last executing test programs: 4.175249223s ago: executing program 2 (id=3792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.995094468s ago: executing program 2 (id=3796): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x5, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xf8, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x0, 0x1}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xc, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x10, 0x95}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfd, 0x5, 0xff}}}}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 3.018140035s ago: executing program 3 (id=3818): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'caif0\x00'}}) 2.932753703s ago: executing program 3 (id=3820): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.354510017s ago: executing program 2 (id=3830): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x400000, 0xd}) 2.185273774s ago: executing program 2 (id=3833): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x80103f80cf432271, 0x5, 0x33, {0x33, 0x9, "dfd57de760323a17ba3bcae18ec901735981b0f417e81a80a311fde3eefbf9153b7cbd1577f1944a8506b8daa79e89aa14"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.343434762s ago: executing program 4 (id=3848): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc010000190001000000000003000000e0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000000a00008000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000020000000000000000000044010500e0000001000000000000000000000000000004d63c00000002000000e00000010000000000000000000000000735000004"], 0x1fc}}, 0x0) 1.258758926s ago: executing program 0 (id=3850): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/249, 0x1ff18}], 0x1}, 0x0) close(r1) 1.243578144s ago: executing program 4 (id=3851): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 1.24187387s ago: executing program 3 (id=3852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 1.1548973s ago: executing program 4 (id=3853): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 1.052338104s ago: executing program 3 (id=3855): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r1, 0x615, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) 1.025527647s ago: executing program 0 (id=3856): capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, 0x2000000}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) 1.017951988s ago: executing program 4 (id=3857): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 914.833241ms ago: executing program 3 (id=3858): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') fchdir(r0) rename(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)='./file2\x00') 905.091425ms ago: executing program 0 (id=3859): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) 808.678674ms ago: executing program 3 (id=3861): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 742.075892ms ago: executing program 0 (id=3863): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x4, 0x0) 652.143482ms ago: executing program 0 (id=3864): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000080)={0x18, r1, 0x3, 0x0, &(0x7f0000000200)=[{0x0, 0x2}, {0x800, 0xfffffffffffffffd}, {0x7, 0xf7}]}) 627.667063ms ago: executing program 1 (id=3865): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) 533.495507ms ago: executing program 1 (id=3866): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x7, 0x3, 0x7, "471b5c955f4e78d2b75891da7beaa4575d7f5dcafa2a24870f0e79af94a818f5eab50b6426d94f02ce7b9611eca070f98e1e18f1cb2a9f3422ce9281bda520", 0x2c}, 0x60) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x7, "ee937dae4f4384661ff26cba1cb24f02a943eee376895dd46a8dcfad211fdf1cae7accf9b74bb7fb0df654ddb4c5cac24f5ce87a33da2fc61dc1e539ed60b3", 0x29}, 0x60) 520.194811ms ago: executing program 0 (id=3867): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 397.75536ms ago: executing program 1 (id=3868): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000040)) 353.855725ms ago: executing program 2 (id=3869): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000040)) 313.011567ms ago: executing program 1 (id=3870): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x20000002, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80}}, 0x0, 0x1}, &(0x7f00000003c0)=0x90) 229.047972ms ago: executing program 2 (id=3871): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x2, {0x1, @win={{}, 0x0, 0x9, 0x0, 0x0, 0x0}}}) ppoll(&(0x7f0000000240)=[{r0, 0xa0e4}], 0x1, 0x0, 0x0, 0x0) 203.360662ms ago: executing program 1 (id=3872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000) 80.722127ms ago: executing program 4 (id=3873): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x1, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0x9, 0x0, 0x7fff, 0x2, 0x9, 0x5}}, {0x4}}]}]}, 0x58}}, 0x2000400c) 9.839661ms ago: executing program 4 (id=3874): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000280)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'xfrm0\x00', 0x100}, 0x18) 0s ago: executing program 1 (id=3875): r0 = syz_io_uring_setup(0x10b8, &(0x7f0000001180)={0x0, 0xff34, 0x10, 0x2, 0x252}, &(0x7f0000000200), &(0x7f0000001200)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000002d40)={0x7}, 0x1) kernel console output (not intermixed with test programs): se socket [ 176.954960][ T64] vhci_hcd: disconnect device [ 176.985920][ T64] vhci_hcd: stop threads [ 176.999420][ T64] vhci_hcd: release socket [ 177.004577][ T64] vhci_hcd: disconnect device [ 