last executing test programs: 1m47.525081077s ago: executing program 2 (id=1066): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000580)="3c3513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m47.337884154s ago: executing program 2 (id=1070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 1m47.10895835s ago: executing program 2 (id=1075): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1m46.913798493s ago: executing program 2 (id=1079): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 1m46.554817595s ago: executing program 2 (id=1085): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m46.338779625s ago: executing program 2 (id=1086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m31.189107222s ago: executing program 32 (id=1086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.150783588s ago: executing program 5 (id=2448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='ext4_sync_fs\x00', r0, 0x0, 0x2}, 0x18) sync() 2.653137368s ago: executing program 5 (id=2456): execveat(0xffffffffffffff9c, 0x0, &(0x7f0000000400)={[&(0x7f0000000180)='+-&-},.{\x00']}, 0x0, 0x1000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) 2.349450857s ago: executing program 5 (id=2462): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) 2.18557949s ago: executing program 5 (id=2464): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010d90472a000000000000109022400010000000009040100020300000009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x20, 0x5, 0x4, {0x4, 0x19, "261b"}}, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x3, 0xc0, 0x6, "269783e4", "bb9a386c"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x0, 0x5, 0x47, 0x8000, 0x8}}}, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x20, 0x2}}, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000540)={0x40, 0xb, 0x2, "c80c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xf}, 0x0}) 1.505600385s ago: executing program 3 (id=2474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 1.456399028s ago: executing program 3 (id=2476): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 1.385399452s ago: executing program 3 (id=2477): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 1.163615068s ago: executing program 4 (id=2479): mkdir(&(0x7f0000000100)='./control\x00', 0x184) open(&(0x7f00000000c0)='./control\x00', 0x573382, 0x113) rmdir(&(0x7f0000000280)='./control\x00') 1.136348702s ago: executing program 3 (id=2480): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x1, {0xa}, [@nested={0xc, 0xca, 0x0, 0x1, [@nested={0x8, 0x9, 0x0, 0x1, [@generic="9ab8ce70"]}]}]}, 0x20}}, 0x0) 1.006117041s ago: executing program 1 (id=2482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000900)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000100000017000000500006804c0004"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x24040004) 1.002759989s ago: executing program 0 (id=2483): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) getdents(r0, 0xfffffffffffffffd, 0x3b) 910.759179ms ago: executing program 4 (id=2484): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001200010000000000000000001c0000004c00350000000000000000000c0029"], 0x83}], 0x1}, 0x0) 910.442178ms ago: executing program 3 (id=2485): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000240)) 885.228348ms ago: executing program 3 (id=2486): ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) 845.026346ms ago: executing program 0 (id=2487): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff000000050001000100000006000800"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 759.387096ms ago: executing program 1 (id=2488): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x41}}], 0x88}, 0x0) 741.286305ms ago: executing program 4 (id=2489): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') pread64(r0, &(0x7f0000000140)=""/74, 0x4a, 0x92) lseek(r0, 0x100000000, 0x0) 720.387117ms ago: executing program 0 (id=2490): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x80, 0xfffffffffffffff9}], 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x42, 0x4b}) 642.857587ms ago: executing program 1 (id=2491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) clock_getres(0x7, 0x0) 617.354617ms ago: executing program 0 (id=2492): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x9e8, 0x358, 0x358, 0x9e8, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xff000000, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0) 575.485004ms ago: executing program 4 (id=2493): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2s-224,ecb(cast5))\x00'}, 0x24) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -922337203685477953'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 554.634427ms ago: executing program 0 (id=2494): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000076030000fcff00008500000086000000bf09000000000000550901008004000095b7ad4839000000bf91000006000000b70200000300000085000000c2000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 493.79871ms ago: executing program 1 (id=2495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0xffffffff, 0x25dfdbfe, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 374.709886ms ago: executing program 0 (id=2496): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='loginuid\x00') exit(0xffff) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000006c0)=""/199, 0xc7}], 0x1, 0x8, 0x6) 374.394911ms ago: executing program 4 (id=2497): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0xfffffffffffffea9, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}, 0x6}], 0x1, 0x0, 0x0) 359.080939ms ago: executing program 1 (id=2498): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073"], 0x68}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 231.792053ms ago: executing program 5 (id=2499): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0xffe0}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) 91.130848ms ago: executing program 4 (id=2500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) 90.261636ms ago: executing program 1 (id=2501): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 0s ago: executing program 5 (id=2502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x20, r1, 0x301, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008890}, 0x10) kernel console output (not intermixed with test programs): 046][ T6869] netlink: 52 bytes leftover after parsing attributes in process `syz.0.428'. [ 139.402621][ T5901] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 139.556701][ T5901] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 139.556729][ T5901] usb 3-1: config 0 has no interface number 0 [ 139.556777][ T5901] usb 3-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.556802][ T5901] usb 3-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.558355][ T5901] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=22.00 [ 139.558382][ T5901] usb 3-1: New USB device strings: Mfr=17, Product=0, SerialNumber=0 [ 139.558401][ T5901] usb 3-1: Manufacturer: syz [ 139.569530][ T5901] usb 3-1: config 0 descriptor?? [ 139.772669][ T5922] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.926051][ T5922] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.926077][ T5922] usb 1-1: config 0 has no interface number 0 [ 139.926179][ T5922] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.926211][ T5922] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.926248][ T5922] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 139.926269][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.948449][ T5922] usb 1-1: config 0 descriptor?? [ 140.028223][ T6898] comedi comedi3: comedi_test: 20263 microvolt, 31 microsecond waveform attached [ 140.140263][ T5901] uclogic 0003:5543:0522.000B: unbalanced delimiter at end of report description [ 140.151291][ T5901] uclogic 0003:5543:0522.000B: parse failed [ 140.151449][ T5901] uclogic 0003:5543:0522.000B: probe with driver uclogic failed with error -22 [ 140.319565][ T5901] usb 3-1: USB disconnect, device number 5 [ 140.374057][ T5679] libceph: connect (1)[c::]:6789 error -101 [ 140.375428][ T5679] libceph: mon0 (1)[c::]:6789 connect error [ 140.381812][ T5679] libceph: connect (1)[c::]:6789 error -101 [ 140.382020][ T5679] libceph: mon0 (1)[c::]:6789 connect error [ 140.433816][ T5922] uclogic 0003:256C:006D.000C: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input1 [ 140.620004][ T5922] usb 1-1: USB disconnect, device number 7 [ 140.645523][ T9] libceph: connect (1)[c::]:6789 error -101 [ 140.645730][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 140.972260][ T6913] ptrace attach of "./syz-executor exec"[5845] was attempted by ""[6913] [ 141.121055][ T6901] ceph: No mds server is up or the cluster is laggy [ 141.154853][ T5679] libceph: connect (1)[c::]:6789 error -101 [ 141.155103][ T5679] libceph: mon0 (1)[c::]:6789 connect error [ 141.641565][ T6928] IPVS: Error joining to the multicast group [ 142.009648][ T6946] warning: `syz.0.464' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.132824][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 143.595531][ T6996] tipc: Started in network mode [ 143.595559][ T6996] tipc: Node identity ac141413, cluster identity 4711 [ 143.597049][ T6996] tipc: New replicast peer: 10.1.1.2 [ 143.597458][ T6996] tipc: Enabled bearer , priority 10 [ 144.126763][ T7013] binder: 7010:7013 ioctl 400c620e 200000000000 returned -22 [ 144.420543][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.662212][ T7035] process 'syz.2.503' launched './file0' with NULL argv: empty string added [ 144.722707][ T5923] tipc: Node number set to 2886997011 [ 145.129565][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'. [ 145.129594][ T7050] netlink: 56 bytes leftover after parsing attributes in process `syz.2.511'. [ 145.129610][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 145.228394][ T7054] Invalid ELF header magic: != ELF [ 145.312653][ T5923] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.466709][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.466742][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.466778][ T5923] usb 4-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 145.466801][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.511336][ T5923] usb 4-1: config 0 descriptor?? [ 145.940930][ T5923] hid (null): usage index exceeded [ 145.960124][ T5923] wacom 0003:056A:00F4.000D: ignoring exceeding usage max [ 145.961401][ T5923] wacom 0003:056A:00F4.000D: ignoring exceeding usage max [ 145.961418][ T5923] wacom 0003:056A:00F4.000D: usage index exceeded [ 145.961430][ T5923] wacom 0003:056A:00F4.000D: item 0 1 2 2 parsing failed [ 145.962264][ T5923] wacom 0003:056A:00F4.000D: parse failed [ 145.962369][ T5923] wacom 0003:056A:00F4.000D: probe with driver wacom failed with error -22 [ 146.186404][ T5923] usb 4-1: USB disconnect, device number 6 [ 146.247036][ T7088] syz.1.529 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 146.255148][ T7086] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 146.255201][ T7086] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 146.255286][ T7086] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 146.255416][ T7086] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 146.255464][ T7086] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 146.255527][ T7086] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 146.255647][ T7086] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 146.255692][ T7086] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 146.255735][ T7086] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 146.255822][ T7086] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 146.255867][ T7086] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 146.255912][ T7086] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 148.217401][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.559'. [ 148.381592][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 148.465173][ T7165] syz.2.567 uses obsolete (PF_INET,SOCK_PACKET) [ 148.803178][ T7176] macvlan2: entered promiscuous mode [ 148.803210][ T7176] macvlan2: entered allmulticast mode [ 149.142594][ T5922] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.292610][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 149.296513][ T5922] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.296545][ T5922] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.296579][ T5922] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 149.296601][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.321141][ T5922] usb 1-1: config 0 descriptor?? [ 149.516781][ T7196] genirq: Flags mismatch irq 10. 