 [ 292.305611][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.333001][ T5254] usb 2-1: config 0 descriptor?? [ 292.347290][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.363450][ T5254] ttusb_dec_send_command: command bulk message failed: error -22 [ 292.374063][ T941] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 292.391557][ T5254] ttusb-dec 2-1:0.0: probe with driver ttusb-dec failed with error -22 [ 292.399114][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.441612][T12424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3158'. [ 292.456623][ T941] usb 4-1: config 0 descriptor?? [ 292.602771][ T5254] usb 2-1: USB disconnect, device number 35 [ 292.643808][T12431] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3162'. [ 292.912883][ T941] logitech 0003:046D:CA03.0073: item fetching failed at offset 0/5 [ 292.934812][ T941] logitech 0003:046D:CA03.0073: parse failed [ 292.941067][ T941] logitech 0003:046D:CA03.0073: probe with driver logitech failed with error -22 [ 293.145871][ T941] usb 4-1: USB disconnect, device number 27 [ 293.373877][ T5313] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 293.589919][ T5313] usb 1-1: Using ep0 maxpacket: 8 [ 293.606187][ T5313] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 293.623683][ T5313] usb 1-1: config 0 has no interface number 0 [ 293.643694][ T5313] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 293.683605][ T5313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.723445][ T5313] usb 1-1: config 0 descriptor?? [ 293.844482][ T5313] viperboard 1-1:0.143: version 0.00 found at bus 001 address 040 [ 293.912106][ T5313] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 293.951183][ T5313] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 294.042033][ T5313] usb 1-1: USB disconnect, device number 40 [ 294.061961][T12477] serio: Serial port ptm0 [ 294.454408][T12492] input: syz0 as /devices/virtual/input/input73 [ 295.169951][ T29] audit: type=1326 audit(1726544478.834:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.3.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 295.228984][ T29] audit: type=1326 audit(1726544478.834:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.3.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 295.234759][T12523] tun0: tun_chr_ioctl cmd 1074025677 [ 295.284014][ T29] audit: type=1326 audit(1726544478.834:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.3.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 295.288319][T12523] tun0: linktype set to 776 [ 295.334335][ T29] audit: type=1326 audit(1726544478.844:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.3.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 295.367758][ T29] audit: type=1326 audit(1726544478.844:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.3.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 295.395281][ T29] audit: type=1326 audit(1726544478.844:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.3.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 295.417881][ T29] audit: type=1326 audit(1726544478.854:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.3.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 295.481305][ T29] audit: type=1326 audit(1726544478.874:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.3.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 295.565632][ T29] audit: type=1326 audit(1726544478.874:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.3.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc432174ea7 code=0x7ffc0000 [ 295.643629][ T29] audit: type=1326 audit(1726544478.874:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12524 comm="syz.3.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc432119869 code=0x7ffc0000 [ 296.048276][T12549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'. [ 296.694863][T12578] syz.4.3226 (12578): drop_caches: 4 [ 297.878023][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3246'. [ 298.688929][T12653] netlink: 'syz.3.3261': attribute type 10 has an invalid length. [ 298.743185][T12653] team0: Port device netdevsim0 added [ 298.760315][T12657] sctp: [Deprecated]: syz.2.3263 (pid 12657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.760315][T12657] Use struct sctp_sack_info instead [ 298.786768][T12660] netlink: 'syz.3.3261': attribute type 10 has an invalid length. [ 298.882660][T12660] team0: Port device netdevsim0 removed [ 298.920638][T12660] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 299.019685][T12668] bpf: Bad value for 'uid' [ 299.463905][ T5313] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 299.665602][ T5313] usb 3-1: Using ep0 maxpacket: 16 [ 299.675854][ T5313] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 299.705353][ T5313] usb 3-1: config 1 has no interface number 1 [ 299.711522][ T5313] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 299.748280][ T5313] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.773041][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.805129][ T5313] usb 3-1: Product: syz [ 299.809351][ T5313] usb 3-1: Manufacturer: syz [ 299.832846][ T5313] usb 3-1: SerialNumber: syz [ 300.309824][ T5313] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 300.321331][T12730] netlink: 'syz.1.3297': attribute type 1 has an invalid length. [ 300.825715][ T47] usb 3-1: USB disconnect, device number 34 [ 302.263760][ T47] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 302.465560][ T47] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.487692][ T47] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 302.510854][ T47] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.547748][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.584265][T12790] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 302.593830][ T5254] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 302.615161][ T47] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.800215][ T5254] usb 1-1: Using ep0 maxpacket: 32 [ 302.834071][ T5254] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.859455][ T5254] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.894264][ T5254] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 302.913907][ T5254] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 302.922311][ T5254] usb 1-1: Product: syz [ 302.981659][ T5254] usb 1-1: Manufacturer: syz [ 303.002667][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 303.002685][ T29] audit: type=1400 audit(1726544486.664:133): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=12824 comm="syz.2.3340" daddr=224.0.0.1 dest=20000 netif=wpan0 [ 303.037664][ T5254] hub 1-1:4.0: USB hub found [ 303.049169][ T5313] usb 5-1: USB disconnect, device number 40 [ 303.263620][ T5254] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 303.630101][ T5313] usb 1-1: USB disconnect, device number 41 [ 303.958076][T12852] netlink: 'syz.4.3354': attribute type 1 has an invalid length. [ 303.978374][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 304.000270][T12856] sctp: [Deprecated]: syz.2.3355 (pid 12856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.000270][T12856] Use struct sctp_sack_info instead [ 304.205065][T12864] Sensor A: ================= START STATUS ================= [ 304.212700][T12864] Sensor A: Test Pattern: 75% Colorbar [ 304.252106][T12864] Sensor A: Show Information: All [ 304.258022][T12864] Sensor A: Vertical Flip: false [ 304.265246][T12864] Sensor A: Horizontal Flip: false [ 304.270554][T12864] Sensor A: Brightness: 128 [ 304.276073][T12864] Sensor A: Contrast: 128 [ 304.280638][T12864] Sensor A: Hue: 0 [ 304.284952][T12864] Sensor A: Saturation: 128 [ 304.289687][T12864] Sensor A: ================== END STATUS ================== [ 304.686384][T12881] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3367'. [ 304.743962][T12881] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3367'. [ 304.823986][T12881] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3367'. [ 305.154033][T12896] nvme_fabrics: missing parameter 'transport=%s' [ 305.161334][T12896] nvme_fabrics: missing parameter 'nqn=%s' [ 305.566910][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 306.364829][ T29] audit: type=1326 audit(1726544490.024:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12950 comm="syz.3.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 306.403689][ T29] audit: type=1326 audit(1726544490.024:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12950 comm="syz.3.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 306.491108][ T29] audit: type=1326 audit(1726544490.054:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12950 comm="syz.3.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 306.587780][ T29] audit: type=1326 audit(1726544490.054:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12950 comm="syz.3.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 306.639299][T12960] vlan2: entered allmulticast mode [ 306.661747][T12960] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 306.662834][ T29] audit: type=1326 audit(1726544490.054:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12950 comm="syz.3.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 306.741771][T12960] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 306.760839][ T29] audit: type=1326 audit(1726544490.064:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12950 comm="syz.3.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 306.836546][ T29] audit: type=1326 audit(1726544490.064:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12950 comm="syz.3.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 306.939671][ T29] audit: type=1326 audit(1726544490.064:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12950 comm="syz.3.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 307.036096][ T29] audit: type=1326 audit(1726544490.064:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12950 comm="syz.3.