177.056644][ T5883] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 177.075280][ T5883] usb 39-1: enqueue for inactive port 0 [ 177.153292][ T5883] vhci_hcd: vhci_device speed not set [ 177.356601][ T9808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1639'. [ 177.959663][ T9842] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1651'. [ 178.304573][ T9867] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 178.337858][ T9867] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 178.906750][ T5820] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 179.066461][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 179.080955][ T5820] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 179.096423][ T5820] usb 1-1: config 0 has no interface number 0 [ 179.112768][ T5820] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.167028][ T5820] usb 1-1: config 0 interface 2 has no altsetting 0 [ 179.197451][ T5820] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 179.222943][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.241293][ T5820] usb 1-1: Product: syz [ 179.245517][ T5820] usb 1-1: Manufacturer: syz [ 179.287008][ T5820] usb 1-1: SerialNumber: syz [ 179.308072][ T5820] usb 1-1: config 0 descriptor?? [ 179.574928][ T5820] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.695514][ T9965] netlink: 'syz.2.1687': attribute type 2 has an invalid length. [ 179.726893][ T5820] usb 1-1: USB disconnect, device number 8 [ 180.215778][T10007] ieee802154 phy1 wpan1: encryption failed: -22 [ 181.093011][T10068] ipip0: entered promiscuous mode [ 181.139666][T10068] ipip0: entered allmulticast mode [ 181.397878][ T5820] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 181.578431][ T5820] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 181.588140][ T5820] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 181.627416][ T5820] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 181.654977][ T5820] usb 3-1: config 150 has no interface number 0 [ 181.673204][ T5820] usb 3-1: config 150 interface 204 has no altsetting 0 [ 181.685594][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1730'. [ 181.713053][ T5820] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 181.733409][T10109] netlink: 'syz.3.1730': attribute type 5 has an invalid length. [ 181.741319][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.759966][T10109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1730'. [ 181.776419][ T5820] usb 3-1: Product: syz [ 181.786745][ T5820] usb 3-1: Manufacturer: syz [ 181.804520][ T5820] usb 3-1: SerialNumber: syz [ 181.827386][T10109] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 181.876484][T10109] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 181.902974][T10109] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 181.922800][T10109] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 181.954030][T10109] geneve3: entered promiscuous mode [ 181.971081][T10109] geneve3: entered allmulticast mode [ 181.981423][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 182.085815][ T5820] xr_serial 3-1:150.204: skipping garbage [ 182.126734][ T5820] usb 3-1: USB disconnect, device number 10 [ 182.436024][T10150] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 183.242600][ T5820] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 183.406647][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 183.473788][ T5820] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 183.500396][ T5820] usb 3-1: config 0 has no interface number 0 [ 183.510545][ T5820] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 183.540122][ T5820] usb 3-1: config 0 interface 83 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 183.563568][ T5820] usb 3-1: New USB device found, idVendor=0b48, idProduct=3009, bcdDevice=81.77 [ 183.586271][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.623232][ T5820] usb 3-1: Product: syz [ 183.636659][ T5820] usb 3-1: Manufacturer: syz [ 183.641326][ T5820] usb 3-1: SerialNumber: syz [ 183.670447][ T5820] usb 3-1: config 0 descriptor?? [ 183.703054][ T5820] dvb-usb: found a 'Technotrend TT-connect S-2400 (8kB EEPROM)' in warm state. [ 183.717287][ T5827] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.721723][ T5820] dvb-usb: bulk message failed: -22 (4/0) [ 183.741035][ T5820] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 183.813638][ T5820] dvb-usb: bulk message failed: -22 (5/0) [ 183.820111][ T5820] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 183.868791][ T5820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.888497][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 183.922183][ T5820] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400 (8kB EEPROM)) [ 183.927686][ T5827] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 183.960944][ T5827] usb 2-1: config 0 has no interface number 0 [ 183.967290][ T5820] usb 3-1: media controller created [ 183.990176][ T5827] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 184.016765][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.042836][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.056659][ T5827] usb 2-1: Product: syz [ 184.060896][ T5827] usb 2-1: Manufacturer: syz [ 184.065530][ T5827] usb 2-1: SerialNumber: syz [ 184.104333][T10255] No source specified [ 184.128889][ T5827] usb 2-1: config 0 descriptor?? [ 184.131524][ T5820] ttusb2: set interface to alts=3 failed [ 184.143834][ T5827] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 184.163821][ T5827] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 184.252986][ T5820] DVB: Unable to find symbol tda10086_attach() [ 184.266987][ T5820] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400 (8kB EEPROM)' [ 184.307843][ T5820] dvb-usb: bulk message failed: -22 (4/0) [ 184.314266][ T5820] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 184.325998][ T5820] dvb-usb: bulk message failed: -22 (5/0) [ 184.333371][ T5820] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 184.344500][ T5820] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPROM) successfully initialized and connected. [ 184.385444][ T5827] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 184.387074][ T5820] usb 3-1: USB disconnect, device number 11 [ 184.600718][ T5827] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 184.650870][ T5827] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 184.665606][ T5820] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPR successfully deinitialized and disconnected. [ 184.708516][ T5827] usb 2-1: USB disconnect, device number 7 [ 184.733977][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1782'. [ 184.753765][T10296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1782'. [ 184.763543][ T5827] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 185.279678][T10329] netlink: 'syz.4.1789': attribute type 21 has an invalid length. [ 185.629945][T10340] syz.2.1792 uses old SIOCAX25GETINFO [ 185.799203][T10323] bridge0: port 3(batadv0) entered disabled state [ 185.806628][T10323] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.813985][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.973955][T10349] capability: warning: `syz.3.1794' uses 32-bit capabilities (legacy support in use) [ 186.552542][T10323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.609039][T10323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.730673][T10375] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 187.102834][T10323] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.126436][T10323] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.135358][T10323] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.151163][T10323] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.366953][T10323] syz.0.1788 (10323) used greatest stack depth: 20168 bytes left [ 187.995152][T10423] netlink: 'syz.2.1820': attribute type 5 has an invalid length. [ 188.456869][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 188.653619][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 188.674190][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 188.687192][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.703882][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.727605][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 188.756155][ T10] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 188.775823][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.816417][ T10] usb 3-1: Product: syz [ 188.837741][ T10] usb 3-1: Manufacturer: syz [ 188.850146][ T10] usb 3-1: SerialNumber: syz [ 188.876039][ T10] usb 3-1: config 0 descriptor?? [ 188.902527][ T10] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 189.039807][T10495] Smack: duplicate mount options [ 189.046979][T10365] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 189.114371][T10500] tmpfs: Bad value for 'mpol' [ 189.142013][ T5883] usb 3-1: USB disconnect, device number 12 [ 189.230909][T10365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 189.248378][T10365] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 189.263377][T10365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 189.287621][T10365] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 189.318146][T10365] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 189.353101][T10365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.367415][T10365] usb 1-1: config 0 descriptor?? [ 189.499802][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 189.579870][T10365] hdpvr 1-1:0.0: firmware version 0x0 dated [ 189.589861][T10365] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 189.664604][T10539] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.686739][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 189.695173][ T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 189.718866][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.756514][ T10] usb 2-1: config 0 has no interface number 0 [ 189.780350][ T10] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 189.793017][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.796218][T10365] hdpvr 1-1:0.0: device init failed [ 189.805259][ T10] usb 2-1: Product: syz [ 189.813822][ T10] usb 2-1: Manufacturer: syz [ 189.823793][ T10] usb 2-1: SerialNumber: syz [ 189.826669][T10365] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 189.860701][T10365] usb 1-1: USB disconnect, device number 9 [ 189.865628][ T10] usb 2-1: config 0 descriptor?? [ 189.971413][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'. [ 189.973422][T10554] block device autoloading is deprecated and will be removed. [ 189.992158][T10554] syz.4.1859: attempt to access beyond end of device [ 189.992158][T10554] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 190.090865][ T10] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 190.109277][ T10] usb 2-1: No valid video chain found. [ 190.318395][T10364] usb 2-1: USB disconnect, device number 8 [ 190.443373][T10590] geneve4: entered promiscuous mode [ 