last executing test programs: 9.85842973s ago: executing program 4 (id=630): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd1, 0xfe, 0xc7, 0x10, 0x5c6, 0x9062, 0x215a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7, 0x0, 0x0, 0x7b, 0x37, 0xd4}}]}}]}}, 0x0) 6.51281648s ago: executing program 3 (id=640): r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 6.30956223s ago: executing program 3 (id=643): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 5.958031279s ago: executing program 3 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0x6}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x20008802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 5.937197292s ago: executing program 4 (id=649): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x300, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 4.094161218s ago: executing program 3 (id=651): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) 3.985394387s ago: executing program 4 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00'}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 3.942629614s ago: executing program 3 (id=655): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) 3.536567291s ago: executing program 3 (id=660): r0 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000680)={{r2, 0x4429, 0x96, 0x400, 0x1ff, 0x6, 0x85eb, 0x6, 0x400, 0xfff, 0x0, 0x40, 0xa3, 0x9, 0x3}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400e99503ede06b6be8e308ff2ed5ba3e514e7323441b55cf23ecc4"], 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x401, 0x8, 0xffffffff, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x3, 0x5, 0x2, 0x5}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 3.478137121s ago: executing program 2 (id=661): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b}, @addba_resp={0x3, 0x1, {0x0, 0x0, {0x1}}}}}]}, 0x44}}, 0x0) 2.760470194s ago: executing program 0 (id=663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000680)={0x74, 0x0, 0x16}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.717062728s ago: executing program 1 (id=664): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 2.626250451s ago: executing program 2 (id=665): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) 2.623195485s ago: executing program 4 (id=666): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95cfa567fab0c28cc905cd00c0947085ae6fdf8a3e4dcccaf1cf532bd0b982365fd"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.510033023s ago: executing program 1 (id=667): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @dev}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 2.464808521s ago: executing program 2 (id=668): r0 = memfd_secret(0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, 0x0) 2.330136463s ago: executing program 0 (id=669): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) io_submit(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) socket$kcm(0x2, 0x7, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, 0x0, 0x0) 2.329953086s ago: executing program 2 (id=670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) 2.18309292s ago: executing program 2 (id=671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005ec0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000013000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000013000/0x1000)=nil}) 1.996773235s ago: executing program 1 (id=672): semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x25ae]) r0 = memfd_secret(0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 1.88211673s ago: executing program 2 (id=673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r3], 0x20}}, 0x0) 1.85595539s ago: executing program 1 (id=674): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb27f}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x44}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2037d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b43a409aa81", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) 1.487660409s ago: executing program 0 (id=676): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000780)={0x0, 0x0, 0x0, 'queue1\x00'}) 1.278121847s ago: executing program 0 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.064068001s ago: executing program 1 (id=678): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) 1.063718013s ago: executing program 4 (id=679): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x400443c9, 0x20000002) 316.611591ms ago: executing program 1 (id=680): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4}, 0x8) 98.148972ms ago: executing program 0 (id=681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) 62.980865ms ago: executing program 4 (id=682): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=683): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0], 0xf4240}) kernel console output (not intermixed with test programs): encryption failed: -22 [ 133.273853][ T5095] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 133.297095][ T5095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.347286][ T5095] usb 4-1: config 0 descriptor?? [ 133.474232][ T5140] usb 3-1: USB disconnect, device number 8 [ 133.660709][ T5143] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 133.771764][ T5766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.787822][ T5766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.824307][ T5095] hid (null): unknown global tag 0xc [ 133.847007][ T5095] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 133.862484][ T5095] hid-generic 0003:0158:0100.0005: unexpected long global item [ 133.872434][ T5095] hid-generic 0003:0158:0100.0005: probe with driver hid-generic failed with error -22 [ 133.877710][ T5143] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.925534][ T5143] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 133.949889][ T5143] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 133.975193][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.043259][ T5142] usb 4-1: USB disconnect, device number 11 [ 134.245811][ T5140] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 134.446652][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.479855][ T5140] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 134.518613][ T5140] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 134.542743][ T5140] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 134.571353][ T5140] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 134.585499][ T5140] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 134.595140][ T5140] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 134.605597][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.665592][ T45] usb 5-1: device descriptor read/64, error -71 [ 134.826320][ T5143] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 134.847556][ T9] usb 2-1: USB disconnect, device number 10 [ 134.859947][ T5143] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input7 [ 134.911953][ T5143] input: failed to attach handler kbd to device input7, error: -5 [ 134.965776][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 134.999754][ T5790] __nla_validate_parse: 3 callbacks suppressed [ 134.999819][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 135.027699][ T5791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.063573][ T5791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.165717][ T45] usb 5-1: device descriptor read/64, error -71 [ 135.249163][ T5143] usb 1-1: USB disconnect, device number 12 [ 135.330825][ T45] usb usb5-port1: attempt power cycle [ 135.620151][ T29] audit: type=1326 audit(1720504182.288:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5798 comm="syz.3.171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e6b75bd9 code=0x0 [ 135.825463][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 135.866405][ T45] usb 5-1: device descriptor read/8, error -71 [ 136.115748][ T5807] netlink: 44 bytes leftover after parsing attributes in process `syz.0.173'. [ 136.125578][ T5807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.173'. [ 136.147911][ T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.202734][ T45] usb 5-1: device descriptor read/8, error -71 [ 136.356139][ T45] usb usb5-port1: unable to enumerate USB device [ 136.603733][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 137.027873][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.183875][ T5832] tmpfs: Bad value for 'mpol' [ 137.241841][ T45] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 137.271198][ T45] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 137.293149][ T45] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 137.312645][ T45] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 137.390397][ T45] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 137.414329][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 137.438661][ T5836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.180'. [ 137.464391][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.479608][ T5836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 137.495514][ T5143] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 137.686676][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 137.714653][ T5143] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 137.754676][ T5143] usb 1-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 137.761894][ T9] usb 3-1: USB disconnect, device number 9 [ 137.776473][ T5143] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 137.799907][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.841736][ T5845] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.184'. [ 138.071775][ T59] usb 1-1: USB disconnect, device number 13 [ 138.095715][ T785] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 138.155476][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.215541][ T5143] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 138.279300][ T785] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.293033][ T785] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 138.315507][ T785] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 138.325698][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.360582][ T45] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 138.382654][ T45] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 138.384023][ T5850] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.185'. [ 138.405783][ T5143] usb 5-1: Using ep0 maxpacket: 16 [ 138.413559][ T45] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 138.432605][ T5143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 138.444453][ T45] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 138.461709][ T5143] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 138.477510][ T45] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 138.487383][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.495531][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 138.508847][ T5143] usb 5-1: config 0 descriptor?? [ 138.516784][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.769253][ T9] usb 2-1: USB disconnect, device number 11 [ 138.776013][ T5095] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 138.776978][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 138.942005][ T5845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.955098][ T5845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.965536][ T5095] usb 3-1: Using ep0 maxpacket: 16 [ 138.973949][ T5095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 138.981708][ T5143] hid (null): unknown global tag 0xc [ 138.986987][ T5095] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 138.999864][ T5095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.002080][ T5143] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 139.019306][ T5143] hid-generic 0003:0158:0100.0006: unexpected long global item [ 139.026980][ T5095] usb 3-1: config 0 descriptor?? [ 139.034975][ T5143] hid-generic 0003:0158:0100.0006: probe with driver hid-generic failed with error -22 [ 139.085564][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 139.200035][ T785] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 139.209779][ T5143] usb 5-1: USB disconnect, device number 10 [ 139.211387][ T785] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input8 [ 139.242673][ T785] input: failed to attach handler kbd to device input8, error: -5 [ 139.270105][ T8] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 139.282657][ T8] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 139.292319][ T8] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 139.303362][ T8] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 139.313872][ T8] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 139.323287][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 139.365419][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.389090][ T5855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.419320][ T5855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.436926][ T5850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.473160][ T5850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.509339][ T5095] hid (null): report_id 2838798905 is invalid [ 139.530982][ T5095] hid (null): unknown global tag 0xc [ 139.536852][ T5095] hid (null): unknown global tag 0xa5 [ 139.543643][ T785] usb 4-1: USB disconnect, device number 12 [ 139.554512][ T5095] hid (null): unknown global tag 0xd [ 139.570026][ T5095] hid (null): unknown global tag 0xc [ 139.589699][ T5095] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 139.610310][ T5095] hid-generic 0003:0158:0100.0007: unexpected long global item [ 139.614910][ T29] audit: type=1326 audit(1720504186.278:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5856 comm="syz.1.187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e7d75bd9 code=0x0 [ 139.623128][ T5095] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 139.653676][ T59] usb 1-1: USB disconnect, device number 14 [ 139.707491][ T5095] usb 3-1: USB disconnect, device number 10 [ 140.355468][ T5095] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 140.547906][ T5095] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 140.562719][ T5095] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 140.585457][ T5095] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 140.601138][ T5095] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 140.626304][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 140.634953][ T5095] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 140.712377][ T5095] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 140.721062][ T5876] sctp: [Deprecated]: syz.1.193 (pid 5876) Use of int in maxseg socket option. [ 140.721062][ T5876] Use struct sctp_assoc_value instead [ 140.735987][ T785] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 140.750949][ T5095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.810183][ T8] usb 4-1: device descriptor read/64, error -71 [ 140.919556][ T785] usb 3-1: Using ep0 maxpacket: 16 [ 140.927808][ T785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 140.949596][ T785] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 140.982247][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.022399][ T5143] usb 5-1: USB disconnect, device number 11 [ 141.027893][ T785] usb 3-1: config 0 descriptor?? [ 141.095931][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 141.243837][ T5879] __nla_validate_parse: 1 callbacks suppressed [ 141.243860][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 141.288195][ T8] usb 4-1: device descriptor read/64, error -71 [ 141.406004][ T8] usb usb4-port1: attempt power cycle [ 141.449973][ T5868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.471579][ T5868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.502357][ T785] hid (null): unknown global tag 0xc [ 141.545546][ T785] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 141.571578][ T785] hid-generic 0003:0158:0100.0008: unexpected long global item [ 141.623695][ T785] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 141.637862][ T5888] tmpfs: Bad value for 'mpol' [ 141.675630][ T5143] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 141.746483][ T45] usb 3-1: USB disconnect, device number 11 [ 141.928659][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 141.966209][ T8] usb 4-1: device descriptor read/8, error -71 [ 141.968230][ T5143] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 142.011726][ T5143] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 142.021234][ T5143] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 142.030566][ T5143] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 142.041205][ T5143] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 142.054724][ T5143] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 142.082391][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.147563][ T5142] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 142.235471][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 142.286788][ T8] usb 4-1: device descriptor read/8, error -71 [ 142.311697][ T45] usb 2-1: USB disconnect, device number 12 [ 142.359097][ T5142] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 142.420600][ T5142] usb 1-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 142.452143][ T5142] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 142.475225][ T8] usb usb4-port1: unable to enumerate USB device [ 142.502225][ T5142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.070201][ T5898] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.199'. [ 143.435612][ T5142] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 143.436054][ T785] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 143.637608][ T5142] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.670072][ T5142] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 143.683918][ T785] usb 2-1: Using ep0 maxpacket: 16 [ 143.694926][ T5142] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 143.719276][ T785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 143.720855][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.764224][ T785] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 143.808672][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.855797][ T785] usb 2-1: config 0 descriptor?? [ 143.946823][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 144.142068][ T45] usb 4-1: device descriptor read/64, error -71 [ 144.312585][ T5898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.355970][ T5898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.420927][ T785] hid (null): report_id 2838798905 is invalid [ 144.438409][ T785] hid (null): unknown global tag 0xc [ 144.445984][ T785] hid (null): unknown global tag 0xa5 [ 144.446409][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 144.452384][ T785] hid (null): unknown global tag 0xd [ 144.482192][ T59] usb 1-1: USB disconnect, device number 15 [ 144.482327][ T785] hid (null): unknown global tag 0xc [ 144.539098][ T785] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 144.562846][ T785] hid-generic 0003:0158:0100.0009: unexpected long global item [ 144.594813][ T785] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 144.623269][ T5142] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 144.655450][ T45] usb 4-1: device descriptor read/64, error -71 [ 144.666425][ T5142] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input9 [ 144.686741][ T785] usb 2-1: USB disconnect, device number 13 [ 144.704935][ T29] audit: type=1326 audit(1720504191.368:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5910 comm="syz.0.203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3795b75bd9 code=0x0 [ 144.746303][ T5142] input: failed to attach handler kbd to device input9, error: -5 [ 144.758955][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.773740][ T5912] tmpfs: Bad value for 'mpol' [ 144.792661][ T45] usb usb4-port1: attempt power cycle [ 144.825754][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.041932][ T5143] usb 3-1: USB disconnect, device number 12 [ 145.146035][ T59] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 145.245542][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 145.296110][ T45] usb 4-1: device descriptor read/8, error -71 [ 145.357398][ T59] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 145.380724][ T59] usb 5-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 145.404972][ T59] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 145.460882][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.518937][ T5919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.204'. [ 145.541087][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'. [ 145.635522][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 145.691866][ T45] usb 4-1: device descriptor read/8, error -71 [ 145.836702][ T45] usb usb4-port1: unable to enumerate USB device [ 146.685592][ T59] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 146.898406][ T59] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.912824][ T59] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 146.929090][ T59] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 146.936445][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 146.941594][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.980222][ T785] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 147.145531][ T785] usb 1-1: device descriptor read/64, error -71 [ 147.201446][ T29] audit: type=1326 audit(1720504193.868:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5948 comm="syz.2.215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685ef75bd9 code=0x0 [ 147.405516][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 147.438629][ T5144] usb 5-1: USB disconnect, device number 12 [ 147.439233][ T785] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 147.635532][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.216'. [ 147.640484][ T8] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 147.647895][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'. [ 147.653169][ T785] usb 1-1: device descriptor read/64, error -71 [ 147.669697][ T8] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 147.692471][ T8] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 147.715253][ T8] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 147.749406][ T8] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 147.766385][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 147.783629][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.825761][ T785] usb usb1-port1: attempt power cycle [ 147.897322][ T59] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 147.929014][ T59] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input10 [ 147.944703][ T59] input: failed to attach handler kbd to device input10, error: -5 [ 148.055661][ T45] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 148.164196][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.201321][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.245472][ T785] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 148.255814][ T8] usb 4-1: USB disconnect, device number 21 [ 148.288352][ T45] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.297728][ T785] usb 1-1: device descriptor read/8, error -71 [ 148.341550][ T45] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 148.371951][ T45] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 148.394285][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.432933][ T25] usb 2-1: USB disconnect, device number 14 [ 148.585458][ T785] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 148.636796][ T785] usb 1-1: device descriptor read/8, error -71 [ 148.777790][ T785] usb usb1-port1: unable to enumerate USB device [ 149.251446][ T45] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 149.287753][ T45] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input11 [ 149.296355][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 149.325765][ T45] input: failed to attach handler kbd to device input11, error: -5 [ 149.411700][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.442155][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.550033][ T45] usb 5-1: USB disconnect, device number 13 [ 149.715517][ T5095] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 149.957854][ T5095] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 149.991858][ T5095] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 150.028916][ T5095] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 150.052385][ T5095] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 150.075007][ T5095] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 150.119314][ T5095] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 150.155547][ T5095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.362956][ T5984] sctp: [Deprecated]: syz.1.225 (pid 5984) Use of int in maxseg socket option. [ 150.362956][ T5984] Use struct sctp_assoc_value instead [ 150.395585][ T785] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 150.595706][ T785] usb 1-1: device descriptor read/64, error -71 [ 150.687550][ T8] usb 4-1: USB disconnect, device number 22 [ 150.905480][ T785] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 150.957770][ T29] audit: type=1326 audit(1720504197.628:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5992 comm="syz.1.228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e7d75bd9 code=0x0 [ 151.048108][ T5995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.227'. [ 151.069380][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 151.075573][ T785] usb 1-1: device descriptor read/64, error -71 [ 151.216096][ T785] usb usb1-port1: attempt power cycle [ 151.500504][ T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 151.645517][ T785] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 151.686106][ T785] usb 1-1: device descriptor read/8, error -71 [ 151.707671][ T45] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.725879][ T45] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 151.744745][ T45] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 151.760619][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.955723][ T785] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 151.975690][ T5144] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 152.007617][ T785] usb 1-1: device descriptor read/8, error -71 [ 152.135997][ T785] usb usb1-port1: unable to enumerate USB device [ 152.185051][ T5144] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 152.208015][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.226269][ T5144] usb 3-1: config 0 descriptor?? [ 152.237866][ T5144] gspca_main: spca508-2.14.0 probing 8086:0110 [ 152.265611][ T5143] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 152.475806][ T5143] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 152.534453][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.587093][ T5143] usb 2-1: config 0 descriptor?? [ 152.621574][ T5143] gspca_main: spca508-2.14.0 probing 8086:0110 [ 152.636902][ T45] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 152.657799][ T45] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input12 [ 152.682621][ T45] input: failed to attach handler kbd to device input12, error: -5 [ 152.756070][ T5144] gspca_spca508: reg_read err -110 [ 152.781360][ T5144] gspca_spca508: reg_read err -32 [ 152.821686][ T5144] gspca_spca508: reg_read err -32 [ 152.880711][ T5144] gspca_spca508: reg_read err -32 [ 152.911132][ T5144] gspca_spca508: reg_read err -32 [ 152.939490][ T5144] gspca_spca508: reg write: error -32 [ 152.965753][ T5144] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 152.968189][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.994710][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.164461][ T5143] gspca_spca508: reg_read err -110 [ 153.195930][ T5143] gspca_spca508: reg_read err -32 [ 153.215447][ T5143] gspca_spca508: reg_read err -32 [ 153.226693][ T5143] gspca_spca508: reg_read err -32 [ 153.237876][ T5143] gspca_spca508: reg_read err -32 [ 153.255559][ T5143] gspca_spca508: reg write: error -32 [ 153.261243][ T5143] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 153.328172][ T5095] usb 5-1: USB disconnect, device number 14 [ 153.666753][ T785] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 153.714264][ T5095] usb 3-1: USB disconnect, device number 13 [ 153.850773][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 153.888915][ T785] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 153.898218][ T785] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.909027][ T785] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.934997][ T785] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.965401][ T785] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 153.983886][ T785] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.041594][ T785] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.061326][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.077651][ T785] usb 1-1: Product: syz [ 154.079314][ T45] usb 2-1: USB disconnect, device number 15 [ 154.084956][ T785] usb 1-1: Manufacturer: syz [ 154.108286][ T785] usb 1-1: SerialNumber: syz [ 154.156364][ T785] cdc_ncm 1-1:1.0: skipping garbage [ 154.368089][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 154.446761][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 154.987962][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.005903][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.281289][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 155.314611][ T29] audit: type=1326 audit(1720504201.978:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6044 comm="syz.3.243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e6b75bd9 code=0x0 [ 155.336255][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.394977][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.420083][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.515727][ T785] cdc_ncm 1-1:1.0: bind() failure [ 155.540974][ T785] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 155.567940][ T785] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 155.596732][ T785] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 155.651677][ T785] usb 1-1: USB disconnect, device number 24 [ 155.775420][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 155.998067][ T45] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 156.054711][ T45] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 156.144523][ T45] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 156.294274][ T45] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 156.490373][ T45] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 156.572689][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 156.633389][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.101814][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 157.338699][ T5201] usb 2-1: USB disconnect, device number 16 [ 157.597610][ T785] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 157.822283][ T785] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 157.833729][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 157.843856][ T785] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 157.859844][ T785] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 157.869751][ T785] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 157.889993][ T785] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 157.919339][ T785] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 157.950494][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.263114][ T6075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.250'. [ 158.284502][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 158.372433][ T785] usb 3-1: USB disconnect, device number 14 [ 158.963584][ T6083] netlink: 44 bytes leftover after parsing attributes in process `syz.3.253'. [ 158.995782][ T6083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.253'. [ 159.067053][ T29] audit: type=1326 audit(1720504205.718:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6089 comm="syz.1.255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e7d75bd9 code=0x0 [ 159.088759][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.445860][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 160.793024][ T6119] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.263'. [ 161.029186][ T6126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.902958][ T5143] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 161.963654][ T6126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.000051][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 162.092331][ T5143] usb 4-1: Using ep0 maxpacket: 16 [ 162.142136][ T5143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 162.174723][ T5143] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 162.194261][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.221856][ T5143] usb 4-1: config 0 descriptor?? [ 162.395413][ T5201] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 162.598188][ T5201] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 162.625432][ T5201] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 162.655195][ T5201] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 162.659794][ T6119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.683398][ T5201] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 162.705620][ T5201] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 162.714441][ T6119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.730298][ T5201] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 162.773675][ T5143] hid (null): unknown global tag 0x83 [ 162.800362][ T5143] hid (null): unknown global tag 0xc [ 162.846618][ T5143] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 162.880642][ T5143] hid-generic 0003:0158:0100.000A: unexpected long global item [ 162.910714][ T5143] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22 [ 162.972891][ T5201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.034196][ T5143] usb 4-1: USB disconnect, device number 23 [ 163.795649][ T5201] usb 1-1: USB disconnect, device number 25 [ 163.928220][ T29] audit: type=1326 audit(1720504210.598:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6145 comm="syz.4.271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdbb375bd9 code=0x0 [ 163.949278][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.125473][ T5095] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 164.324044][ T5095] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 164.368888][ T5095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.416683][ T5095] usb 3-1: config 0 descriptor?? [ 164.768487][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 165.195548][ T5143] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 165.333012][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 165.421017][ T5143] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 165.442346][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.459713][ T5143] usb 5-1: config 0 descriptor?? [ 165.499141][ T785] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 165.685761][ T5140] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 165.687839][ T785] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 165.722361][ T5095] pegasus 3-1:0.0: can't reset MAC [ 165.732009][ T5095] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 165.741299][ T785] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 165.763775][ T785] usb 4-1: config 0 has no interface number 0 [ 165.782594][ T5095] usb 3-1: USB disconnect, device number 15 [ 165.792098][ T785] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 8 [ 165.813536][ T785] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 165.816682][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 165.827800][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.867422][ T785] usb 4-1: config 0 descriptor?? [ 165.873617][ T6166] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 165.919884][ T5140] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 165.935904][ T5140] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 165.954753][ T5140] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 165.974603][ T5140] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 165.998137][ T5140] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 166.011410][ T5140] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 166.020722][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.246745][ T5095] usb 1-1: USB disconnect, device number 26 [ 166.259162][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 166.457845][ T8] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 166.467339][ T8] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 166.479491][ T8] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 166.492249][ T8] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 166.504209][ T8] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 166.514195][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 166.528044][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.561935][ T785] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input13 [ 166.748202][ T5143] pegasus 5-1:0.0: can't reset MAC [ 166.753610][ T5143] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 166.794335][ T785] usb 2-1: USB disconnect, device number 17 [ 166.803848][ T5143] usb 5-1: USB disconnect, device number 15 [ 166.916964][ T5095] usb 4-1: USB disconnect, device number 24 [ 166.922977][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 167.916914][ T6188] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.284'. [ 167.958542][ T6186] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 167.958542][ T6186] program syz.0.283 not setting count and/or reply_len properly [ 168.154265][ T29] audit: type=1326 audit(1720504214.818:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6193 comm="syz.1.286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e7d75bd9 code=0x0 [ 168.247441][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 168.355422][ T5095] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 168.374246][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.289'. [ 168.392078][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 168.584769][ T5095] usb 3-1: Using ep0 maxpacket: 16 [ 168.597607][ T5095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 168.648910][ T5095] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 168.697265][ T5095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.705662][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 168.744134][ T5095] usb 3-1: config 0 descriptor?? [ 168.846195][ T6212] netlink: 44 bytes leftover after parsing attributes in process `syz.4.292'. [ 168.874682][ T6212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.292'. [ 168.907666][ T8] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 168.921720][ T8] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 168.945495][ T8] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 168.965473][ T8] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 168.985946][ T8] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 169.025437][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 169.039393][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.223389][ T6223] capability: warning: `syz.3.293' uses deprecated v2 capabilities in a way that may be insecure [ 169.237151][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.576531][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.074297][ T45] usb 1-1: USB disconnect, device number 27 [ 170.328667][ T5095] hid (null): unknown global tag 0xc [ 170.335518][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 170.343396][ T5095] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 170.352329][ T5095] hid-generic 0003:0158:0100.000B: unexpected long global item [ 170.360917][ T5095] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22 [ 170.386315][ T5095] usb 3-1: USB disconnect, device number 16 [ 170.445564][ T5144] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 170.460786][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 170.559476][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 170.568974][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.579839][ T25] usb 2-1: config 0 descriptor?? [ 170.610899][ T25] gspca_main: spca508-2.14.0 probing 8086:0110 [ 170.661519][ T5144] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 170.670997][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.686906][ T5144] usb 4-1: config 0 descriptor?? [ 170.875617][ T45] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 171.043344][ T6237] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 171.043344][ T6237] program syz.0.298 not setting count and/or reply_len properly [ 171.108904][ T45] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 171.145740][ T25] gspca_spca508: reg_read err -110 [ 171.152436][ T45] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 171.172703][ T25] gspca_spca508: reg_read err -32 [ 171.202873][ T45] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 171.212963][ T25] gspca_spca508: reg_read err -32 [ 171.225764][ T25] gspca_spca508: reg_read err -32 [ 171.232599][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 171.250981][ T45] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 171.261820][ T45] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 171.272009][ T25] gspca_spca508: reg_read err -32 [ 171.277470][ T45] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 171.289989][ T25] gspca_spca508: reg write: error -32 [ 171.295659][ T25] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 171.309841][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.460244][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 171.536614][ T25] usb 5-1: USB disconnect, device number 16 [ 171.635636][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 171.668748][ T8] usb 2-1: USB disconnect, device number 18 [ 171.855097][ T45] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 171.868631][ T45] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 171.880733][ T45] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 171.903678][ T45] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 171.927020][ T5144] pegasus 4-1:0.0: can't reset MAC [ 171.932375][ T5144] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 171.942104][ T45] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 171.958946][ T5144] usb 4-1: USB disconnect, device number 25 [ 171.965207][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 171.984504][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.135990][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.302'. [ 172.147575][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 172.328339][ T6255] sctp: [Deprecated]: syz.0.304 (pid 6255) Use of int in maxseg socket option. [ 172.328339][ T6255] Use struct sctp_assoc_value instead [ 172.389548][ T6256] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 172.413188][ T6256] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.303'. [ 172.423166][ T6256] netlink: 5 bytes leftover after parsing attributes in process `syz.4.303'. [ 172.479661][ T5090] usb 3-1: USB disconnect, device number 17 [ 172.523654][ T29] audit: type=1326 audit(1720504219.188:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6258 comm="syz.1.