last executing test programs: 1m28.707428309s ago: executing program 2 (id=1248): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x30100, 0x0) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) close(0x3) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 1m28.323324233s ago: executing program 2 (id=1251): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="a1", 0x1}], 0x1, &(0x7f0000000540)=[@sndrcv={0x30, 0x84, 0x1, {0xeec9, 0x2, 0x8, 0x8, 0xd9, 0x7, 0x7, 0x6, r2}}], 0x30, 0x4840}], 0x1, 0x0) 1m28.167668497s ago: executing program 2 (id=1253): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m27.125612184s ago: executing program 2 (id=1259): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160) 1m26.835692578s ago: executing program 2 (id=1262): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000499000/0x800000)=nil, 0x800000, 0x9) 1m25.384541705s ago: executing program 2 (id=1267): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1m24.359038754s ago: executing program 32 (id=1267): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 8.919434868s ago: executing program 0 (id=1770): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20080) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 5.553699265s ago: executing program 0 (id=1789): r0 = inotify_init1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r2 = epoll_create(0xeed) ppoll(&(0x7f0000000100)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x2000000c}) inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x203) readv(r1, 0x0, 0x0) 4.450534686s ago: executing program 0 (id=1797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000040), 0x3) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'ipvlan0\x00', @multicast}) 4.179603357s ago: executing program 0 (id=1799): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xa, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 4.103518468s ago: executing program 3 (id=1800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0e1}, 0x408d5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.850190371s ago: executing program 0 (id=1803): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0xd, 0xd, "103ff69833418b8f8da7176cd7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.819533866s ago: executing program 1 (id=1804): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 3.366936107s ago: executing program 1 (id=1808): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 3.316393527s ago: executing program 3 (id=1810): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 3.2339593s ago: executing program 1 (id=1811): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x80100000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.225979998s ago: executing program 4 (id=1812): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 3.121679306s ago: executing program 3 (id=1813): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.681118242s ago: executing program 1 (id=1815): openat$kvm(0xffffffffffffff9c, 0x0, 0x2100, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000051e6850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r0, 0x0, 0x100000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x30, r2, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x402c8c0}, 0x40000) 2.587117478s ago: executing program 3 (id=1816): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.92360995s ago: executing program 3 (id=1818): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x2, 0x4) 1.903415146s ago: executing program 4 (id=1819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000004540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x9}, 0xa01}, 0x1c, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000d80)='Y', 0xfcd9}, {0x0}], 0x3}}], 0x1, 0x40) 1.873785695s ago: executing program 1 (id=1820): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x30d5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}) close_range(r1, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.843626818s ago: executing program 5 (id=1821): syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000140)) 1.707033802s ago: executing program 3 (id=1822): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.619444535s ago: executing program 4 (id=1823): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec0000001a001307000000000000000000000000000000000000000000001801e0000002000000000000000012"], 0xec}}, 0x0) r0 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.614617661s ago: executing program 5 (id=1824): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 1.245103461s ago: executing program 5 (id=1825): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r3, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) 1.162435267s ago: executing program 4 (id=1826): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000440)=0x2402a, 0x4) 1.090905826s ago: executing program 0 (id=1827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048845}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x9}, {0x1, 0xf}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 559.904806ms ago: executing program 5 (id=1828): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 539.464856ms ago: executing program 1 (id=1829): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) 538.695156ms ago: executing program 4 (id=1830): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0x7e}, 0xff}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x2400c011) 322.897356ms ago: executing program 5 (id=1831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x4044004) 321.488746ms ago: executing program 4 (id=1832): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/155, 0x9b) 0s ago: executing program 5 (id=1833): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xe8) kernel console output (not intermixed with test programs): 5: item fetching failed at offset 4/5 [ 157.743042][ T5827] hid-udraw 0003:20D6:CB17.0005: parse failed [ 157.743152][ T5827] hid-udraw 0003:20D6:CB17.0005: probe with driver hid-udraw failed with error -22 [ 157.949862][ T5827] usb 1-1: USB disconnect, device number 4 [ 158.995204][ T6968] bridge_slave_0: left allmulticast mode [ 158.995238][ T6968] bridge_slave_0: left promiscuous mode [ 158.995534][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.114140][ T6968] bridge_slave_1: left allmulticast mode [ 159.114172][ T6968] bridge_slave_1: left promiscuous mode [ 159.114460][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.309685][ T6968] bond0: (slave bond_slave_0): Releasing backup interface [ 159.393454][ T6968] bond0: (slave bond_slave_1): Releasing backup interface [ 159.485331][ T6968] team0: Port device team_slave_0 removed [ 159.537059][ T6968] team0: Port device team_slave_1 removed [ 159.541174][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.593808][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.632723][ T5827] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.689291][ T6968] bond1: (slave gretap1): Releasing active interface [ 159.785143][ T5827] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 159.785204][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 159.785231][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 159.785253][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.785287][ T5827] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.785305][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.858498][ T5827] usb 2-1: config 0 descriptor?? [ 159.868086][ T6973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.289401][ T5827] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 160.341532][ T5827] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 160.581881][ T5827] usb 2-1: USB disconnect, device number 5 [ 160.942625][ T6011] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.092747][ T6011] usb 4-1: Using ep0 maxpacket: 16 [ 161.095180][ T6011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.095212][ T6011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.095234][ T6011] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.095276][ T6011] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.095298][ T6011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.176141][ T6011] usb 4-1: config 0 descriptor?? [ 161.630041][ T6011] hid_parser_main: 28 callbacks suppressed [ 161.630057][ T6011] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 161.630081][ T6011] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 161.630100][ T6011] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 161.630119][ T6011] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 161.630134][ T6011] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 161.630149][ T6011] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 161.630168][ T6011] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 161.630183][ T6011] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 161.630197][ T6011] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 161.630213][ T6011] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 161.760103][ T6011] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input15 [ 161.790369][ T6011] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 161.843987][ T7008] trusted_key: syz.2.360 sent an empty control message without MSG_MORE. [ 161.923267][ T5906] usb 4-1: USB disconnect, device number 3 [ 162.059765][ T7010] tipc: Started in network mode [ 162.059799][ T7010] tipc: Node identity ac141441, cluster identity 4711 [ 162.091781][ T7010] tipc: Enabling of bearer rejected, failed to enable media [ 164.778229][ T7095] input: syz1 as /devices/virtual/input/input16 [ 165.673121][ T5827] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 165.826460][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 165.829380][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.829404][ T5827] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 165.862035][ T5827] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 165.862065][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.862085][ T5827] usb 4-1: Product: syz [ 165.862098][ T5827] usb 4-1: Manufacturer: syz [ 165.862111][ T5827] usb 4-1: SerialNumber: syz [ 165.931498][ T5827] usb 4-1: config 0 descriptor?? [ 166.226292][ T37] audit: type=1804 audit(1758750965.883:114): pid=7133 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.409" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=14035 res=1 errno=0 [ 166.559878][ T37] audit: type=1326 audit(1758750966.233:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7123 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3d1eec9 code=0x7fc00000 [ 167.123947][ T6011] usb 4-1: USB disconnect, device number 4 [ 167.590131][ T7161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.705472][ T7161] bond0: (slave rose0): Enslaving as an active interface with an up link [ 168.812817][ T7186] netlink: 51 bytes leftover after parsing attributes in process `syz.4.426'. [ 170.109702][ T37] audit: type=1326 audit(1758750969.753:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7216 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca4aeec9 code=0x7ffc0000 [ 170.109749][ T37] audit: type=1326 audit(1758750969.783:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7216 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0cca4aeec9 code=0x7ffc0000 [ 170.109782][ T37] audit: type=1326 audit(1758750969.783:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7216 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca4aeec9 code=0x7ffc0000 [ 170.109815][ T37] audit: type=1326 audit(1758750969.783:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7216 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca4aeec9 code=0x7ffc0000 [ 170.164715][ T37] audit: type=1326 audit(1758750969.783:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7216 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0cca4aeec9 code=0x7ffc0000 [ 170.164789][ T37] audit: type=1326 audit(1758750969.783:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7216 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca4aeec9 code=0x7ffc0000 [ 170.164828][ T37] audit: type=1326 audit(1758750969.793:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7216 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca4aeec9 code=0x7ffc0000 [ 170.176615][ T37] audit: type=1326 audit(1758750969.853:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7216 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f0cca4aeec9 code=0x7ffc0000 [ 170.587752][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 170.587777][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 170.587804][ T7234] netlink: 'syz.1.443': attribute type 7 has an invalid length. [ 170.687762][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 170.687785][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 170.687809][ T7234] netlink: 'syz.1.443': attribute type 7 has an invalid length. [ 170.714328][ T982] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.715061][ T982] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.715112][ T982] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.765861][ T7240] syzkaller1: entered promiscuous mode [ 170.765891][ T7240] syzkaller1: entered allmulticast mode [ 171.167911][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 172.200978][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 172.769146][ T5827] kernel write not supported for file bpf-prog (pid: 5827 comm: kworker/1:3) [ 172.873500][ T7316] netlink: 64 bytes leftover after parsing attributes in process `syz.3.469'. [ 173.822624][ T5916] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 173.942728][ T6011] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.015290][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.015321][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.015342][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.015381][ T5916] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 174.015403][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.029901][ T5916] usb 1-1: config 0 descriptor?? [ 174.102693][ T6011] usb 4-1: Using ep0 maxpacket: 8 [ 174.109362][ T6011] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 174.109390][ T6011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.109409][ T6011] usb 4-1: Product: syz [ 174.109422][ T6011] usb 4-1: Manufacturer: syz [ 174.109436][ T6011] usb 4-1: SerialNumber: syz [ 174.149911][ T6011] usb 4-1: config 0 descriptor?? [ 174.354317][ T6011] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 174.779864][ T6011] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 174.808581][ T6011] usb 4-1: USB disconnect, device number 5 [ 175.345437][ T5916] usbhid 1-1:0.0: can't add hid device: -71 [ 175.345599][ T5916] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 175.360044][ T5916] usb 1-1: USB disconnect, device number 5 [ 176.121184][ T7383] veth1_to_bond: entered allmulticast mode [ 176.121590][ T7383] veth1_to_bond: entered promiscuous mode [ 176.124301][ T7383] bridge_slave_0: entered promiscuous mode [ 176.126607][ T7382] bridge_slave_0: left promiscuous mode [ 176.257664][ T7382] veth1_to_bond: left promiscuous mode [ 176.257860][ T7382] veth1_to_bond: left allmulticast mode [ 176.316802][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.559612][ T5844] IPVS: starting estimator thread 0... [ 176.643507][ T7390] IPVS: using max 8 ests per chain, 19200 per kthread [ 176.657362][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 178.964526][ T5916] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.092769][ T6011] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 179.112573][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 179.114922][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.114970][ T5916] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 179.114992][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.123732][ T5916] usb 4-1: config 0 descriptor?? [ 179.277480][ T6011] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.277506][ T6011] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.280112][ T6011] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.280141][ T6011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.280159][ T6011] usb 3-1: SerialNumber: syz [ 179.603142][ T6011] usb 3-1: 0:2 : does not exist [ 179.607364][ T5916] hid_parser_main: 5 callbacks suppressed [ 179.607389][ T5916] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 179.607419][ T5916] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 179.607445][ T5916] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 179.607471][ T5916] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 179.607496][ T5916] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 179.615124][ T5916] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 179.745934][ T6011] usb 3-1: USB disconnect, device number 3 [ 179.929774][ T5916] usb 4-1: USB disconnect, device number 6 [ 180.290389][ T7481] loop2: detected capacity change from 0 to 7 [ 180.336574][ T7481] Dev loop2: unable to read RDB block 7 [ 180.336626][ T7481] loop2: unable to read partition table [ 180.336883][ T7481] loop2: partition table beyond EOD, truncated [ 180.336913][ T7481] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.392657][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 180.483702][ T7487] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 180.575554][ T10] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 180.575600][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 180.575640][ T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 180.575665][ T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 180.575690][ T10] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 180.575716][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.579513][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 180.579539][ T10] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 180.579558][ T10] usb 1-1: Product: syz [ 180.579568][ T10] usb 1-1: Manufacturer: syz [ 180.579575][ T10] usb 1-1: SerialNumber: syz [ 180.588036][ T10] usb 1-1: config 0 descriptor?? [ 180.591159][ T7477] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.627745][ T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 180.657679][ T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 180.762871][ T49] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.810760][ T6011] usb 1-1: USB disconnect, device number 6 [ 180.837095][ T6011] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 180.919003][ T7487] bond1: entered promiscuous mode [ 180.919033][ T7487] bond1: entered allmulticast mode [ 180.942109][ T49] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 180.942136][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.942150][ T49] usb 4-1: Product: syz [ 180.942163][ T49] usb 4-1: Manufacturer: syz [ 180.942174][ T49] usb 4-1: SerialNumber: syz [ 180.965454][ T7488] bridge1: entered promiscuous mode [ 180.965484][ T7488] bridge1: entered allmulticast mode [ 180.979228][ T7488] bond1: (slave bridge1): making interface the new active one [ 180.980124][ T7488] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 181.011756][ T49] usb 4-1: config 0 descriptor?? [ 181.335992][ T7497] netlink: 96 bytes leftover after parsing attributes in process `syz.2.537'. [ 182.182710][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 182.264647][ T49] usb 4-1: f81604_read: reg: 100e failed: -EPROTO [ 182.292577][ T7511] netlink: 32 bytes leftover after parsing attributes in process `syz.4.543'. [ 182.292937][ T7514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.543'. [ 182.347198][ T49] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 182.352103][ T49] usb 4-1: USB disconnect, device number 7 [ 182.363637][ T10] usb 1-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 182.363662][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.376191][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.376219][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.376237][ T10] usb 1-1: Product: syz [ 182.376250][ T10] usb 1-1: Manufacturer: syz [ 182.376263][ T10] usb 1-1: SerialNumber: syz [ 182.452323][ T49] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 182.605663][ T49] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 182.635120][ T10] usb 1-1: 0:2 : does not exist [ 182.649622][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 182.699456][ T10] usb 1-1: USB disconnect, device number 7 [ 183.162691][ T5916] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 183.325105][ T5916] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 183.325136][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.330562][ T5916] usb 4-1: config 0 descriptor?? [ 183.399428][ T5916] gspca_main: spca508-2.14.0 probing 8086:0110 [ 183.517211][ T7537] input: syz0 as /devices/virtual/input/input17 [ 183.588955][ T5916] gspca_spca508: reg_read err -32 [ 183.591984][ T5916] gspca_spca508: reg_read err -32 [ 183.616912][ T5916] gspca_spca508: reg_read err -32 [ 183.617898][ T5916] gspca_spca508: reg_read err -32 [ 183.618522][ T5916] gspca_spca508: reg_read err -32 [ 183.823677][ T5916] gspca_spca508: reg write: error -71 [ 183.823793][ T5916] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 183.832288][ T5916] usb 4-1: USB disconnect, device number 8 [ 185.156152][ T7584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.157166][ T7584] bridge0: port 3(bond1) entered blocking state [ 185.157409][ T7584] bridge0: port 3(bond1) entered disabled state [ 185.157638][ T7584] bond1: entered allmulticast mode [ 185.161268][ T7584] bond1: entered promiscuous mode [ 185.164961][ T7584] bridge0: port 3(bond1) entered blocking state [ 185.165121][ T7584] bridge0: port 3(bond1) entered forwarding state [ 185.298978][ T1485] bridge0: port 3(bond1) entered disabled state [ 185.558183][ T7592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.595685][ T10] libceph: connect (1)[c::]:6789 error -101 [ 185.595898][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 185.622591][ T7602] ceph: No mds server is up or the cluster is laggy [ 185.702767][ T5827] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 185.894068][ T5827] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 185.894096][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 185.894115][ T5827] usb 5-1: Product: syz [ 185.894129][ T5827] usb 5-1: SerialNumber: syz [ 185.937950][ T5827] usb 5-1: config 0 descriptor?? [ 186.163599][ T5827] hso 5-1:0.0: Failed to find BULK IN ep [ 186.382272][ T5827] usb 5-1: USB disconnect, device number 11 [ 186.711032][ T7625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.579'. [ 186.997645][ T7592] bond2 (unregistering): Released all slaves [ 187.096260][ T49] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 187.131648][ T49] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.842671][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 188.000930][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.000977][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 188.001000][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.052134][ T10] usb 5-1: config 0 descriptor?? [ 188.104715][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 188.363216][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 188.440680][ T57] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.451302][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 188.457941][ T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.461887][ T57] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.461933][ T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.500397][ T10] lenovo 0003:17EF:6047.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 189.150744][ T7678] netlink: 'syz.3.602': attribute type 1 has an invalid length. [ 189.307543][ T7678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.375282][ T7680] bond2: (slave gretap1): making interface the new active one [ 189.395681][ T7680] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 189.496842][ T7680] syz.3.602 (7680) used greatest stack depth: 16680 bytes left [ 189.571418][ T6011] usb 5-1: USB disconnect, device number 12 [ 190.347152][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'. [ 191.101867][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 191.592700][ T5906] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 191.762683][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 191.767444][ T5906] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 191.767472][ T5906] usb 4-1: config 0 has no interface number 0 [ 191.767520][ T5906] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.799939][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 191.799958][ T37] audit: type=1800 audit(1758750991.423:131): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.628" name="bus" dev="overlay" ino=506 res=0 errno=0 [ 191.823682][ T6011] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.838247][ T5906] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 191.838283][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.838303][ T5906] usb 4-1: Product: syz [ 191.838317][ T5906] usb 4-1: Manufacturer: syz [ 191.838331][ T5906] usb 4-1: SerialNumber: syz [ 191.879442][ T5906] usb 4-1: config 0 descriptor?? [ 191.891743][ T5906] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 191.891776][ T5906] em28xx 4-1:0.132: Video interface 132 found: [ 191.976801][ T6011] usb 1-1: Using ep0 maxpacket: 16 [ 191.980741][ T6011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.980790][ T6011] usb 1-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 191.980812][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.004660][ T6011] usb 1-1: config 0 descriptor?? [ 192.310248][ T5906] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 192.469867][ T6011] logitech-hidpp-device 0003:046D:C091.000B: hidraw0: USB HID v0.05 Device [HID 046d:c091] on usb-dummy_hcd.0-1/input0 [ 192.676265][ T49] usb 1-1: USB disconnect, device number 8 [ 192.730663][ T5906] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 192.730695][ T5906] em28xx 4-1:0.132: board has no eeprom [ 192.992597][ T5906] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 192.992623][ T5906] em28xx 4-1:0.132: analog set to bulk mode. [ 192.995445][ T5916] em28xx 4-1:0.132: Registering V4L2 extension [ 193.035669][ T5906] usb 4-1: USB disconnect, device number 9 [ 193.044885][ T5906] em28xx 4-1:0.132: Disconnecting em28xx [ 193.371560][ T5916] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 193.371580][ T5916] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 193.371590][ T5916] em28xx 4-1:0.132: No AC97 audio processor [ 193.413305][ T5916] usb 4-1: Decoder not found [ 193.413324][ T5916] em28xx 4-1:0.132: failed to create media graph [ 193.413354][ T5916] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 193.444474][ T5916] em28xx 4-1:0.132: Remote control support is not available for this card. [ 193.450309][ T5906] em28xx 4-1:0.132: Closing input extension [ 193.496436][ T5906] em28xx 4-1:0.132: Freeing device [ 193.989218][ T37] audit: type=1804 audit(1758751249.625:132): pid=7795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.648" name="file1" dev="ramfs" ino=16117 res=1 errno=0 [ 194.321532][ T7808] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3693406402 (118189004864 ns) > initial count (17453120 ns). Using initial count to start timer. [ 194.408560][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.408624][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.457755][ T5906] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 195.671153][ T5906] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 195.671186][ T5906] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.671222][ T5906] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 195.678586][ T5906] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.678615][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.678635][ T5906] usb 3-1: Product: syz [ 195.678648][ T5906] usb 3-1: Manufacturer: syz [ 195.678662][ T5906] usb 3-1: SerialNumber: syz [ 196.177634][ T5906] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 196.987464][ T5906] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 197.184980][ T5906] usb 3-1: USB disconnect, device number 4 [ 197.528479][ T7868] netlink: 96 bytes leftover after parsing attributes in process `syz.0.675'. [ 197.790115][ T7873] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 197.848947][ T7873] bond0: (slave rose0): Releasing backup interface [ 198.013406][ T7877] netem: change failed [ 198.745875][ T37] audit: type=1804 audit(1758751254.425:133): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.694" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=16382 res=1 errno=0 [ 198.974733][ T7898] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.837973][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 200.338361][ T7898] bond2 (unregistering): Released all slaves [ 200.395840][ T7908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.688'. [ 200.610032][ T7927] binder: 7926:7927 ioctl c0306201 200000000640 returned -22 [ 200.633157][ T7914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.722886][ T59] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 200.723201][ T59] Bluetooth: hci3: Injecting HCI hardware error event [ 200.728293][ T59] Bluetooth: hci3: hardware error 0x00 [ 200.746318][ T7916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.746779][ T7916] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 200.748768][ T7916] bond1: (slave vti0): Error -95 calling set_mac_address [ 200.777132][ T5906] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 200.932629][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 200.935286][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.935316][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.935353][ T5906] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.935373][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.023373][ T5906] usb 4-1: config 0 descriptor?? [ 201.027203][ T5906] hub 4-1:0.0: USB hub found [ 201.234543][ T5906] hub 4-1:0.0: 1 port detected [ 201.863067][ T991] hub 4-1:0.0: activate --> -90 [ 202.268976][ T5827] usb 4-1: USB disconnect, device number 10 [ 202.272172][ T991] usb 4-1-port1: config error [ 202.962802][ T59] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 204.612652][ T49] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 204.803195][ T8040] netlink: 'syz.4.727': attribute type 4 has an invalid length. [ 204.803602][ T8040] netlink: 'syz.4.727': attribute type 4 has an invalid length. [ 204.812560][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 204.850627][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 204.871471][ T49] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 204.871500][ T49] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 204.871520][ T49] usb 2-1: Product: syz [ 204.871533][ T49] usb 2-1: Manufacturer: syz [ 204.871547][ T49] usb 2-1: SerialNumber: syz [ 205.088966][ T8046] netlink: 'syz.0.730': attribute type 83 has an invalid length. [ 205.121621][ T49] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 205.121643][ T49] usb 2-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 205.121660][ T49] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 205.121676][ T49] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 205.325589][ T49] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 205.325679][ T49] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 205.353406][ T49] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 205.380093][ T49] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 205.424697][ T49] usb 2-1: USB disconnect, device number 6 [ 205.485539][ T49] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 205.517588][ T49] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 205.526058][ T49] visor 2-1:1.0: device disconnected [ 207.335036][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 209.842833][ T49] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 210.125736][ T49] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 210.125767][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.125787][ T49] usb 1-1: Product: syz [ 210.125801][ T49] usb 1-1: Manufacturer: syz [ 210.125815][ T49] usb 1-1: SerialNumber: syz [ 210.898910][ T8133] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 210.898942][ T8133] overlayfs: failed to set xattr on upper [ 210.898950][ T8133] overlayfs: ...falling back to redirect_dir=nofollow. [ 210.898957][ T8133] overlayfs: ...falling back to metacopy=off. [ 210.898965][ T8133] overlayfs: ...falling back to index=off. [ 210.898971][ T8133] overlayfs: ...falling back to uuid=null. [ 211.532745][ T991] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 211.552754][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 211.705951][ T991] usb 4-1: Using ep0 maxpacket: 8 [ 211.720218][ T991] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.720247][ T991] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.720267][ T991] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.720279][ T991] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.720313][ T991] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.720334][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.779868][ T49] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 211.779940][ T49] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 211.781914][ T49] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 211.859231][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 211.859275][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 211.905865][ T49] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 212.058444][ T49] usb 1-1: USB disconnect, device number 9 [ 212.087575][ T991] usb 4-1: GET_CAPABILITIES returned 0 [ 212.087647][ T991] usbtmc 4-1:16.0: can't read capabilities [ 212.290869][ T49] usb 4-1: USB disconnect, device number 11 [ 212.627773][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 212.669065][ T8151] veth0: entered promiscuous mode [ 214.342683][ T5827] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 214.498849][ T5827] usb 2-1: config 15 has too many interfaces: 102, using maximum allowed: 32 [ 214.498879][ T5827] usb 2-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 214.498898][ T5827] usb 2-1: config 15 has 0 interfaces, different from the descriptor's value: 102 [ 214.498934][ T5827] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 214.498956][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.774938][ T991] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 214.929646][ T991] usb 4-1: Using ep0 maxpacket: 8 [ 214.939108][ T991] usb 4-1: config 0 interface 0 has no altsetting 0 [ 214.939147][ T991] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 214.939169][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.983308][ T991] usb 4-1: config 0 descriptor?? [ 215.268433][ T5827] usb 2-1: string descriptor 0 read error: -71 [ 215.270013][ T991] usbhid 4-1:0.0: can't add hid device: -71 [ 215.270129][ T991] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 215.293951][ T5827] usb 2-1: USB disconnect, device number 7 [ 215.306384][ T991] usb 4-1: USB disconnect, device number 12 [ 215.589360][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'. [ 215.936433][ T8209] netlink: 'syz.4.793': attribute type 1 has an invalid length. [ 216.797840][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.804'. [ 216.915988][ T37] audit: type=1326 audit(1758751528.598:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8237 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 216.916310][ T37] audit: type=1326 audit(1758751528.598:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8237 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 216.916562][ T37] audit: type=1326 audit(1758751528.598:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8237 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 217.246007][ T8251] netlink: 'syz.4.811': attribute type 12 has an invalid length. [ 217.246028][ T8251] netlink: 'syz.4.811': attribute type 29 has an invalid length. [ 217.246041][ T8251] netlink: 148 bytes leftover after parsing attributes in process `syz.4.811'. [ 217.246075][ T8251] netlink: 'syz.4.811': attribute type 1 has an invalid length. [ 217.246087][ T8251] netlink: 'syz.4.811': attribute type 2 has an invalid length. [ 217.246099][ T8251] netlink: 39 bytes leftover after parsing attributes in process `syz.4.811'. [ 217.742760][ T49] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 217.831616][ T8274] syzkaller0: entered promiscuous mode [ 217.831645][ T8274] syzkaller0: entered allmulticast mode [ 217.832794][ T991] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 217.935794][ T49] usb 1-1: unable to get BOS descriptor or descriptor too short [ 217.936875][ T49] usb 1-1: not running at top speed; connect to a high speed hub [ 217.939109][ T49] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 217.971325][ T49] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.971354][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.971370][ T49] usb 1-1: Product: syz [ 217.971378][ T49] usb 1-1: Manufacturer: syz [ 217.971385][ T49] usb 1-1: SerialNumber: syz [ 217.994048][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 218.000169][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.000200][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.000237][ T991] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 218.000257][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.013502][ T991] usb 2-1: config 0 descriptor?? [ 218.289118][ T8263] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.470842][ T991] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.000C/input/input18 [ 218.558720][ T991] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.000C/input/input19 [ 218.632914][ T991] kye 0003:0458:5012.000C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 218.768105][ T991] usb 2-1: USB disconnect, device number 8 [ 218.924028][ T49] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 218.947232][ T49] cdc_ncm 1-1:1.0: bind() failure [ 218.966475][ T49] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 218.966523][ T49] cdc_ncm 1-1:1.1: bind() failure [ 218.986504][ T49] usb 1-1: USB disconnect, device number 10 [ 219.899303][ T8312] syzkaller0: entered promiscuous mode [ 219.899333][ T8312] syzkaller0: entered allmulticast mode [ 219.943668][ T8312] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 222.161434][ T37] audit: type=1326 audit(1758751533.838:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8366 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 222.185444][ T37] audit: type=1326 audit(1758751533.838:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8366 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 222.188505][ T37] audit: type=1326 audit(1758751533.868:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8366 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 222.228682][ T37] audit: type=1326 audit(1758751533.908:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8366 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 222.233969][ T37] audit: type=1326 audit(1758751533.918:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8366 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 222.234051][ T37] audit: type=1326 audit(1758751533.918:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8366 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 222.234088][ T37] audit: type=1326 audit(1758751533.918:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8366 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 222.235096][ T37] audit: type=1326 audit(1758751533.918:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8366 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 222.235474][ T37] audit: type=1326 audit(1758751533.918:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8366 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 222.235515][ T37] audit: type=1326 audit(1758751533.918:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8366 comm="syz.1.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3d1eec9 code=0x7ffc0000 [ 223.259523][ T8391] Driver unsupported XDP return value 0 on prog (id 131) dev N/A, expect packet loss! [ 223.498190][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 223.498411][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 223.543200][ T8397] ceph: No mds server is up or the cluster is laggy [ 224.581248][ T5906] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 224.932661][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 224.942206][ T5906] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 224.942232][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.945640][ T5906] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.945668][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.945686][ T5906] usb 4-1: Product: syz [ 224.945700][ T5906] usb 4-1: Manufacturer: syz [ 224.945713][ T5906] usb 4-1: SerialNumber: syz [ 225.171028][ T5906] usb 4-1: 0:2 : does not exist [ 225.220604][ T5906] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 225.266369][ T5906] usb 4-1: USB disconnect, device number 13 [ 225.762971][ T5827] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 225.914987][ T5827] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 225.915014][ T5827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.915041][ T5827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.920555][ T5827] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.920583][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.920602][ T5827] usb 2-1: Product: syz [ 225.920616][ T5827] usb 2-1: Manufacturer: syz [ 225.920630][ T5827] usb 2-1: SerialNumber: syz [ 226.415850][ T5827] usb 2-1: 0:2 : does not exist [ 226.992713][ T6011] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 227.152678][ T6011] usb 4-1: Using ep0 maxpacket: 32 [ 227.160115][ T6011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.160269][ T6011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.160372][ T6011] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 227.160394][ T6011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.250988][ T6011] usb 4-1: config 0 descriptor?? [ 227.282634][ T6011] hub 4-1:0.0: USB hub found [ 227.472546][ T6011] hub 4-1:0.0: 1 port detected [ 227.479419][ T5827] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 227.625227][ T5827] usb 2-1: USB disconnect, device number 9 [ 228.395790][ T5827] hub 4-1:0.0: activate --> -90 [ 228.634062][ T10] usb 4-1: USB disconnect, device number 14 [ 229.169030][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 229.169049][ T37] audit: type=1326 audit(1758751540.838:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.1.898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1c3d1eec9 code=0x0 [ 230.466466][ T8534] macvtap1: entered promiscuous mode [ 230.466483][ T8534] vlan0: entered promiscuous mode [ 230.467428][ T8534] macvtap1: entered allmulticast mode [ 230.467440][ T8534] vlan0: entered allmulticast mode [ 230.467446][ T8534] veth0_vlan: entered allmulticast mode [ 230.632080][ T8534] macvtap2: entered promiscuous mode [ 230.632240][ T8534] macvtap2: entered allmulticast mode [ 233.604821][ T8594] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 234.894295][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.082770][ T991] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 235.235152][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.235186][ T991] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.235229][ T991] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 235.235259][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.240680][ T991] usb 2-1: config 0 descriptor?? [ 235.724261][ T991] hid-led 0003:1294:1320.000D: hidraw0: USB HID vff.fe Device [HID 1294:1320] on usb-dummy_hcd.1-1/input0 [ 235.790731][ T991] hid-led 0003:1294:1320.000D: Riso Kagaku Webmail Notifier initialized [ 235.896128][ T49] usb 2-1: USB disconnect, device number 10 [ 235.914445][ T57] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 235.939603][ T13] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 235.951392][ T13] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 236.623741][ T8639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.955'. [ 236.719509][ T37] audit: type=1326 audit(1758751548.398:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca4aeec9 code=0x7ffc0000 [ 236.720402][ T37] audit: type=1326 audit(1758751548.398:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f0cca4aeec9 code=0x7ffc0000 [ 236.775048][ T37] audit: type=1326 audit(1758751548.458:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca4aeec9 code=0x7ffc0000 [ 236.779887][ T37] audit: type=1326 audit(1758751548.458:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8640 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cca4aeec9 code=0x7ffc0000 [ 238.286561][ T8660] evm: overlay not supported [ 238.372002][ T8664] netlink: 'syz.3.964': attribute type 29 has an invalid length. [ 238.387208][ T8664] netlink: 'syz.3.964': attribute type 29 has an invalid length. [ 238.398602][ T8664] netlink: 500 bytes leftover after parsing attributes in process `syz.3.964'. [ 238.989400][ T8676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.018864][ T991] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 241.184111][ T991] usb 3-1: Using ep0 maxpacket: 32 [ 241.186474][ T991] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.186526][ T991] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.186566][ T991] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 241.186588][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.240491][ T991] usb 3-1: config 0 descriptor?? [ 241.247529][ T991] hub 3-1:0.0: bad descriptor, ignoring hub [ 241.247567][ T991] hub 3-1:0.0: probe with driver hub failed with error -5 [ 241.250861][ T991] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 241.482687][ T6011] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 241.573059][ T991] usb 3-1: USB disconnect, device number 5 [ 241.636529][ T6011] usb 1-1: config 0 has no interfaces? [ 241.636566][ T6011] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 241.636589][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.657009][ T6011] usb 1-1: config 0 descriptor?? [ 241.880177][ T991] usb 1-1: USB disconnect, device number 11 [ 242.142582][ T6011] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 242.302584][ T6011] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.302610][ T6011] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.307547][ T6011] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.307575][ T6011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.307594][ T6011] usb 2-1: SerialNumber: syz [ 242.386153][ T8749] batadv_slave_0: entered promiscuous mode [ 242.604692][ T6011] usb 2-1: 0:2 : does not exist [ 242.621779][ T6011] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 242.640371][ T6011] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 242.656628][ T6011] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 242.685410][ T6011] usb 2-1: USB disconnect, device number 11 [ 243.547268][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'. [ 244.299372][ T8792] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž [ 245.089287][ T37] audit: type=1400 audit(1758751556.768:159): lsm=SMACK fn=smack_inode_permission action=denied subject="@.-&#^" object="_" requested=rw pid=8809 comm="syz.4.1018" name="video36" dev="devtmpfs" ino=1044 [ 245.311294][ T8814] GUP no longer grows the stack in syz.4.1019 (8814): 200000004000-20000000a000 (200000002000) [ 245.311377][ T8814] CPU: 1 UID: 0 PID: 8814 Comm: syz.4.1019 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 245.311402][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 245.311421][ T8814] Call Trace: [ 245.311429][ T8814] [ 245.311440][ T8814] dump_stack_lvl+0x189/0x250 [ 245.311477][ T8814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.311503][ T8814] ? __pfx__printk+0x10/0x10 [ 245.311521][ T8814] ? find_vma+0xe7/0x160 [ 245.311560][ T8814] __get_user_pages+0x237e/0x2b60 [ 245.311621][ T8814] get_user_pages_remote+0x2f1/0xad0 [ 245.311648][ T8814] ? __pfx_mtree_load+0x10/0x10 [ 245.311681][ T8814] ? __pfx_get_user_pages_remote+0x10/0x10 [ 245.311708][ T8814] ? __access_remote_vm+0x367/0x7d0 [ 245.311740][ T8814] __access_remote_vm+0x211/0x7d0 [ 245.311780][ T8814] ? __pfx___access_remote_vm+0x10/0x10 [ 245.311807][ T8814] ? set_page_refcounted+0xa0/0x1e0 [ 245.311836][ T8814] ? alloc_pages_noprof+0xe4/0x1e0 [ 245.311868][ T8814] proc_pid_cmdline_read+0x433/0x810 [ 245.311896][ T8814] ? __asan_memset+0x22/0x50 [ 245.311925][ T8814] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 245.311958][ T8814] ? rw_verify_area+0x2ac/0x4e0 [ 245.311987][ T8814] vfs_readv+0x5b0/0x850 [ 245.312016][ T8814] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 245.312048][ T8814] ? __pfx_vfs_readv+0x10/0x10 [ 245.312093][ T8814] ? __fget_files+0x2a/0x420 [ 245.312125][ T8814] ? __fget_files+0x3a6/0x420 [ 245.312150][ T8814] ? __fget_files+0x2a/0x420 [ 245.312187][ T8814] __x64_sys_preadv+0x19a/0x2a0 [ 245.312218][ T8814] ? __pfx___x64_sys_preadv+0x10/0x10 [ 245.312242][ T8814] ? rcu_is_watching+0x15/0xb0 [ 245.312277][ T8814] ? do_syscall_64+0xbe/0x3b0 [ 245.312300][ T8814] do_syscall_64+0xfa/0x3b0 [ 245.312318][ T8814] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.312345][ T8814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.312365][ T8814] ? clear_bhb_loop+0x60/0xb0 [ 245.312399][ T8814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.312418][ T8814] RIP: 0033:0x7fea1c6aeec9 [ 245.312440][ T8814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.312455][ T8814] RSP: 002b:00007fea1a90e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 245.312476][ T8814] RAX: ffffffffffffffda RBX: 00007fea1c905fa0 RCX: 00007fea1c6aeec9 [ 245.312490][ T8814] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 245.312502][ T8814] RBP: 00007fea1c731f91 R08: 0000000021000008 R09: 0000000000000000 [ 245.312513][ T8814] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000 [ 245.312524][ T8814] R13: 00007fea1c906038 R14: 00007fea1c905fa0 R15: 00007ffc8f371f68 [ 245.312555][ T8814] [ 245.868413][ T8821] sg_write: process 455 (syz.4.1023) changed security contexts after opening file descriptor, this is not allowed. [ 246.546056][ T8848] Invalid ELF header magic: != ELF [ 246.955842][ T8858] kvm: apic: phys broadcast and lowest prio [ 247.783810][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 248.440163][ T8882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.677087][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 249.384383][ T8906] netlink: 'syz.1.1057': attribute type 3 has an invalid length. [ 249.384405][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 249.482659][ T991] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 249.645251][ T991] usb 1-1: config 15 has too many interfaces: 102, using maximum allowed: 32 [ 249.645268][ T991] usb 1-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 249.645278][ T991] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 102 [ 249.645299][ T991] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 249.645311][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.486042][ T991] usb 1-1: string descriptor 0 read error: -71 [ 250.490778][ T991] usb 1-1: USB disconnect, device number 12 [ 252.462594][ T5945] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 252.637526][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 252.639985][ T5945] usb 5-1: unable to get BOS descriptor or descriptor too short [ 252.641937][ T5945] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 252.641953][ T5945] usb 5-1: config 8 has no interface number 0 [ 252.641973][ T5945] usb 5-1: config 8 interface 255 has no altsetting 0 [ 252.653951][ T5945] usb 5-1: string descriptor 0 read error: -22 [ 252.654044][ T5945] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 252.654056][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.742650][ T991] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 252.868197][ T5945] catc 5-1:8.255: Can't set altsetting 1. [ 252.869751][ T5945] catc 5-1:8.255: probe with driver catc failed with error -5 [ 252.892223][ T5945] usb 5-1: USB disconnect, device number 13 [ 252.916538][ T991] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 252.916566][ T991] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 252.918708][ T991] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 252.918726][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.918737][ T991] usb 2-1: Product: syz [ 252.918744][ T991] usb 2-1: Manufacturer: syz [ 252.918751][ T991] usb 2-1: SerialNumber: syz [ 252.921976][ T991] usb 2-1: config 0 descriptor?? [ 252.932898][ T8969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 252.933023][ T8969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 253.164234][ T8969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 253.164401][ T8969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 253.569449][ T991] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 254.113097][ T8998] netlink: 'syz.4.1093': attribute type 10 has an invalid length. [ 254.167497][ T9000] netlink: 'syz.4.1093': attribute type 10 has an invalid length. [ 254.255135][ T8998] team0: Port device dummy0 added [ 254.389290][ T9000] team0: Port device dummy0 removed [ 254.424602][ T991] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 254.496137][ T9000] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 254.514962][ T9006] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 254.542946][ T991] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 66:91:a0:94:01:17 [ 254.542976][ T9006] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 254.550761][ T991] usb 2-1: USB disconnect, device number 12 [ 254.584810][ T991] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 254.662632][ T5827] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 254.815112][ T5827] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.815145][ T5827] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 254.815183][ T5827] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 254.815205][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.832395][ T9004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 254.862158][ T5827] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 254.975684][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 254.979915][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 254.980306][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 254.980506][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 255.235377][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 255.235589][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 255.316083][ T5916] usb 4-1: USB disconnect, device number 15 [ 255.492718][ T991] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 255.642638][ T991] usb 3-1: Using ep0 maxpacket: 32 [ 255.647966][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.647990][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.648012][ T991] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 255.648025][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.651408][ T991] usb 3-1: config 0 descriptor?? [ 255.748539][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 255.748755][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 255.781619][ T9014] ceph: No mds server is up or the cluster is laggy [ 255.868487][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.869858][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.150982][ T991] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 256.457244][ T5916] usb 3-1: USB disconnect, device number 6 [ 256.832645][ T9061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1114'. [ 256.849382][ T9062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.086449][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 258.670883][ T9108] input: syz1 as /devices/virtual/input/input20 [ 258.790906][ T9112] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 258.892332][ T9117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.907280][ T9117] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 258.910492][ T9117] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 259.091737][ T9112] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.810494][ T9145] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1148'. [ 259.937760][ T9147] netlink: 'syz.3.1150': attribute type 1 has an invalid length. [ 260.159394][ T9150] bond4: (slave gretap2): making interface the new active one [ 260.160685][ T9150] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 262.323155][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 262.323825][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 263.042637][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 266.881222][ T37] audit: type=1326 audit(1758751578.558:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9263 comm="syz.0.1194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cca4aeec9 code=0x0 [ 266.932533][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 267.082604][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 267.110346][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 267.110388][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 267.110412][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 267.133278][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.133307][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.133325][ T31] usb 3-1: Product: syz [ 267.133338][ T31] usb 3-1: Manufacturer: syz [ 267.133351][ T31] usb 3-1: SerialNumber: syz [ 267.622216][ T31] usb 3-1: USB disconnect, device number 7 [ 267.662774][ T5916] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 267.836970][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 267.839636][ T5916] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.839668][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 267.839701][ T5916] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 267.839724][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.906459][ T5916] usb 4-1: config 0 descriptor?? [ 267.999083][ T9297] input: syz1 as /devices/virtual/input/input21 [ 268.367261][ T5916] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 