190.690819][T10604] xt_TPROXY: Can be used only with -p tcp or -p udp [ 190.937916][T10612] netlink: 'syz.4.1875': attribute type 5 has an invalid length. [ 190.972940][T10616] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 190.991253][T10616] [U] J"—e:ÀÆ" [ 191.391089][T10637] vivid-007: ================= START STATUS ================= [ 191.406586][T10640] netlink: 'syz.4.1885': attribute type 27 has an invalid length. [ 191.472324][T10637] vivid-007: Enable Output Cropping: true [ 191.487207][T10637] vivid-007: Enable Output Composing: true [ 191.508444][ T30] audit: type=1400 audit(1746755990.679:79): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=10645 comm="syz.0.1887" daddr=0:0:ff00::1 dest=20001 [ 191.528401][T10637] vivid-007: Enable Output Scaler: true [ 191.547898][T10637] vivid-007: Tx RGB Quantization Range: Automatic [ 191.590706][T10637] vivid-007: Transmit Mode: HDMI [ 191.595755][T10637] vivid-007: Hotplug Present: 0x00000000 [ 191.605201][T10637] vivid-007: RxSense Present: 0x00000000 [ 191.612014][T10637] vivid-007: EDID Present: 0x00000000 [ 191.621736][T10637] vivid-007: ================== END STATUS ================== [ 192.242262][T10689] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1903'. [ 192.366644][T10694] xt_l2tp: v2 sid > 0xffff: 262144 [ 192.427465][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1906'. [ 192.582138][T10706] netlink: 'syz.1.1909': attribute type 303 has an invalid length. [ 193.124747][T10739] Process accounting resumed [ 193.965980][T10802] x_tables: duplicate underflow at hook 3 [ 193.986931][ T5883] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 194.171345][ T5883] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 194.194768][ T5883] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 194.222982][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.258475][ T5883] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 194.314414][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.761409][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.794662][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.821342][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.837295][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 194.849008][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.874315][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.893308][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.909874][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.926796][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.943289][T10864] x_tables: duplicate entry at hook 1 [ 194.946922][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.980502][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.991291][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.005054][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.021651][ T10] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 195.027085][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.040909][ T10] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 195.048581][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.072035][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.076435][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 195.097985][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.099595][ T10] usb 3-1: config 1 has no interface number 0 [ 195.112942][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 195.125623][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.132629][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.143723][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 195.143774][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d6.01 [ 195.143798][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.191902][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 195.195926][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 195.201440][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.226631][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.238001][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.252893][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.269527][ T5883] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 195.281689][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.326235][ T5883] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 195.332805][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.343209][ T5883] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 195.356445][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.366686][ T5883] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 195.391946][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.403023][ T10] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 195.403815][ T5883] usb 4-1: USB disconnect, device number 7 [ 195.417568][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.425015][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.432774][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 195.437426][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.452273][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.461602][T10886] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1968'. [ 195.467307][ T10] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 195.474256][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.489158][T10886] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1968'. [ 195.508139][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.516340][T10886] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1968'. [ 