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x7ffc0000 [ 307.128882][T12978] vlan2: entered promiscuous mode [ 307.159065][T12978] vlan2: entered allmulticast mode [ 307.634534][ T5254] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 307.833807][T13014] bond0: option mode: unable to set because the bond device has slaves [ 307.845567][ T5254] usb 4-1: Using ep0 maxpacket: 32 [ 307.855037][ T5254] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.879218][ T5254] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.895436][ T5254] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.913121][ T5254] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 307.932784][ T5254] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 307.984384][ T5254] usb 4-1: Product: syz [ 307.988610][ T5254] usb 4-1: Manufacturer: syz [ 308.012697][ T5254] usb 4-1: SerialNumber: syz [ 308.047223][ T5254] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input74 [ 308.277541][T13031] ALSA: mixer_oss: invalid OSS volume 'P7{*;+$p' [ 308.321717][T13031] ALSA: mixer_oss: invalid OSS volume '' [ 308.353842][T13031] ALSA: mixer_oss: invalid OSS volume 'b$Kf7?]3sX' [ 308.390642][T13031] ALSA: mixer_oss: invalid OSS volume 'K׍?Fg' [ 308.412934][T13031] ALSA: mixer_oss: invalid OSS volume '.L!t8yW+$NJs' [ 308.460188][ T941] usb 4-1: USB disconnect, device number 28 [ 308.562101][ T941] appletouch 4-1:1.0: input: appletouch disconnected [ 308.974990][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 308.975008][ T29] audit: type=1400 audit(1726544492.644:144): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13048 comm="syz.0.3439" dest=20000 netif=wpan0 [ 309.382906][T13060] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3444'. [ 309.412259][T13060] bond_slave_0: entered promiscuous mode [ 309.418547][T13060] bond_slave_1: entered promiscuous mode [ 309.916071][T13075] @: renamed from veth0_vlan (while UP) [ 310.078803][T13078] vlan2: entered allmulticast mode [ 310.101381][T13078] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 310.161962][T13078] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 310.688405][T13093] overlayfs: missing 'workdir' [ 311.113959][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3463'. [ 311.345746][T13111] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 311.366664][T13111] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 311.394316][T13111] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 312.008413][ T5345] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 312.215679][ T5345] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 312.247842][ T5345] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 312.268950][ T5345] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 312.289970][ T5345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.334286][T13123] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.356865][ T5345] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.390128][T13149] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3483'. [ 312.491770][T13151] IPv6: Can't replace route, no match found [ 312.683017][ T5254] usb 4-1: USB disconnect, device number 29 [ 312.812980][T13162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3490'. [ 313.513724][ T47] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 313.602067][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3510'. [ 313.726701][ T47] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.759919][ T47] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 313.776657][T13212] random: crng reseeded on system resumption [ 313.784469][ T47] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.805266][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.845815][T13186] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 313.857146][ T47] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.264642][T13227] ɶƣ0GCTw: entered promiscuous mode [ 314.280529][ T47] usb 1-1: USB disconnect, device number 42 [ 314.289309][T13226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3519'. [ 314.341703][T13227] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 315.357465][T13270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.541730][T13277] mkiss: ax0: crc mode is auto. [ 315.704740][T13277] Falling back ldisc for ttyS3. [ 316.506548][ T5254] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 316.714596][ T5254] usb 2-1: Using ep0 maxpacket: 8 [ 316.733329][ T5254] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 316.745900][ T5254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.773835][ T5254] usb 2-1: config 0 descriptor?? [ 317.376498][T13333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.545637][T13339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.599633][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.607286][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.629812][ T5254] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 317.640783][ T5254] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 317.675546][ T5254] asix 2-1:0.0: probe with driver asix failed with error -71 [ 317.695872][ T5254] usb 2-1: USB disconnect, device number 36 [ 318.948098][T13396] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3594'. [ 319.683857][ T941] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 319.815937][T13422] @: renamed from vlan0 (while UP) [ 319.899181][ T941] usb 1-1: Using ep0 maxpacket: 32 [ 319.923351][ T941] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 319.950623][T13425] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3607'. [ 319.959955][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.994111][ T941] usb 1-1: Product: syz [ 319.998336][ T941] usb 1-1: Manufacturer: syz [ 320.013457][ T941] usb 1-1: SerialNumber: syz [ 320.021098][ T941] usb 1-1: config 0 descriptor?? [ 320.584602][T13444] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 320.732371][ T941] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 320.917599][ T941] usb 1-1: USB disconnect, device number 43 [ 321.490238][T13467] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 321.843821][ T5345] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 321.922514][T13491] pim6reg: tun_chr_ioctl cmd 1074025677 [ 321.948193][T13491] pim6reg: linktype set to 769 [ 322.027450][T13496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3636'. [ 322.063993][ T5345] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 322.091825][ T5345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.128162][ T5345] usb 5-1: config 0 descriptor?? [ 322.153454][ T5345] cp210x 5-1:0.0: cp210x converter detected [ 322.572592][ T5345] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 322.600436][ T5345] usb 5-1: cp210x converter now attached to ttyUSB0 [ 322.634014][ T941] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 322.845476][ T941] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 322.855386][ T944] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 322.876200][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.894887][ T5313] usb 5-1: USB disconnect, device number 41 [ 322.923130][ T5313] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 322.934456][ T941] usb 4-1: config 0 descriptor?? [ 322.968008][ T5313] cp210x 5-1:0.0: device disconnected [ 323.096329][ T944] usb 2-1: config 0 has no interfaces? [ 323.116003][ T944] usb 2-1: New USB device found, idVendor=046d, idProduct=20ee, bcdDevice= 0.00 [ 323.153729][ T944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.181757][ T944] usb 2-1: config 0 descriptor?? [ 323.410214][ T47] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 323.444093][ T5345] usb 2-1: USB disconnect, device number 37 [ 323.603684][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 323.617992][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.643646][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.653431][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.693693][ T47] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.702769][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.727637][ T47] usb 1-1: config 0 descriptor?? [ 323.755502][ T941] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 323.776655][ T941] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 323.788875][ T941] asix 4-1:0.0: probe with driver asix failed with error -71 [ 323.800686][ T941] usb 4-1: USB disconnect, device number 30 [ 323.844930][ T5267] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 323.873762][ T5254] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 324.037511][ T5267] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 324.051505][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.068550][ T5267] usb 3-1: config 0 descriptor?? [ 324.073756][ T5254] usb 5-1: Using ep0 maxpacket: 16 [ 324.082419][ T5254] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 324.090878][ T5267] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 324.104266][ T5254] usb 5-1: config 0 has no interface number 0 [ 324.110467][ T5254] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 324.133018][ T5254] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 324.162335][ T47] microsoft 0003:045E:07DA.0074: unknown main item tag 0x0 [ 324.181507][ T47] microsoft 0003:045E:07DA.0074: item 0 0 0 11 parsing failed [ 324.203781][ T47] microsoft 0003:045E:07DA.0074: parse failed [ 324.209996][ T47] microsoft 0003:045E:07DA.0074: probe with driver microsoft failed with error -22 [ 324.219496][ T5254] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 324.244085][ T5254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.252122][ T5254] usb 5-1: Product: syz [ 324.271234][ T5254] usb 5-1: Manufacturer: syz [ 324.277181][ T5254] usb 5-1: SerialNumber: syz [ 324.289943][ T5254] usb 5-1: config 0 descriptor?? [ 324.296063][T13544] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 324.303406][T13544] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 324.422608][ T47] usb 1-1: USB disconnect, device number 44 [ 324.528923][T13544] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 324.538634][T13544] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 324.713962][ T1853] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 324.884077][ T944] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 324.909031][ T1853] usb 4-1: Using ep0 maxpacket: 8 [ 324.916127][ T1853] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.927551][ T1853] usb 4-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 324.932768][ T5267] usb 3-1: USB disconnect, device number 35 [ 324.943158][ T1853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.976359][ T1853] usb 4-1: config 0 descriptor?? [ 324.992404][ T1853] r8712u: register rtl8712_netdev_ops to netdev_ops [ 325.014276][ T1853] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 325.068431][ T944] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 325.077785][ T944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.088839][ T944] usb 2-1: config 0 descriptor?? [ 325.097401][ T944] cp210x 2-1:0.0: cp210x converter detected [ 325.120126][T13559] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3658'. [ 325.170739][ T5254] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 325.191439][ T5254] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 325.216523][ T5254] asix 5-1:0.251: probe with driver asix failed with error -71 [ 325.246517][ T5254] usb 5-1: USB disconnect, device number 42 [ 325.316302][T13555] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 325.322879][T13555] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 325.331660][T13555] vhci_hcd vhci_hcd.0: Device attached [ 325.341778][ T944] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 325.343763][T13562] vhci_hcd: connection closed [ 325.350785][ T944] cp210x 2-1:0.0: querying part number failed [ 325.364612][ T3013] vhci_hcd: stop threads [ 325.370105][ T3013] vhci_hcd: release socket [ 325.371986][ T944] usb 2-1: cp210x converter now attached to ttyUSB0 [ 325.384584][ T944] usb 2-1: USB disconnect, device number 38 [ 325.393023][ T3013] vhci_hcd: disconnect device [ 325.395854][ T944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 325.419908][ T944] cp210x 2-1:0.0: device disconnected [ 325.419979][ T1853] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 325.438561][ T1853] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 325.447433][ T1853] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 325.517397][ T5267] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 325.576720][T13565] program syz.2.3660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.694487][ T47] usb 4-1: USB disconnect, device number 31 [ 325.725693][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 325.768077][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.799698][ T5267] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.862269][ T5267] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 325.882985][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.905398][ T5267] usb 1-1: config 0 descriptor?? [ 326.090242][T13579] loop6: detected capacity change from 0 to 524287999 [ 326.116825][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.126326][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 326.146252][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.155648][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 