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e7d75bd9 code=0x0 [ 175.106338][ T6276] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.311'. [ 175.246808][ T6284] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 175.246808][ T6284] program syz.0.310 not setting count and/or reply_len properly [ 175.700550][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 175.725563][ T5090] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 175.792120][ T6283] netlink: 44 bytes leftover after parsing attributes in process `syz.4.312'. [ 175.849270][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.312'. [ 175.938558][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 175.949491][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 175.949615][ T5090] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 175.996315][ T45] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 176.021944][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.032100][ T5090] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 176.056871][ T5090] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 176.077169][ T5090] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.088962][ T45] usb 2-1: config 0 descriptor?? [ 176.151703][ T5090] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 176.184377][ T5090] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 176.212135][ T5090] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 176.222911][ T5090] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.241629][ T5090] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 176.263071][ T5090] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 176.294220][ T5090] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 176.304924][ T5090] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.324395][ T5090] usb 3-1: string descriptor 0 read error: -22 [ 176.331573][ T5090] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 176.342728][ T5090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.369874][ T5090] adutux 3-1:168.0: interrupt endpoints not found [ 176.524141][ T6276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.544433][ T6276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.559716][ T45] hid (null): unknown global tag 0x83 [ 176.580110][ T45] hid (null): unknown global tag 0xc [ 176.620288][ T45] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1 [ 176.646621][ T45] hid-generic 0003:0158:0100.000C: unexpected long global item [ 176.663288][ T45] hid-generic 0003:0158:0100.000C: probe with driver hid-generic failed with error -22 [ 176.753648][ T45] usb 3-1: USB disconnect, device number 18 [ 176.868683][ T5144] usb 2-1: USB disconnect, device number 19 [ 177.597041][ T6290] syz.3.309 (6290): drop_caches: 2 [ 177.652035][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 178.204620][ T29] audit: type=1326 audit(1720504224.858:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6320 comm="syz.2.321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685ef75bd9 code=0x0 [ 178.439756][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 178.884680][ T6334] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 178.884680][ T6334] program syz.4.323 not setting count and/or reply_len properly [ 179.266169][ T8] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 179.278996][ T8] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 179.306728][ T8] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 179.337954][ T8] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 179.411660][ T8] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 179.440030][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 179.469361][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.725231][ T8] usb 2-1: USB disconnect, device number 20 [ 179.735533][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 179.941011][ T45] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.985608][ T45] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 180.005545][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 180.029038][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.306063][ T6352] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.329'. [ 180.445266][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 180.655439][ T5144] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 180.875472][ T5144] usb 5-1: Using ep0 maxpacket: 16 [ 180.885235][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 180.903983][ T5144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 181.002152][ T45] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 181.052460][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.332342][ T45] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input14 [ 181.342278][ T5144] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 181.376178][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.394821][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.406729][ T5144] usb 5-1: config 0 descriptor?? [ 181.472034][ T45] input: failed to attach handler kbd to device input14, error: -5 [ 181.576468][ T45] usb 3-1: USB disconnect, device number 19 [ 181.607067][ T25] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 181.622371][ T25] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 181.655550][ T25] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 181.664707][ T25] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 181.671481][ T6344] syz.0.324 (6344): drop_caches: 2 [ 181.709294][ T25] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 181.761682][ T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 181.792783][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.823620][ T6352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.859800][ T6352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.874120][ T5144] hid (null): unknown global tag 0x83 [ 181.904716][ T5144] hid (null): unknown global tag 0xc [ 181.960317][ T5144] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 181.983162][ T5144] hid-generic 0003:0158:0100.000D: unexpected long global item [ 181.997479][ T5144] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22 [ 182.103640][ T5144] usb 5-1: USB disconnect, device number 17 [ 182.198614][ T25] usb 4-1: USB disconnect, device number 26 [ 182.266898][ T6377] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 182.266898][ T6377] program syz.2.335 not setting count and/or reply_len properly [ 182.318770][ T29] audit: type=1326 audit(1720504228.988:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6375 comm="syz.0.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3795b75bd9 code=0x0 [ 182.344593][ T6372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.416066][ T6371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.844651][ T6382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.882720][ T6382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.165453][ T8] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 183.357417][ T8] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 183.379791][ T8] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 183.393236][ T8] usb 3-1: config 0 has no interface number 0 [ 183.421627][ T8] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 8 [ 183.457328][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 183.475431][ T8] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 183.512176][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.538764][ T8] usb 3-1: config 0 descriptor?? [ 183.547482][ T6384] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.488021][ T8] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input15 [ 184.626413][ T6422] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 184.626413][ T6422] program syz.1.347 not setting count and/or reply_len properly [ 185.115770][ T5144] usb 3-1: USB disconnect, device number 20 [ 185.115775][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 185.723494][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 185.740102][ T29] audit: type=1326 audit(1720504232.408:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.3.353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e6b75bd9 code=0x0 [ 186.046341][ T25] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 186.125554][ T5144] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 186.249973][ T25] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 186.259561][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.271701][ T25] usb 1-1: config 0 descriptor?? [ 186.283684][ T25] gspca_main: spca508-2.14.0 probing 8086:0110 [ 186.342034][ T5144] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 186.356071][ T5144] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 186.385352][ T5144] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 186.394747][ T5144] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 186.435156][ T5144] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 186.445716][ T5144] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 186.454999][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.620513][ T6451] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.356'. [ 186.676214][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 186.769610][ T5095] usb 5-1: USB disconnect, device number 18 [ 186.795842][ T25] gspca_spca508: reg_read err -110 [ 186.801732][ T25] gspca_spca508: reg_read err -32 [ 186.809196][ T25] gspca_spca508: reg_read err -32 [ 186.814824][ T25] gspca_spca508: reg_read err -32 [ 186.820742][ T25] gspca_spca508: reg_read err -32 [ 186.826461][ T25] gspca_spca508: reg write: error -32 [ 186.832078][ T25] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 186.889332][ T8] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 186.901559][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.913087][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.932905][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.943534][ T8] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 186.953595][ T8] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.971291][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.980503][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.989250][ T8] usb 3-1: Product: syz [ 186.993446][ T8] usb 3-1: Manufacturer: syz [ 186.998306][ T8] usb 3-1: SerialNumber: syz [ 187.005531][ T5144] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 187.010446][ T8] cdc_ncm 3-1:1.0: skipping garbage [ 187.195459][ T5144] usb 4-1: Using ep0 maxpacket: 16 [ 187.208247][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 187.219525][ T5144] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 187.229051][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.250466][ T5144] usb 4-1: config 0 descriptor?? [ 187.274567][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 187.680945][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.697242][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.724438][ T5144] hid (null): report_id 2838798905 is invalid [ 187.751298][ T5144] hid (null): unknown global tag 0xc [ 187.765449][ T5144] hid (null): unknown global tag 0xa5 [ 187.773406][ T5144] hid (null): unknown global tag 0xd [ 187.780524][ T5144] hid (null): unknown global tag 0xc [ 187.791785][ T5142] usb 1-1: USB disconnect, device number 28 [ 187.820362][ T5144] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1 [ 187.838557][ T5144] hid-generic 0003:0158:0100.000E: unexpected long global item [ 187.878196][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.878432][ T5144] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22 [ 187.922621][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.937406][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 187.996362][ T5144] usb 4-1: USB disconnect, device number 27 [ 188.419561][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.447293][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.330787][ T8] cdc_ncm 3-1:1.0: bind() failure [ 189.369777][ T8] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 189.405489][ T8] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 189.424892][ T8] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 189.443603][ T8] usb 3-1: USB disconnect, device number 21 [ 189.694269][ T6482] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 189.694269][ T6482] program syz.1.364 not setting count and/or reply_len properly [ 189.764200][ T29] audit: type=1326 audit(1720504236.428:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.3.366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e6b75bd9 code=0x0 [ 190.188379][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 190.304890][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 190.811829][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 190.843564][ T6508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.962031][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 190.974358][ T6511] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 190.976437][ T6507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.056691][ T8] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 191.085816][ T8] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 191.115401][ T8] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 191.145670][ T8] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 191.165488][ T8] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 191.195937][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 191.221866][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.396559][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 191.676778][ T25] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 191.705593][ T25] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 191.730857][ T45] usb 3-1: USB disconnect, device number 22 [ 191.754503][ T25] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 191.769650][ T25] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 191.785422][ T25] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 191.801637][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 191.822523][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.049524][ T6501] syz.0.368 (6501): drop_caches: 2 [ 192.099049][ T8] usb 5-1: USB disconnect, device number 19 [ 192.990117][ T6533] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.377'. [ 193.486177][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 193.496310][ T6520] syz.1.373 (6520): drop_caches: 2 [ 193.715916][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 193.728714][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 193.750964][ T8] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 193.781616][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.782422][ T29] audit: type=1326 audit(1720504240.438:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6548 comm="syz.0.