195.535123][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.557580][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.565054][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.592608][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.606061][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.625229][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.654617][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.670758][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.679430][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.692291][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.701152][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.710367][ T10] usb 3-1: USB disconnect, device number 13 [ 195.739845][T10364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 195.782882][T10364] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 196.023595][T10910] fido_id[10910]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 196.046217][T10920] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1974'. [ 196.083622][T10920] 0·: renamed from hsr0 (while UP) [ 196.135482][ T30] audit: type=1326 audit(1746755995.299:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10926 comm="syz.1.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 196.147253][T10920] 0·: entered allmulticast mode [ 196.197423][ T30] audit: type=1326 audit(1746755995.299:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10926 comm="syz.1.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 196.213608][T10920] hsr_slave_0: entered allmulticast mode [ 196.235138][T10920] hsr_slave_1: entered allmulticast mode [ 196.242452][ T30] audit: type=1326 audit(1746755995.359:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10926 comm="syz.1.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 196.256188][T10920] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 196.356487][ T30] audit: type=1326 audit(1746755995.359:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10926 comm="syz.1.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 196.461675][ T30] audit: type=1326 audit(1746755995.359:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10926 comm="syz.1.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 196.821826][T10962] cgroup: subsys name conflicts with all [ 197.330392][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'. [ 197.332173][T11001] netlink: 'syz.2.2005': attribute type 11 has an invalid length. [ 197.370160][T11001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2005'. [ 197.547320][T11010] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 197.564496][T11013] netlink: 'syz.2.2009': attribute type 4 has an invalid length. [ 197.614024][T11013] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2009'. [ 197.700896][T11013] : renamed from bond0 (while UP) [ 198.024016][T11041] vivid-003: disconnect [ 198.034596][T11040] vivid-003: reconnect [ 199.091889][T11102] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2042'. [ 199.186935][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 199.327106][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.356664][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 199.364125][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.413520][ T10] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 199.440955][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.456809][ T10] usb 1-1: Product: syz [ 199.461122][ T10] usb 1-1: Manufacturer: syz [ 199.465762][ T10] usb 1-1: SerialNumber: syz [ 199.507421][ T10] usb 1-1: config 0 descriptor?? [ 199.521458][ T10] usb 1-1: bad CDC descriptors [ 199.534368][ T9] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 199.547125][ T10] usb 1-1: unsupported MDLM descriptors [ 199.555706][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.584620][ T9] usb 2-1: config 0 has no interface number 0 [ 199.596612][ T9] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 199.624334][ T9] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 199.646460][ T9] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.646577][T10364] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 199.662358][ T9] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 199.680124][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.688660][ T9] usb 2-1: Product: syz [ 199.692939][ T9] usb 2-1: Manufacturer: syz [ 199.698557][ T9] usb 2-1: SerialNumber: syz [ 199.710792][ T9] usb 2-1: config 0 descriptor?? [ 199.744368][ T9] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 199.760130][ T5878] usb 1-1: USB disconnect, device number 10 [ 199.798419][ T9] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 199.818003][T10364] usb 3-1: Using ep0 maxpacket: 32 [ 199.829659][ T9] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 199.840211][T10364] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 199.876916][T10364] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 199.895470][T10364] usb 3-1: Product: syz [ 199.918559][T10364] usb 3-1: config 0 descriptor?? [ 199.953668][T10364] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 199.983337][T10364] gspca_stv06xx: st6422 sensor detected [ 200.004306][T10367] usb 2-1: USB disconnect, device number 9 [ 200.031565][T10367] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 200.046190][T10367] cyberjack 2-1:0.69: device disconnected [ 200.062723][T11169] netlink: 'syz.4.2057': attribute type 4 has