268.856517][ T9317] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1213'. [ 268.914466][ T5916] usb 4-1: USB disconnect, device number 16 [ 269.314090][ T5945] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 269.475353][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.475386][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.475424][ T5945] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 269.475446][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.481528][ T5945] usb 1-1: config 0 descriptor?? [ 269.832640][ T5827] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 269.956277][ T5945] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 270.002712][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 270.008292][ T5827] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 270.008349][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 270.008376][ T5827] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.008401][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.008426][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 270.015347][ T5827] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 270.015406][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 270.015430][ T5827] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.015453][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.015477][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 270.019959][ T5827] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 270.020010][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 270.020035][ T5827] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.020059][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.020083][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 270.053705][ T5827] usb 4-1: string descriptor 0 read error: -22 [ 270.053856][ T5827] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 270.053877][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.162572][ T5945] cp2112 0003:10C4:EA90.0010: Part Number: 0x00 Device Version: 0x00 [ 270.310786][ T37] audit: type=1326 audit(1758751581.978:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9335 comm="syz.4.1223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea1c6aeec9 code=0x0 [ 270.362069][ T5827] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 270.501902][ T5827] usb 4-1: USB disconnect, device number 17 [ 270.971404][ T6011] usb 1-1: USB disconnect, device number 13 [ 271.042657][ T5827] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 271.192694][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 271.198004][ T5827] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 271.198081][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 271.198109][ T5827] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.198133][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 271.198158][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 271.201532][ T5827] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 271.201590][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 271.201616][ T5827] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.201641][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 271.201665][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 271.215473][ T5827] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 271.215531][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 271.215556][ T5827] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.215580][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 271.215603][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 271.222282][ T5827] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 271.222310][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.222329][ T5827] usb 4-1: Product: syz [ 271.222342][ T5827] usb 4-1: Manufacturer: syz [ 271.222355][ T5827] usb 4-1: SerialNumber: syz [ 271.488566][ T5827] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 271.518423][ T5827] usb 4-1: USB disconnect, device number 18 [ 272.146281][ T9373] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1236'. [ 272.297676][ T6011] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 272.458014][ T6011] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 272.458044][ T6011] usb 1-1: config 1 has no interface number 0 [ 272.458093][ T6011] usb 1-1: config 1 interface 105 has no altsetting 0 [ 272.473006][ T6011] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 272.473035][ T6011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.473053][ T6011] usb 1-1: Product: syz [ 272.473067][ T6011] usb 1-1: Manufacturer: syz [ 272.473082][ T6011] usb 1-1: SerialNumber: syz [ 272.708438][ T5827] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 272.788890][ T5827] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 273.356875][ T6011] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 273.357453][ T6011] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 273.357963][ T6011] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 273.407584][ T6011] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 273.430597][ T6011] usb 1-1: USB disconnect, device number 14 [ 273.435155][ T6011] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 273.653198][ T6011] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 273.653341][ T6011] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 273.653475][ T6011] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 276.569282][ T9444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1264'. [ 276.569311][ T9444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1264'. [ 278.020798][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.020833][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.618101][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.618136][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.779564][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.796323][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.803160][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.818560][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.832668][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.509790][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.509825][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.927236][ T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.927272][ T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.556158][ T9509] capability: warning: `syz.0.1291' uses 32-bit capabilities (legacy support in use) [ 280.854171][ T9519] input: syz1 as /devices/virtual/input/input22 [ 280.962739][ T5845] Bluetooth: hci0: command tx timeout [ 281.093597][ T9484] chnl_net:caif_netlink_parms(): no params data found [ 281.332560][ T5916] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 281.482726][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 281.483600][ T5916] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 281.485081][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.486505][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.487893][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.489113][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.490278][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.491439][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.508688][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.542538][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.581780][ T5916] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 281.581809][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 281.581839][ T5916] usb 1-1: SerialNumber: syz [ 281.625310][ T5916] usb 1-1: config 0 descriptor?? [ 281.641869][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input23 [ 281.682769][ T5945] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 281.844619][ T9525] input: syz1 as /devices/virtual/input/input24 [ 281.867248][ T5945] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 281.867278][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.891863][ T5945] usb 4-1: config 0 descriptor?? [ 281.908260][ T5192] bcm5974 1-1:0.0: could not read from device [ 281.999585][ T9535] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 281.999616][ T9535] overlayfs: failed to set xattr on upper [ 281.999624][ T9535] overlayfs: ...falling back to redirect_dir=nofollow. [ 281.999631][ T9535] overlayfs: ...falling back to index=off. [ 281.999638][ T9535] overlayfs: ...falling back to uuid=null. [ 281.999646][ T9535] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 281.999666][ T9535] overlayfs: maximum fs stacking depth exceeded [ 282.000836][ T5916] usb 1-1: USB disconnect, device number 15 [ 282.002889][ T5192] bcm5974 1-1:0.0: could not read from device [ 282.141973][ T9538] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input25 [ 283.042551][ T5845] Bluetooth: hci0: command tx timeout [ 283.330545][ T5945] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 283.330574][ T5945] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 283.330841][ T5945] asix 4-1:0.0: probe with driver asix failed with error -71 [ 283.381929][ T5945] usb 4-1: USB disconnect, device number 19 [ 285.002637][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 285.122601][ T5845] Bluetooth: hci0: command tx timeout [ 285.172387][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 285.175063][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 285.179349][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 285.179378][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.179397][ T31] usb 1-1: Product: syz [ 285.179412][ T31] usb 1-1: Manufacturer: syz [ 285.179425][ T31] usb 1-1: SerialNumber: syz [ 285.201934][ T31] usb 1-1: config 0 descriptor?? [ 285.242712][ T31] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 285.242745][ T31] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 285.728428][ T43] bond0 (unregistering): Released all slaves [ 285.825978][ T31] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 286.081776][ T9592] openvswitch: netlink: IPv4 tun info is not correct [ 286.452040][ T31] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 286.452076][ T31] em28xx 1-1:0.0: board has no eeprom [ 286.532620][ T31] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 286.532640][ T31] em28xx 1-1:0.0: dvb set to bulk mode. [ 286.533579][ T6011] em28xx 1-1:0.0: Binding DVB extension [ 286.569075][ T31] usb 1-1: USB disconnect, device number 16 [ 286.580793][ T31] em28xx 1-1:0.0: Disconnecting em28xx [ 286.644845][ T6011] em28xx 1-1:0.0: Registering input extension [ 286.647370][ T31] em28xx 1-1:0.0: Closing input extension [ 286.707902][ T31] em28xx 1-1:0.0: Freeing device [ 287.083965][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.084151][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.084390][ T9484] bridge_slave_0: entered allmulticast mode [ 287.087213][ T9484] bridge_slave_0: entered promiscuous mode [ 287.120079][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.120234][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.120478][ T9484] bridge_slave_1: entered allmulticast mode [ 287.144360][ T9484] bridge_slave_1: entered promiscuous mode [ 287.202626][ T5845] Bluetooth: hci0: command tx timeout [ 288.088201][ T9625] ALSA: mixer_oss: invalid OSS volume '' [ 289.074899][ T9484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.196681][ T9484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.514752][ T37] audit: type=1326 audit(1758751601.198:162): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=9659 comm="syz.1.1341" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1c3d1eec9 code=0x0 [ 290.785645][ T43] hsr_slave_0: left promiscuous mode [ 290.800010][ T43] hsr_slave_1: left promiscuous mode [ 291.080516][ T43] veth1_macvtap: left promiscuous mode [ 291.083642][ T43] veth0_macvtap: left promiscuous mode [ 291.100750][ T43] veth1_vlan: left promiscuous mode [ 291.109548][ T43] veth0_vlan: left promiscuous mode [ 291.122594][ T5945] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 291.332656][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 291.338732][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.338784][ T5945] usb 4-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 291.338807][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.381357][ T5945] usb 4-1: config 0 descriptor?? [ 291.753716][ T9703] kvm: emulating exchange as write [ 292.025863][ T991] usb 4-1: USB disconnect, device number 20 [ 292.692735][ T6011] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 292.858567][ T6011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.858602][ T6011] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.858646][ T6011] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 292.858670][ T6011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.906143][ T6011] usb 2-1: config 0 descriptor?? [ 293.177803][ T6011] usbhid 2-1:0.0: can't add hid device: -71 [ 293.177929][ T6011] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 293.221744][ T6011] usb 2-1: USB disconnect, device number 13 [ 295.642624][ T6011] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 295.802586][ T6011] usb 1-1: Using ep0 maxpacket: 16 [ 295.805211][ T6011] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.805243][ T6011] usb 1-1: config 0 interface 0 has no altsetting 0 [ 295.805276][ T6011] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 295.805298][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.810653][ T6011] usb 1-1: config 0 descriptor?? [ 296.277488][ T6011] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 296.692327][ T6011] usb 1-1: USB disconnect, device number 17 [ 298.256047][ T9774] binder: 9773:9774 ioctl 4018620d 0 returned -22 [ 298.340719][ T9777] binder: 9773:9777 ioctl c018620c 0 returned -14 [ 298.472667][ T5945] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 298.582573][ T991] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 298.632767][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 298.635837][ T5945] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 298.635862][ T5945] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.635880][ T5945] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.639454][ T5945] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.639483][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.639504][ T5945] usb 1-1: Product: syz [ 298.639523][ T5945] usb 1-1: Manufacturer: syz [ 298.639535][ T5945] usb 1-1: SerialNumber: syz [ 298.742682][ T991] usb 2-1: Using ep0 maxpacket: 32 [ 298.753848][ T991] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 298.754148][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.754167][ T991] usb 2-1: Product: syz [ 298.754181][ T991] usb 2-1: Manufacturer: syz [ 298.754194][ T991] usb 2-1: SerialNumber: syz [ 298.776751][ T991] usb 2-1: config 0 descriptor?? [ 298.805592][ T991] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 299.066688][ T5945] usb 1-1: 0:2 : does not exist [ 300.133797][ T5945] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 300.197109][ T5945] usb 1-1: USB disconnect, device number 18 [ 300.229177][ T991] gspca_topro: reg_r err -71 [ 300.229210][ T991] gspca_topro: Sensor soi763a [ 300.257351][ T991] usb 2-1: USB disconnect, device number 14 [ 301.541995][ T9484] team0: Port device team_slave_0 added [ 301.572147][ T9786] netlink: 'syz.4.1382': attribute type 11 has an invalid length. [ 301.572171][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1382'. [ 301.591224][ T9484] team0: Port device team_slave_1 added [ 301.678240][ T9786] netlink: 'syz.4.1382': attribute type 11 has an invalid length. [ 301.678263][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1382'. [ 301.815691][ T67] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.001245][ T37] audit: type=1800 audit(1758751613.658:163): pid=9809 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1391" name="bus" dev="tmpfs" ino=1557 res=0 errno=0 [ 302.024014][ T67] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.024078][ T67] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.024116][ T67] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.026847][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.026861][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.026881][ T9484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.109912][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.109929][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.109951][ T9484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.947779][ T9484] hsr_slave_0: entered promiscuous mode [ 302.949070][ T9484] hsr_slave_1: entered promiscuous mode [ 303.385696][ T9835] Bluetooth: MGMT ver 1.23 [ 304.737240][ T9484] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.795752][ T9484] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.847022][ T9484] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.921216][ T9484] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.171714][ T9880] syz_tun: entered allmulticast mode [ 305.195219][ T9879] input: syz1 as /devices/virtual/input/input27 [ 305.238689][ T9878] syz_tun: left allmulticast mode [ 305.292939][ T9884] loop1: detected capacity change from 0 to 7 [ 305.321614][ T9884] Dev loop1: unable to read RDB block 7 [ 305.321658][ T9884] loop1: unable to read partition table [ 305.321846][ T9884] loop1: partition table beyond EOD, truncated [ 305.321863][ T9884] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 305.487591][ T9484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.551017][ T9484] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.589913][ T9891] Bluetooth: hci0: service_discovery: too big uuid_count value 28793 [ 305.605778][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.612667][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.629410][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.629584][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.123003][ T6011] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 306.273229][ T6011] usb 2-1: Using ep0 maxpacket: 8 [ 306.276353][ T6011] usb 2-1: unable to get BOS descriptor or descriptor too short [ 306.277907][ T6011] usb 2-1: config 4 interface 0 has no altsetting 0 [ 306.284641][ T6011] usb 2-1: string descriptor 0 read error: -22 [ 306.284830][ T6011] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 306.284857][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.305665][ T9484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.348274][ T6011] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 306.380643][ T6011] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 306.381666][ T6011] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 306.381882][ T6011] usb 2-1: media controller created [ 306.475529][ T6011] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.012489][ T9484] veth0_vlan: entered promiscuous mode [ 307.041291][ T9484] veth1_vlan: entered promiscuous mode [ 307.161702][ T9484] veth0_macvtap: entered promiscuous mode [ 307.174042][ T9484] veth1_macvtap: entered promiscuous mode [ 307.198509][ T9484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.243822][ T9484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.275642][ T1019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.278554][ T1019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.278595][ T1019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.278630][ T1019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.622919][ T6011] zl10353_read_register: readreg error (reg=127, ret==0) [ 307.715108][ T6011] usb 2-1: USB disconnect, device number 15 [ 307.717190][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.717209][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.826669][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.826690][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.453059][ T9937] netlink: 'syz.1.1434': attribute type 16 has an invalid length. [ 308.453081][ T9937] netlink: 'syz.1.1434': attribute type 17 has an invalid length. [ 309.111867][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.380005][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.388209][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.850260][ T9937] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.903027][ T9937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.858412][ T9965] tipc: Started in network mode [ 310.858435][ T9965] tipc: Node identity 7, cluster identity 4711 [ 310.858448][ T9965] tipc: Node number set to 7 [ 312.227827][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1457'. [ 312.228081][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1457'. [ 312.954039][T10011] Bluetooth: Invalid byte e8 after esc byte [ 314.964736][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 316.899092][T10082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.287992][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.288066][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.400772][T10093] tipc: Failed to remove unknown binding: 66,3,3/0:3229898311/3229898312 [ 318.416711][T10121] netlink: 'syz.5.1509': attribute type 1 has an invalid length. [ 319.095322][T10131] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 319.472008][T10139] loop3: detected capacity change from 0 to 1 [ 319.491771][T10139] Dev loop3: unable to read RDB block 1 [ 319.491816][T10139] loop3: unable to read partition table [ 319.492073][T10139] loop3: partition table beyond EOD, truncated [ 319.492091][T10139] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 319.541158][T10139] Dev loop3: unable to read RDB block 1 [ 319.541201][T10139] loop3: unable to read partition table [ 319.541431][T10139] loop3: partition table beyond EOD, truncated [ 320.783470][T10165] 9pnet: p9_errstr2errno: server reported unknown error 00000004,group_id= [ 320.868930][T10167] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 320.868954][T10167] syzkaller1: Linktype set failed because interface is up [ 321.008920][T10174] netlink: 'syz.1.1531': attribute type 3 has an invalid length. [ 321.008945][T10174] netlink: 'syz.1.1531': attribute type 8 has an invalid length. [ 321.008959][T10174] netlink: 'syz.1.1531': attribute type 10 has an invalid length. [ 321.008971][T10174] netlink: 'syz.1.1531': attribute type 11 has an invalid length. [ 321.008985][T10174] netlink: 201148 bytes leftover after parsing attributes in process `syz.1.1531'. [ 322.742835][T10209] netlink: 'syz.1.1543': attribute type 12 has an invalid length. [ 323.832635][ T6011] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 324.004650][ T6011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.004701][ T6011] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 324.004782][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.044742][ T6011] usb 1-1: config 0 descriptor?? [ 324.351430][ T6011] usbhid 1-1:0.0: can't add hid device: -71 [ 324.351573][ T6011] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 324.379491][ T6011] usb 1-1: USB disconnect, device number 19 [ 324.671058][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 324.983128][ T37] audit: type=1326 audit(1758751636.658:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.3.1565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19b4a5eec9 code=0x0 [ 324.987113][T10266] serio: Serial port ptm1 [ 325.221498][ T1019] Bluetooth: hci5: Frame reassembly failed (-84) [ 325.224837][T10275] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 325.376713][T10281] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 325.639999][T10287] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1573'. [ 325.640437][T10287] unsupported nlmsg_type 40 [ 327.284870][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 327.360065][T10293] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.383759][T10293] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.383807][T10293] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.383842][T10293] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.558378][T10328] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 328.062671][ T5916] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 328.138390][T10342] netlink: 'syz.3.1593': attribute type 16 has an invalid length. [ 328.138415][T10342] netlink: 'syz.3.1593': attribute type 17 has an invalid length. [ 328.212598][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 328.219885][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 328.219915][ T5916] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 328.219928][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.226596][ T5916] usb 2-1: config 0 descriptor?? [ 328.272731][T10342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.487130][ T5916] usbhid 2-1:0.0: can't add hid device: -71 [ 328.487261][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 328.498061][ T5916] usb 2-1: USB disconnect, device number 16 [ 329.436147][T10367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1602'. [ 329.439652][T10366] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1603'. [ 331.075735][T10412] tipc: Failed to remove unknown binding: 66,1,1/0:4186421814/4186421816 [ 331.075781][T10412] tipc: Failed to remove unknown binding: 66,1,1/0:4186421814/4186421816 [ 332.074032][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 332.277359][ T5945] hid-generic 0000:0004:0000.0014: unknown main item tag 0x0 [ 332.277396][ T5945] hid-generic 0000:0004:0000.0014: unknown main item tag 0x0 [ 332.277421][ T5945] hid-generic 0000:0004:0000.0014: unknown main item tag 0x0 [ 332.299852][ T5945] hid-generic 0000:0004:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 332.378562][ T31] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 332.378591][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.378612][ T31] usb 2-1: Product: syz [ 332.378626][ T31] usb 2-1: Manufacturer: syz [ 332.378640][ T31] usb 2-1: SerialNumber: syz [ 332.423990][ T31] usb 2-1: config 0 descriptor?? [ 332.427304][ T31] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 332.924113][T10444] netlink: zone id is out of range [ 333.043466][T10447] netlink: zone id is out of range [ 333.045250][T10447] netlink: del zone limit has 4 unknown bytes [ 333.049949][T10444] netlink: set zone limit has 4 unknown bytes [ 333.572258][T10453] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 333.848753][ T31] usb 2-1: USB disconnect, device number 17 [ 335.077978][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 335.225440][T10472] team1: entered promiscuous mode [ 335.225470][T10472] team1: entered allmulticast mode [ 335.872577][ T5945] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 336.044983][ T5945] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.045025][ T5945] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 336.051698][ T5945] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.051729][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.051749][ T5945] usb 6-1: Product: syz [ 336.051763][ T5945] usb 6-1: Manufacturer: syz [ 336.051777][ T5945] usb 6-1: SerialNumber: syz [ 336.189895][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'. [ 336.190531][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'. [ 336.285353][T10482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.285713][T10482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.291645][ T5945] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 336.313213][ T5945] usb 6-1: USB disconnect, device number 2 [ 336.831941][ T5945] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 336.977130][T10494] vlan0 (unregistering): left allmulticast mode [ 336.977153][T10494] veth0_vlan (unregistering): left allmulticast mode [ 336.977183][T10494] vlan0 (unregistering): left promiscuous mode [ 336.992537][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 336.994862][ T5945] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 336.994894][ T5945] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 336.994942][ T5945] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.994963][ T5945] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.994986][ T5945] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 336.995010][ T5945] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.995034][ T5945] usb 6-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.995076][ T5945] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 336.995097][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.211549][ T5945] usb 6-1: usb_control_msg returned -32 [ 337.211596][ T5945] usbtmc 6-1:16.0: can't read capabilities [ 337.212015][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.212262][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.215265][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.215514][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.215744][ C0] usbtmc 6-1:16.0: invalid notification: 11 [ 337.215975][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.218176][ C0] usbtmc 6-1:16.0: invalid notification: 2 [ 337.218418][ C0] usbtmc 6-1:16.0: invalid notification: 5 [ 337.219891][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.221279][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.222754][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.223015][ C0] usbtmc 