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3795b75bd9 code=0x0 [ 193.805164][ T8] usb 5-1: config 0 descriptor?? [ 194.076170][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 194.085342][ T5142] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 194.244418][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.262367][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.294953][ T8] hid (null): report_id 2838798905 is invalid [ 194.305151][ T8] hid (null): unknown global tag 0xc [ 194.315191][ T8] hid (null): unknown global tag 0xa5 [ 194.323782][ T8] hid (null): unknown global tag 0xd [ 194.343194][ T8] hid (null): unknown global tag 0xc [ 194.364543][ T8] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1 [ 194.379899][ T8] hid-generic 0003:0158:0100.000F: unexpected long global item [ 194.400848][ T8] hid-generic 0003:0158:0100.000F: probe with driver hid-generic failed with error -22 [ 194.538589][ T8] usb 5-1: USB disconnect, device number 20 [ 194.542871][ T5142] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 194.547493][ T5095] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 194.564161][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.588023][ T5142] usb 3-1: config 0 descriptor?? [ 194.605264][ T5142] gspca_main: spca508-2.14.0 probing 8086:0110 [ 194.681882][ T6560] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 194.681882][ T6560] program syz.3.383 not setting count and/or reply_len properly [ 194.705166][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.713459][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.820076][ T5095] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 194.839770][ T5095] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 194.866968][ T5095] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 194.884065][ T5095] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 194.906980][ T5095] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 194.925845][ T6561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.384'. [ 194.935129][ T5095] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 194.954202][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.384'. [ 194.964165][ T5095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.125555][ T5142] gspca_spca508: reg_read err -110 [ 195.149562][ T5142] gspca_spca508: reg_read err -32 [ 195.157131][ T5142] gspca_spca508: reg_read err -32 [ 195.173743][ T5142] gspca_spca508: reg_read err -32 [ 195.179391][ T5142] gspca_spca508: reg_read err -32 [ 195.186044][ T5142] gspca_spca508: reg write: error -32 [ 195.193938][ T5142] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 195.267050][ T5142] usb 2-1: USB disconnect, device number 21 [ 195.401852][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.386'. [ 195.458856][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 195.494457][ T6570] bridge0: entered promiscuous mode [ 195.513428][ T6570] bridge0: entered allmulticast mode [ 195.713208][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 195.767992][ T8] usb 3-1: USB disconnect, device number 23 [ 195.885402][ T5095] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 196.107492][ T5144] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 196.108281][ T5095] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 196.133668][ T5095] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 196.143543][ T5095] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 196.153483][ T5095] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 196.166965][ T5095] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 196.177033][ T5095] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 196.196372][ T5095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.665412][ T8] usb 1-1: USB disconnect, device number 29 [ 196.700947][ T5095] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 197.059341][ T5095] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 197.088649][ T5095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.117597][ T5095] usb 4-1: config 0 descriptor?? [ 197.195920][ T5094] Bluetooth: hci1: unexpected event 0x17 length: 14 > 6 [ 197.220955][ T5144] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 197.239962][ T5144] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 197.248931][ T5144] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 197.258854][ T5144] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 197.275054][ T5144] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 197.294425][ T5144] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 197.306378][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.358103][ T6587] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 197.550872][ T5142] usb 5-1: USB disconnect, device number 21 [ 197.580221][ T29] audit: type=1326 audit(1720504244.248:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6593 comm="syz.1.394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e7d75bd9 code=0x0 [ 197.601152][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.765469][ T5144] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 197.919010][ T6597] netlink: 44 bytes leftover after parsing attributes in process `syz.2.395'. [ 197.928418][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.395'. [ 197.972236][ T5144] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 197.995424][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.026115][ T5144] usb 1-1: config 0 descriptor?? [ 198.119424][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 198.424479][ T6611] sctp: [Deprecated]: syz.1.399 (pid 6611) Use of int in maxseg socket option. [ 198.424479][ T6611] Use struct sctp_assoc_value instead [ 198.463326][ T6608] netlink: 44 bytes leftover after parsing attributes in process `syz.4.398'. [ 198.485574][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.398'. [ 198.732753][ T6616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.797399][ T6616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.805918][ T5095] pegasus 4-1:0.0: setup Pegasus II specific registers [ 198.864002][ T6622] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 198.864002][ T6622] program syz.2.400 not setting count and/or reply_len properly [ 198.954177][ T5095] pegasus 4-1:0.0: can't locate MII phy, using default [ 199.024654][ T5095] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 06:de:85:b6:07:be [ 199.057715][ T5095] usb 4-1: USB disconnect, device number 28 [ 199.329250][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.403'. [ 199.347003][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.403'. [ 199.619115][ T6632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.691213][ T6632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.728889][ T5144] pegasus 1-1:0.0: setup Pegasus II specific registers [ 200.065725][ T29] audit: type=1326 audit(1720504246.728:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6638 comm="syz.4.409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdbb375bd9 code=0x0 [ 200.086678][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.095774][ T5144] pegasus 1-1:0.0: can't locate MII phy, using default [ 200.133851][ T5144] pegasus 1-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 12:c4:a4:fd:03:e9 [ 200.153703][ T5144] usb 1-1: USB disconnect, device number 30 [ 200.919393][ T6644] sctp: [Deprecated]: syz.0.411 (pid 6644) Use of int in maxseg socket option. [ 200.919393][ T6644] Use struct sctp_assoc_value instead [ 201.119846][ T6646] __nla_validate_parse: 2 callbacks suppressed [ 201.119868][ T6646] netlink: 44 bytes leftover after parsing attributes in process `syz.4.412'. [ 201.132151][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 201.159224][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.412'. [ 201.266399][ T6654] netlink: 44 bytes leftover after parsing attributes in process `syz.0.415'. [ 201.296093][ T6654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.415'. [ 201.767956][ T6679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 201.778628][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 202.001917][ T29] audit: type=1326 audit(1720504248.658:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6686 comm="syz.2.422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685ef75bd9 code=0x0 [ 202.089368][ T5094] Bluetooth: hci4: unexpected event 0x17 length: 14 > 6 [ 202.115418][ T8] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 202.335665][ T6695] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 202.497483][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 203.132804][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 203.162516][ T8] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 203.216164][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.483756][ T8] usb 1-1: config 0 descriptor?? [ 203.534871][ T6704] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 203.534871][ T6704] program syz.1.424 not setting count and/or reply_len properly [ 203.925810][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 203.972990][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.050982][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.148205][ T8] hid (null): unknown global tag 0xc [ 204.194980][ T8] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1 [ 204.236168][ T8] hid-generic 0003:0158:0100.0010: unexpected long global item [ 204.286626][ T8] hid-generic 0003:0158:0100.0010: probe with driver hid-generic failed with error -22 [ 204.399643][ T5142] usb 1-1: USB disconnect, device number 31 [ 204.844836][ T6713] syz.2.425 (6713): drop_caches: 2 [ 205.148899][ T6725] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.429'. [ 205.267996][ T6707] syz.4.426 (6707): drop_caches: 2 [ 205.420571][ T6727] netlink: 44 bytes leftover after parsing attributes in process `syz.0.430'. [ 205.595470][ T5095] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 205.835425][ T5095] usb 4-1: Using ep0 maxpacket: 16 [ 205.848708][ T5095] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 205.905684][ T5095] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 205.952080][ T5095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.981519][ T5095] usb 4-1: config 0 descriptor?? [ 206.291762][ T53] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 206.389431][ T29] audit: type=1326 audit(1720504252.988:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6742 comm="syz.1.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e7d75bd9 code=0x0 [ 206.422999][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.509542][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.571505][ T6754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.589025][ T5095] hid (null): unknown global tag 0xc [ 206.603394][ T5095] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1 [ 206.625178][ T5095] hid-generic 0003:0158:0100.0011: unexpected long global item [ 206.637670][ T5095] hid-generic 0003:0158:0100.0011: probe with driver hid-generic failed with error -22 [ 206.710620][ T6757] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 206.714826][ T6748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.763943][ T5095] usb 4-1: USB disconnect, device number 29 [ 206.840033][ T6759] __nla_validate_parse: 3 callbacks suppressed [ 206.840053][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 207.018799][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 207.019182][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 207.027616][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 207.031221][ T5100] Bluetooth: hci0: command 0x0406 tx timeout [ 207.230851][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 207.345791][ T5095] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 207.547983][ T6773] netlink: 44 bytes leftover after parsing attributes in process `syz.4.442'. [ 207.557641][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.442'. [ 207.557889][ T5095] usb 3-1: Using ep0 maxpacket: 16 [ 207.588915][ T5095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 207.620795][ T5095] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 207.650893][ T5095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.665599][ T5201] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 207.697198][ T5095] usb 3-1: config 0 descriptor?? [ 207.703418][ T5101] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 208.115720][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.118105][ T5201] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 208.150198][ T6790] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 208.150198][ T6790] program syz.3.445 not setting count and/or reply_len properly [ 208.153096][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.169169][ T5201] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 208.195962][ T5201] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 208.216184][ T5201] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 208.241657][ T5201] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 208.265227][ T5095] hid (null): unknown global tag 0xc [ 208.290419][ T5201] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 208.329955][ T5095] hid-generic 0003:0158:0100.0012: unknown main item tag 0x1 [ 208.342638][ T5201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.368964][ T5095] hid-generic 0003:0158:0100.0012: unexpected long global item [ 208.394230][ T5095] hid-generic 0003:0158:0100.0012: probe with driver hid-generic failed with error -22 [ 208.462475][ T5095] usb 3-1: USB disconnect, device number 24 [ 208.703733][ T5144] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 208.716234][ T5142] usb 2-1: USB disconnect, device number 22 [ 208.897597][ T5144] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 208.915377][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.938959][ T5144] usb 5-1: config 0 descriptor?? [ 208.957274][ T5144] gspca_main: spca508-2.14.0 probing 8086:0110 [ 209.171567][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 