an invalid length. [ 200.463131][T10364] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 200.522770][T10364] usb 3-1: USB disconnect, device number 14 [ 201.216652][T11246] netlink: 'syz.1.2080': attribute type 10 has an invalid length. [ 201.249800][T11246] team0: Device ipvlan1 failed to register rx_handler [ 201.387593][T11258] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2085'. [ 201.478065][ T30] audit: type=1400 audit(1746756000.639:85): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11264 comm="syz.1.2087" dest=20002 [ 201.636538][T11273] netlink: 'syz.3.2090': attribute type 8 has an invalid length. [ 202.265030][T11316] dlm: no locking on control device [ 202.302652][T11299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.343571][T11299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.394629][T11319] block device autoloading is deprecated and will be removed. [ 202.494090][T11299] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.508236][T11299] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.519641][T11299] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.531206][T11299] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.921537][T11341] x_tables: duplicate entry at hook 2 [ 203.015768][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2117'. [ 203.072785][T11349] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 203.577054][T11385] kAFS: unparsable volume name [ 203.685856][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2134'. [ 203.789344][T11402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2135'. [ 204.192229][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 204.220306][T11431] netlink: 'syz.2.2147': attribute type 2 has an invalid length. [ 204.243538][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2147'. [ 204.252354][T11426] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 204.299135][T11426] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 204.353415][T11431] : entered promiscuous mode [ 204.699189][T11461] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 204.932155][T11477] xt_TCPMSS: Only works on TCP SYN packets [ 205.146461][ T5883] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 205.242196][T11501] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2173'. [ 205.252561][T11501] bond_slave_0: entered promiscuous mode [ 205.258615][T11501] bond_slave_1: entered promiscuous mode [ 205.329898][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 205.357533][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 205.372259][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 205.430847][ T5883] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 205.447254][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.474405][ T5883] usb 1-1: Product: syz [ 205.491615][ T5883] usb 1-1: Manufacturer: syz [ 205.496320][ T5883] usb 1-1: SerialNumber: syz [ 205.530270][ T5883] usb 1-1: config 0 descriptor?? [ 205.733080][T11529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2183'. [ 206.256209][T11559] futex_wake_op: syz.2.2193 tries to shift op by 32; fix this program [ 206.470706][T11567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2196'. [ 206.778326][T11585] netlink: 'syz.1.2203': attribute type 3 has an invalid length. [ 207.209051][T11601] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 207.234948][T11601] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2209'. [ 207.253672][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2211'. [ 207.997494][T11646] xt_ecn: cannot match TCP bits for non-tcp packets [ 208.344521][T11665] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 208.456559][T11665] CIFS mount error: No usable UNC path provided in device string! [ 208.456559][T11665] [ 208.498010][T11671] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2236'. [ 208.536830][T11665] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 208.574011][T11675] kAFS: unable to lookup cell ' [ 208.574011][T11675] >.€·?](<â›' [ 208.574011][T11675] Ø¡—§P!×0Ä^O¹œ[àÆZéøvMTölÆAèÉß/H=9.äÜb>9ðF9ºÙ*‰ŒmªTS¶û' [ 208.741715][ T30] audit: type=1326 audit(1746756007.909:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11680 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 208.821706][ T30] audit: type=1326 audit(1746756007.929:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11680 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 208.906613][ T30] audit: type=1326 audit(1746756008.009:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11680 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 208.996515][ T30] audit: type=1326 audit(1746756008.009:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11680 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 209.096886][T11699] xt_TCPMSS: Only works on TCP SYN packets [ 209.102838][ T30] audit: type=1326 audit(1746756008.009:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11680 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 209.496598][T10367] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 209.727278][T10367] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.756535][T10367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.764712][T10367] usb 4-1: Product: syz [ 209.835023][T10367] usb 4-1: Manufacturer: syz [ 209.856478][T10367] usb 4-1: SerialNumber: syz [ 209.909902][T10367] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 209.957288][T11743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2261'. [ 