6-1:16.0: invalid notification: 40 [ 337.225007][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.225239][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.225467][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.226778][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.227017][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.227242][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.227464][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.227692][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.227915][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.228140][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.228370][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.228599][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.228823][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.229046][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.229278][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.229507][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.229735][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.229969][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.230193][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.230419][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.230645][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.230869][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.231093][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.231334][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.231573][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.231798][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.232023][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.232271][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.232493][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.232720][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.232952][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.233232][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.233463][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.233699][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.233924][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.234147][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.234378][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.234649][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.234876][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.235102][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.235345][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.235568][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.235796][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.236024][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.236244][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.236466][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.236768][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.237004][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.237233][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.237460][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.237735][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.237960][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.238182][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.238405][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.238630][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.238841][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.239070][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.239299][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.239537][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.239763][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.239997][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.240225][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.240454][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.240681][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.240928][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.241154][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.241384][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.241618][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.241841][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.242067][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.242291][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.242647][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.246712][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.246955][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.247190][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.247419][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.247644][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.247866][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.248086][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.248307][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.248538][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.248759][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.248978][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.249206][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.249428][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.249648][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.249878][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.250099][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.250348][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.250571][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.250791][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.251017][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.251237][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.251459][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.251680][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.251901][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.252141][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.252408][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.252636][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.255310][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.255559][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.255789][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.256018][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.256242][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.256472][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.256697][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.256927][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.257161][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.257387][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.257634][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.257862][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.258089][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.258339][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.258567][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.258790][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.259010][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.259237][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.259459][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.259686][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.259908][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.260133][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.260373][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.260595][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.260816][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.261058][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.261281][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.261513][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.261731][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.261963][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.262234][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.262491][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.262726][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.262951][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.263173][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.263396][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.263620][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.263852][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.264077][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.267292][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.267541][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.267764][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.267991][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.268219][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.268466][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.268688][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.268911][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.269138][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.269370][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.269591][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.269814][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.270039][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.270265][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.270539][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.270792][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.271025][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.271261][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.271498][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.271729][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.271962][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.272197][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.272652][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.272914][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.273144][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.273384][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.273615][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.273854][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.274085][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.274318][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.274543][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.274770][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.275000][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.275222][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.275451][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.275686][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.275918][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.276142][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.276365][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.276596][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.276819][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.277042][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.277264][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.277508][ C0] usbtmc 6-1:16.0: invalid notification: 0 [ 337.503458][ T5945] usb 6-1: USB disconnect, device number 3 [ 338.685142][T10532] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1669'. [ 338.959878][T10540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1673'. [ 339.372592][ T6011] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 339.522564][ T6011] usb 5-1: Using ep0 maxpacket: 32 [ 339.525411][ T6011] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 339.525438][ T6011] usb 5-1: config 0 has no interface number 0 [ 339.525487][ T6011] usb 5-1: config 0 interface 184 has no altsetting 0 [ 339.595367][ T6011] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 339.595398][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.595418][ T6011] usb 5-1: Product: syz [ 339.595432][ T6011] usb 5-1: Manufacturer: syz [ 339.595446][ T6011] usb 5-1: SerialNumber: syz [ 339.643739][ T6011] usb 5-1: config 0 descriptor?? [ 339.651275][ T6011] smsc75xx v1.0.0 [ 340.836525][T10572] loop6: detected capacity change from 0 to 7 [ 340.913187][T10572] Dev loop6: unable to read RDB block 7 [ 340.913236][T10572] loop6: unable to read partition table [ 340.913837][T10572] loop6: partition table beyond EOD, truncated [ 340.913858][T10572] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 341.152612][ T6011] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 341.152643][ T6011] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 341.153170][ T6011] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 341.153194][ T6011] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 341.153221][ T6011] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 341.153245][ T6011] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 341.153539][ T6011] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 341.234894][ T6011] usb 5-1: USB disconnect, device number 14 [ 341.902658][ T5945] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 342.066991][ T5945] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.067019][ T5945] usb 6-1: config 0 has no interfaces? [ 342.067049][ T5945] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 342.067071][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.075023][ T5945] usb 6-1: config 0 descriptor?? [ 342.308201][ T991] usb 6-1: USB disconnect, device number 4 [ 342.484441][ T5945] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 342.633050][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 342.635835][ T5945] usb 1-1: config 0 has no interfaces? [ 342.640781][ T5945] usb 1-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 342.640810][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.640830][ T5945] usb 1-1: Product: syz [ 342.640844][ T5945] usb 1-1: Manufacturer: syz [ 342.641055][ T5945] usb 1-1: SerialNumber: syz [ 342.662763][ T5945] usb 1-1: config 0 descriptor?? [ 343.486384][ T5827] usb 1-1: USB disconnect, device number 20 [ 343.666168][T10614] vlan2: entered allmulticast mode [ 343.666191][T10614] macvtap0: entered allmulticast mode [ 343.666204][T10614] veth0_macvtap: entered allmulticast mode [ 343.762735][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 343.763132][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 344.056211][T10618] netlink: 'syz.3.1705': attribute type 1 has an invalid length. [ 344.359449][T10620] bond5: (slave geneve2): making interface the new active one [ 344.360204][T10620] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 