00202000 (das16m1) vs. 00202080 (virtio2) [ 149.807157][ T5922] kye 0003:0458:0087.000E: unknown main item tag 0x0 [ 149.807207][ T5922] kye 0003:0458:0087.000E: unknown main item tag 0x0 [ 149.807235][ T5922] kye 0003:0458:0087.000E: unknown main item tag 0x0 [ 149.807262][ T5922] kye 0003:0458:0087.000E: unknown main item tag 0x0 [ 149.807288][ T5922] kye 0003:0458:0087.000E: unknown main item tag 0x0 [ 149.820433][ T5922] kye 0003:0458:0087.000E: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.0-1/input0 [ 150.022174][ T5922] usb 1-1: USB disconnect, device number 8 [ 150.225509][ T5842] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 150.225609][ T5842] Bluetooth: hci1: Injecting HCI hardware error event [ 150.227474][ T5842] Bluetooth: hci1: hardware error 0x00 [ 150.402250][ T7225] netlink: 'syz.2.591': attribute type 16 has an invalid length. [ 151.110386][ T7249] Bluetooth: MGMT ver 1.23 [ 151.157459][ T7257] devpts: Bad value for 'max' [ 151.550806][ T7275] tipc: Enabled bearer , priority 10 [ 152.189723][ T7307] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 152.462780][ T5842] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 152.502676][ T5679] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 152.680016][ T5679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.680052][ T5679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 152.680078][ T5679] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 152.680204][ T5679] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 152.680227][ T5679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.751341][ T5679] usb 3-1: config 0 descriptor?? [ 152.758754][ T7309] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.842565][ T5909] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.995020][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.995110][ T5909] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 152.995133][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.016466][ T5909] usb 5-1: config 0 descriptor?? [ 153.088760][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.182401][ T5679] aureal 0003:0755:2626.000F: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 153.196739][ T5679] aureal 0003:0755:2626.000F: unknown main item tag 0x6 [ 153.196777][ T5679] aureal 0003:0755:2626.000F: report_id 29495 is invalid [ 153.196793][ T5679] aureal 0003:0755:2626.000F: item 0 2 1 8 parsing failed [ 153.197632][ T5679] aureal 0003:0755:2626.000F: probe with driver aureal failed with error -22 [ 153.391916][ T7329] [U]  [ 153.438368][ T5922] usb 3-1: USB disconnect, device number 6 [ 153.506806][ T5909] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 153.506844][ T5909] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 153.506872][ T5909] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 153.506898][ T5909] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 153.541261][ T5909] elecom 0003:056E:00FC.0010: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.4-1/input0 [ 153.730865][ T5901] usb 5-1: USB disconnect, device number 7 [ 154.032760][ T37] audit: type=1326 audit(1759086684.103:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7340 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 154.034975][ T37] audit: type=1326 audit(1759086684.113:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7340 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 154.037949][ T37] audit: type=1326 audit(1759086684.113:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7340 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 154.111592][ T37] audit: type=1326 audit(1759086684.113:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7340 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 154.111895][ T37] audit: type=1326 audit(1759086684.183:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7340 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 154.112198][ T37] audit: type=1326 audit(1759086684.183:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7340 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 154.177497][ T37] audit: type=1326 audit(1759086684.183:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7340 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 154.566259][ T7360] program syz.2.653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.752958][ T5849] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.926320][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 154.928985][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.929017][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.930886][ T5849] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.930915][ T5849] usb 5-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 154.930939][ T5849] usb 5-1: Manufacturer: syz [ 154.996944][ T5849] usb 5-1: config 0 descriptor?? [ 155.008907][ T5849] hub 5-1:0.0: USB hub found [ 155.223546][ T5849] hub 5-1:0.0: 1 port detected [ 155.424481][ T5849] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 155.424507][ T5849] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 155.454332][ T5849] usbhid 5-1:0.0: can't add hid device: -71 [ 155.454449][ T5849] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 155.478107][ T5849] usb 5-1: USB disconnect, device number 8 [ 155.726920][ T7386] netlink: 256 bytes leftover after parsing attributes in process `syz.3.667'. [ 155.727008][ T7386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.667'. [ 156.326140][ T7414] program syz.4.680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.379101][ T37] audit: type=1800 audit(1759086686.433:16): pid=7416 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.681" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 156.482711][ T5901] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.634047][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 156.641397][ T5901] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 156.641426][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.641445][ T5901] usb 4-1: Product: syz [ 156.641459][ T5901] usb 4-1: Manufacturer: syz [ 156.641473][ T5901] usb 4-1: SerialNumber: syz [ 156.658293][ T5901] usb 4-1: config 0 descriptor?? [ 157.079252][ T5901] airspy 4-1:0.0: Board ID: 00 [ 157.079275][ T5901] airspy 4-1:0.0: Firmware version: [ 157.280353][ T5901] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 157.302799][ T5901] airspy 4-1:0.0: Registered as swradio24 [ 157.302819][ T5901] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 157.313859][ T5901] usb 4-1: USB disconnect, device number 7 [ 157.509857][ T5849] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.677078][ T5849] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.677109][ T5849] usb 2-1: config 0 interface 0 has no altsetting 0 [ 157.677141][ T5849] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 157.677162][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.721492][ T5849] usb 2-1: config 0 descriptor?? [ 158.196052][ T5849] apple 0003:05AC:027A.0011: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 158.272825][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.705'. [ 158.369239][ T5901] usb 2-1: USB disconnect, device number 9 [ 158.802805][ T7491] netlink: 'syz.0.714': attribute type 4 has an invalid length. [ 158.942831][ T5842] Bluetooth: hci4: command tx timeout [ 159.442632][ T5909] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 159.463314][ T5849] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.517786][ T37] audit: type=1326 audit(1759086689.593:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 159.524801][ T37] audit: type=1326 audit(1759086689.603:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 159.524848][ T37] audit: type=1326 audit(1759086689.603:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 159.524884][ T37] audit: type=1326 audit(1759086689.603:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 159.545266][ T37] audit: type=1326 audit(1759086689.613:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 159.545316][ T37] audit: type=1326 audit(1759086689.613:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 159.545355][ T37] audit: type=1326 audit(1759086689.613:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 159.595189][ T5909] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.595222][ T5909] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 159.595247][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.595278][ T5909] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 159.595299][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.638352][ T5849] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 159.638379][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.750877][ T5909] usb 3-1: config 0 descriptor?? [ 159.751898][ T7513] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 159.781656][ T5849] usb 2-1: config 0 descriptor?? [ 159.805702][ T5849] gspca_main: spca508-2.14.0 probing 8086:0110 [ 160.002019][ T5849] gspca_spca508: reg_read err -32 [ 160.022586][ T5901] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.023039][ T990] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 160.180646][ T990] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 160.180675][ T990] usb 4-1: config 0 has no interface number 0 [ 160.183458][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 160.192195][ T5901] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 160.192301][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 160.192354][ T5901] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 160.192376][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.205798][ T5849] gspca_spca508: reg_read err -71 [ 160.206197][ T5849] gspca_spca508: reg_read err -71 [ 160.206564][ T5849] gspca_spca508: reg_read err -71 [ 160.206930][ T5849] gspca_spca508: reg write: error -71 [ 160.207004][ T5849] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 160.245709][ T990] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 160.245738][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.245756][ T990] usb 4-1: Product: syz [ 160.245770][ T990] usb 4-1: Manufacturer: syz [ 160.245783][ T990] usb 4-1: SerialNumber: syz [ 160.248080][ T5901] usb 5-1: config 0 descriptor?? [ 160.260173][ T5909] uclogic 0003:28BD:0074.0012: interface is invalid, ignoring [ 160.271035][ T990] usb 4-1: config 0 descriptor?? [ 160.302847][ T5849] usb 2-1: USB disconnect, device number 10 [ 160.403919][ T5909] usb 3-1: USB disconnect, device number 7 [ 160.695330][ T5901] hid_parser_main: 1 callbacks suppressed [ 160.695353][ T5901] saitek 0003:06A3:0621.0013: unknown main item tag 0x0 [ 160.695385][ T5901] saitek 0003:06A3:0621.0013: unknown main item tag 0x0 [ 160.695412][ T5901] saitek 0003:06A3:0621.0013: unknown main item tag 0x0 [ 160.695438][ T5901] saitek 0003:06A3:0621.0013: unknown main item tag 0x0 [ 160.695465][ T5901] saitek 0003:06A3:0621.0013: unknown main item tag 0x0 [ 160.710638][ T5901] saitek 0003:06A3:0621.0013: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.4-1/input0 [ 160.896493][ T990] usb 4-1: Firmware version (0.0) predates our first public release. [ 160.896519][ T990] usb 4-1: Please update to version 0.2 or newer [ 160.934664][ T5909] usb 5-1: USB disconnect, device number 9 [ 161.086281][ T990] usb 4-1: USB disconnect, device number 8 [ 161.690847][ T7576] vlan2: entered allmulticast mode [ 161.690869][ T7576] bond0: entered allmulticast mode [ 161.690881][ T7576] bond_slave_0: entered allmulticast mode [ 161.690904][ T7576] bond_slave_1: entered allmulticast mode [ 161.691364][ T7576] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 161.754773][ T5849] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 161.905497][ T5849] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 161.905526][ T5849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.905545][ T5849] usb 5-1: config 0 has no interface number 0 [ 161.905594][ T5849] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 161.905615][ T5849] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.908650][ T5849] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 161.908677][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.908696][ T5849] usb 5-1: Product: syz [ 161.908710][ T5849] usb 5-1: Manufacturer: syz [ 161.908724][ T5849] usb 5-1: SerialNumber: syz [ 162.007414][ T5849] usb 5-1: config 0 descriptor?? [ 162.628442][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 162.665994][ T45] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 162.686391][ T990] usb 5-1: USB disconnect, device number 10 [ 162.785308][ T7618] netlink: 'syz.0.775': attribute type 4 has an invalid length. [ 162.785329][ T7618] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.775'. [ 162.797307][ T7616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.810354][ T5849] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.844398][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.844431][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.844453][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 162.844494][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00 [ 162.844516][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.860142][ T45] usb 3-1: config 0 descriptor?? [ 162.978858][ T7622] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.982696][ T7622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.982712][ T7622] IPv6: NLM_F_CREATE should be set when creating new route [ 162.982898][ T7622] IPv6: NLM_F_CREATE should be set when creating new route [ 162.982932][ T7622] IPv6: NLM_F_CREATE should be set when creating new route [ 162.986080][ T7622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.986415][ T7622] Zero length message leads to an empty skb [ 162.995986][ T5849] usb 4-1: Using ep0 maxpacket: 8 [ 162.999339][ T5849] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.035700][ T5849] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 163.035728][ T5849] usb 4-1: config 4 has no interface number 0 [ 163.035761][ T5849] usb 4-1: config 4 interface 30 has no altsetting 0 [ 163.073659][ T5849] usb 4-1: string descriptor 0 read error: -22 [ 163.073812][ T5849] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 163.073834][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.114574][ T5849] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 163.114631][ T5849] dw2102: su3000_power_ctrl: 1, initialized 0 [ 163.115183][ T5849] dvb-usb: bulk message failed: -22 (2/0) [ 163.158827][ T5849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.160630][ T5849] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 163.160702][ T5849] usb 4-1: media controller created [ 163.183626][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 163.183646][ T5849] dw2102: i2c transfer failed. [ 163.183672][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 163.183685][ T5849] dw2102: i2c transfer failed. [ 163.183701][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 163.183714][ T5849] dw2102: i2c transfer failed. [ 163.183730][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 163.183742][ T5849] dw2102: i2c transfer failed. [ 163.183758][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 163.183771][ T5849] dw2102: i2c transfer failed. [ 163.183797][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 163.183809][ T5849] dw2102: i2c transfer failed. [ 163.183817][ T5849] dvb-usb: MAC address: 02:02:02:02:02:02 [ 163.229898][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.315720][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 163.315741][ T5849] dw2102: command 0x0e transfer failed. [ 163.315751][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 163.315772][ T5849] dw2102: command 0x0e transfer failed. [ 163.321525][ T45] hid-generic 0003:045E:008E.0014: unbalanced collection at end of report description [ 163.360175][ T45] hid-generic 0003:045E:008E.0014: probe with driver hid-generic failed with error -22 [ 163.540300][ T5909] usb 3-1: USB disconnect, device number 8 [ 163.638218][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 163.638241][ T5849] dw2102: command 0x0e transfer failed. [ 163.638250][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 163.638263][ T5849] dw2102: command 0x0e transfer failed. [ 163.638270][ T5849] dvb-usb: bulk message failed: -22 (1/0) [ 163.638283][ T5849] dw2102: command 0x51 transfer failed. [ 163.638291][ T5849] dvb-usb: bulk message failed: -22 (5/0) [ 163.638303][ T5849] dw2102: i2c probe for address 0x68 failed. [ 163.638314][ T5849] dvb-usb: bulk message failed: -22 (5/0) [ 163.638326][ T5849] dw2102: i2c probe for address 0x69 failed. [ 163.638353][ T5849] dvb-usb: bulk message failed: -22 (5/0) [ 163.638366][ T5849] dw2102: i2c probe for address 0x6a failed. [ 163.638381][ T5849] dw2102: probing for demodulator failed. Is the external power switched on? [ 163.638390][ T5849] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 163.765910][ T5849] rc_core: IR keymap rc-tt-1500 not found [ 163.765930][ T5849] Registered IR keymap rc-empty [ 163.768224][ T5849] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 163.787169][ T5849] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10 [ 163.795741][ T5849] dvb-usb: schedule remote query interval to 250 msecs. [ 163.795763][ T5849] dw2102: su3000_power_ctrl: 0, initialized 1 [ 163.795775][ T5849] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 163.801847][ T5849] usb 4-1: USB disconnect, device number 9 [ 163.917691][ T5923] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 164.025246][ T5849] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 164.080849][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.080896][ T5923] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 164.080919][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.113185][ T5923] usb 2-1: config 0 descriptor?? [ 164.135768][ T37] audit: type=1326 audit(1759086694.143:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7651 comm="syz.4.789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x0 [ 164.618363][ T5923] kye 0003:0458:500F.