209.997668][T10364] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 210.016127][T11743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2261'. [ 210.052614][T11743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2261'. [ 210.384436][T11743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2261'. [ 210.444050][T11743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2261'. [ 210.490278][T11743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2261'. [ 211.497004][T10365] usb 4-1: USB disconnect, device number 8 [ 211.503059][T10364] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 211.577358][T10364] ath9k_htc: Failed to initialize the device [ 211.673702][T10365] usb 4-1: ath9k_htc: USB layer deinitialized [ 212.184598][T11823] Unsupported ieee802154 address type: 0 [ 212.611633][T11842] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2291'. [ 212.649432][T11842] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2291'. [ 212.935473][T11858] overlay: Unknown parameter 'y^\@\+\' [ 213.197707][T11874] netlink: 512 bytes leftover after parsing attributes in process `syz.1.2305'. [ 213.730542][T11905] netlink: 'syz.4.2315': attribute type 1 has an invalid length. [ 213.957607][T11915] Cannot find add_set index 2 as target [ 214.110096][T11926] netlink: 616 bytes leftover after parsing attributes in process `syz.1.2324'. [ 214.830585][T11962] syz.4.2336: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 214.908970][T11962] CPU: 0 UID: 0 PID: 11962 Comm: syz.4.2336 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 214.909021][T11962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 214.909038][T11962] Call Trace: [ 214.909046][T11962] [ 214.909060][T11962] dump_stack_lvl+0x189/0x250 [ 214.909098][T11962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.909127][T11962] ? __pfx__printk+0x10/0x10 [ 214.909159][T11962] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 214.909192][T11962] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 214.909232][T11962] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 214.909267][T11962] warn_alloc+0x214/0x310 [ 214.909295][T11962] ? __pfx_warn_alloc+0x10/0x10 [ 214.909315][T11962] ? kasan_save_track+0x4f/0x80 [ 214.909343][T11962] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 214.909372][T11962] ? xskq_create+0x56/0x170 [ 214.909395][T11962] ? __x64_sys_setsockopt+0x18b/0x220 [ 214.909419][T11962] ? do_syscall_64+0xf6/0x210 [ 214.909441][T11962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.909475][T11962] __vmalloc_node_range_noprof+0x125/0x12c0 [ 214.909528][T11962] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.909553][T11962] ? __kasan_kmalloc+0x93/0xb0 [ 214.909588][T11962] vmalloc_user_noprof+0x74/0x80 [ 214.909608][T11962] ? xskq_create+0xbf/0x170 [ 214.909629][T11962] xskq_create+0xbf/0x170 [ 214.909654][T11962] xsk_init_queue+0xb0/0x110 [ 214.909679][T11962] xsk_setsockopt+0x43f/0x710 [ 214.909703][T11962] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.909726][T11962] ? __lock_acquire+0xaac/0xd20 [ 214.909760][T11962] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 214.909782][T11962] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.909803][T11962] do_sock_setsockopt+0x257/0x3e0 [ 214.909832][T11962] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 214.909854][T11962] ? __fget_files+0x2a/0x420 [ 214.909890][T11962] ? __fget_files+0x3a0/0x420 [ 214.909920][T11962] ? __fget_files+0x2a/0x420 [ 214.909960][T11962] __x64_sys_setsockopt+0x18b/0x220 [ 214.909992][T11962] do_syscall_64+0xf6/0x210 [ 214.910018][T11962] ? clear_bhb_loop+0x45/0xa0 [ 214.910043][T11962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.910063][T11962] RIP: 0033:0x7fab7b18e969 [ 214.910094][T11962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.910112][T11962] RSP: 002b:00007fab7c077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.910135][T11962] RAX: ffffffffffffffda RBX: 00007fab7b3b5fa0 RCX: 00007fab7b18e969 [ 214.910150][T11962] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 214.910164][T11962] RBP: 00007fab7b210ab1 R08: 0000000000000052 R09: 0000000000000000 [ 214.910177][T11962] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.910190][T11962] R13: 0000000000000000 R14: 00007fab7b3b5fa0 R15: 00007ffec2189188 [ 214.910230][T11962] [ 214.910243][T11962] Mem-Info: [ 215.236471][T11962] active_anon:260 inactive_anon:5739 isolated_anon:0 [ 215.236471][T11962] active_file:5296 inactive_file:35955 isolated_file:0 [ 215.236471][T11962] unevictable:768 dirty:327 writeback:0 [ 215.236471][T11962] slab_reclaimable:9975 slab_unreclaimable:102191 [ 215.236471][T11962] mapped:29957 shmem:1362 pagetables:1009 [ 215.236471][T11962] sec_pagetables:0 bounce:0 [ 215.236471][T11962] kernel_misc_reclaimable:0 [ 215.236471][T11962] free:1340802 free_pcp:359 free_cma:0 [ 215.281749][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.367359][T11962] Node 0 active_anon:1040kB inactive_anon:22756kB active_file:20980kB inactive_file:143820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119828kB dirty:1304kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11244kB pagetables:3736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 215.401054][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.447334][T11980] xt_TCPMSS: Only works on TCP SYN packets [ 215.476092][T11962] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 