326.165058][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.174361][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 326.204771][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.214001][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 326.227046][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.241730][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.250965][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 326.259637][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.268935][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 326.293584][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.302804][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 326.311489][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.320710][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 326.328916][T13579] ldm_validate_partition_table(): Disk read failed. [ 326.330099][ T5267] uclogic 0003:5543:0003.0075: unknown main item tag 0x0 [ 326.344969][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.354210][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 326.383577][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 326.393485][T13579] Dev loop6: unable to read RDB block 0 [ 326.401810][T13579] loop6: unable to read partition table [ 326.401817][ T5267] uclogic 0003:5543:0003.0075: unknown main item tag 0x0 [ 326.401848][ T5267] uclogic 0003:5543:0003.0075: unknown main item tag 0x0 [ 326.429901][T13579] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 326.460433][ T5267] uclogic 0003:5543:0003.0075: unknown main item tag 0x0 [ 326.474751][ T5267] uclogic 0003:5543:0003.0075: unknown main item tag 0x0 [ 326.523277][ T5267] uclogic 0003:5543:0003.0075: No inputs registered, leaving [ 326.553305][ T4673] ldm_validate_partition_table(): Disk read failed. [ 326.553462][ T5267] uclogic 0003:5543:0003.0075: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.0-1/input0 [ 326.575785][ T4673] Dev loop6: unable to read RDB block 0 [ 326.608605][ T4673] loop6: unable to read partition table [ 326.644048][ T5267] usb 1-1: USB disconnect, device number 45 [ 327.054753][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3672'. [ 327.352913][T13625] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3678'. [ 327.706509][T13643] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 328.035135][T13661] netlink: 'syz.1.3691': attribute type 9 has an invalid length. [ 328.351743][T13670] netlink: 'syz.1.3695': attribute type 15 has an invalid length. [ 328.518558][T13674] bridge_slave_0: default FDB implementation only supports local addresses [ 329.024110][T13687] dccp_invalid_packet: P.Data Offset(80) too large [ 329.236461][T13695] program syz.3.3706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.394635][T13700] netlink: 'syz.4.3710': attribute type 2 has an invalid length. [ 329.410925][T13701] sctp: [Deprecated]: syz.3.3709 (pid 13701) Use of int in maxseg socket option. [ 329.410925][T13701] Use struct sctp_assoc_value instead [ 329.473928][ T5313] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 329.683906][ T5313] usb 3-1: Using ep0 maxpacket: 16 [ 329.713783][ T5313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.743844][ T5313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.790196][ T5313] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 329.830311][ T5313] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 329.856502][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.892629][ T5313] usb 3-1: config 0 descriptor?? [ 329.894980][T13714] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3714'. [ 330.345009][ T5313] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0 [ 330.385993][ T5313] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0 [ 330.401947][ T5313] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0 [ 330.420093][ T5313] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0 [ 330.443651][ T5313] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0 [ 330.471026][T13737] program syz.0.3725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.471346][ T5313] microsoft 0003:045E:07DA.0076: unknown main item tag 0x5 [ 330.510788][ T5313] microsoft 0003:045E:07DA.0076: report is too long [ 330.520924][ T5313] microsoft 0003:045E:07DA.0076: item 0 0 0 8 parsing failed [ 330.545210][ T5313] microsoft 0003:045E:07DA.0076: parse failed [ 330.571908][ T5313] microsoft 0003:045E:07DA.0076: probe with driver microsoft failed with error -22 [ 330.611844][T13739] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3727'. [ 330.616748][ T5313] usb 3-1: USB disconnect, device number 36 [ 330.637028][T13739] netlink: 'syz.3.3727': attribute type 1 has an invalid length. [ 331.439467][T13769] program syz.1.3739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.758935][T13776] Failed to get privilege flags for destination (handle=0x2:0x0) [ 332.466757][T13806] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 332.611038][ T29] audit: type=1326 audit(1726544516.274:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13812 comm="syz.2.3757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb32f7def9 code=0x0 [ 332.703693][ T944] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 332.893717][ T944] usb 1-1: Using ep0 maxpacket: 8 [ 332.906276][ T944] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 332.923692][ T944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.941649][ T944] usb 1-1: Product: syz [ 332.953625][ T944] usb 1-1: Manufacturer: syz [ 332.986430][ T944] usb 1-1: SerialNumber: syz [ 333.019691][ T944] usb 1-1: config 0 descriptor?? [ 333.030109][ T944] option 1-1:0.0: GSM modem (1-port) converter detected [ 333.299471][ T944] usb 1-1: USB disconnect, device number 46 [ 333.316348][ T944] option 1-1:0.0: device disconnected [ 333.522776][T13833] ./file0: Can't open blockdev [ 333.548412][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3769'. [ 334.003697][ T47] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 334.204778][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 334.211928][ T47] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.229639][ T47] usb 5-1: config 0 has no interface number 0 [ 334.253817][ T47] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.283833][ T47] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.294280][ T47] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 334.304446][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.317542][ T47] usb 5-1: config 0 descriptor?? [ 334.949434][ T47] uclogic 0003:28BD:0094.0077: pen parameters not found [ 334.964783][ T47] uclogic 0003:28BD:0094.0077: interface is invalid, ignoring [ 334.994133][ T47] usb 5-1: USB disconnect, device number 43 [ 335.596012][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 335.747995][T13918] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3805'. [ 335.791580][T13918] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 336.154021][ T1853] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 336.371540][ T1853] usb 5-1: config 0 has no interfaces? [ 336.379198][ T1853] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.408704][ T1853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.429135][ T1853] usb 5-1: config 0 descriptor?? [ 336.704198][T13924] dvmrp0: entered allmulticast mode [ 336.724515][ T1853] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 336.747371][ T5313] usb 5-1: USB disconnect, device number 44 [ 336.930885][ T1853] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 336.940666][ T1853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.951442][ T1853] usb 3-1: Product: syz [ 336.955925][ T1853] usb 3-1: Manufacturer: syz [ 336.960628][ T1853] usb 3-1: SerialNumber: syz [ 336.971385][ T1853] usb 3-1: config 0 descriptor?? [ 336.979128][ T1853] ch341 3-1:0.0: ch341-uart converter detected [ 336.993738][ T5254] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 337.175428][ T5254] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 337.195664][ T5254] usb 2-1: config 0 has no interface number 0 [ 337.201859][ T5254] usb 2-1: config 0 interface 104 has no altsetting 0 [ 337.224962][ T5254] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 337.238977][ T5254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.248616][ T5254] usb 2-1: Product: syz [ 337.252862][ T5254] usb 2-1: Manufacturer: syz [ 337.257713][ T5254] usb 2-1: SerialNumber: syz [ 337.289669][ T5254] usb 2-1: config 0 descriptor?? [ 337.345572][ T5254] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 337.457059][ T29] audit: type=1400 audit(1726544521.124:146): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=13979 comm="syz.3.3833" dest=20002 netif=wpan0 [ 337.530636][ T12] dvmrp0 (unregistering): left allmulticast mode [ 337.531879][ T5254] gspca_vc032x: reg_r err -71 [ 337.550609][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.573964][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.587476][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.593357][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.599504][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.605995][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.624485][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.630468][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.639822][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.657825][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.667300][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.676162][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.684946][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.696180][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.707211][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.721052][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.733500][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.749011][ T5254] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.761346][ T5254] gspca_vc032x: Unknown sensor... [ 337.773633][ T5254] vc032x 2-1:0.104: probe with driver vc032x failed with error -22 [ 337.799163][ T5254] usb 2-1: USB disconnect, device number 39 [ 337.813995][ T1853] usb 3-1: failed to send control message: -71 [ 337.826413][ T1853] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 337.853467][ T1853] usb 3-1: USB disconnect, device number 37 [ 337.882389][ T1853] ch341 3-1:0.0: device disconnected [ 338.583052][ T4673] udevd[4673]: worker [5654] terminated by signal 33 (Unknown signal 33) [ 338.600229][ T4673] udevd[4673]: worker [5654] failed while handling '/devices/virtual/block/loop3' [ 339.097410][ T29] audit: type=1400 audit(1726544522.764:147): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=14026 comm="syz.2.3854" dest=20000 netif=wpan0 [ 339.333807][ T944] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 339.423759][ T47] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 339.555481][ T944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.573757][ T944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.595535][ T944] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.615140][ T944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.635313][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 339.636444][ T944] usb 4-1: config 0 descriptor?? [ 339.649018][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.658307][ T944] hub 4-1:0.0: USB hub found [ 339.682621][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.711362][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.749258][ T47] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.775687][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.798066][ T47] usb 