209.196343][ T5144] gspca_spca508: reg_read err -71 [ 209.215492][ T5144] gspca_spca508: reg_read err -71 [ 209.235452][ T5144] gspca_spca508: reg_read err -71 [ 209.246340][ T5144] gspca_spca508: reg_read err -71 [ 209.265513][ T5144] gspca_spca508: reg_read err -71 [ 209.285481][ T5144] gspca_spca508: reg write: error -71 [ 209.291040][ T5144] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 209.327885][ T5144] usb 5-1: USB disconnect, device number 22 [ 209.625203][ T5090] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 209.808307][ T5101] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 209.820689][ T29] audit: type=1326 audit(1720504256.488:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6806 comm="syz.0.451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3795b75bd9 code=0x0 [ 209.853640][ T5090] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 209.873217][ T5090] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 209.887884][ T5090] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 209.925429][ T5090] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 209.945648][ T5090] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 209.955146][ T5090] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 209.979991][ T5090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.193209][ T6813] netlink: 44 bytes leftover after parsing attributes in process `syz.3.453'. [ 210.243096][ T6819] tmpfs: Bad value for 'mpol' [ 210.248391][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'. [ 210.433984][ T5090] usb 3-1: USB disconnect, device number 25 [ 210.559862][ T6826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.575789][ T5142] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 210.606717][ T6826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.693613][ T5101] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 210.780443][ T5142] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 210.825496][ T5142] usb 5-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 210.836689][ T5142] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 210.860385][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.344006][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 211.425659][ T5201] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 211.725514][ T5201] usb 2-1: Using ep0 maxpacket: 16 [ 212.544724][ T5201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 212.590819][ T5201] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 212.605547][ T5144] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 212.632201][ T5201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.671619][ T5201] usb 2-1: config 0 descriptor?? [ 212.727141][ T6850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.808095][ T6850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.838693][ T5144] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 212.854490][ T5144] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 212.865611][ T5144] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 212.874914][ T5144] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 212.895678][ T5144] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 212.913313][ T5144] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 212.923759][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.030425][ T8] usb 5-1: USB disconnect, device number 23 [ 213.158794][ T5144] usb 4-1: USB disconnect, device number 30 [ 213.189596][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.209671][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.236825][ T5201] hid (null): unknown global tag 0xc [ 213.251690][ T5201] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1 [ 213.260755][ T5201] hid-generic 0003:0158:0100.0013: unexpected long global item [ 213.275980][ T5201] hid-generic 0003:0158:0100.0013: probe with driver hid-generic failed with error -22 [ 213.441591][ T5144] usb 2-1: USB disconnect, device number 23 [ 213.627013][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 213.655116][ T6858] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 213.655116][ T6858] program syz.4.463 not setting count and/or reply_len properly [ 213.972602][ T6863] sctp: [Deprecated]: syz.3.465 (pid 6863) Use of int in maxseg socket option. [ 213.972602][ T6863] Use struct sctp_assoc_value instead [ 214.085515][ T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 214.147184][ T5101] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 214.174686][ T29] audit: type=1326 audit(1720504260.838:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6865 comm="syz.1.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e7d75bd9 code=0x0 [ 214.334051][ T8] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 214.355063][ T8] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 214.385062][ T8] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 214.404761][ T8] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 214.425647][ T8] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 214.434959][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 214.465224][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.426753][ T5201] usb 1-1: USB disconnect, device number 32 [ 215.731396][ T6877] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.470'. [ 215.882022][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 216.171240][ T5144] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 216.405378][ T5144] usb 2-1: Using ep0 maxpacket: 16 [ 216.428440][ T5144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 216.480972][ T5144] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 216.518447][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.552713][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.476'. [ 216.582768][ T5144] usb 2-1: config 0 descriptor?? [ 216.675627][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 217.038966][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.073403][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.090743][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.101324][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.107934][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.144040][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.152684][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.160470][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.182278][ T5144] hid (null): unknown global tag 0xc [ 217.208507][ T5144] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1 [ 217.223904][ T5144] hid-generic 0003:0158:0100.0014: unexpected long global item [ 217.251858][ T5088] syz-executor (5088) used greatest stack depth: 19616 bytes left [ 217.260736][ T5144] hid-generic 0003:0158:0100.0014: probe with driver hid-generic failed with error -22 [ 217.413903][ T5144] usb 2-1: USB disconnect, device number 24 [ 217.445609][ T5094] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 217.510710][ T29] audit: type=1326 audit(1720504264.178:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6909 comm="syz.2.478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685ef75bd9 code=0x0 [ 217.531682][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.583922][ T168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.684342][ T168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.798993][ T168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.845551][ T25] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 217.924512][ T168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.071400][ T25] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 218.124948][ T168] bridge_slave_1: left allmulticast mode [ 218.139784][ T168] bridge_slave_1: left promiscuous mode [ 218.151023][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.161643][ T25] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 218.199261][ T25] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 218.199585][ T168] bridge_slave_0: left allmulticast mode [ 218.222965][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.243913][ T168] bridge_slave_0: left promiscuous mode [ 218.267223][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.165198][ T6933] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 219.165198][ T6933] program syz.1.481 not setting count and/or reply_len properly [ 219.266439][ T5094] Bluetooth: hci4: command tx timeout [ 219.351384][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.401403][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.528929][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 219.636057][ T25] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 219.645731][ T25] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input16 [ 219.664777][ T25] input: failed to attach handler kbd to device input16, error: -5 [ 219.665227][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.713237][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 219.744431][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.778724][ T168] bond0 (unregistering): Released all slaves [ 219.894586][ T5090] usb 5-1: USB disconnect, device number 24 [ 219.972425][ T6905] chnl_net:caif_netlink_parms(): no params data found [ 220.105944][ T8] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 220.216745][ T168] IPVS: stopping backup sync thread 6511 ... [ 220.334366][ T8] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 220.352171][ T8] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 220.363210][ T8] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 220.373790][ T8] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 220.395369][ T8] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 220.404689][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 220.418928][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.521558][ T6957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.563420][ T6905] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.575529][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.582857][ T6905] bridge_slave_0: entered allmulticast mode [ 220.611080][ T6905] bridge_slave_0: entered promiscuous mode [ 220.642735][ T6905] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.662561][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.662611][ T6953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.675736][ T6905] bridge_slave_1: entered allmulticast mode [ 220.710264][ T6905] bridge_slave_1: entered promiscuous mode [ 220.889292][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 220.897162][ T45] usb 1-1: USB disconnect, device number 33 [ 221.052485][ T6905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.118220][ T6905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.283135][ T168] hsr_slave_0: left promiscuous mode [ 221.302006][ T168] hsr_slave_1: left promiscuous mode [ 221.344401][ T5094] Bluetooth: hci4: command tx timeout [ 221.376318][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.383876][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.415876][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.423565][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.451096][ T168] veth1_macvtap: left promiscuous mode [ 221.457563][ T168] veth0_macvtap: left promiscuous mode [ 221.463319][ T168] veth1_vlan: left promiscuous mode [ 221.469759][ T168] veth0_vlan: left promiscuous mode [ 221.495787][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 221.528142][ T5094] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 221.843852][ T5094] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 221.902343][ T29] audit: type=1326 audit(1720504268.568:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.0.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3795b75bd9 code=0x0 [ 222.008306][ T45] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 222.246830][ T45] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 222.283116][ T45] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 222.318875][ T45] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 222.329761][ T45] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 222.341126][ T45] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 222.352335][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 222.361670][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.553574][ T168] team0 (unregistering): Port device team_slave_1 removed [ 222.603491][ T168] team0 (unregistering): Port device team_slave_0 removed [ 223.206136][ T5095] usb 3-1: USB disconnect, device number 26 [ 223.224175][ T6905] team0: Port device team_slave_0 added [ 223.269175][ T6905] team0: Port device team_slave_1 added [ 223.416376][ T5094] Bluetooth: hci4: command tx timeout [ 223.459426][ T7002] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 223.459426][ T7002] program syz.1.494 not setting count and/or reply_len properly [ 223.716011][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.724473][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.751263][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.777847][ T6905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.801262][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.818544][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.844844][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.912277][ T6905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.181904][ T6905] hsr_slave_0: entered promiscuous mode [ 224.208924][ T6905] hsr_slave_1: entered promiscuous mode [ 224.221189][ T6905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.250007][ T6905] Cannot create hsr debugfs directory [ 224.767343][ T7029] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 224.777953][ T7029] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.500'. [ 224.820728][ T7029] netlink: 5 bytes leftover after parsing attributes in process `syz.2.500'. [ 225.495705][ T5094] Bluetooth: hci4: command tx timeout [ 225.826449][ T7049] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.504'. [ 226.286021][ T6905] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.321485][ T6905] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.357919][ T5095] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 226.370041][ T6905] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.418169][ T6905] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.525561][ T5095] usb 3-1: device descriptor read/64, error -71 [ 226.722575][ T5094] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 