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 164.619435][ T5923] kye 0003:0458:500F.0015: unknown main item tag 0x3 [ 164.677656][ T5923] kye 0003:0458:500F.0015: hidraw0: USB HID v0.01 Device [HID 0458:500f] on usb-dummy_hcd.1-1/input0 [ 164.677696][ T5923] kye 0003:0458:500F.0015: tablet-enabling feature report not found [ 164.677708][ T5923] kye 0003:0458:500F.0015: tablet enabling failed [ 164.890371][ T5923] usb 2-1: USB disconnect, device number 11 [ 164.993980][ T7683] comedi: No check for data length of config insn id 1003 is implemented [ 164.993998][ T7683] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 164.994011][ T7683] comedi: Assuming n=15 is correct [ 165.570161][ T7707] netlink: 'syz.1.816': attribute type 29 has an invalid length. [ 165.578146][ T7707] netlink: 'syz.1.816': attribute type 29 has an invalid length. [ 165.715457][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 165.734399][ T7713] dummy0: entered promiscuous mode [ 165.769264][ T7713] dummy0: left promiscuous mode [ 166.246689][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.828'. [ 166.415707][ T37] audit: type=1326 audit(1759086696.363:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7736 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 166.415755][ T37] audit: type=1326 audit(1759086696.363:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7736 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 166.462680][ T37] audit: type=1326 audit(1759086696.412:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7736 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 166.462743][ T37] audit: type=1326 audit(1759086696.412:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7736 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 166.485650][ T37] audit: type=1326 audit(1759086696.431:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7736 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 166.551819][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.833'. [ 166.597233][ T37] audit: type=1326 audit(1759086696.548:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7736 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 166.597279][ T37] audit: type=1326 audit(1759086696.548:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7736 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659affeec9 code=0x7ffc0000 [ 167.526955][ T7777] sctp: [Deprecated]: syz.1.849 (pid 7777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.526955][ T7777] Use struct sctp_sack_info instead [ 167.870432][ T7791] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 167.908719][ T5842] Bluetooth: hci4: link tx timeout [ 167.909060][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.076197][ T7799] @: renamed from vlan0 (while UP) [ 168.446688][ T7814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.868'. [ 168.670836][ T7822] netdevsim netdevsim1: Direct firmware load for . [ 168.670836][ T7822] failed with error -2 [ 168.670861][ T7822] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 168.670861][ T7822] [ 169.190007][ T7836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.007672][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 170.028143][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 170.170232][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.170263][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.170280][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.170325][ T9] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 170.170346][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.180143][ T9] usb 2-1: config 0 descriptor?? [ 170.293052][ T5849] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.446010][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 170.451709][ T5849] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.470763][ T5849] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 170.470847][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.470866][ T5849] usb 5-1: Product: syz [ 170.470880][ T5849] usb 5-1: Manufacturer: syz [ 170.470893][ T5849] usb 5-1: SerialNumber: syz [ 170.522759][ T5849] usb 5-1: config 0 descriptor?? [ 170.676766][ T9] elo 0003:04E7:0030.0016: reserved main item tag 0xe [ 170.676808][ T9] elo 0003:04E7:0030.0016: item fetching failed at offset 8/9 [ 170.678054][ T9] elo 0003:04E7:0030.0016: parse failed [ 170.678216][ T9] elo 0003:04E7:0030.0016: probe with driver elo failed with error -22 [ 170.890732][ T45] usb 2-1: USB disconnect, device number 12 [ 170.936528][ T7886] netlink: 'syz.3.902': attribute type 10 has an invalid length. [ 170.963536][ T5849] gs_usb 5-1:0.0: Configuring for 16 interfaces [ 170.963571][ T5849] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 170.963607][ T5849] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 171.175040][ T45] usb 5-1: USB disconnect, device number 11 [ 171.645999][ T7910] loop9: detected capacity change from 0 to 7 [ 171.651671][ T7910] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.651807][ T7910] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.652072][ T7910] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.652180][ T7910] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.652306][ T7910] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.652422][ T7910] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.652621][ T7910] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.652690][ T7910] ldm_validate_partition_table(): Disk read failed. [ 171.652735][ T7910] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.652836][ T7910] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.654063][ T7910] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.654281][ T7910] Dev loop9: unable to read RDB block 0 [ 171.654572][ T7910] loop9: unable to read partition table [ 171.654797][ T7910] loop9: partition table beyond EOD, truncated [ 171.654831][ T7910] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 171.654831][ T7910] ) failed (rc=-5) [ 171.955504][ T5849] Process accounting resumed [ 172.196837][ T5909] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 172.342976][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'. [ 172.363563][ T7938] vlan2: entered promiscuous mode [ 172.363584][ T7938] gretap0: entered promiscuous mode [ 172.368162][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 172.368194][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.368232][ T5909] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 172.368254][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.392014][ T5909] usb 2-1: config 0 descriptor?? [ 172.737786][ T7944] dvmrp0: entered allmulticast mode [ 172.739718][ T7947] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 172.739737][ T7947] netlink: 208 bytes leftover after parsing attributes in process `syz.3.931'. [ 172.739750][ T7947] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 172.739759][ T7947] netlink: 'syz.3.931': attribute type 2 has an invalid length. [ 172.751743][ T7941] dvmrp0: left allmulticast mode [ 172.904228][ T5909] samsung 0003:0419:0001.0017: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 172.974425][ T7953] netlink: 'syz.2.933': attribute type 2 has an invalid length. [ 173.084819][ T45] usb 2-1: USB disconnect, device number 13 [ 173.922155][ T7991] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 173.922890][ T45] kernel write not supported for file task/417/attr/keycreate (pid: 45 comm: kworker/1:1) [ 174.314850][ T8009] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 174.314891][ T8009] CIFS mount error: No usable UNC path provided in device string! [ 174.314891][ T8009] [ 174.315131][ T8009] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 174.593926][ T8026] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 174.750044][ T8029] xt_limit: Overflow, try lower: 271964/0 [ 175.750772][ T8069] syz.3.989 (8069) used greatest stack depth: 16760 bytes left [ 175.823229][ T8071] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 175.914322][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 176.820554][ T8105] sctp: [Deprecated]: syz.0.1007 (pid 8105) Use of int in max_burst socket option. [ 176.820554][ T8105] Use struct sctp_assoc_value instead [ 176.987203][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1011'. [ 177.005405][ T8113] vlan2: entered promiscuous mode [ 177.011559][ T8115] netlink: 'syz.1.1012': attribute type 2 has an invalid length. [ 177.550698][ T8136] /dev/nullb0: Can't open blockdev [ 177.831391][ T990] kernel write not supported for file /414/loginuid (pid: 990 comm: kworker/1:2) [ 177.998884][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 177.998912][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 178.031915][ T8156] macvlan2: entered promiscuous mode [ 178.187552][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'. [ 178.723648][ T8186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1047'. [ 178.723754][ T8186] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1047'. [ 179.136247][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1057'. [ 179.687700][ T8231] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1067'. [ 180.110733][ T8250] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1077'. [ 180.110763][ T8250] netlink: 'syz.3.1077': attribute type 5 has an invalid length. [ 180.192797][ T990] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 180.344288][ T990] usb 5-1: Using ep0 maxpacket: 32 [ 180.346708][ T990] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 180.346733][ T990] usb 5-1: config 0 has no interface number 0 [ 180.352382][ T990] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 180.352409][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.352427][ T990] usb 5-1: Product: syz [ 180.352441][ T990] usb 5-1: Manufacturer: syz [ 180.352454][ T990] usb 5-1: SerialNumber: syz [ 180.426978][ T990] usb 5-1: config 0 descriptor?? [ 180.443949][ T990] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 180.675458][ T990] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 180.715901][ T990] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 180.807439][ T8272] F2FS-fs: Conflicting test_dummy_encryption options [ 180.884361][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 181.087206][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 181.088101][ T5849] usb 5-1: USB disconnect, device number 12 [ 181.130226][ T5849] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 181.157599][ T5849] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 181.161053][ T5849] quatech2 5-1:0.51: device disconnected [ 181.656986][ T8293] netlink: 'syz.0.1097': attribute type 2 has an invalid length. [ 181.658250][ T8293] netlink: 'syz.0.1097': attribute type 2 has an invalid length. [ 183.226640][ T8341] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 183.694476][ T5849] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 183.772064][ T8358] __nla_validate_parse: 2 callbacks suppressed [ 183.772084][ T8358] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1127'. [ 183.865319][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.865365][ T5849] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 183.865385][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.911959][ T5849] usb 2-1: config 0 descriptor?? [ 184.349083][ T5849] kye 0003:0458:5010.0018: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 184.362100][ T5849] kye 0003:0458:5010.0018: unknown main item tag 0x0 [ 184.362138][ T5849] kye 0003:0458:5010.0018: unknown main item tag 0x0 [ 184.362163][ T5849] kye 0003:0458:5010.0018: unknown main item tag 0x0 [ 184.394051][ T5849] kye 0003:0458:5010.0018: hidraw0: USB HID v0.08 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 184.394085][ T5849] kye 0003:0458:5010.0018: tablet-enabling feature report not found [ 184.394100][ T5849] kye 0003:0458:5010.0018: tablet enabling failed [ 184.540564][ T5909] usb 2-1: USB disconnect, device number 14 [ 186.366566][ T5842] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 186.499337][ T8399] bridge1: entered promiscuous mode [ 186.499454][ T8399] bridge1: entered allmulticast mode [ 186.532614][ T8399] team0: Port device bridge1 added [ 186.621680][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1148'. [ 187.017296][ T8417] mmap: syz.1.1153 (8417) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.330847][ T37] audit: type=1326 audit(1759086716.991:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8424 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 187.333550][ T37] audit: type=1326 audit(1759086717.001:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8424 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 187.334222][ T37] audit: type=1326 audit(1759086717.001:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8424 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 187.338622][ T37] audit: type=1326 audit(1759086717.001:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8424 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 187.338670][ T37] audit: type=1326 audit(1759086717.001:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8424 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 187.338904][ T37] audit: type=1326 audit(1759086717.001:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8424 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 187.339653][ T37] audit: type=1326 audit(1759086717.001:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8424 comm="syz.4.