2-1: config 0 descriptor?? [ 339.893348][ T944] hub 4-1:0.0: 1 port detected [ 340.213198][T14048] Process accounting resumed [ 340.216463][ T47] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 340.251560][ T47] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 340.267373][ T47] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 340.288185][ T47] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 340.309953][ T47] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 340.326492][ T944] usb 4-1: USB disconnect, device number 32 [ 340.348074][ T47] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 340.385194][ T47] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 340.421407][ T47] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 340.421445][ T47] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 340.421470][ T47] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 340.468986][ T47] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0078/input/input77 [ 340.481619][ T47] microsoft 0003:045E:07DA.0078: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 340.495554][ T47] usb 2-1: USB disconnect, device number 40 [ 340.953866][ T5254] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 341.051357][T14065] bond0: option resend_igmp: invalid value (7540) [ 341.058867][T14065] bond0: option resend_igmp: allowed values 0 - 255 [ 341.204076][ T5254] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 341.213167][ T5254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.229566][ T5254] usb 5-1: Product: syz [ 341.236253][ T5254] usb 5-1: Manufacturer: syz [ 341.245930][ T5254] usb 5-1: SerialNumber: syz [ 341.263496][ T5254] usb 5-1: config 0 descriptor?? [ 341.505206][ T5254] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 341.565556][T14083] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 341.604889][T14085] ax25_connect(): syz.2.3879 uses autobind, please contact jreuter@yaina.de [ 341.912015][ T5254] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 342.159224][ T5254] usb 5-1: USB disconnect, device number 45 [ 342.484987][T14120] netlink: 'syz.3.3895': attribute type 9 has an invalid length. [ 342.500224][T14120] netlink: 134688 bytes leftover after parsing attributes in process `syz.3.3895'. [ 342.837476][ T29] audit: type=1400 audit(1726544526.504:148): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=14137 comm="syz.1.3904" dest=20000 netif=wpan0 [ 343.215868][T14151] kvm: user requested TSC rate below hardware speed [ 343.613885][ T944] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 343.773886][ T1853] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 343.819704][ T944] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 343.843726][ T944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.851805][ T944] usb 2-1: Product: syz [ 343.882485][ T944] usb 2-1: Manufacturer: syz [ 343.895890][ T944] usb 2-1: SerialNumber: syz [ 343.917933][ T944] usb 2-1: config 0 descriptor?? [ 343.965908][ T1853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.010212][ T1853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.034890][ T1853] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 344.069120][ T1853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.105928][ T1853] usb 1-1: config 0 descriptor?? [ 344.567234][ T944] usb 2-1: Firmware version (0.0) predates our first public release. [ 344.568420][ T1853] pyra 0003:1E7D:2CF6.0079: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 344.603312][ T944] usb 2-1: Please update to version 0.2 or newer [ 344.649466][T14186] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3925'. [ 344.792935][ T944] usb 2-1: USB disconnect, device number 41 [ 344.956353][ T1853] pyra 0003:1E7D:2CF6.0079: couldn't init struct pyra_device [ 344.969875][ T1853] pyra 0003:1E7D:2CF6.0079: couldn't install mouse [ 344.982138][ T29] audit: type=1400 audit(1726544528.644:149): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=14199 comm="syz.4.3932" daddr=255.255.255.255 netif=wpan0 [ 345.007754][ T1853] pyra 0003:1E7D:2CF6.0079: probe with driver pyra failed with error -71 [ 345.066139][ T1853] usb 1-1: USB disconnect, device number 47 [ 345.644324][T14229] Process accounting resumed [ 346.244992][ T5254] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 346.395597][T14262] netlink: 988 bytes leftover after parsing attributes in process `syz.0.3960'. [ 346.420307][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 346.444283][ T5254] usb 5-1: Using ep0 maxpacket: 32 [ 346.483523][ T5254] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 346.492030][ T5254] usb 5-1: config 0 has no interface number 0 [ 346.529569][ T5254] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 346.543713][ T5254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.563904][ T5254] usb 5-1: Product: syz [ 346.568132][ T5254] usb 5-1: Manufacturer: syz [ 346.573519][ T5254] usb 5-1: SerialNumber: syz [ 346.615765][ T5254] usb 5-1: config 0 descriptor?? [ 346.845607][ T5254] radio-si470x 5-1:0.35: this is not a si470x device. [ 346.847270][T14277] pimreg: entered allmulticast mode [ 346.894422][ T5254] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 347.001722][T14286] netlink: 'syz.2.3972': attribute type 1 has an invalid length. [ 347.102959][ T5254] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 347.142489][ T5254] radio-raremono 5-1:0.35: V4L2 device registered as radio32 [ 347.200367][ T5254] usb 5-1: USB disconnect, device number 46 [ 347.227291][ T5254] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 347.403884][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3978'. [ 347.920851][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3985'. [ 347.958400][T14315] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 348.020117][T14315] macsec2: entered promiscuous mode [ 348.030180][ T5220] Bluetooth: hci1: Malformed LE Event: 0x0d [ 348.036939][T14315] macsec2: entered allmulticast mode [ 348.036967][T14315] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 348.274749][ T29] audit: type=1326 audit(1726544531.934:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14321 comm="syz.2.3989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb32f7def9 code=0x0 [ 349.396354][T14348] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 350.011714][T14362] tun0: tun_chr_ioctl cmd 2148553947 [ 350.926138][T14394] binder: 14393:14394 ioctl 40046205 0 returned -22 [ 351.314101][T14412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4027'. [ 351.428436][ T5267] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 351.555310][T14426] input: syz0 as /devices/virtual/input/input78 [ 351.633674][ T5267] usb 4-1: Using ep0 maxpacket: 32 [ 351.644803][ T5267] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 351.656782][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.686442][ T5267] usb 4-1: config 0 descriptor?? [ 351.706131][ T5267] gspca_main: sunplus-2.14.0 probing 041e:400b [ 352.205200][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4048'. [ 352.213051][T14453] tipc: Started in network mode [ 352.228534][T14453] tipc: Node identity UNC_PROT, cluster identity 4711 [ 352.254427][T14453] tipc: Enabling of bearer rejected, failed to enable media [ 352.304180][ T5267] gspca_sunplus: reg_r err -71 [ 352.309726][ T5267] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 352.357375][ T5267] usb 4-1: USB disconnect, device number 33 [ 352.743367][T14477] mkiss: ax0: crc mode is auto. [ 352.947794][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4062'. [ 353.116473][T14490] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4065'. [ 353.299743][ T29] audit: type=1326 audit(1726544536.964:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14497 comm="syz.0.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 353.373931][ T29] audit: type=1326 audit(1726544536.964:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14497 comm="syz.0.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 353.481082][ T29] audit: type=1326 audit(1726544537.004:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14497 comm="syz.0.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 353.547018][ T29] audit: type=1326 audit(1726544537.014:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14497 comm="syz.0.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 353.569135][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4072'. [ 353.589397][ T29] audit: type=1326 audit(1726544537.014:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14497 comm="syz.0.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 353.606503][T14503] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4072'. [ 353.610968][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.625437][T14507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.682030][ T29] audit: type=1326 audit(1726544537.024:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14497 comm="syz.0.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 353.748449][ T29] audit: type=1326 audit(1726544537.024:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14497 comm="syz.0.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 353.841541][ T29] audit: type=1326 audit(1726544537.024:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14497 comm="syz.0.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cb2574ea7 code=0x7ffc0000 [ 353.887622][ T29] audit: type=1326 audit(1726544537.024:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14497 comm="syz.0.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cb2519869 code=0x7ffc0000 [ 353.909297][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.916188][ T29] audit: type=1326 audit(1726544537.024:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14497 comm="syz.0.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cb2574ea7 code=0x7ffc0000 [ 354.455794][T14546] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.464017][T14546] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.663718][ T1853] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 354.820031][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4097'. [ 354.869827][ T1853] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 354.894313][ T1853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.923631][ T1853] usb 4-1: config 0 descriptor?? [ 354.935454][ T1853] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 355.026272][T14570] tun0: tun_chr_ioctl cmd 1074025676 [ 355.052792][T14570] tun0: owner set to 0 [ 355.544346][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4110'. [ 355.743476][ T1853] gspca_cpia1: usb_control_msg 02, error -71 [ 355.759354][ T1853] gspca_cpia1: usb_control_msg 05, error -71 [ 355.793709][ T1853] gspca_cpia1: usb_control_msg 04, error -71 [ 355.803931][ T1853] cpia1 4-1:0.0: probe with driver cpia1 failed with error -71 [ 355.824542][ T1853] usb 4-1: USB disconnect, device number 34 [ 355.952861][T14612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4120'. [ 355.962493][T14612] netlink: 'syz.2.4120': attribute type 1 has an invalid length. [ 355.970818][T14612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4120'. [ 356.153962][ T47] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 356.199934][T14626] tap0: tun_chr_ioctl cmd 1074025673 [ 356.274923][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4127'. [ 356.373651][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 356.400581][ T47] usb 1-1: config 0 has no interfaces? [ 356.412886][ T47] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 356.434103][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.442158][ T47] usb 1-1: Product: syz [ 