226.766895][ T29] audit: type=1326 audit(1720504273.428:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7064 comm="syz.4.505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdbb375bd9 code=0x0 [ 226.818028][ T5095] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 226.915129][ T6905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.993168][ T6905] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.000477][ T5095] usb 3-1: device descriptor read/64, error -71 [ 227.029469][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.036723][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.089069][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.096609][ T5201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.126542][ T5095] usb usb3-port1: attempt power cycle [ 227.258573][ T6905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.348438][ T7077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.407485][ T7077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.550810][ T5095] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 227.617767][ T5095] usb 3-1: device descriptor read/8, error -71 [ 227.771837][ T6905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.905905][ T5095] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 227.944846][ T6905] veth0_vlan: entered promiscuous mode [ 227.956549][ T5095] usb 3-1: device descriptor read/8, error -71 [ 227.989923][ T6905] veth1_vlan: entered promiscuous mode [ 228.006938][ T7096] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 228.006938][ T7096] program syz.1.506 not setting count and/or reply_len properly [ 228.118973][ T6905] veth0_macvtap: entered promiscuous mode [ 228.138505][ T5095] usb usb3-port1: unable to enumerate USB device [ 228.153230][ T6905] veth1_macvtap: entered promiscuous mode [ 228.228220][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.258225][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.286077][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.324655][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.345649][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.394727][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.436406][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.484884][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.509025][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.551712][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.590190][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.633885][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.686862][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.733597][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.791768][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.810959][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.832371][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.844811][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.978804][ T6905] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.022600][ T6905] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.062635][ T6905] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.098327][ T6905] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.444017][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.470028][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.576011][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.603116][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 229.625316][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.200694][ T5095] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 230.525677][ T5095] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 230.546173][ T7147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.631388][ T5095] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 230.648446][ T5094] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 230.705503][ T29] audit: type=1326 audit(1720504277.368:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.2.517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685ef75bd9 code=0x0 [ 230.734765][ T5095] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 230.803969][ T5095] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 230.854145][ T7153] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 230.879273][ T5095] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 230.908531][ T7143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.941180][ T5095] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 230.961465][ T5095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.244288][ T5095] usb 1-1: USB disconnect, device number 34 [ 232.779610][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 233.265353][ T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 233.408328][ T29] audit: type=1326 audit(1720504280.068:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7209 comm="syz.3.530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff98f575bd9 code=0x0 [ 233.970112][ T25] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 233.999831][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.067628][ T25] usb 5-1: config 0 descriptor?? [ 234.100172][ T25] gspca_main: spca508-2.14.0 probing 8086:0110 [ 234.177747][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 234.343974][ T7223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.533'. [ 234.389231][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 234.578044][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 234.627424][ T5090] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 234.627452][ T25] gspca_spca508: reg_read err -110 [ 234.636314][ T25] gspca_spca508: reg_read err -32 [ 234.652751][ T7229] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 234.652751][ T7229] program syz.1.528 not setting count and/or reply_len properly [ 234.671876][ T25] gspca_spca508: reg_read err -32 [ 234.687841][ T25] gspca_spca508: reg_read err -32 [ 234.711301][ T25] gspca_spca508: reg_read err -32 [ 234.721493][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 234.729399][ T25] gspca_spca508: reg write: error -32 [ 234.747128][ T25] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 234.928002][ T5090] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 234.946041][ T5090] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 234.965490][ T5090] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 234.974656][ T5090] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 235.009058][ T5095] usb 5-1: USB disconnect, device number 25 [ 235.029293][ T5090] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 235.074336][ T5090] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 235.095981][ T5090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.145437][ T5201] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 235.361213][ T5201] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 235.379842][ T5201] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 235.401167][ T5201] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 235.413339][ T5144] usb 3-1: USB disconnect, device number 31 [ 235.415341][ T5201] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 235.465554][ T5201] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 235.474990][ T5201] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 235.484475][ T5201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.525429][ T25] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 235.785556][ T25] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.805406][ T25] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 235.826363][ T25] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 235.835862][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.864140][ T5201] usb 4-1: USB disconnect, device number 31 [ 236.105828][ T5090] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 237.032423][ T25] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 237.078447][ T25] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input17 [ 237.130855][ T5090] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 237.150640][ T25] input: failed to attach handler kbd to device input17, error: -5 [ 237.162101][ T5090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.188786][ T29] audit: type=1326 audit(1720504283.858:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7257 comm="syz.3.543" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff98f575bd9 code=0x0 [ 237.232361][ T5090] usb 2-1: config 0 descriptor?? [ 237.238338][ T5094] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 237.249555][ T5090] gspca_main: spca508-2.14.0 probing 8086:0110 [ 237.346859][ T25] usb 1-1: USB disconnect, device number 35 [ 237.758551][ T7268] sctp: [Deprecated]: syz.2.545 (pid 7268) Use of int in maxseg socket option. [ 237.758551][ T7268] Use struct sctp_assoc_value instead [ 237.804073][ T5090] gspca_spca508: reg_read err -110 [ 237.818399][ T5090] gspca_spca508: reg_read err -32 [ 237.833379][ T5090] gspca_spca508: reg_read err -71 [ 237.841282][ T5090] gspca_spca508: reg_read err -71 [ 237.859925][ T5090] gspca_spca508: reg_read err -71 [ 237.865475][ T5090] gspca_spca508: reg write: error -71 [ 237.875414][ T5090] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 237.899470][ T5090] usb 2-1: USB disconnect, device number 25 [ 238.506082][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 238.733302][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 238.853950][ T7290] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 238.853950][ T7290] program syz.3.546 not setting count and/or reply_len properly [ 238.918784][ T5090] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 239.032212][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 239.154499][ T5090] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 239.184195][ T5090] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 239.205211][ T5090] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 239.281346][ T5090] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 239.292555][ T5090] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 239.302022][ T5090] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 239.311455][ T5090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.507056][ T5201] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 239.709866][ T5201] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 239.723996][ T5201] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 239.748444][ T5201] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 239.767147][ T5201] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 239.788096][ T5201] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 239.808348][ T5201] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 239.855236][ T5201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.040512][ T5090] usb 3-1: USB disconnect, device number 32 [ 240.455665][ T29] audit: type=1326 audit(1720504287.128:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7308 comm="syz.0.556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3795b75bd9 code=0x0 [ 240.542169][ T25] usb 2-1: USB disconnect, device number 26 [ 241.704809][ T7321] sctp: [Deprecated]: syz.3.558 (pid 7321) Use of int in maxseg socket option. [ 241.704809][ T7321] Use struct sctp_assoc_value instead [ 242.307918][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.562'. [ 242.339278][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 243.340232][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 243.508317][ T7351] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.567'. [ 243.955934][ T7362] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 243.955934][ T7362] program syz.2.568 not setting count and/or reply_len properly [ 244.070404][ T5142] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 244.805414][ T5142] usb 5-1: Using ep0 maxpacket: 16 [ 244.828312][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 244.865346][ T5142] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 244.875792][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.887863][ T29] audit: type=1326 audit(1720504291.558:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.1.569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3e7d75bd9 code=0x0 [ 244.925851][ T5142] usb 5-1: config 0 descriptor?? [ 245.255642][ T5090] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 245.336299][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.347333][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.360002][ T5142] hid (null): report_id 2838798905 is invalid [ 245.381009][ T5142] hid (null): unknown global tag 0xc [ 245.395677][ T5142] hid (null): unknown global tag 0xa5 [ 245.409031][ T5142] hid (null): unknown global tag 0xd [ 245.424061][ T5142] hid (null): unknown global tag 0xc [ 245.450168][ T5142] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 245.464727][ T5142] hid-generic 0003:0158:0100.0015: unexpected long global item [ 245.487603][ T5090] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 245.493238][ T5142] hid-generic 0003:0158:0100.0015: probe with driver hid-generic failed with error -22 [ 245.527958][ T5090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.560700][ T5201] usb 5-1: USB disconnect, device number 26 [ 245.616284][ T5090] usb 3-1: config 0 descriptor?? [ 245.651269][ T5090] gspca_main: spca508-2.14.0 probing 8086:0110 [ 245.941252][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 246.121009][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'. [ 246.193603][ T5090] gspca_spca508: reg_read err -110 [ 246.215456][ T5090] gspca_spca508: reg_read err -32 [ 246.244260][ T5090] gspca_spca508: reg_read err -32 [ 246.264484][ T5090] gspca_spca508: reg_read err -32 [ 246.282454][ T5090] gspca_spca508: reg_read err -32 [ 246.315554][ T5090] gspca_spca508: reg write: error -32 [ 246.321087][ T5090] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 246.369715][ T5144] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 246.686912][ T5090] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 246.847272][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 246.897822][ T5090] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 246.918788][ T5090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.976626][ T5090] usb 5-1: config 0 descriptor?? [ 247.025509][ T5090] gspca_main: spca508-2.14.0 probing 8086:0110 [ 247.071991][ T45] usb 3-1: USB disconnect, device number 33 [ 