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 188.266727][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 188.433797][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.433824][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 188.433876][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 188.433900][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.453716][ T9] usb 4-1: config 0 descriptor?? [ 188.471868][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 188.471924][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 188.524443][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 188.526639][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 188.526697][ T9] usb 4-1: media controller created [ 188.536391][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.556987][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 188.557138][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 188.575616][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 188.599121][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 188.599144][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 188.692124][ T5849] usb 4-1: USB disconnect, device number 10 [ 188.829194][ T5849] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 189.694205][ T37] audit: type=1326 audit(1759086719.347:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 189.716799][ T37] audit: type=1326 audit(1759086719.347:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 189.755485][ T37] audit: type=1326 audit(1759086719.406:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 190.072520][ T8496] xt_l2tp: missing protocol rule (udp|l2tpip) [ 190.419093][ T5841] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 190.419391][ T5841] Bluetooth: hci4: Injecting HCI hardware error event [ 190.505740][ T8511] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1195'. [ 191.021534][ T5842] Bluetooth: hci4: hardware error 0x00 [ 191.222998][ T45] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 191.377560][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.377594][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.377631][ T45] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 191.377653][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.426300][ T45] usb 5-1: config 0 descriptor?? [ 191.896672][ T45] elecom 0003:056E:010D.0019: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.4-1/input0 [ 192.073381][ T45] usb 5-1: USB disconnect, device number 13 [ 193.001410][ T5849] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 193.145659][ T5842] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 193.172916][ T5849] usb 5-1: Using ep0 maxpacket: 8 [ 193.179036][ T5849] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.179060][ T5849] usb 5-1: config 0 has no interface number 0 [ 193.179107][ T5849] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.179148][ T5849] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.179170][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.204727][ T5849] usb 5-1: config 0 descriptor?? [ 193.333978][ T5849] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 193.445052][ T5679] usb 5-1: USB disconnect, device number 14 [ 193.877764][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 193.877786][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1244'. [ 193.877799][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 193.877819][ T8613] netlink: 'syz.1.1244': attribute type 5 has an invalid length. [ 194.820751][ T8637] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1255'. [ 195.078538][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.078610][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.351128][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 195.351145][ T37] audit: type=1326 audit(1759086724.950:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8650 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 195.351188][ T37] audit: type=1326 audit(1759086724.970:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8650 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 195.361391][ T37] audit: type=1326 audit(1759086724.980:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8650 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 195.361450][ T37] audit: type=1326 audit(1759086724.980:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8650 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 195.361490][ T37] audit: type=1326 audit(1759086724.980:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8650 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 195.361529][ T37] audit: type=1326 audit(1759086724.980:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8650 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 195.361567][ T37] audit: type=1326 audit(1759086724.980:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8650 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 195.361606][ T37] audit: type=1326 audit(1759086724.990:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8650 comm="syz.4.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 196.143555][ T8678] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1275'. [ 196.746284][ T990] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 196.839390][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.852538][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.858872][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.865228][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.875740][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.899227][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.899275][ T990] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 196.899296][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.909229][ T990] usb 4-1: config 0 descriptor?? [ 196.926961][ T45] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 197.087741][ T45] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 197.087829][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.087849][ T45] usb 5-1: Product: syz [ 197.087863][ T45] usb 5-1: Manufacturer: syz [ 197.087875][ T45] usb 5-1: SerialNumber: syz [ 197.116997][ T45] usb 5-1: config 0 descriptor?? [ 197.211800][ T45] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 197.421609][ T990] steelseries 0003:1038:12C2.001A: unknown main item tag 0x0 [ 197.421652][ T990] steelseries 0003:1038:12C2.001A: unknown main item tag 0x0 [ 197.421676][ T990] steelseries 0003:1038:12C2.001A: unknown main item tag 0x0 [ 197.421750][ T990] steelseries 0003:1038:12C2.001A: unknown main item tag 0x0 [ 197.421774][ T990] steelseries 0003:1038:12C2.001A: unknown main item tag 0x0 [ 197.421798][ T990] steelseries 0003:1038:12C2.001A: unknown main item tag 0x0 [ 197.421823][ T990] steelseries 0003:1038:12C2.001A: unknown main item tag 0x0 [ 197.568766][ T45] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 197.598561][ T5849] usb 4-1: USB disconnect, device number 11 [ 197.676608][ T8704] mkiss: ax0: crc mode is auto. [ 197.769078][ T9] usb 5-1: USB disconnect, device number 15 [ 198.047639][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.351656][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 198.516692][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.516726][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.516763][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 198.516783][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.518508][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.640688][ T9] usb 2-1: config 0 descriptor?? [ 198.923684][ T5841] Bluetooth: hci5: command tx timeout [ 199.088478][ T9] cypress 0003:04B4:0001.001B: unknown main item tag 0x0 [ 199.088516][ T9] cypress 0003:04B4:0001.001B: unknown main item tag 0x0 [ 199.088543][ T9] cypress 0003:04B4:0001.001B: unknown main item tag 0x0 [ 199.097824][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.144691][ T9] cypress 0003:04B4:0001.001B: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0 [ 199.288936][ T45] usb 2-1: USB disconnect, device number 15 [ 199.549388][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.900752][ T37] audit: type=1326 audit(1759086729.515:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8770 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb9e3eec9 code=0x7ffc0000 [ 199.902324][ T37] audit: type=1326 audit(1759086729.515:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8770 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb9e3eec9 code=0x7ffc0000 [ 200.040680][ T8697] chnl_net:caif_netlink_parms(): no params data found [ 200.165298][ T8776] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1319'. [ 200.648918][ T5679] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 200.798913][ T5679] usb 2-1: Using ep0 maxpacket: 16 [ 200.801399][ T5679] usb 2-1: config 0 interface 0 altsetting 220 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 200.801431][ T5679] usb 2-1: config 0 interface 0 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.801457][ T5679] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.801489][ T5679] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 200.801511][ T5679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.873822][ T5679] usb 2-1: config 0 descriptor?? [ 201.009793][ T5841] Bluetooth: hci5: command tx timeout [ 201.085761][ T8697] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.086066][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.086498][ T8697] bridge_slave_0: entered allmulticast mode [ 201.134937][ T8697] bridge_slave_0: entered promiscuous mode [ 201.255194][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.255383][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.255760][ T8697] bridge_slave_1: entered allmulticast mode [ 201.283227][ T8697] bridge_slave_1: entered promiscuous mode [ 201.385916][ T5679] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.001C/input/input15 [ 201.421104][ T5679] sony 0003:054C:03D5.001C: input,hidraw0: USB HID v5.f2 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 201.503169][ T12] bridge_slave_1: left allmulticast mode [ 201.503347][ T12] bridge_slave_1: left promiscuous mode [ 201.506326][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.564169][ T5679] usb 2-1: USB disconnect, device number 16 [ 201.616411][ T12] bridge_slave_0: left allmulticast mode [ 201.616443][ T12] bridge_slave_0: left promiscuous mode [ 201.616691][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.657276][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 201.657292][ T37] audit: type=1326 audit(1759086731.260:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 201.657417][ T37] audit: type=1326 audit(1759086731.260:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 201.660479][ T37] audit: type=1326 audit(1759086731.260:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 201.660691][ T37] audit: type=1326 audit(1759086731.260:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 201.660859][ T37] audit: type=1326 audit(1759086731.260:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 201.661801][ T37] audit: type=1326 audit(1759086731.270:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 201.663243][ T37] audit: type=1326 audit(1759086731.270:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 201.666940][ T37] audit: type=1326 audit(1759086731.270:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b4cceec9 code=0x7ffc0000 [ 202.372915][ T5679] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 202.545977][ T5679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 202.546027][ T5679] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 202.546049][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.551273][ T5679] usb 5-1: config 0 descriptor?? [ 202.552284][ T8823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 202.990141][ T5679] hid_parser_main: 4 callbacks suppressed [ 202.990170][ T5679] belkin 0003:050D:3201.001D: unknown main item tag 0x2 [ 202.990206][ T5679] belkin 0003:050D:3201.001D: unknown main item tag 0x0 [ 203.063142][ T5679] belkin 0003:050D:3201.001D: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.4-1/input0 [ 203.094681][ T5841] Bluetooth: hci5: command tx timeout [ 203.214480][ T5909] usb 5-1: USB disconnect, device number 16 [ 203.783554][ T5679] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 203.954996][ T5679] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 203.955028][ T5679] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.955053][ T5679] usb 2-1: config 0 interface 0 has no altsetting 0 [ 203.955085][ T5679] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 203.955107][ T5679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.017788][ T5679] usb 2-1: config 0 descriptor?? [ 204.368698][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.440429][ T5679] holtek 0003:1241:5015.001E: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 204.440630][ T5679] holtek 0003:1241:5015.001E: no inputs found [ 204.465915][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.516519][ T12] bond0 (unregistering): Released all slaves [ 204.653051][ T5950] usb 2-1: USB disconnect, device number 17 [ 204.812033][ T8697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.816651][ T8697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.906692][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 204.906713][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 204.906748][ T8857] netlink: 'syz.4.1355': attribute type 14 has an invalid length. [ 204.906762][ T8857] netlink: 'syz.4.1355': attribute type 13 has an invalid length. [ 205.139109][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.179239][ T5841] Bluetooth: hci5: command tx timeout [ 205.300936][ T45] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.300964][ T45] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 205.300983][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.301034][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 205.301058][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 205.303547][ T45] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.303573][ T45] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.303591][ T45] usb 4-1: Product: syz [ 205.303604][ T45] usb 4-1: Manufacturer: syz [ 205.332983][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 205.333003][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 205.343042][ T45] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 205.343075][ T45] cdc_wdm 4-1:1.0: Unknown control protocol [ 205.682440][ T8697] team0: Port device team_slave_0 added [ 205.706040][ T8697] team0: Port device team_slave_1 added [ 206.212502][ T5950] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 206.374027][ T5950] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.374053][ T5950] usb 5-1: config 0 has no interface number 0 [ 206.374096][ T5950] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 206.374117][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.416285][ T5950] usb 5-1: config 0 