356.454098][ T47] usb 1-1: Manufacturer: syz [ 356.459440][ T47] usb 1-1: SerialNumber: syz [ 356.471783][ T47] usb 1-1: config 0 descriptor?? [ 356.473076][T14641] input: syz0 as /devices/virtual/input/input79 [ 356.805040][ T5313] usb 1-1: USB disconnect, device number 48 [ 357.691284][T14667] netem: change failed [ 358.557058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.914751][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4163'. [ 358.933850][T14717] netlink: 'syz.2.4164': attribute type 1 has an invalid length. [ 358.949810][T14717] netlink: 9372 bytes leftover after parsing attributes in process `syz.2.4164'. [ 358.969216][T14717] netlink: 'syz.2.4164': attribute type 1 has an invalid length. [ 358.996897][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 358.996915][ T29] audit: type=1326 audit(1726544542.664:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14718 comm="syz.4.4165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64e117def9 code=0x0 [ 359.712019][T14752] block nbd1: NBD_DISCONNECT [ 359.807953][T14758] program syz.1.4182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.028772][T14770] netlink: 45 bytes leftover after parsing attributes in process `syz.4.4188'. [ 360.126871][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4192'. [ 360.433877][T14795] netlink: 'syz.2.4200': attribute type 1 has an invalid length. [ 360.441871][T14795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4200'. [ 360.443830][ T47] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 360.603485][T14803] netlink: 'syz.4.4204': attribute type 1 has an invalid length. [ 360.615738][T14803] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.4204'. [ 360.658731][ T47] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 360.671731][ T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.693300][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 360.709916][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.741058][ T47] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 360.750992][ T47] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 360.770585][ T47] usb 2-1: Product: syz [ 360.778221][ T47] usb 2-1: Manufacturer: syz [ 360.786077][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4208'. [ 360.806444][ T47] cdc_wdm 2-1:1.0: skipping garbage [ 360.811722][ T47] cdc_wdm 2-1:1.0: skipping garbage [ 360.837560][T14813] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4208'. [ 360.854065][ T47] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 360.860030][ T47] cdc_wdm 2-1:1.0: Unknown control protocol [ 361.606078][ T1853] usb 2-1: USB disconnect, device number 42 [ 361.854921][T14847] netem: incorrect gi model size [ 361.863753][T14847] netem: change failed [ 362.235858][T14868] block nbd3: NBD_DISCONNECT [ 362.244575][T14868] block nbd3: Send disconnect failed -22 [ 362.260263][T14864] block nbd3: Disconnected due to user request. [ 362.269170][T14864] block nbd3: shutting down sockets [ 362.490746][T14880] batadv_slave_1: entered promiscuous mode [ 362.500708][T14876] batadv_slave_1: left promiscuous mode [ 364.088321][T14928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4262'. [ 364.373776][ T5267] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 364.586614][ T5267] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 364.601786][ T5267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.623957][ T5267] usb 2-1: Product: syz [ 364.628184][ T5267] usb 2-1: Manufacturer: syz [ 364.645476][ T5267] usb 2-1: SerialNumber: syz [ 364.655516][T14949] netlink: 'syz.3.4271': attribute type 1 has an invalid length. [ 364.655602][T14946] wireguard0: entered promiscuous mode [ 364.663833][T14949] netlink: 'syz.3.4271': attribute type 2 has an invalid length. [ 364.686996][ T5267] usb 2-1: config 0 descriptor?? [ 364.712396][T14946] wireguard0: entered allmulticast mode [ 364.754334][ T29] audit: type=1400 audit(1726544548.424:181): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=14950 comm="syz.3.4273" daddr=224.0.0.1 netif=wpan0 [ 364.899639][T14955] vlan0: entered allmulticast mode [ 364.914156][T14955] bridge0: port 3(vlan0) entered blocking state [ 364.938917][T14955] bridge0: port 3(vlan0) entered disabled state [ 365.343734][ T5267] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 365.586412][ T5267] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 365.643822][ T5267] usb 2-1: USB disconnect, device number 43 [ 365.684576][T14976] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 366.195080][T14991] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 366.293743][ T5267] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 366.494458][ T5267] usb 4-1: Using ep0 maxpacket: 16 [ 366.504830][ T5267] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.523627][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 366.551135][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 366.582612][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 366.601082][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.617854][ T944] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 366.635355][ T5267] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 366.647515][ T5267] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 366.663616][ T5267] usb 4-1: Manufacturer: syz [ 366.670722][ T5267] usb 4-1: config 0 descriptor?? [ 366.682779][ T5267] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 366.835278][ T944] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 366.847242][ T944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.871195][ T944] usb 2-1: config 0 descriptor?? [ 366.886780][ T944] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 366.959680][ T5267] usb 4-1: USB disconnect, device number 35 [ 367.295249][ T944] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 367.304189][ T5313] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 367.514078][ T5313] usb 3-1: Using ep0 maxpacket: 16 [ 367.545748][ T5313] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 367.574252][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.592884][ T5313] usb 3-1: Product: syz [ 367.598282][ T5313] usb 3-1: Manufacturer: syz [ 367.607705][ T5313] usb 3-1: SerialNumber: syz [ 367.630480][ T5313] usb 3-1: config 0 descriptor?? [ 367.654804][ T5313] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 367.716143][ T944] gspca_cpia1: usb_control_msg 02, error -71 [ 367.725288][ T944] gspca_cpia1: usb_control_msg 05, error -71 [ 367.738683][ T944] cpia1 2-1:0.0: unexpected systemstate: 00 [ 367.752773][ T944] usb 2-1: USB disconnect, device number 44 [ 367.984743][ T941] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 368.183908][ T941] usb 4-1: Using ep0 maxpacket: 16 [ 368.199284][ T941] usb 4-1: config 0 has no interfaces? [ 368.216394][ T941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 368.233778][ T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.242139][ T941] usb 4-1: Product: syz [ 368.246523][ T941] usb 4-1: Manufacturer: syz [ 368.251167][ T941] usb 4-1: SerialNumber: syz [ 368.259026][ T941] usb 4-1: config 0 descriptor?? [ 368.291441][ T5313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 368.302172][ T5313] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 368.321935][ T5313] usb 3-1: media controller created [ 368.366079][ T5313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.401266][ T5313] gp8psk_fe: Frontend revision 1 attached [ 368.407997][ T5313] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 368.416507][ T5313] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 368.505417][ T5313] gp8psk: usb in 138 operation failed. [ 368.508346][ T47] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 368.512506][ T5313] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 368.543513][ T941] usb 4-1: USB disconnect, device number 36 [ 368.553508][ T5313] gp8psk: found Genpix USB device pID = 201 (hex) [ 368.564988][ T5313] usb 3-1: USB disconnect, device number 38 [ 368.641617][ T5313] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 368.715607][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 368.748291][ T47] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 368.760073][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.787804][ T47] usb 5-1: config 0 descriptor?? [ 368.796306][ T47] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 368.806055][ T29] audit: type=1326 audit(1726544552.464:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 368.832618][ T29] audit: type=1326 audit(1726544552.464:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 368.856165][ T29] audit: type=1326 audit(1726544552.474:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 368.881058][ T29] audit: type=1326 audit(1726544552.474:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 368.905044][ T29] audit: type=1326 audit(1726544552.484:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 368.929198][ T29] audit: type=1326 audit(1726544552.484:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 368.967405][ T29] audit: type=1326 audit(1726544552.484:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 368.993812][ T29] audit: type=1326 audit(1726544552.484:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 369.036829][ T5254] usb 5-1: USB disconnect, device number 47 [ 369.044761][ T29] audit: type=1326 audit(1726544552.484:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15051 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x7ffc0000 [ 370.740634][T15133] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 370.810491][ T29] audit: type=1326 audit(1726544554.464:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15138 comm="syz.3.4361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc43217def9 code=0x0 [ 371.333923][T15161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4371'. [ 371.354348][T15161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4371'. [ 371.374282][T15164] bridge_slave_0: entered promiscuous mode [ 371.400682][T15165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.681304][T15174] vlan2: entered promiscuous mode [ 371.690801][T15174] gretap0: entered promiscuous mode [ 372.543867][ T5313] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 372.593881][ T5254] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 372.739086][ T5313] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 372.752159][ T5313] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 372.762532][ T5313] usb 3-1: Manufacturer: syz [ 372.778321][ T5313] usb 3-1: config 0 descriptor?? [ 372.786338][ T5254] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.813619][ T5254] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.824180][ T5254] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 372.833255][ T5254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 372.865053][ T5254] usb 1-1: SerialNumber: syz [ 373.099844][ T5254] usb 1-1: 0:2 : does not exist [ 373.129101][ T5254] usb 1-1: USB disconnect, device number 49 [ 373.206150][ T5313] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 373.406371][ T5313] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 373.423430][ T5313] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 373.483976][ T1853] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 373.612876][ T5254] usb 3-1: USB disconnect, device number 39 [ 373.663688][ T941] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 373.682265][ T1853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.712773][ T1853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.733283][ T1853] usb 4-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 373.753376][ T1853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.775457][ T1853] usb 4-1: config 0 descriptor?? [ 373.855627][ T941] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 373.879098][ T941] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.903645][ T941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.912678][ T941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.924879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.969206][ T941] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.994855][ T941] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 374.002903][ T941] usb 5-1: Product: syz [ 374.019075][ T941] usb 5-1: Manufacturer: syz [ 374.042679][ T941] cdc_wdm 5-1:1.0: skipping garbage [ 374.056541][ T941] cdc_wdm 5-1:1.0: skipping garbage [ 374.074013][ T941] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 374.079969][ T941] cdc_wdm 5-1:1.0: Unknown control protocol [ 374.216012][ T1853] wacom 0003:056A:00B1.007A: unknown main item tag 0x0 [ 374.238036][ T1853] wacom 0003:056A:00B1.007A: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 374.265549][ T5345] usb 5-1: USB disconnect, device number 48 [ 374.290610][ T1853] wacom 0003:056A:00B1.007A: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.3-1/input0 [ 374.317167][ T1853] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B1.007A/input/input81 [ 374.416389][ T1853] usb 4-1: USB disconnect, device number 37 [ 375.177302][T15247] netlink: 203452 bytes leftover after parsing attributes in process `syz.0.4411'. [ 375.213820][T15247] netlink: 'syz.0.4411': attribute type 2 has an invalid length. [ 375.226648][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4411'. [ 375.269760][T15250] program syz.2.4412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.666389][T15264] xt_bpf: check failed: parse error [ 377.214040][ T5345] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 377.295510][ T1853] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 377.415265][ T5345] usb 3-1: Using ep0 maxpacket: 32 [ 377.425841][ T5345] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 377.456210][ T5345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.480806][ T5345] usb 3-1: config 0 descriptor?? [ 377.498230][ T1853] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 377.514852][ T5345] gspca_main: sq930x-2.14.0 probing 041e:403c [ 377.523317][ T1853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.543704][ T1853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.567446][ T1853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.585307][ T1853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.603658][ T1853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.625237][ T1853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.643291][ T1853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.662630][ T1853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.684614][ T1853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.693005][ T1853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.721912][ T1853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.749651][T15313] vim2m vim2m.0: vidioc_s_fmt queue busy [ 377.764225][ T1853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.787857][ T1853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.802300][ T1853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.834127][ T1853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.845752][ T1853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.862179][ T1853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.896060][ T1853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.915899][ T1853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.925354][ T1853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.938907][ T1853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.947388][ T1853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.961587][ T1853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.973038][ T1853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.996739][ T1853] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 378.018245][ T1853] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 378.019527][T15319] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 378.037404][ T1853] usb 5-1: Product: syz [ 378.041638][ T1853] usb 5-1: Manufacturer: syz [ 378.066746][ T1853] usb 5-1: SerialNumber: syz [ 378.088126][ T1853] usb 5-1: config 0 descriptor?? [ 378.116348][ T1853] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 378.234630][ T1853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.356611][ T1853] usb 5-1: USB disconnect, device number 49 [ 378.370600][ T1853] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 378.376954][ T5345] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 378.390239][ T29] audit: type=1326 audit(1726544562.054:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15328 comm="syz.0.4449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x0 [ 378.421962][ T29] audit: type=1326 audit(1726544562.054:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15328 comm="syz.0.4449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cb257def9 code=0x0 [ 378.445847][ T5345] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 378.466157][ T5345] usb 3-1: USB disconnect, device number 40 [ 378.554035][ T5313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.036225][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.037230][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.042558][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.059526][ T5313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.069057][ T1853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.226767][ T29] audit: type=1400 audit(1726544562.894:194): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15357 comm="syz.4.4460" daddr=255.255.255.255 netif=wpan0 [ 379.248203][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4461'. [ 379.279491][ T29] audit: type=1400 audit(1726544562.894:195): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15357 comm="syz.4.4460" daddr=255.255.255.255 netif=wpan0 [ 379.528099][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.539283][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.554240][ T5313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.594090][ T5313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.076441][ T5220] Bluetooth: hci0: command tx timeout [ 380.307919][T15403] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 380.320367][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.460682][T15410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4484'. [ 380.880588][T15431] xt_hashlimit: max too large, truncated to 1048576 [ 381.057780][T15439] netlink: 'syz.2.4498': attribute type 6 has an invalid length. [ 381.088906][T15439] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4498'. [ 381.495323][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4507'. [ 381.607856][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.629086][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.638577][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.662576][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.671663][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 381.687637][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.698810][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.822573][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.834547][ T1853] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 381.944640][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.050151][ T62] tipc: Resetting bearer [ 382.063754][ T1853] usb 4-1: Using ep0 maxpacket: 8 [ 382.088472][ T1853] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 382.103799][ T1853] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.117304][ T1853] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 382.126692][ T1853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.142574][ T1853] usbtmc 4-1:16.0: bulk endpoints not found [ 382.160014][ T62] tipc: Disabling bearer [ 382.179517][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.352272][T15462] chnl_net:caif_netlink_parms(): no params data found [ 382.578111][ T62] bridge_slave_1: left allmulticast mode [ 382.584520][ T62] bridge_slave_1: left promiscuous mode [ 382.590722][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.602153][ T62] bridge_slave_0: left allmulticast mode [ 382.608969][ T62] bridge_slave_0: left promiscuous mode [ 382.616269][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.434618][ T5313] net_ratelimit: 5 callbacks suppressed [ 383.434639][ T5313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.453725][ T941] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 383.600859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.609901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.618327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.666347][ T941] usb 3-1: config 0 has no interfaces? [ 383.671896][ T941] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 383.686654][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.715890][ T941] usb 3-1: config 0 descriptor?? [ 383.756669][ T5229] Bluetooth: hci1: command tx timeout [ 383.775873][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.810293][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.838403][ T62] bond0 (unregistering): Released all slaves [ 383.945586][T15462] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.964077][T15462] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.980056][ T1853] usb 3-1: USB disconnect, device number 41 [ 383.994775][T15462] bridge_slave_0: entered allmulticast mode [ 384.016933][T15462] bridge_slave_0: entered promiscuous mode [ 384.033743][T15462] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.041131][T15462] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.049103][T15462] bridge_slave_1: entered allmulticast mode [ 384.057117][T15462] bridge_slave_1: entered promiscuous mode [ 384.065783][ T62] : left promiscuous mode [ 384.220791][T15462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.261394][T15462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.280936][ T62] tipc: Left network mode [ 384.390399][T15462] team0: Port device team_slave_0 added [ 384.491795][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.550097][ T941] usb 4-1: USB disconnect, device number 38 [ 384.570838][T15462] team0: Port device team_slave_1 added [ 384.796352][T15462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.796632][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.803328][T15462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.803349][T15462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.849168][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.910393][ T5254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.995930][T15540] program syz.3.4536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.048819][T15462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.087388][T15462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.113384][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.153955][T15462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.370828][T15545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.379936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.419866][ T62] hsr_slave_0: left promiscuous mode [ 385.465265][ T62] hsr_slave_1: left promiscuous mode [ 385.478152][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.492188][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.519692][T15552] cifs: Unknown parameter 'mode' [ 