247.081811][ T5144] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 247.094266][ T5144] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 247.106892][ T5144] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 247.116051][ T5144] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 247.134118][ T5144] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 247.167292][ T5144] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 247.185327][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.376589][ T5094] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 247.535440][ T5144] usb 4-1: USB disconnect, device number 32 [ 247.587917][ T7411] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 247.587917][ T7411] program syz.0.580 not setting count and/or reply_len properly [ 248.317348][ T5090] gspca_spca508: reg_read err -110 [ 248.339625][ T5090] gspca_spca508: reg_read err -32 [ 248.357713][ T5090] gspca_spca508: reg_read err -32 [ 248.371728][ T5090] gspca_spca508: reg_read err -32 [ 248.383460][ T5090] gspca_spca508: reg_read err -32 [ 248.390385][ T5090] gspca_spca508: reg write: error -32 [ 248.399054][ T5090] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 248.435952][ T5090] usb 5-1: USB disconnect, device number 27 [ 248.478931][ T29] audit: type=1326 audit(1720504295.148:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7413 comm="syz.0.582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3795b75bd9 code=0x0 [ 249.653592][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 250.107346][ T7452] Bluetooth: MGMT ver 1.22 [ 250.344422][ T29] audit: type=1326 audit(1720504296.998:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7453 comm="syz.2.597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685ef75bd9 code=0x0 [ 250.587565][ T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 250.706690][ T7479] netlink: 'syz.3.608': attribute type 10 has an invalid length. [ 250.775849][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 250.790464][ T8] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 250.799778][ T8] usb 5-1: config 0 has no interface number 0 [ 250.810939][ T8] usb 5-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=21.5a [ 250.820648][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.834782][ T8] usb 5-1: Product: syz [ 250.841572][ T8] usb 5-1: Manufacturer: syz [ 250.847678][ T8] usb 5-1: SerialNumber: syz [ 250.870461][ T8] usb 5-1: config 0 descriptor?? [ 251.158627][ T5142] usb 5-1: USB disconnect, device number 28 [ 252.143172][ T7513] overlayfs: failed to resolve './file0': -2 [ 252.451629][ T7510] syz.4.620 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 252.725465][ T45] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 252.951965][ T45] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.990806][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 253.027684][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.059500][ T45] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 253.136905][ T7521] pim6reg1: entered promiscuous mode [ 253.144806][ T7521] pim6reg1: entered allmulticast mode [ 253.266773][ T5142] usb 3-1: USB disconnect, device number 34 [ 254.155693][ T5095] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 254.457019][ T5095] usb 1-1: Using ep0 maxpacket: 8 [ 254.466480][ T5142] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 254.648354][ T5095] usb 1-1: config 1 has an invalid interface number: 89 but max is 0 [ 254.662026][ T5095] usb 1-1: config 1 has no interface number 0 [ 254.685397][ T5142] usb 5-1: Using ep0 maxpacket: 16 [ 254.697603][ T5142] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 254.716664][ T5142] usb 5-1: config 0 has no interface number 0 [ 254.741419][ T5095] usb 1-1: config 1 interface 89 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.743698][ T5142] usb 5-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=21.5a [ 254.770924][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.809741][ T5142] usb 5-1: Product: syz [ 254.819989][ T5142] usb 5-1: Manufacturer: syz [ 254.832366][ T5142] usb 5-1: SerialNumber: syz [ 254.896162][ T5095] usb 1-1: New USB device found, idVendor=045e, idProduct=040c, bcdDevice=1e.7f [ 254.897223][ T5142] usb 5-1: config 0 descriptor?? [ 254.912936][ T5095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.082062][ T5095] usb 1-1: Product: syz [ 255.087878][ T5095] usb 1-1: Manufacturer: syz [ 255.094112][ T5095] usb 1-1: SerialNumber: syz [ 256.263990][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.273740][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.282769][ T5095] usb 5-1: USB disconnect, device number 29 [ 257.635191][ T7572] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 257.703513][ T45] usb 1-1: USB disconnect, device number 36 [ 257.799977][ T7578] binder: 7573:7578 ioctl c018620c 20000200 returned -1 [ 257.806486][ T7580] hsr0: entered promiscuous mode [ 257.862823][ T7577] hsr0: entered promiscuous mode [ 261.465452][ T5142] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 261.513941][ T7639] hsr0: entered promiscuous mode [ 261.669885][ T5142] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 261.688999][ T7646] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 261.703055][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.743599][ T5142] usb 4-1: config 0 descriptor?? [ 261.783733][ T5142] gspca_main: spca508-2.14.0 probing 8086:0110 [ 262.310382][ T7659] syz_tun: entered promiscuous mode [ 262.330029][ T5142] gspca_spca508: reg_read err -110 [ 262.339239][ T5142] gspca_spca508: reg_read err -32 [ 262.348608][ T7659] macvtap1: entered promiscuous mode [ 262.366753][ T5142] gspca_spca508: reg_read err -32 [ 262.372242][ T7659] macvtap1: entered allmulticast mode [ 262.381840][ T5142] gspca_spca508: reg_read err -32 [ 262.402347][ T7659] syz_tun: entered allmulticast mode [ 262.404758][ T5142] gspca_spca508: reg_read err -32 [ 262.439041][ T5142] gspca_spca508: reg write: error -32 [ 262.455763][ T5142] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 262.459409][ T7659] syz_tun: left allmulticast mode [ 262.501659][ T7659] syz_tun: left promiscuous mode [ 263.670096][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.683078][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.691832][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.702347][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.715110][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 263.724121][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.741183][ T5142] usb 4-1: USB disconnect, device number 33 [ 263.934770][ T2801] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.973835][ T7686] ------------[ cut here ]------------ [ 263.980489][ T7686] WARNING: CPU: 1 PID: 7686 at mm/page_alloc.c:4659 __alloc_pages_noprof+0x36a/0x6c0 [ 263.990622][ T7686] Modules linked in: [ 263.994591][ T7686] CPU: 1 PID: 7686 Comm: syz.0.683 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 264.006931][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 264.018063][ T7686] RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 [ 264.024130][ T7686] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 b4 f2 aa 0d 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 264.044751][ T7686] RSP: 0018:ffffc900086c7880 EFLAGS: 00010246 [ 264.051570][ T7686] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 264.060288][ T7686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900086c7908 [ 264.069090][ T7686] RBP: ffffc900086c7998 R08: ffffc900086c7907 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 264.078011][ T7686] R10: ffffc900086c78e0 R11: fffff520010d8f21 R12: 1ffff920010d8f18 [ 264.086702][ T7686] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff920010d8f14 [ 264.095175][ T7686] FS: 00007f379690e6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 264.105302][ T7686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.111965][ T7686] CR2: 00000000203d0000 CR3: 000000006a76c000 CR4: 00000000003506f0 [ 264.121645][ T7686] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.130323][ T7686] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 264.140878][ T7686] Call Trace: [ 264.144233][ T7686] [ 264.147792][ T7686] ? __warn+0x163/0x4e0 [ 264.152119][ T7686] ? __alloc_pages_noprof+0x36a/0x6c0 [ 264.158120][ T7686] ? report_bug+0x2b3/0x500 [ 264.162746][ T7686] ? __alloc_pages_noprof+0x36a/0x6c0 [ 264.168837][ T7686] ? handle_bug+0x3e/0x70 [ 264.173242][ T7686] ? exc_invalid_op+0x1a/0x50 [ 264.178627][ T7686] ? asm_exc_invalid_op+0x1a/0x20 [ 264.183831][ T7686] ? __alloc_pages_noprof+0x36a/0x6c0 [ 264.190161][ T7686] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 264.197027][ T7686] ? irqentry_exit+0x63/0x90 [ 264.201717][ T7686] __kmalloc_large_node+0x8b/0x1d0 [ 264.209154][ T7686] ? drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 264.216086][ T7686] __kmalloc_noprof+0x2aa/0x400 [ 264.221018][ T7686] ? _copy_from_user+0xa6/0xe0 [ 264.226500][ T7686] drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 264.232489][ T7686] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 264.239441][ T7686] ? do_raw_spin_unlock+0x13c/0x8b0 [ 264.244730][ T7686] ? _raw_spin_unlock+0x28/0x50 [ 264.250435][ T7686] drm_ioctl_kernel+0x33a/0x440 [ 264.255941][ T7686] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 264.262336][ T7686] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 264.268338][ T7686] ? __might_fault+0xc6/0x120 [ 264.273090][ T7686] drm_ioctl+0x611/0xad0 [ 264.277921][ T7686] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 264.284329][ T7686] ? __pfx_drm_ioctl+0x10/0x10 [ 264.289830][ T7686] ? bpf_lsm_file_ioctl+0x9/0x10 [ 264.294915][ T7686] ? security_file_ioctl+0x87/0xb0 [ 264.300652][ T7686] ? __pfx_drm_ioctl+0x10/0x10 [ 264.306014][ T7686] __se_sys_ioctl+0xfc/0x170 [ 264.311900][ T7686] do_syscall_64+0xf3/0x230 [ 264.317279][ T7686] ? clear_bhb_loop+0x35/0x90 [ 264.322065][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.328570][ T7686] RIP: 0033:0x7f3795b75bd9 [ 264.333053][ T7686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.353414][ T7686] RSP: 002b:00007f379690e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.362203][ T7686] RAX: ffffffffffffffda RBX: 00007f3795d03f60 RCX: 00007f3795b75bd9 [ 264.370269][ T7686] RDX: 00000000200003c0 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 264.378425][ T7686] RBP: 00007f3795be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 264.386977][ T7686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.395065][ T7686] R13: 000000000000004d R14: 00007f3795d03f60 R15: 00007ffeb835b508 [ 264.403659][ T7686] [ 264.407273][ T7686] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.414671][ T7686] CPU: 1 PID: 7686 Comm: syz.0.683 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 264.424765][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 264.434852][ T7686] Call Trace: [ 264.438155][ T7686] [ 264.441109][ T7686] dump_stack_lvl+0x241/0x360 [ 264.445835][ T7686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.451083][ T7686] ? __pfx__printk+0x10/0x10 [ 264.455723][ T7686] ? vscnprintf+0x5d/0x90 [ 264.460084][ T7686] panic+0x349/0x860 [ 264.464107][ T7686] ? __warn+0x172/0x4e0 [ 264.468306][ T7686] ? __pfx_panic+0x10/0x10 [ 264.472872][ T7686] __warn+0x346/0x4e0 [ 264.476891][ T7686] ? __alloc_pages_noprof+0x36a/0x6c0 [ 264.482563][ T7686] report_bug+0x2b3/0x500 [ 264.486937][ T7686] ? __alloc_pages_noprof+0x36a/0x6c0 [ 264.492367][ T7686] handle_bug+0x3e/0x70 [ 264.496556][ T7686] exc_invalid_op+0x1a/0x50 [ 264.501086][ T7686] asm_exc_invalid_op+0x1a/0x20 [ 264.505978][ T7686] RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 [ 264.512001][ T7686] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 b4 f2 aa 0d 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 264.531659][ T7686] RSP: 0018:ffffc900086c7880 EFLAGS: 00010246 [ 264.537852][ T7686] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 264.545849][ T7686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900086c7908 [ 264.553848][ T7686] RBP: ffffc900086c7998 R08: ffffc900086c7907 R09: 0000000000000000 [ 264.561846][ T7686] R10: ffffc900086c78e0 R11: fffff520010d8f21 R12: 1ffff920010d8f18 [ 264.569844][ T7686] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff920010d8f14 [ 264.577867][ T7686] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 264.583629][ T7686] ? irqentry_exit+0x63/0x90 [ 264.588281][ T7686] __kmalloc_large_node+0x8b/0x1d0 [ 264.593434][ T7686] ? drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 264.599534][ T7686] __kmalloc_noprof+0x2aa/0x400 [ 264.604416][ T7686] ? _copy_from_user+0xa6/0xe0 [ 264.609215][ T7686] drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 264.615156][ T7686] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 264.621540][ T7686] ? do_raw_spin_unlock+0x13c/0x8b0 [ 264.626791][ T7686] ? _raw_spin_unlock+0x28/0x50 [ 264.631685][ T7686] drm_ioctl_kernel+0x33a/0x440 [ 264.636571][ T7686] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 264.642931][ T7686] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 264.648333][ T7686] ? __might_fault+0xc6/0x120 [ 264.653048][ T7686] drm_ioctl+0x611/0xad0 [ 264.657319][ T7686] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 264.663684][ T7686] ? __pfx_drm_ioctl+0x10/0x10 [ 264.668497][ T7686] ? bpf_lsm_file_ioctl+0x9/0x10 [ 264.673462][ T7686] ? security_file_ioctl+0x87/0xb0 [ 264.678602][ T7686] ? __pfx_drm_ioctl+0x10/0x10 [ 264.683396][ T7686] __se_sys_ioctl+0xfc/0x170 [ 264.688037][ T7686] do_syscall_64+0xf3/0x230 [ 264.692582][ T7686] ? clear_bhb_loop+0x35/0x90 [ 264.697305][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.703234][ T7686] RIP: 0033:0x7f3795b75bd9 [ 264.707697][ T7686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.727525][ T7686] RSP: 002b:00007f379690e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.736002][ T7686] RAX: ffffffffffffffda RBX: 00007f3795d03f60 RCX: 00007f3795b75bd9 [ 264.744012][ T7686] RDX: 00000000200003c0 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 264.752013][ T7686] RBP: 00007f3795be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 264.760295][ T7686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.768301][ T7686] R13: 000000000000004d R14: 00007f3795d03f60 R15: 00007ffeb835b508 [ 264.776327][ T7686] [ 264.779749][ T7686] Kernel Offset: disabled [ 264.784163][ T7686] Rebooting in 86400 seconds..