344.360280][ T1361] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 344.365236][ T43] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 344.365322][ T43] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 344.396467][ T43] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 344.976138][ T6011] psmouse serio3: Failed to reset mouse on : -5 [ 346.112688][ T5827] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 346.273109][ T5827] usb 6-1: Using ep0 maxpacket: 8 [ 346.306117][ T5827] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 346.306135][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.306145][ T5827] usb 6-1: Product: syz [ 346.306153][ T5827] usb 6-1: Manufacturer: syz [ 346.306160][ T5827] usb 6-1: SerialNumber: syz [ 346.344580][ T5827] usb 6-1: config 0 descriptor?? [ 346.552738][ T5827] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.765679][T10661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1721'. [ 347.141182][T10668] uprobe: syz.1.1724:10668 failed to unregister, leaking uprobe [ 347.562198][ T5827] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 347.578494][ T5827] usb 6-1: USB disconnect, device number 5 [ 348.723112][ T31] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 348.762986][ T6011] misc userio: Buffer overflowed, userio client isn't keeping up [ 348.842641][ T5945] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 348.875679][ T31] usb 2-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.875711][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.875745][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 348.875767][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.887343][ T31] usb 2-1: config 0 descriptor?? [ 349.005762][ T5945] usb 4-1: config 3 has an invalid interface number: 168 but max is 0 [ 349.005792][ T5945] usb 4-1: config 3 has no interface number 0 [ 349.005827][ T5945] usb 4-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 349.005841][ T5945] usb 4-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 349.005856][ T5945] usb 4-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 349.005895][ T5945] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 349.005917][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.082775][T10706] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 349.406566][ T31] sony 0003:054C:024B.0015: unbalanced delimiter at end of report description [ 349.407462][ T31] sony 0003:054C:024B.0015: parse failed [ 349.407570][ T31] sony 0003:054C:024B.0015: probe with driver sony failed with error -22 [ 349.713217][ T5945] usb 4-1: string descriptor 0 read error: -71 [ 349.714678][ T5945] keyspan 4-1:3.168: Keyspan 2 port adapter converter detected [ 349.715128][ T5945] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 1 [ 349.720897][ T5945] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 84 [ 349.721111][ T5945] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 2 [ 349.761260][ T5945] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 349.771952][ T5945] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 88 [ 349.772076][ T5945] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 6 [ 349.791928][ T5945] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 349.807188][ T5945] usb 4-1: USB disconnect, device number 21 [ 349.854399][ T5945] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 349.855988][T10713] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 349.856061][T10713] block device autoloading is deprecated and will be removed. [ 349.869638][ T6011] input: PS/2 Generic Mouse as /devices/serio3/input/input28 [ 349.908117][ T5945] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 349.908896][ T5945] keyspan 4-1:3.168: device disconnected [ 350.120125][ T6011] psmouse serio3: Failed to enable mouse on [ 350.218816][ T6011] usb 2-1: USB disconnect, device number 18 [ 350.656005][T10737] input: syz0 as /devices/virtual/input/input29 [ 351.589835][T10756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1759'. [ 351.982616][ T5827] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 352.138266][ T5827] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 352.138301][ T5827] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 352.139843][ T5827] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 352.139869][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 352.139888][ T5827] usb 6-1: SerialNumber: syz [ 352.189938][ T5827] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 352.190717][ T5827] usb-storage 6-1:1.0: USB Mass Storage device detected [ 352.257745][ T5827] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 352.266665][ T5827] scsi host1: usb-storage 6-1:1.0 [ 352.476005][ T6011] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 352.642581][ T6011] usb 2-1: Using ep0 maxpacket: 8 [ 352.645121][ T6011] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 352.645148][ T6011] usb 2-1: config 179 has no interface number 0 [ 352.645263][ T6011] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 352.645290][ T6011] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 352.645317][ T6011] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 352.645342][ T6011] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 352.645369][ T6011] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 352.645411][ T6011] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 352.645433][ T6011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.658996][T10771] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 352.955224][ T49] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 353.106230][T10783] input: syz0 as /devices/virtual/input/input31 [ 353.146185][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.146352][ T49] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 353.146398][ T49] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 353.146420][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.316986][ T49] usb 4-1: config 0 descriptor?? [ 353.401803][ T5945] usb 2-1: USB disconnect, device number 19 [ 353.401803][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 353.401890][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 353.651952][ T5916] usb 6-1: USB disconnect, device number 6 [ 353.774393][ T6011] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input30 [ 353.844806][ T49] a4tech 0003:09DA:000A.0016: unknown main item tag 0x0 [ 353.844844][ T49] a4tech 0003:09DA:000A.0016: unknown main item tag 0x0 [ 353.844871][ T49] a4tech 0003:09DA:000A.0016: unknown main item tag 0x0 [ 353.844898][ T49] a4tech 0003:09DA:000A.0016: unknown main item tag 0x0 [ 353.844924][ T49] a4tech 0003:09DA:000A.0016: unknown main item tag 0x0 [ 353.844948][ T49] a4tech 0003:09DA:000A.0016: unknown main item tag 0x0 [ 353.844973][ T49] a4tech 0003:09DA:000A.0016: item fetching failed at offset 6/7 [ 353.845784][ T49] a4tech 0003:09DA:000A.0016: parse failed [ 353.845883][ T49] a4tech 0003:09DA:000A.0016: probe with driver a4tech failed with error -22 [ 354.024815][ T10] usb 4-1: USB disconnect, device number 22 [ 354.868288][T10801] binder: 10798:10801 ioctl c0306201 0 returned -14 [ 354.982523][ T5945] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 355.205383][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 355.208799][ T5945] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.208824][ T5945] usb 2-1: config 0 has no interface number 0 [ 355.211846][ T5945] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 355.211875][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.211894][ T5945] usb 2-1: Product: syz [ 355.211908][ T5945] usb 2-1: Manufacturer: syz [ 355.211921][ T5945] usb 2-1: SerialNumber: syz [ 355.268674][ T5945] usb 2-1: config 0 descriptor?? [ 355.283081][ T5945] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 356.286835][ T5916] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 356.462622][ T5916] usb 6-1: Using ep0 maxpacket: 32 [ 356.471825][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.471938][ T5916] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 356.471961][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.517261][ T5916] usb 6-1: config 0 descriptor?? [ 356.540290][ T5916] hub 6-1:0.0: USB hub found [ 356.695449][ T5945] gspca_spca1528: reg_w err -71 [ 356.695587][ T5945] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 356.717413][ T5945] usb 2-1: USB disconnect, device number 20 [ 356.737353][ T5916] hub 6-1:0.0: 1 port detected [ 356.962718][ T5845] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 356.963142][ T5845] Bluetooth: hci0: Injecting HCI hardware error event [ 356.970888][ T5841] Bluetooth: hci0: hardware error 0x00 [ 357.356448][T10845] netlink: 'syz.3.1793': attribute type 58 has an invalid length. [ 357.813173][ T5945] usb 6-1: USB disconnect, device number 7 [ 357.904696][T10854] ipvlan0: entered promiscuous mode [ 357.904732][T10854] ipvlan0: entered allmulticast mode [ 357.904746][T10854] veth0_vlan: entered allmulticast mode [ 358.042639][ T5916] usb 6-1-port1: config error [ 358.762549][ T5916] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 358.935319][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.935353][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.935393][ T5916] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 358.935416][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.941968][ T5916] usb 1-1: config 0 descriptor?? [ 359.289288][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 359.493365][ T5916] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 359.858824][T10903] loop6: detected capacity change from 0 to 7 [ 359.904216][T10903] Dev loop6: unable to read RDB block 7 [ 359.904257][T10903] loop6: AHDI p1 p2 p3 p4 [ 359.904434][T10903] loop6: partition table partially beyond EOD, truncated [ 359.904841][T10903] loop6: p1 start 926365495 is beyond EOD, truncated [ 359.904861][T10903] loop6: p2 size 47 extends beyond EOD, truncated [ 360.063494][T10903] loop6: p3 start 1886353253 is beyond EOD, truncated [ 360.495068][ T5916] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device [ 360.495124][ T5916] pyra 0003:1E7D:2CF6.0017: couldn't install mouse [ 360.498819][ T5916] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -71 [ 360.518695][ T5916] usb 1-1: USB disconnect, device number 21 [ 361.713128][T10939] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 362.420634][T10956] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000039: 0000 [#1] SMP KASAN PTI [ 362.420656][T10956] KASAN: null-ptr-deref in range [0x00000000000001c8-0x00000000000001cf] [ 362.420680][T10956] CPU: 0 UID: 0 PID: 10956 Comm: syz.5.1833 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 362.420701][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 362.420715][T10956] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 362.420737][T10956] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 34 7a 35 fa 49 8b 1f 31 ff 48 89 [ 362.420754][T10956] RSP: 0018:ffffc9000d4d7c00 EFLAGS: 00010206 [ 362.420771][T10956] RAX: 0000000000000039 RBX: 0000000000000048 RCX: 0000000000000047 [ 362.420782][T10956] RDX: 0000000000000047 RSI: 0000000000000001 RDI: 0000000000000000 [ 362.420793][T10956] RBP: ffffc9000d4d7d60 R08: 0000000000000000 R09: 0000000000000000 [ 362.420808][T10956] R10: dffffc0000000000 R11: ffffffff87e83950 R12: 0000000000000001 [ 362.420820][T10956] R13: ffffc9000d4d7e00 R14: dffffc0000000000 R15: 00000000000001c8 [ 362.420833][T10956] FS: 00007fef60ff56c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 362.420849][T10956] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.420861][T10956] CR2: 00007fef60ff4f98 CR3: 0000000039d84000 CR4: 00000000003526f0 [ 362.420878][T10956] Call Trace: [ 362.420885][T10956] [ 362.420900][T10956] ? __pfx_bcsp_recv+0x10/0x10 [ 362.420915][T10956] ? rcu_read_lock_any_held+0xb3/0x120 [ 362.420935][T10956] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 362.420951][T10956] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 362.420978][T10956] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 362.421006][T10956] hci_uart_tty_receive+0x194/0x220 [ 362.421030][T10956] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 362.421054][T10956] tiocsti+0x23c/0x2c0 [ 362.421070][T10956] ? __pfx_tiocsti+0x10/0x10 [ 362.421086][T10956] ? __fget_files+0x2a/0x420 [ 362.421109][T10956] ? __fget_files+0x3a6/0x420 [ 362.421156][T10956] ? __fget_files+0x2a/0x420 [ 362.421179][T10956] tty_ioctl+0x62c/0xde0 [ 362.421194][T10956] ? __pfx_tty_ioctl+0x10/0x10 [ 362.421209][T10956] __se_sys_ioctl+0xff/0x170 [ 362.421227][T10956] do_syscall_64+0xfa/0x3b0 [ 362.421243][T10956] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.421268][T10956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.421285][T10956] ? clear_bhb_loop+0x60/0xb0 [ 362.421302][T10956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.421318][T10956] RIP: 0033:0x7fef62daeec9 [ 362.421333][T10956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.421348][T10956] RSP: 002b:00007fef60ff5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.421366][T10956] RAX: ffffffffffffffda RBX: 00007fef63006090 RCX: 00007fef62daeec9 [ 362.421379][T10956] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 362.421392][T10956] RBP: 00007fef62e31f91 R08: 0000000000000000 R09: 0000000000000000 [ 362.421402][T10956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.421412][T10956] R13: 00007fef63006128 R14: 00007fef63006090 R15: 00007ffedd6ddda8 [ 362.421433][T10956] [ 362.421445][T10956] Modules linked in: [ 362.421477][T10956] ---[ end trace 0000000000000000 ]--- [ 362.780598][T10956] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 362.780630][T10956] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 34 7a 35 fa 49 8b 1f 31 ff 48 89 [ 362.780652][T10956] RSP: 0018:ffffc9000d4d7c00 EFLAGS: 00010206 [ 362.780669][T10956] RAX: 0000000000000039 RBX: 0000000000000048 RCX: 0000000000000047 [ 362.780682][T10956] RDX: 0000000000000047 RSI: 0000000000000001 RDI: 0000000000000000 [ 362.780693][T10956] RBP: ffffc9000d4d7d60 R08: 0000000000000000 R09: 0000000000000000 [ 362.780707][T10956] R10: dffffc0000000000 R11: ffffffff87e83950 R12: 0000000000000001 [ 362.780721][T10956] R13: ffffc9000d4d7e00 R14: dffffc0000000000 R15: 00000000000001c8 [ 362.780736][T10956] FS: 00007fef60ff56c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 362.780752][T10956] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.780765][T10956] CR2: 00007fef60ff4f98 CR3: 0000000039d84000 CR4: 00000000003526f0 [ 362.780784][T10956] Kernel panic - not syncing: Fatal exception [ 362.781057][T10956] Kernel Offset: disabled