385.542663][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.567353][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.656609][ T62] veth1_macvtap: left promiscuous mode [ 385.681709][ T62] veth0_macvtap: left promiscuous mode [ 385.703737][ T62] veth1_vlan: left promiscuous mode [ 385.719429][ T62] veth0_vlan: left promiscuous mode [ 385.756968][T15556] netlink: 201400 bytes leftover after parsing attributes in process `syz.0.4543'. [ 385.835630][ T5229] Bluetooth: hci1: command tx timeout [ 386.143750][ T5254] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 386.334133][ T5254] usb 5-1: Using ep0 maxpacket: 32 [ 386.345426][ T5254] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 386.360499][ T5254] usb 5-1: config 0 has no interface number 0 [ 386.370689][ T5254] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 386.391445][ T5254] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 386.405169][ T5254] usb 5-1: config 0 interface 126 has no altsetting 0 [ 386.420813][ T5254] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 386.437220][ T5254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.448677][ T5254] usb 5-1: Product: syz [ 386.452895][ T5254] usb 5-1: Manufacturer: syz [ 386.462065][ T5254] usb 5-1: SerialNumber: syz [ 386.472845][ T5254] usb 5-1: config 0 descriptor?? [ 386.481899][T15560] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 386.502028][T15560] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 386.839154][ T62] team0 (unregistering): Port device team_slave_1 removed [ 386.903366][ T62] team0 (unregistering): Port device team_slave_0 removed [ 386.941831][ T5254] ir_usb 5-1:0.126: IR Dongle converter detected [ 387.139665][ T5254] usb 5-1: IRDA class descriptor not found, device not bound [ 387.379576][ T941] usb 5-1: USB disconnect, device number 50 [ 387.555573][ T62] lo (unregistering): left allmulticast mode [ 387.679406][T15462] hsr_slave_0: entered promiscuous mode [ 387.725780][T15462] hsr_slave_1: entered promiscuous mode [ 387.767180][T15575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.910266][ T1853] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 387.922710][ T5229] Bluetooth: hci1: command tx timeout [ 388.069968][ T62] IPVS: stop unused estimator thread 0... [ 388.147679][ T1853] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 388.165521][ T1853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.189084][ T1853] usb 3-1: config 0 descriptor?? [ 388.209368][ T1853] cp210x 3-1:0.0: cp210x converter detected [ 388.252434][T15588] netlink: 'syz.3.4558': attribute type 6 has an invalid length. [ 388.260912][T15588] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4558'. [ 388.473874][ T5345] net_ratelimit: 2055 callbacks suppressed [ 388.473893][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.562370][T15462] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 388.605486][T15462] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 388.625829][T15462] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 388.626110][ T1853] usb 3-1: cp210x converter now attached to ttyUSB0 [ 388.671795][T15601] fuse: Bad value for 'user_id' [ 388.681200][T15601] fuse: Bad value for 'user_id' [ 388.693943][T15462] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 388.807768][T15606] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4567'. [ 388.894776][ T1853] usb 3-1: USB disconnect, device number 42 [ 388.921212][ T1853] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 388.962807][ T1853] cp210x 3-1:0.0: device disconnected [ 389.047398][T15611] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 389.071856][T15611] macvlan2: entered allmulticast mode [ 389.078484][T15611] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 389.104858][T15462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.158765][T15462] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.181740][T15617] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 389.194309][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.239217][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.246445][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.278114][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.285355][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.316796][T15620] sit1: entered promiscuous mode [ 389.325658][T15620] sit1: entered allmulticast mode [ 389.684720][ T1853] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 389.841907][T15462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.903154][ T1853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.907018][T15462] veth0_vlan: entered promiscuous mode [ 389.930673][T15462] veth1_vlan: entered promiscuous mode [ 389.935659][ T1853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.959515][ T1853] usb 1-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 389.970545][ T1853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.989880][T15462] veth0_macvtap: entered promiscuous mode [ 389.990616][ T1853] usb 1-1: config 0 descriptor?? [ 390.002214][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.004632][T15462] veth1_macvtap: entered promiscuous mode [ 390.010883][ T5229] Bluetooth: hci1: command tx timeout [ 390.017973][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.031309][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.058362][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.078285][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.088431][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.103432][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.113386][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.130139][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.141611][T15462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.166697][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.188631][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.198606][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.214959][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.225073][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.236763][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.259021][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.271508][T15462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.286545][T15462] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.296612][T15462] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.305940][T15462] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.315352][T15462] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.448319][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.476706][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.489126][ T1853] wacom 0003:056A:0101.007B: unknown main item tag 0x0 [ 390.522148][ T1853] wacom 0003:056A:0101.007B: hidraw0: USB HID v0.00 Device [HID 056a:0101] on usb-dummy_hcd.0-1/input0 [ 390.554320][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.570106][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.773440][ T5267] usb 1-1: USB disconnect, device number 50 [ 391.018188][T15677] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 391.018188][T15677] The task syz.3.4596 (15677) triggered the difference, watch for misbehavior. [ 391.268709][T15680] option changes via remount are deprecated (pid=15679 comm=syz.2.4599) [ 391.281532][ T5267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.514779][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.642440][T15692] netlink: 'syz.1.4604': attribute type 1 has an invalid length. [ 391.656066][T15692] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.4604'. [ 391.669997][T15697] @: renamed from vlan0 (while UP) [ 391.670151][T15692] netlink: 'syz.1.4604': attribute type 1 has an invalid length. [ 391.724944][T15700] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.4609'. [ 391.734810][T15700] netlink: 'syz.2.4609': attribute type 1 has an invalid length. [ 391.742702][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4609'. [ 391.922843][T15708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4613'. [ 392.187142][ T5267] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 392.211086][T15724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4620'. [ 392.315085][ T5313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.426263][ T5267] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 392.434231][T15738] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.4628'. [ 392.453747][T15738] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 392.473301][ T5267] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.506409][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 392.553951][ T5267] usb 4-1: SerialNumber: syz [ 393.123877][ T47] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 393.239000][ T5267] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 393.323858][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 393.351440][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.363877][ T5267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.393756][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.418678][ T47] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 393.437138][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.454802][ T47] usb 2-1: config 0 descriptor?? [ 393.495710][ T5313] usb 4-1: USB disconnect, device number 39 [ 393.504307][ T5313] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 393.882301][ T47] aquacomputer_d5next 0003:0C70:F014.007C: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.1-1/input0 [ 393.933787][ T5267] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 394.015294][T15791] netlink: 'syz.2.4651': attribute type 3 has an invalid length. [ 394.118001][ T5267] usb 1-1: config 0 has no interfaces? [ 394.138836][ T5267] usb 1-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 394.148672][ T5313] usb 2-1: USB disconnect, device number 45 [ 394.173899][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.209914][ T5267] usb 1-1: config 0 descriptor?? [ 394.396257][ T944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.428097][ T47] usb 1-1: USB disconnect, device number 51 [ 394.442777][T15810] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4660'. [ 394.518572][T15813] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4662'. [ 394.554357][ T1853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.785455][T15827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4668'. [ 394.802286][T15827] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4668'. [ 395.117844][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.135599][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.152331][ T1853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.208213][T15849] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 395.222655][T15849] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 395.308449][T15851] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 395.553438][T15869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.568743][T15862] sctp: [Deprecated]: syz.4.4685 (pid 15862) Use of int in max_burst socket option deprecated. [ 395.568743][T15862] Use struct sctp_assoc_value instead [ 395.763994][T15878] ptrace attach of "./syz-executor exec"[15462] was attempted by "./syz-executor exec"[15878] [ 395.978720][ T29] audit: type=1400 audit(1726544579.644:196): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15884 comm="syz.1.4695" daddr=255.255.255.255 dest=20000 netif=wpan0 [ 396.644506][ T5313] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 396.850903][ T5313] usb 1-1: Using ep0 maxpacket: 16 [ 396.874855][ T5313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.901726][ T5313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.922576][ T5313] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 396.950063][ T5313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.973410][ T5313] usb 1-1: config 0 descriptor?? [ 397.242487][T15955] netlink: 'syz.2.4724': attribute type 14 has an invalid length. [ 397.336293][T15957] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 397.413514][ T5313] apple 0003:05AC:0247.007D: unknown main item tag 0x0 [ 397.435020][ T5313] apple 0003:05AC:0247.007D: unknown main item tag 0x0 [ 397.458952][ T5313] apple 0003:05AC:0247.007D: item fetching failed at offset 2/160 [ 397.478639][ T5313] apple 0003:05AC:0247.007D: parse failed [ 397.495758][ T5313] apple 0003:05AC:0247.007D: probe with driver apple failed with error -22 [ 397.619029][ T5313] usb 1-1: USB disconnect, device number 52 [ 397.890656][T15989] io-wq is not configured for unbound workers [ 397.902283][ T5220] Bluetooth: hci4: sending frame failed (-49) [ 397.918278][ T5229] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 398.144436][T16001] vcan0: entered allmulticast mode [ 398.430575][T16012] VFS: could not find a valid V7 on nullb0. [ 398.476438][T16010] batadv0: entered promiscuous mode [ 398.482329][T16010] macsec1: entered promiscuous mode [ 398.496761][T16012] VFS: unable to find oldfs superblock on device nullb0 [ 398.520867][T16010] macsec1: entered allmulticast mode [ 398.543732][T16010] batadv0: entered allmulticast mode [ 398.595886][T16010] batadv0: left allmulticast mode [ 398.601389][T16010] batadv0: left promiscuous mode [ 398.881317][T16028] ================================================================== [ 398.889431][T16028] BUG: KASAN: slab-out-of-bounds in smk_access+0xae/0x4e0 [ 398.896564][T16028] Read of size 8 at addr ffff8880699326c0 by task syz.4.4756/16028 [ 398.904467][T16028] [ 398.906797][T16028] CPU: 0 UID: 60928 PID: 16028 Comm: syz.4.4756 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 398.917566][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 398.927738][T16028] Call Trace: [ 398.931026][T16028] [ 398.933964][T16028] dump_stack_lvl+0x241/0x360 [ 398.938673][T16028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.943892][T16028] ? __pfx__printk+0x10/0x10 [ 398.948506][T16028] ? _printk+0xd5/0x120 [ 398.952683][T16028] ? __virt_addr_valid+0x183/0x530 [ 398.957808][T16028] ? __virt_addr_valid+0x183/0x530 [ 398.962940][T16028] print_report+0x169/0x550 [ 398.967463][T16028] ? __virt_addr_valid+0x183/0x530 [ 398.972591][T16028] ? __virt_addr_valid+0x183/0x530 [ 398.977712][T16028] ? __virt_addr_valid+0x45f/0x530 [ 398.982815][T16028] ? __phys_addr+0xba/0x170 [ 398.987318][T16028] ? smk_access+0xae/0x4e0 [ 398.991745][T16028] kasan_report+0x143/0x180 [ 398.996248][T16028] ? smk_access+0xae/0x4e0 [ 399.000656][T16028] smk_access+0xae/0x4e0 [ 399.004895][T16028] smack_watch_key+0x2f4/0x3a0 [ 399.009651][T16028] ? __pfx_smack_watch_key+0x10/0x10 [ 399.014926][T16028] ? __kasan_kmalloc+0x98/0xb0 [ 399.019686][T16028] security_watch_key+0x86/0x250 [ 399.024652][T16028] keyctl_watch_key+0x2b7/0x480 [ 399.030108][T16028] __se_sys_keyctl+0x106/0xa50 [ 399.034874][T16028] ? do_futex+0x392/0x560 [ 399.039225][T16028] ? __pfx___se_sys_keyctl+0x10/0x10 [ 399.044530][T16028] ? __pfx_do_futex+0x10/0x10 [ 399.049219][T16028] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 399.055219][T16028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 399.061556][T16028] ? do_syscall_64+0x100/0x230 [ 399.066412][T16028] ? __x64_sys_keyctl+0x20/0xc0 [ 399.071248][T16028] do_syscall_64+0xf3/0x230 [ 399.075741][T16028] ? clear_bhb_loop+0x35/0x90 [ 399.080417][T16028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.086327][T16028] RIP: 0033:0x7f64e117def9 [ 399.090749][T16028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.110368][T16028] RSP: 002b:00007f64e1ffe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 399.118856][T16028] RAX: ffffffffffffffda RBX: 00007f64e1335f80 RCX: 00007f64e117def9 [ 399.126853][T16028] RDX: 0000000000000004 RSI: 000000001694d9d6 RDI: 0000000000000020 [ 399.134855][T16028] RBP: 00007f64e11f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 399.142848][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.150842][T16028] R13: 0000000000000000 R14: 00007f64e1335f80 R15: 00007ffce5871a08 [ 399.158850][T16028] [ 399.161879][T16028] [ 399.164204][T16028] Allocated by task 7351: [ 399.168527][T16028] kasan_save_track+0x3f/0x80 [ 399.173221][T16028] __kasan_kmalloc+0x98/0xb0 [ 399.177823][T16028] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 399.184260][T16028] kvasprintf+0xdf/0x190 [ 399.188522][T16028] kobject_set_name_vargs+0x61/0x120 [ 399.193825][T16028] kobject_init_and_add+0xde/0x190 [ 399.198961][T16028] netdev_queue_update_kobjects+0x1f5/0x550 [ 399.204890][T16028] netdev_register_kobject+0x265/0x310 [ 399.210375][T16028] register_netdevice+0x12c5/0x1b00 [ 399.215600][T16028] wg_newlink+0x355/0x640 [ 399.219959][T16028] rtnl_newlink+0x1591/0x20a0 [ 399.224668][T16028] rtnetlink_rcv_msg+0x73f/0xcf0 [ 399.229620][T16028] netlink_rcv_skb+0x1e3/0x430 [ 399.234325][ T1853] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 399.234395][T16028] netlink_unicast+0x7f6/0x990 [ 399.246787][T16028] netlink_sendmsg+0x8e4/0xcb0 [ 399.251562][T16028] __sock_sendmsg+0x221/0x270 [ 399.256253][T16028] __sys_sendto+0x398/0x4f0 [ 399.260770][T16028] __x64_sys_sendto+0xde/0x100 [ 399.265544][T16028] do_syscall_64+0xf3/0x230 [ 399.270058][T16028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.275969][T16028] [ 399.278293][T16028] The buggy address belongs to the object at ffff8880699326c0 [ 399.278293][T16028] which belongs to the cache kmalloc-8 of size 8 [ 399.292009][T16028] The buggy address is located 0 bytes inside of [ 399.292009][T16028] allocated 5-byte region [ffff8880699326c0, ffff8880699326c5) [ 399.305810][T16028] [ 399.308119][T16028] The buggy address belongs to the physical page: [ 399.314527][T16028] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x69932 [ 399.323273][T16028] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 399.330396][T16028] page_type: 0xfdffffff(slab) [ 399.335070][T16028] raw: 00fff00000000000 ffff88801a841500 dead000000000100 dead000000000122 [ 399.343657][T16028] raw: 0000000000000000 0000000080800080 00000001fdffffff 0000000000000000 [ 399.352222][T16028] page dumped because: kasan: bad access detected [ 399.358662][T16028] page_owner tracks the page as allocated [ 399.364361][T16028] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5217, tgid 5217 (syz-executor), ts 69688891078, free_ts 69688798079 [ 399.383628][T16028] post_alloc_hook+0x1f3/0x230 [ 399.388408][T16028] get_page_from_freelist+0x2e4c/0x2f10 [ 399.393971][T16028] __alloc_pages_noprof+0x256/0x6c0 [ 399.399181][T16028] alloc_slab_page+0x5f/0x120 [ 399.403863][T16028] allocate_slab+0x5a/0x2f0 [ 399.408356][T16028] ___slab_alloc+0xcd1/0x14b0 [ 399.413021][T16028] __slab_alloc+0x58/0xa0 [ 399.417336][T16028] __kmalloc_node_noprof+0x286/0x440 [ 399.422623][T16028] __vmalloc_node_range_noprof+0x5e3/0x1400 [ 399.428524][T16028] vzalloc_noprof+0x79/0x90 [ 399.433034][T16028] alloc_counters+0xd7/0x740 [ 399.437619][T16028] do_ip6t_get_ctl+0xecc/0x1820 [ 399.442498][T16028] nf_getsockopt+0x299/0x2c0 [ 399.447082][T16028] ipv6_getsockopt+0x23e/0x360 [ 399.451831][T16028] tcp_getsockopt+0x163/0x1c0 [ 399.456498][T16028] do_sock_getsockopt+0x3c4/0x7e0 [ 399.461613][T16028] page last free pid 5217 tgid 5217 stack trace: [ 399.467933][T16028] free_unref_page+0xd19/0xea0 [ 399.472682][T16028] vfree+0x186/0x2e0 [ 399.476578][T16028] __do_replace+0x874/0xa50 [ 399.481060][T16028] do_ip6t_set_ctl+0xf11/0x1270 [ 399.485912][T16028] nf_setsockopt+0x295/0x2c0 [ 399.487833][ T1853] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.490503][T16028] do_sock_setsockopt+0x3af/0x720 [ 399.490532][T16028] __sys_setsockopt+0x1a8/0x250 [ 399.507558][ T1853] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.510426][T16028] __x64_sys_setsockopt+0xb5/0xd0 [ 399.510454][T16028] do_syscall_64+0xf3/0x230 [ 399.520968][ T1853] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 399.524284][T16028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.524319][T16028] [ 399.524324][T16028] Memory state around the buggy address: [ 399.524334][T16028] ffff888069932580: 05 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 399.524347][T16028] ffff888069932600: 05 fc fc fc 05 fc fc fc fa fc fc fc 04 fc fc fc [ 399.528906][ T1853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 399.537914][T16028] >ffff888069932680: 04 fc fc fc 00 fc fc fc 05 fc fc fc 06 fc fc fc [ 399.537929][T16028] ^ [ 399.537938][T16028] ffff888069932700: 05 fc fc fc 05 fc fc fc fa fc fc fc 00 fc fc fc [ 399.537947][T16028] ffff888069932780: 05 fc fc fc 04 fc fc fc fa fc fc fc 05 fc fc fc [ 399.537956][T16028] ================================================================== [ 399.542844][T16028] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 399.542861][T16028] CPU: 0 UID: 60928 PID: 16028 Comm: syz.4.4756 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 399.542883][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 399.542894][T16028] Call Trace: [ 399.542902][T16028] [ 399.542910][T16028] dump_stack_lvl+0x241/0x360 [ 399.542937][T16028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.542957][T16028] ? __pfx__printk+0x10/0x10 [ 399.542974][T16028] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 399.543001][T16028] ? vscnprintf+0x5d/0x90 [ 399.543023][T16028] panic+0x349/0x860 [ 399.543042][T16028] ? check_panic_on_warn+0x21/0xb0 [ 399.543061][T16028] ? __pfx_panic+0x10/0x10 [ 399.543084][T16028] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 399.543108][T16028] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 399.543136][T16028] check_panic_on_warn+0x86/0xb0 [ 399.543154][T16028] ? smk_access+0xae/0x4e0 [ 399.543174][T16028] end_report+0x77/0x160 [ 399.543195][T16028] kasan_report+0x154/0x180 [ 399.543216][T16028] ? smk_access+0xae/0x4e0 [ 399.543239][T16028] smk_access+0xae/0x4e0 [ 399.543263][T16028] smack_watch_key+0x2f4/0x3a0 [ 399.543283][T16028] ? __pfx_smack_watch_key+0x10/0x10 [ 399.543307][T16028] ? __kasan_kmalloc+0x98/0xb0 [ 399.543329][T16028] security_watch_key+0x86/0x250 [ 399.543353][T16028] keyctl_watch_key+0x2b7/0x480 [ 399.543374][T16028] __se_sys_keyctl+0x106/0xa50 [ 399.543393][T16028] ? do_futex+0x392/0x560 [ 399.543412][T16028] ? __pfx___se_sys_keyctl+0x10/0x10 [ 399.543433][T16028] ? __pfx_do_futex+0x10/0x10 [ 399.543461][T16028] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 399.543484][T16028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 399.543507][T16028] ? do_syscall_64+0x100/0x230 [ 399.543528][T16028] ? __x64_sys_keyctl+0x20/0xc0 [ 399.543551][T16028] do_syscall_64+0xf3/0x230 [ 399.543570][T16028] ? clear_bhb_loop+0x35/0x90 [ 399.543588][T16028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.543619][T16028] RIP: 0033:0x7f64e117def9 [ 399.543634][T16028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.543648][T16028] RSP: 002b:00007f64e1ffe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 399.543668][T16028] RAX: ffffffffffffffda RBX: 00007f64e1335f80 RCX: 00007f64e117def9 [ 399.543681][T16028] RDX: 0000000000000004 RSI: 000000001694d9d6 RDI: 0000000000000020 [ 399.543693][T16028] RBP: 00007f64e11f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 399.543704][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.543716][T16028] R13: 0000000000000000 R14: 00007f64e1335f80 R15: 00007ffce5871a08 [ 399.543735][T16028] [ 399.545502][T16028] Kernel Offset: disabled