descriptor?? [ 206.429614][ T5950] usb 5-1: selecting invalid altsetting 1 [ 206.445210][ T5950] dvb_ttusb_budget: ttusb_init_controller: error [ 206.445228][ T5950] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 206.544302][ T5950] DVB: Unable to find symbol cx22700_attach() [ 206.643215][ T5950] DVB: Unable to find symbol tda10046_attach() [ 206.643230][ T5950] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 206.648510][ T5950] usb 5-1: USB disconnect, device number 17 [ 206.745160][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.745174][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.745194][ T8697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.810868][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.810885][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.810910][ T8697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.865174][ T8891] [U] [ 207.013661][ T12] hsr_slave_0: left promiscuous mode [ 207.054317][ T12] hsr_slave_1: left promiscuous mode [ 207.055403][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.055500][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.107501][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.107532][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.299014][ T12] veth1_macvtap: left promiscuous mode [ 207.299254][ T12] veth0_macvtap: left promiscuous mode [ 207.299579][ T12] veth1_vlan: left promiscuous mode [ 207.299903][ T12] veth0_vlan: left promiscuous mode [ 207.967550][ T990] usb 4-1: USB disconnect, device number 12 [ 210.950396][ T12] team0 (unregistering): Port device team_slave_1 removed [ 211.192431][ T12] team0 (unregistering): Port device team_slave_0 removed [ 213.579757][ T8981] netlink: 'syz.0.1413': attribute type 5 has an invalid length. [ 213.839533][ T8697] hsr_slave_0: entered promiscuous mode [ 213.840922][ T8697] hsr_slave_1: entered promiscuous mode [ 213.856733][ T8697] debugfs: 'hsr0' already exists in 'hsr' [ 213.856760][ T8697] Cannot create hsr debugfs directory [ 213.882727][ T5950] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 214.041518][ T5950] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 214.041546][ T5950] usb 5-1: config 0 has no interface number 0 [ 214.041590][ T5950] usb 5-1: config 0 interface 128 has no altsetting 0 [ 214.060352][ T5950] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 214.060383][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.060404][ T5950] usb 5-1: Product: syz [ 214.060417][ T5950] usb 5-1: Manufacturer: syz [ 214.060431][ T5950] usb 5-1: SerialNumber: syz [ 214.108976][ T5950] usb 5-1: config 0 descriptor?? [ 214.139643][ T5950] radio-si470x 5-1:0.128: could not find interrupt in endpoint [ 214.139731][ T5950] radio-si470x 5-1:0.128: probe with driver radio-si470x failed with error -5 [ 214.140219][ T5950] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 214.280232][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 214.357876][ T45] usb 5-1: USB disconnect, device number 18 [ 214.534796][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 214.534962][ T9013] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 214.534990][ T9013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.909736][ T37] audit: type=1326 audit(1759086744.488:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 214.909884][ T37] audit: type=1326 audit(1759086744.498:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 214.913466][ T37] audit: type=1326 audit(1759086744.498:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 214.921466][ T37] audit: type=1326 audit(1759086744.508:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 214.923580][ T37] audit: type=1326 audit(1759086744.508:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 214.924122][ T37] audit: type=1326 audit(1759086744.518:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 214.930130][ T37] audit: type=1326 audit(1759086744.518:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 214.932672][ T37] audit: type=1326 audit(1759086744.518:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9025 comm="syz.3.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651f8eec9 code=0x7ffc0000 [ 215.244393][ T9033] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 215.526066][ T9044] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 215.690845][ T8697] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.762352][ T8697] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.869559][ T8697] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.952957][ T8697] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.521151][ T9066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.548642][ T8697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.604815][ T8697] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.653232][ T9069] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 216.653255][ T9069] netlink: 'syz.3.1455': attribute type 2 has an invalid length. [ 216.653882][ T9069] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 216.653901][ T9069] netlink: 'syz.3.1455': attribute type 2 has an invalid length. [ 216.694879][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.695955][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.768358][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.771171][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.206259][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 217.359068][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 217.359103][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 217.359127][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 217.359149][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 217.367979][ T9] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 217.368008][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.368028][ T9] usb 4-1: Product: syz [ 217.368041][ T9] usb 4-1: Manufacturer: syz [ 217.368054][ T9] usb 4-1: SerialNumber: syz [ 217.384793][ T9] usb 4-1: config 0 descriptor?? [ 217.684940][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 217.684983][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 217.685858][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 217.789984][ T8697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.822780][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 217.822844][ T9] input input16: Device does not respond to id packet M [ 217.823569][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 217.823617][ T9] input input16: Device does not respond to id packet P [ 217.825224][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 217.825273][ T9] input input16: Device does not respond to id packet B [ 217.825728][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 217.825771][ T9] input input16: Device does not respond to id packet N [ 217.826232][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 217.826837][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 217.827358][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 217.827796][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 217.842328][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 217.868968][ T9] usb 4-1: USB disconnect, device number 13 [ 217.884517][ T9093] xt_l2tp: missing protocol rule (udp|l2tpip) [ 218.455185][ T8697] veth0_vlan: entered promiscuous mode [ 218.498553][ T8697] veth1_vlan: entered promiscuous mode [ 218.601681][ T9114] tmpfs: Cannot change global quota limit on remount [ 218.632459][ T8697] veth0_macvtap: entered promiscuous mode [ 218.650158][ T8697] veth1_macvtap: entered promiscuous mode [ 218.667519][ T990] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 218.726525][ T8697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.755771][ T8697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.791695][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.795470][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.799262][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.817646][ T990] usb 5-1: Using ep0 maxpacket: 16 [ 218.820769][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.820802][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.820824][ T990] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 218.820866][ T990] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 218.820888][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.856283][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.896880][ T990] usb 5-1: config 0 descriptor?? [ 218.905678][ T9122] vivid-001: disconnect [ 218.906759][ T9121] vivid-001: reconnect [ 219.370671][ T990] lg-g15 0003:046D:C227.001F: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.4-1/input0 [ 219.435510][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.435531][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.551575][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.551595][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.580110][ T5849] usb 5-1: USB disconnect, device number 19 [ 219.936230][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 219.936253][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1484'. [ 219.936279][ T9147] netlink: 'syz.3.1484': attribute type 11 has an invalid length. [ 221.190706][ T9199] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1509'. [ 221.342803][ T9207] binder_alloc: binder_alloc_mmap_handler: 9205 200000ffc000-200001000000 already mapped failed -16 [ 221.530906][ T9213] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1516'. [ 221.531057][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1516'. [ 221.970968][ T37] audit: type=1800 audit(1759086751.541:79): pid=9235 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1527" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 222.012062][ T9227] syz.4.1522 (9227) used greatest stack depth: 15512 bytes left [ 222.120961][ T5849] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 222.285916][ T5849] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.285949][ T5849] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.285980][ T5849] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 222.286002][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.294459][ T5849] usb 2-1: config 0 descriptor?? [ 222.727614][ T5849] lenovo 0003:17EF:6067.0020: item fetching failed at offset 0/2 [ 222.728421][ T5849] lenovo 0003:17EF:6067.0020: hid_parse failed [ 222.728492][ T5849] lenovo 0003:17EF:6067.0020: probe with driver lenovo failed with error -22 [ 222.855585][ T37] audit: type=1800 audit(1759086752.431:80): pid=9261 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1539" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 222.946958][ T990] usb 2-1: USB disconnect, device number 18 [ 223.035674][ T9267] 9pnet_rdma: rdma_create_trans (9267): problem binding to privport: 13 [ 223.704856][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1555'. [ 223.704881][ T9294] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1555'. [ 223.811951][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 223.888969][ T9302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.188081][ T9312] netlink: 'syz.4.1564': attribute type 11 has an invalid length. [ 224.188103][ T9312] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1564'. [ 224.814791][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'. [ 224.857682][ T9341] ip6gretap0: entered promiscuous mode [ 224.951880][ T9341] ip6gretap0: left promiscuous mode [ 224.954983][ T9348] netlink: 'syz.3.1583': attribute type 6 has an invalid length. [ 225.687657][ T9374] mkiss: ax0: crc mode is auto. [ 227.410942][ T9416] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1614'. [ 227.518508][ T9423] binder: 9422:9423 ioctl c0306201 200000000680 returned -14 [ 227.777389][ T9432] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 228.146996][ T9443] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1627'. [ 228.316622][ T9451] program syz.1.1630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.556432][ T9458] netlink: 'syz.1.1634': attribute type 3 has an invalid length. [ 228.744494][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1637'. [ 228.826437][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1640'. [ 228.826464][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 228.826490][ T9470] netlink: 'syz.3.1640': attribute type 5 has an invalid length. [ 228.826504][ T9470] netlink: 'syz.3.1640': attribute type 6 has an invalid length. [ 229.275978][ T9482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.314302][ T5908] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 229.474171][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 229.476725][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.476756][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.476796][ T5908] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 229.476819][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.534306][ T5908] usb 2-1: config 0 descriptor?? [ 229.971437][ T5908] logitech 0003:046D:C20E.0021: rdesc size test failed for formula gp [ 229.976024][ T5908] logitech 0003:046D:C20E.0021: unbalanced collection at end of report description [ 229.977013][ T5908] logitech 0003:046D:C20E.0021: parse failed [ 229.977117][ T5908] logitech 0003:046D:C20E.0021: probe with driver logitech failed with error -22 [ 230.184944][ T5908] usb 2-1: USB disconnect, device number 19 [ 230.582497][ T9523] tipc: Enabling of bearer rejected, media not registered [ 231.535004][ T5849] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 231.685315][ T5849] usb 5-1: Using ep0 maxpacket: 16 [ 231.687827][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.687858][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.687880][ T5849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.687926][ T5849] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.687955][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.693031][ T5849] usb 5-1: config 0 descriptor?? [ 232.132009][ T5849] microsoft 0003:045E:07DA.0022: report is too long [ 232.132045][ T5849] microsoft 0003:045E:07DA.0022: item 0 4 0 8 parsing failed [ 232.132878][ T5849] microsoft 0003:045E:07DA.0022: parse failed [ 232.132976][ T5849] microsoft 0003:045E:07DA.0022: probe with driver microsoft failed with error -22 [ 232.342422][ T5849] usb 5-1: USB disconnect, device number 20 [ 232.617735][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 232.660709][ T9595] bridge0: port 3(syz_tun) entered blocking state [ 232.666841][ T9595] bridge0: port 3(syz_tun) entered disabled state [ 232.667372][ T9595] syz_tun: entered allmulticast mode [ 232.687480][ T9595] syz_tun: entered promiscuous mode [ 232.688923][ T9595] bridge0: port 3(syz_tun) entered blocking state [ 232.689716][ T9595] bridge0: port 3(syz_tun) entered forwarding state [ 233.078925][ T5950] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 233.237902][ T5950] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 233.237941][ T5950] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.237963][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 233.237995][ T5950] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 233.238018][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.243010][ T5950] usb 4-1: config 0 descriptor?? [ 233.742543][ T5950] kovaplus 0003:1E7D:2D50.0023: unknown main item tag 0x0 [ 233.742583][ T5950] kovaplus 0003:1E7D:2D50.0023: unknown main item tag 0x0 [ 233.742616][ T5950] kovaplus 0003:1E7D:2D50.0023: unknown main item tag 0x0 [ 233.796673][ T5950] kovaplus 0003:1E7D:2D50.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 233.933183][ T5908] usb 4-1: USB disconnect, device number 14 [ 234.490588][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 234.490627][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 234.554710][ T9618] syz.5.1707 (9618): drop_caches: 2 [ 235.001795][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 235.103133][ T9680] netlink: 'syz.4.1737': attribute type 10 has an invalid length. [ 235.156210][ T5950] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 235.173963][ T9682] netlink: 'syz.4.1737': attribute type 10 has an invalid length. [ 235.185261][ T9680] team0: Port device dummy0 added [ 235.250839][ T9682] team0: Port device dummy0 removed [ 235.270048][ T9682] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 235.312429][ T5950] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 235.312458][ T5950] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 235.312479][ T5950] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 235.357011][ T5950] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 235.357040][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.357057][ T5950] usb 6-1: Product: syz [ 235.357070][ T5950] usb 6-1: Manufacturer: syz [ 235.357083][ T5950] usb 6-1: SerialNumber: syz [ 235.362801][ T5950] usb 6-1: config 0 descriptor?? [ 235.363567][ T9672] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 235.363698][ T9672] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 235.413329][ T9687] netlink: 'syz.4.1741': attribute type 322 has an invalid length. [ 235.428507][ T5950] usb 6-1: ucan: probing device on interface #0 [ 235.995173][ T5950] ucan 6-1:0.0: probe with driver ucan failed with error -71 [ 236.013077][ T9703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1748'. [ 236.013189][ T9700] sp0: Synchronizing with TNC [ 236.035218][ T5950] usb 6-1: USB disconnect, device number 2 [ 237.421596][ T9747] netlink: 536 bytes leftover after parsing attributes in process `syz.1.1769'. [ 237.779104][ T9759] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 239.051798][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1795'. [ 239.067456][ T9800] netlink: 'syz.0.1794': attribute type 2 has an invalid length. [ 239.378146][ T45] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 239.533701][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.533747][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 239.533793][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.549276][ T45] usb 6-1: config 0 descriptor?? [ 239.589077][ T5950] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 239.707461][ T5838] Bluetooth: hci5: command 0x0405 tx timeout [ 239.747362][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 239.755428][ T5950] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 239.755458][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.789688][ T5950] usb 4-1: config 0 descriptor?? [ 240.032732][ T45] logitech-djreceiver 0003:046D:C71F.0024: item fetching failed at offset 3/7 [ 240.033518][ T45] logitech-djreceiver 0003:046D:C71F.0024: logi_dj_probe: parse failed [ 240.033590][ T45] logitech-djreceiver 0003:046D:C71F.0024: probe with driver logitech-djreceiver failed with error -22 [ 240.204016][ T45] usb 6-1: USB disconnect, device number 3 [ 240.469309][ T5950] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 240.469894][ T5950] asix 4-1:0.0: probe with driver asix failed with error -71 [ 240.499724][ T5950] usb 4-1: USB disconnect, device number 15 [ 240.778964][ T9848] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1816'. [ 241.311290][ T5849] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 241.317719][ T45] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 241.463663][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.463695][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.463734][ T5849] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 241.463756][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.483225][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.483257][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.483292][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 241.483314][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.509823][ T45] usb 4-1: config 0 descriptor?? [ 241.559082][ T5849] usb 5-1: config 0 descriptor?? [ 242.005963][ T5849] cypress 0003:04B4:DE61.0026: unknown main item tag 0x0 [ 242.006004][ T5849] cypress 0003:04B4:DE61.0026: unknown main item tag 0x0 [ 242.028760][ T5849] cypress 0003:04B4:DE61.0026: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.4-1/input0 [ 242.195247][ T5908] usb 4-1: USB disconnect, device number 16 [ 242.219103][ T5849] usb 5-1: USB disconnect, device number 21 [ 242.917667][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1846'. [ 243.008124][ T5950] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 243.171859][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 243.171895][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 243.171938][ T5950] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 243.171961][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.221971][ T5950] usb 2-1: config 0 descriptor?? [ 243.223233][ T9902] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 243.268095][ T45] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 243.419732][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 243.422703][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.422735][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.422774][ T45] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 243.422797][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.448723][ T45] usb 6-1: config 0 descriptor?? [ 243.662498][ T5950] waltop 0003:172F:0500.0027: unknown main item tag 0x0 [ 243.662539][ T5950] waltop 0003:172F:0500.0027: unknown main item tag 0x0 [ 243.662567][ T5950] waltop 0003:172F:0500.0027: unknown main item tag 0x0 [ 243.662594][ T5950] waltop 0003:172F:0500.0027: unknown main item tag 0x0 [ 243.662621][ T5950] waltop 0003:172F:0500.0027: unknown main item tag 0x0 [ 243.662656][ T5950] waltop 0003:172F:0500.0027: unknown main item tag 0x0 [ 243.662682][ T5950] waltop 0003:172F:0500.0027: unknown main item tag 0x0 [ 243.667394][ T5950] waltop 0003:172F:0500.0027: hidraw0: USB HID vff.fa Device [HID 172f:0500] on usb-dummy_hcd.1-1/input0 [ 243.745168][ T9931] random: crng reseeded on system resumption [ 243.879744][ T5950] usb 2-1: USB disconnect, device number 20 [ 243.982694][ T45] koneplus 0003:1E7D:2D51.0028: item fetching failed at offset 1/5 [ 243.983502][ T45] koneplus 0003:1E7D:2D51.0028: parse failed [ 243.983570][ T45] koneplus 0003:1E7D:2D51.0028: probe with driver koneplus failed with error -22 [ 244.172867][ T9] usb 6-1: USB disconnect, device number 4 [ 244.559048][ T9957] binder: 9956:9957 ioctl c0306201 2000000003c0 returned -22 [ 244.816507][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1874'. [ 244.993695][ T9979] overlayfs: missing 'workdir' [ 245.006654][ T37] audit: type=1326 audit(1759086774.573:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9976 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb9e3eec9 code=0x7ffc0000 [ 245.006828][ T37] audit: type=1326 audit(1759086774.573:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9976 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb9e3eec9 code=0x7ffc0000 [ 245.007711][ T37] audit: type=1326 audit(1759086774.573:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9976 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f8fb9e3eec9 code=0x7ffc0000 [ 245.007856][ T37] audit: type=1326 audit(1759086774.573:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9976 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb9e3eec9 code=0x7ffc0000 [ 245.008011][ T37] audit: type=1326 audit(1759086774.573:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9976 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb9e3eec9 code=0x7ffc0000 [ 245.378695][ T9988] tipc: Enabling of bearer rejected, failed to enable media [ 245.474892][ T9994] netlink: 'syz.3.1889': attribute type 4 has an invalid length. [ 245.474913][ T9994] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1889'. [ 245.868832][ T5950] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 245.908709][T10011] netlink: 'syz.1.1894': attribute type 10 has an invalid length. [ 245.994588][T10011] team0: Port device dummy0 added [ 246.007346][T10014] netlink: 'syz.1.1894': attribute type 10 has an invalid length. [ 246.028550][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 246.031919][ T5950] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.031950][ T5950] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.031972][ T5950] usb 6-1: config 0 interface 0 has no altsetting 0 [ 246.032006][ T5950] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 246.032028][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.092203][ T5950] usb 6-1: config 0 descriptor?? [ 246.133515][T10014] team0: Port device dummy0 removed [ 246.160473][T10014] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 246.542433][ T5950] holtek_kbd 0003:04D9:A055.0029: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.5-1/input0 [ 246.545940][T10022] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.548733][T10022] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.681633][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1903'. [ 246.681675][T10027] netlink: 'syz.3.1903': attribute type 8 has an invalid length. [ 246.756047][ T45] usb 6-1: USB disconnect, device number 5 [ 247.596349][T10066] gtp0: entered promiscuous mode [ 248.020909][T10067] hsr0: entered promiscuous mode [ 248.021482][T10067] macsec1: entered promiscuous mode [ 248.651727][T10091] tmpfs: Bad value for 'mpol' [ 248.699633][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1933'. [ 249.326886][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 249.867681][T10094] syz.3.1934 (10094): drop_caches: 2 [ 250.413295][T10157] netlink: 'syz.3.1964': attribute type 10 has an invalid length. [ 250.436874][T10157] team0: Port device dummy0 added [ 250.446389][T10157] netlink: 'syz.3.1964': attribute type 10 has an invalid length. [ 250.603207][T10157] team0: Port device dummy0 removed [ 250.623855][T10157] dummy0: entered allmulticast mode [ 250.658369][T10157] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 250.842660][ T37] audit: type=1326 audit(1759086780.402:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.5.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4958c9eec9 code=0x7ffc0000 [ 250.842714][ T37] audit: type=1326 audit(1759086780.402:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.5.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4958c9eec9 code=0x7ffc0000 [ 250.847193][ T37] audit: type=1326 audit(1759086780.412:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.5.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4958c9eec9 code=0x7ffc0000 [ 250.847719][ T37] audit: type=1326 audit(1759086780.412:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.5.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4958c9eec9 code=0x7ffc0000 [ 250.848340][ T37] audit: type=1326 audit(1759086780.412:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.5.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4958c9eec9 code=0x7ffc0000 [ 250.852869][ T37] audit: type=1326 audit(1759086780.422:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.5.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f4958c9eec9 code=0x7ffc0000 [ 250.853994][ T37] audit: type=1326 audit(1759086780.422:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.5.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4958c9eec9 code=0x7ffc0000 [ 250.855179][ T37] audit: type=1326 audit(1759086780.422:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.5.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4958c9eec9 code=0x7ffc0000 [ 250.899948][ T5909] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 251.059150][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 251.065221][ T5909] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 251.065251][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.065270][ T5909] usb 2-1: Product: syz [ 251.065283][ T5909] usb 2-1: Manufacturer: syz [ 251.065297][ T5909] usb 2-1: SerialNumber: syz [ 251.558369][ T5909] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 251.558476][ T5909] mxuport 2-1:254.0: probe with driver mxuport failed with error -5 [ 251.766700][ T9] usb 2-1: USB disconnect, device number 21 [ 251.911949][T10159] syz.0.1965 (10159): drop_caches: 2 [ 251.979247][ T5849] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 252.150852][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.150902][ T5849] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 252.150924][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.191187][ T5849] usb 4-1: config 0 descriptor?? [ 252.231505][T10196] overlayfs: missing 'lowerdir' [ 252.559716][T10204] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 252.559824][T10204] ALSA: mixer_oss: invalid OSS volume 'F4|׃|t@' [ 252.559875][T10204] ALSA: mixer_oss: invalid OSS volume 'GJJ³ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 254.880140][T10297] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 254.880163][T10297] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 254.880180][T10297] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 254.880204][T10297] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 254.880335][T10297] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 254.880352][T10297] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 254.880366][T10297] [U] 22Ʃx?0;3u [ 254.880386][T10297] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 254.880410][T10297] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 254.880424][T10297] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 254.880437][T10297] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 254.880451][T10297] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 254.880463][T10297] [U] ec [ 254.880475][T10297] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 254.881902][T10296] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 255.813394][T10326] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 255.814209][T10326] team0: Device ipvlan2 is already an upper device of the team interface [ 256.580633][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.580706][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.875649][T10385] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2070'. [ 258.097657][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'. [ 258.268779][T10402] overlayfs: workdir and upperdir must be separate subtrees [ 258.383105][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2081'. [ 258.569460][T10411] netlink: 'syz.5.2080': attribute type 1 has an invalid length. [ 258.569484][T10411] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2080'. [ 258.569513][T10411] netlink: 'syz.5.2080': attribute type 1 has an invalid length. [ 259.009819][ T5849] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 259.164534][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.164584][ T5849] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 259.164606][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.205112][ T5849] usb 4-1: config 0 descriptor?? [ 259.662575][ T5849] steelseries 0003:1038:12B6.002B: unknown main item tag 0x2 [ 259.662613][ T5849] steelseries 0003:1038:12B6.002B: item fetching failed at offset 6/7 [ 259.663517][ T5849] steelseries 0003:1038:12B6.002B: probe with driver steelseries failed with error -22 [ 259.879933][ T5908] usb 4-1: USB disconnect, device number 18 [ 259.982458][T10462] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 260.325358][T10479] tipc: Can't bind to reserved service type 1 [ 260.531254][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 260.684790][ T9] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 260.684818][ T9] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 260.684862][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 260.684882][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.770306][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 260.961129][ T9] gspca_sn9c2028: read1 error -71 [ 260.961596][ T9] gspca_sn9c2028: read1 error -71 [ 260.961994][ T9] gspca_sn9c2028: read1 error -71 [ 260.962083][ T9] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 260.974692][ T9] usb 2-1: USB disconnect, device number 22 [ 262.160091][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 262.320113][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 262.322933][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.322963][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.322985][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.323026][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.323049][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.389397][ T10] usb 4-1: config 0 descriptor?? [ 262.520108][ T45] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 262.672909][ T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.672936][ T45] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 262.673016][ T45] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 262.673039][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.679716][ T45] usb 6-1: config 0 descriptor?? [ 262.719337][ T45] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 262.719408][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 262.758431][ T45] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 262.760489][ T45] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 262.760543][ T45] usb 6-1: media controller created [ 262.765425][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.788039][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 262.788120][ T45] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 262.809610][ T45] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 262.818376][ T45] dvb-usb: schedule remote query interval to 150 msecs. [ 262.818399][ T45] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 262.834827][ T10] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 262.834874][ T10] microsoft 0003:045E:07DA.002C: unbalanced collection at end of report description [ 262.835783][ T10] microsoft 0003:045E:07DA.002C: parse failed [ 262.835882][ T10] microsoft 0003:045E:07DA.002C: probe with driver microsoft failed with error -22 [ 262.952804][ T45] usb 6-1: USB disconnect, device number 7 [ 263.035887][ T5909] usb 4-1: USB disconnect, device number 19 [ 263.102359][ T45] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 264.826850][T10608] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 265.512692][T10641] UBIFS error (pid: 10641): cannot open "c:::", error -22 [ 265.686469][T10650] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2197'. [ 265.688233][T10650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2197'. [ 265.688252][T10650] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2197'. [ 265.864634][ T5909] IPVS: starting estimator thread 0... [ 265.947545][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 265.980375][T10655] IPVS: using max 8 ests per chain, 19200 per kthread [ 266.097717][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2203'. [ 266.646028][T10678] tipc: Started in network mode [ 266.646051][T10678] tipc: Node identity 48, cluster identity 4711 [ 266.646063][T10678] tipc: Node number set to 72 [ 266.892680][ T5849] kernel write not supported for file /uinput (pid: 5849 comm: kworker/0:3) [ 267.038395][T10693] vivid-000: disconnect [ 267.038468][T10691] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 267.038892][T10692] vivid-000: reconnect [ 267.589121][T10706] ipvlan2: entered promiscuous mode [ 268.139740][ T45] kernel write not supported for file /1029/uid_map (pid: 45 comm: kworker/1:1) [ 268.320418][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'. [ 268.500237][ T45] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 268.652540][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 268.659799][ T45] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.659824][ T45] usb 2-1: config 0 has no interface number 0 [ 268.688141][ T45] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 268.688171][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.688193][ T45] usb 2-1: Product: syz [ 268.688207][ T45] usb 2-1: Manufacturer: syz [ 268.688220][ T45] usb 2-1: SerialNumber: syz [ 268.725299][ T45] usb 2-1: config 0 descriptor?? [ 268.751487][ T45] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 268.820337][ T5908] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 268.972007][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 268.975249][ T5908] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.975283][ T5908] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 268.975309][ T5908] usb 5-1: config 0 interface 0 has no altsetting 0 [ 268.975394][ T5908] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 268.975417][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.000866][ T5908] usb 5-1: config 0 descriptor?? [ 269.050226][ T5849] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 269.203037][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.203069][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.203108][ T5849] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 269.203130][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.208597][ T5849] usb 6-1: config 0 descriptor?? [ 269.387143][ T45] gspca_spca1528: reg_w err -71 [ 269.400446][ T45] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 269.432472][ T45] usb 2-1: USB disconnect, device number 23 [ 269.498404][ T5908] wacom 0003:056A:0094.002D: Using device in hidraw-only mode [ 269.527148][ T5908] wacom 0003:056A:0094.002D: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 269.683155][ T45] usb 5-1: USB disconnect, device number 22 [ 269.745147][ T5849] hid_mf 0003:0079:1846.002E: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.5-1/input0 [ 269.745179][ T5849] hid_mf 0003:0079:1846.002E: Invalid report, this should never happen! [ 269.745194][ T5849] hid_mf 0003:0079:1846.002E: Force feedback init failed. [ 269.820421][T10763] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2254'. [ 269.898765][ T5908] usb 6-1: USB disconnect, device number 8 [ 270.643578][ T5842] Bluetooth: hci5: unexpected event for opcode 0x2042 [ 271.559513][T10816] netlink: 'syz.4.2277': attribute type 2 has an invalid length. [ 272.150371][ T5908] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 272.302917][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.302967][ T5908] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 272.302989][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.308277][ T5908] usb 2-1: config 0 descriptor?? [ 272.732994][T10852] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2294'. [ 272.784168][T10854] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.2295'. [ 272.787707][ T5908] lua 0003:1E7D:2C2E.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 272.949441][ T9] usb 2-1: USB disconnect, device number 24 [ 274.570593][ T45] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 274.652505][ T5842] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 274.652799][ T5842] Bluetooth: hci5: Injecting HCI hardware error event [ 274.657557][ T5842] Bluetooth: hci5: hardware error 0x00 [ 274.726267][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.726301][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 274.726343][ T45] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 274.726365][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.749211][ T45] usb 5-1: config 0 descriptor?? [ 274.750018][T10910] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 275.119698][T10922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2328'. [ 275.198329][ T45] sony 0003:1345:3008.0030: unknown main item tag 0x0 [ 275.198369][ T45] sony 0003:1345:3008.0030: unknown main item tag 0x0 [ 275.198396][ T45] sony 0003:1345:3008.0030: unknown main item tag 0x0 [ 275.198430][ T45] sony 0003:1345:3008.0030: unknown main item tag 0x0 [ 275.198457][ T45] sony 0003:1345:3008.0030: unknown main item tag 0x0 [ 275.285382][ T45] sony 0003:1345:3008.0030: hiddev0,hidraw0: USB HID v80.05 Device [HID 1345:3008] on usb-dummy_hcd.4-1/input0 [ 275.285419][ T45] sony 0003:1345:3008.0030: failed to claim input [ 275.397051][ T5950] usb 5-1: USB disconnect, device number 23 [ 276.630450][ T5950] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 276.790542][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 276.792926][ T5950] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 276.796020][ T5950] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 276.796049][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.796069][ T5950] usb 5-1: Product: syz [ 276.796083][ T5950] usb 5-1: Manufacturer: syz [ 276.796096][ T5950] usb 5-1: SerialNumber: syz [ 276.813362][ T5950] usb 5-1: config 0 descriptor?? [ 276.857038][ T5950] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 276.857120][ T5950] usb 5-1: setting power ON [ 276.857140][ T5950] dvb-usb: bulk message failed: -22 (2/0) [ 276.891680][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 276.893403][ T5950] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 276.893465][ T5950] usb 5-1: media controller created [ 276.956827][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.992003][ T5950] usb 5-1: selecting invalid altsetting 6 [ 276.992028][ T5950] usb 5-1: digital interface selection failed (-22) [ 276.992043][ T5950] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 276.993335][ T5950] usb 5-1: setting power OFF [ 276.993464][ T5950] dvb-usb: bulk message failed: -22 (2/0) [ 276.993482][ T5950] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 276.993495][ T5950] (NULL device *): no alternate interface [ 277.062638][ T5842] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 277.121107][ T5950] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 277.124899][ T5950] usb 5-1: USB disconnect, device number 24 [ 277.487732][T10994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2363'. [ 277.560959][ T5950] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 277.722596][ T5950] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 277.722631][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.722663][ T5950] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 277.722685][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.781943][ T5950] usb 2-1: config 0 descriptor?? [ 277.783774][T10990] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 278.301132][ T5950] lenovo 0003:17EF:60A4.0031: hidraw0: USB HID v1.01 Device [HID 17ef:60a4] on usb-dummy_hcd.1-1/input0 [ 278.502812][ T5908] usb 2-1: USB disconnect, device number 25 [ 279.871290][T11051] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2387'. [ 279.871554][T11051] 0{X: renamed from gretap0 (while UP) [ 279.954506][T11051] 0{X: entered allmulticast mode [ 279.955029][T11051] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 280.051496][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 280.282066][T11063] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2391'. [ 280.282089][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2391'. [ 282.200557][ T5849] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 282.411730][ T5849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.411756][ T5849] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 282.411809][ T5849] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 282.411831][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.416731][ T5849] usb 2-1: config 0 descriptor?? [ 282.429439][ T5849] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 282.429487][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 282.463204][ T5849] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 282.465417][ T5849] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 282.465470][ T5849] usb 2-1: media controller created [ 282.468011][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.519272][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 282.519360][ T5849] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 282.530155][ T5849] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 282.557566][ T5849] dvb-usb: schedule remote query interval to 150 msecs. [ 282.557589][ T5849] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 282.606928][T11125] xt_l2tp: v2 sid > 0xffff: 1114112 [ 282.638526][ T45] usb 2-1: USB disconnect, device number 26 [ 282.750056][ T45] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 282.830229][T11131] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2425'. [ 282.844172][T11132] netlink: 'syz.0.2426': attribute type 83 has an invalid length. [ 283.896338][T11179] netlink: 'syz.4.2446': attribute type 1 has an invalid length. [ 284.029777][T11182] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2449'. [ 284.294244][ T5909] kernel write not supported for file /stat (pid: 5909 comm: kworker/1:6) [ 285.160587][ T5950] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 285.320856][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 285.323600][ T5950] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.323628][ T5950] usb 6-1: config 0 has no interface number 0 [ 285.323678][ T5950] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.323705][ T5950] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.323727][ T5950] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.323769][ T5950] usb 6-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 285.323792][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.339150][ T5950] usb 6-1: config 0 descriptor?? [ 285.818825][ T5950] holtek_mouse 0003:04D9:A072.0032: item fetching failed at offset 3/4 [ 285.819741][ T5950] holtek_mouse 0003:04D9:A072.0032: hid parse failed: -22 [ 285.819818][ T5950] holtek_mouse 0003:04D9:A072.0032: probe with driver holtek_mouse failed with error -22 [ 286.057894][ T45] usb 6-1: USB disconnect, device number 9 [ 286.204461][T11258] netlink: 'syz.4.2484': attribute type 41 has an invalid length. [ 286.480605][ T5950] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 286.631882][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 286.635175][ T5950] usb 4-1: unable to get BOS descriptor or descriptor too short [ 286.636741][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 286.636771][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 286.636797][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 286.636817][ T5950] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 286.636839][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 286.636860][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 286.636880][ T5950] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 286.642832][ T5950] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 286.642860][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.642879][ T5950] usb 4-1: Product: syz [ 286.642892][ T5950] usb 4-1: Manufacturer: syz [ 286.642905][ T5950] usb 4-1: SerialNumber: syz [ 286.666821][ T5950] usb 4-1: config 0 descriptor?? [ 286.668102][T11261] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 286.705928][ T5950] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.074196][ C1] ================================================================== [ 287.074215][ C1] BUG: KASAN: slab-use-after-free in snd_usbmidi_error_timer+0x148/0x660 [ 287.074250][ C1] Read of size 8 at addr ffff88805d511c10 by task ktimers/1/29 [ 287.074263][ C1] [ 287.074285][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 287.074303][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.074320][ C1] Call Trace: [ 287.074326][ C1] [ 287.074334][ C1] dump_stack_lvl+0x189/0x250 [ 287.074358][ C1] ? __kasan_check_byte+0x12/0x40 [ 287.074383][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.074405][ C1] ? lock_release+0x4b/0x3e0 [ 287.074433][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 287.074451][ C1] print_report+0xca/0x240 [ 287.074474][ C1] ? snd_usbmidi_error_timer+0x148/0x660 [ 287.074491][ C1] kasan_report+0x118/0x150 [ 287.074508][ C1] ? snd_usbmidi_error_timer+0x148/0x660 [ 287.074530][ C1] snd_usbmidi_error_timer+0x148/0x660 [ 287.074552][ C1] call_timer_fn+0x17b/0x5f0 [ 287.074572][ C1] ? __pfx_snd_usbmidi_error_timer+0x10/0x10 [ 287.074601][ C1] ? call_timer_fn+0xbe/0x5f0 [ 287.074619][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 287.074642][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.074664][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.074686][ C1] ? __pfx_snd_usbmidi_error_timer+0x10/0x10 [ 287.074710][ C1] __run_timer_base+0x648/0x970 [ 287.074747][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 287.074770][ C1] run_timer_softirq+0xb7/0x180 [ 287.074788][ C1] handle_softirqs+0x22c/0x710 [ 287.074819][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 287.074841][ C1] run_ktimerd+0xcf/0x190 [ 287.074861][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 287.074881][ C1] ? schedule+0x91/0x360 [ 287.074905][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 287.074926][ C1] smpboot_thread_fn+0x542/0xa60 [ 287.074947][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 287.074971][ C1] kthread+0x711/0x8a0 [ 287.074990][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.075007][ C1] ? __pfx_kthread+0x10/0x10 [ 287.075026][ C1] ? __pfx_kthread+0x10/0x10 [ 287.075043][ C1] ret_from_fork+0x436/0x7d0 [ 287.075064][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 287.075083][ C1] ? __switch_to_asm+0x39/0x70 [ 287.075096][ C1] ? __switch_to_asm+0x33/0x70 [ 287.075108][ C1] ? __pfx_kthread+0x10/0x10 [ 287.075127][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.075146][ C1] [ 287.075152][ C1] [ 287.075156][ C1] Allocated by task 5950: [ 287.075164][ C1] kasan_save_track+0x3e/0x80 [ 287.075182][ C1] __kasan_kmalloc+0x93/0xb0 [ 287.075199][ C1] __kmalloc_cache_noprof+0x1a8/0x320 [ 287.075217][ C1] snd_usbmidi_in_endpoint_create+0x7e/0xa30 [ 287.075232][ C1] __snd_usbmidi_create+0x2236/0x2a80 [ 287.075250][ C1] snd_usb_midi_v2_create+0x43e0/0x4650 [ 287.075269][ C1] usb_audio_probe+0xb78/0x1e10 [ 287.075285][ C1] usb_probe_interface+0x665/0xc30 [ 287.075305][ C1] really_probe+0x26a/0x9e0 [ 287.075322][ C1] __driver_probe_device+0x18c/0x2f0 [ 287.075338][ C1] driver_probe_device+0x4f/0x430 [ 287.075355][ C1] __device_attach_driver+0x2ce/0x530 [ 287.075372][ C1] bus_for_each_drv+0x251/0x2e0 [ 287.075390][ C1] __device_attach+0x2bb/0x400 [ 287.075402][ C1] bus_probe_device+0x188/0x260 [ 287.075419][ C1] device_add+0x7b6/0xb50 [ 287.075429][ C1] usb_set_configuration+0x1a87/0x20e0 [ 287.075446][ C1] usb_generic_driver_probe+0x8d/0x150 [ 287.075462][ C1] usb_probe_device+0x1c4/0x390 [ 287.075479][ C1] really_probe+0x26a/0x9e0 [ 287.075494][ C1] __driver_probe_device+0x18c/0x2f0 [ 287.075509][ C1] driver_probe_device+0x4f/0x430 [ 287.075522][ C1] __device_attach_driver+0x2ce/0x530 [ 287.075535][ C1] bus_for_each_drv+0x251/0x2e0 [ 287.075551][ C1] __device_attach+0x2bb/0x400 [ 287.075563][ C1] bus_probe_device+0x188/0x260 [ 287.075581][ C1] device_add+0x7b6/0xb50 [ 287.075594][ C1] usb_new_device+0xa29/0x16e0 [ 287.075611][ C1] hub_event+0x2958/0x4a20 [ 287.075628][ C1] process_scheduled_works+0xae1/0x17b0 [ 287.075649][ C1] worker_thread+0x8a0/0xda0 [ 287.075667][ C1] kthread+0x711/0x8a0 [ 287.075688][ C1] ret_from_fork+0x436/0x7d0 [ 287.075705][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.075716][ C1] [ 287.075720][ C1] Freed by task 5950: [ 287.075726][ C1] kasan_save_track+0x3e/0x80 [ 287.075739][ C1] kasan_save_free_info+0x46/0x50 [ 287.075750][ C1] __kasan_slab_free+0x5b/0x80 [ 287.075763][ C1] kfree+0x195/0x550 [ 287.075778][ C1] snd_usbmidi_rawmidi_free+0xae/0x150 [ 287.075791][ C1] snd_rawmidi_free+0x3bf/0x410 [ 287.075817][ C1] snd_rawmidi_dev_free+0x38/0x50 [ 287.075835][ C1] __snd_device_free+0x1d2/0x2e0 [ 287.075851][ C1] snd_device_free_all+0xcf/0x180 [ 287.075865][ C1] release_card_device+0x75/0x1b0 [ 287.075883][ C1] device_release+0x9c/0x1c0 [ 287.075899][ C1] kobject_put+0x22b/0x480 [ 287.075913][ C1] snd_card_free+0x110/0x190 [ 287.075930][ C1] usb_audio_probe+0x193f/0x1e10 [ 287.075945][ C1] usb_probe_interface+0x665/0xc30 [ 287.075964][ C1] really_probe+0x26a/0x9e0 [ 287.075976][ C1] __driver_probe_device+0x18c/0x2f0 [ 287.075988][ C1] driver_probe_device+0x4f/0x430 [ 287.076000][ C1] __device_attach_driver+0x2ce/0x530 [ 287.076012][ C1] bus_for_each_drv+0x251/0x2e0 [ 287.076027][ C1] __device_attach+0x2bb/0x400 [ 287.076038][ C1] bus_probe_device+0x188/0x260 [ 287.076056][ C1] device_add+0x7b6/0xb50 [ 287.076066][ C1] usb_set_configuration+0x1a87/0x20e0 [ 287.076081][ C1] usb_generic_driver_probe+0x8d/0x150 [ 287.076098][ C1] usb_probe_device+0x1c4/0x390 [ 287.076116][ C1] really_probe+0x26a/0x9e0 [ 287.076130][ C1] __driver_probe_device+0x18c/0x2f0 [ 287.076142][ C1] driver_probe_device+0x4f/0x430 [ 287.076156][ C1] __device_attach_driver+0x2ce/0x530 [ 287.076171][ C1] bus_for_each_drv+0x251/0x2e0 [ 287.076189][ C1] __device_attach+0x2bb/0x400 [ 287.076201][ C1] bus_probe_device+0x188/0x260 [ 287.076218][ C1] device_add+0x7b6/0xb50 [ 287.076229][ C1] usb_new_device+0xa29/0x16e0 [ 287.076242][ C1] hub_event+0x2958/0x4a20 [ 287.076257][ C1] process_scheduled_works+0xae1/0x17b0 [ 287.076275][ C1] worker_thread+0x8a0/0xda0 [ 287.076293][ C1] kthread+0x711/0x8a0 [ 287.076313][ C1] ret_from_fork+0x436/0x7d0 [ 287.076331][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.076344][ C1] [ 287.076348][ C1] The buggy address belongs to the object at ffff88805d511c00 [ 287.076348][ C1] which belongs to the cache kmalloc-512 of size 512 [ 287.076364][ C1] The buggy address is located 16 bytes inside of [ 287.076364][ C1] freed 512-byte region [ffff88805d511c00, ffff88805d511e00) [ 287.076381][ C1] [ 287.076386][ C1] The buggy address belongs to the physical page: [ 287.076407][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d510 [ 287.076427][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 287.076440][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 287.076458][ C1] page_type: f5(slab) [ 287.076474][ C1] raw: 0080000000000040 ffff888019841c80 dead000000000100 dead000000000122 [ 287.076490][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 287.076507][ C1] head: 0080000000000040 ffff888019841c80 dead000000000100 dead000000000122 [ 287.076521][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 287.076537][ C1] head: 0080000000000002 ffffea0001754401 00000000ffffffff 00000000ffffffff [ 287.076551][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 287.076559][ C1] page dumped because: kasan: bad access detected [ 287.076568][ C1] page_owner tracks the page as allocated [ 287.076583][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5836, tgid 5836 (syz-executor), ts 183325773087, free_ts 183306171490 [ 287.076613][ C1] post_alloc_hook+0x240/0x2a0 [ 287.076635][ C1] get_page_from_freelist+0x2119/0x21b0 [ 287.076650][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 287.076665][ C1] alloc_pages_mpol+0xd1/0x380 [ 287.076684][ C1] allocate_slab+0x8a/0x370 [ 287.076698][ C1] ___slab_alloc+0x8d1/0xdc0 [ 287.076710][ C1] __kmalloc_cache_noprof+0xe6/0x320 [ 287.076729][ C1] kernfs_fop_open+0x3f0/0xdd0 [ 287.076748][ C1] do_dentry_open+0x9ae/0x1350 [ 287.076761][ C1] vfs_open+0x3b/0x350 [ 287.076773][ C1] path_openat+0x2ef1/0x3840 [ 287.076789][ C1] do_filp_open+0x1fa/0x410 [ 287.076812][ C1] do_sys_openat2+0x121/0x1c0 [ 287.076825][ C1] __x64_sys_openat+0x138/0x170 [ 287.076839][ C1] do_syscall_64+0xfa/0x3b0 [ 287.076854][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.076873][ C1] page last free pid 5836 tgid 5836 stack trace: [ 287.076883][ C1] __free_frozen_pages+0xb59/0xce0 [ 287.076903][ C1] __put_partials+0x159/0x1a0 [ 287.076916][ C1] __slab_free+0x2b3/0x390 [ 287.076930][ C1] qlist_free_all+0x97/0x140 [ 287.076946][ C1] kasan_quarantine_reduce+0x148/0x160 [ 287.076962][ C1] __kasan_slab_alloc+0x22/0x80 [ 287.076984][ C1] kmem_cache_alloc_noprof+0x143/0x310 [ 287.077003][ C1] getname_flags+0xb8/0x540 [ 287.077024][ C1] __x64_sys_unlink+0x3a/0x50 [ 287.077042][ C1] do_syscall_64+0xfa/0x3b0 [ 287.077055][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.077070][ C1] [ 287.077074][ C1] Memory state around the buggy address: [ 287.077083][ C1] ffff88805d511b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.077094][ C1] ffff88805d511b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.077106][ C1] >ffff88805d511c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.077114][ C1] ^ [ 287.077123][ C1] ffff88805d511c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.077134][ C1] ffff88805d511d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.077142][ C1] ================================================================== [ 287.077157][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 287.077170][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 287.077189][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.077199][ C1] Call Trace: [ 287.077206][ C1] [ 287.077212][ C1] dump_stack_lvl+0x99/0x250 [ 287.077236][ C1] ? __asan_memcpy+0x40/0x70 [ 287.077253][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.077275][ C1] ? __pfx__printk+0x10/0x10 [ 287.077298][ C1] vpanic+0x281/0x750 [ 287.077321][ C1] ? __pfx_print_hex_dump+0x10/0x10 [ 287.077346][ C1] ? __pfx_vpanic+0x10/0x10 [ 287.077374][ C1] panic+0xb9/0xc0 [ 287.077395][ C1] ? __pfx_panic+0x10/0x10 [ 287.077415][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 287.077441][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 287.077468][ C1] ? snd_usbmidi_error_timer+0x148/0x660 [ 287.077492][ C1] check_panic_on_warn+0x89/0xb0 [ 287.077508][ C1] ? snd_usbmidi_error_timer+0x148/0x660 [ 287.077531][ C1] end_report+0x78/0x160 [ 287.077550][ C1] kasan_report+0x129/0x150 [ 287.077572][ C1] ? snd_usbmidi_error_timer+0x148/0x660 [ 287.077599][ C1] snd_usbmidi_error_timer+0x148/0x660 [ 287.077625][ C1] call_timer_fn+0x17b/0x5f0 [ 287.077646][ C1] ? __pfx_snd_usbmidi_error_timer+0x10/0x10 [ 287.077669][ C1] ? call_timer_fn+0xbe/0x5f0 [ 287.077689][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 287.077714][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.077744][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.077767][ C1] ? __pfx_snd_usbmidi_error_timer+0x10/0x10 [ 287.077791][ C1] __run_timer_base+0x648/0x970 [ 287.077822][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 287.077847][ C1] run_timer_softirq+0xb7/0x180 [ 287.077867][ C1] handle_softirqs+0x22c/0x710 [ 287.077892][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 287.077921][ C1] run_ktimerd+0xcf/0x190 [ 287.077942][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 287.077963][ C1] ? schedule+0x91/0x360 [ 287.077987][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 287.078007][ C1] smpboot_thread_fn+0x542/0xa60 [ 287.078027][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 287.078051][ C1] kthread+0x711/0x8a0 [ 287.078075][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.078095][ C1] ? __pfx_kthread+0x10/0x10 [ 287.078119][ C1] ? __pfx_kthread+0x10/0x10 [ 287.078141][ C1] ret_from_fork+0x436/0x7d0 [ 287.078163][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 287.078185][ C1] ? __switch_to_asm+0x39/0x70 [ 287.078200][ C1] ? __switch_to_asm+0x33/0x70 [ 287.078214][ C1] ? __pfx_kthread+0x10/0x10 [ 287.078238][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.078259][ C1] [ 287.078526][ C1] Kernel Offset: disabled