215.507825][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.588362][T11962] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.615460][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.680677][T11988] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2348'. [ 215.702276][T11962] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 215.742851][T11962] Node 0 DMA32 free:1438464kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:1036kB inactive_anon:22952kB active_file:20896kB inactive_file:143808kB unevictable:1536kB writepending:1304kB present:3129332kB managed:2564600kB mlocked:0kB bounce:0kB free_pcp:1364kB local_pcp:740kB free_cma:0kB [ 215.851387][T11962] lowmem_reserve[]: 0 0 0 0 0 [ 215.856204][T11962] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:84kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 215.882888][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.946488][T11962] lowmem_reserve[]: 0 0 0 0 0 [ 215.995798][T11962] Node 1 Normal free:3910500kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.024688][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.037646][T12006] netlink: 'syz.1.2354': attribute type 1 has an invalid length. [ 216.066513][ T5883] iguanair 1-1:0.0: failed to get version [ 216.096758][ T5883] iguanair 1-1:0.0: probe with driver iguanair failed with error -110 [ 216.101412][T11962] lowmem_reserve[]: 0 0 0 0 0 [ 216.157283][ T5883] usb 1-1: USB disconnect, device number 11 [ 216.158457][T11962] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.251407][T11962] Node 0 DMA32: 15*4kB (UME) 12*8kB (UME) 9*16kB (UME) 247*32kB (UME) 107*64kB (UME) 87*128kB (UME) 53*256kB (UME) 26*512kB (UME) 14*1024kB (U) 5*2048kB (UME) 332*4096kB (UM) = 1437516kB [ 216.339407][T11962] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 216.368289][T11962] Node 1 Normal: 205*4kB (UME) 52*8kB (UME) 47*16kB (UME) 227*32kB (UME) 99*64kB (UME) 23*128kB (UME) 15*256kB (UME) 10*512kB (UME) 2*1024kB (ME) 5*2048kB (UE) 945*4096kB (M) = 3910500kB [ 216.424794][T11962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.475350][T11962] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.485243][T12030] /dev/sg0: Can't lookup blockdev [ 216.504102][T11962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.514753][T11962] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.535017][T11962] 42609 total pagecache pages [ 216.540274][T11962] 0 pages in swap cache [ 216.544702][T11962] Free swap = 124996kB [ 216.549326][T11962] Total swap = 124996kB [ 216.553605][T11962] 2097051 pages RAM [ 216.563162][T11962] 0 pages HighMem/MovableOnly [ 216.576518][T11962] 424242 pages reserved [ 216.586702][T11962] 0 pages cma reserved [ 216.684830][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 216.699325][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2366'. [ 217.135116][T12096] kAFS: No cell specified [ 217.505337][T12119] trusted_key: encrypted_key: master key parameter '' is invalid [ 218.024625][T12156] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2395'. [ 218.078778][ T30] audit: type=1326 audit(1746756017.239:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12157 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 218.187220][ T30] audit: type=1326 audit(1746756017.239:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12157 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 218.246766][T10367] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 218.274664][ T30] audit: type=1326 audit(1746756017.279:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12157 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 218.336099][T12176] netlink: 'syz.0.2399': attribute type 5 has an invalid length. [ 218.369894][T12179] tmpfs: Bad value for 'mpol' [ 218.376552][ T30] audit: type=1326 audit(1746756017.279:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12157 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 218.436460][T10367] usb 5-1: Using ep0 maxpacket: 16 [ 218.446086][T10367] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 218.460402][T10367] usb 5-1: config 0 has no interface number 0 [ 218.470128][ T30] audit: type=1326 audit(1746756017.279:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12157 comm="syz.0.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 218.501353][T10367] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 218.556295][T10367] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 218.565465][T10367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.630619][T10367] usb 5-1: Product: syz [ 218.637304][T10367] usb 5-1: Manufacturer: syz [ 218.642037][T10367] usb 5-1: SerialNumber: syz [ 218.678184][T10367] usb 5-1: config 0 descriptor?? [ 219.066579][ T5883] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 219.130219][T10367] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 219.178308][T10367] usb 5-1: USB disconnect, device number 2 [ 219.236605][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 219.244350][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 219.282109][ T5883] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 219.293115][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.315755][ T5883] usb 1-1: Product: syz [ 219.325013][ T5883] usb 1-1: Manufacturer: syz [ 219.344878][ T5883] usb 1-1: SerialNumber: syz [ 219.384198][ T5883] usb 1-1: config 0 descriptor?? [ 219.410723][ T5883] hub 1-1:0.0: bad descriptor, ignoring hub [ 219.424672][ T5883] hub 1-1:0.0: probe with driver hub failed with error -5 [ 219.462665][ T5883] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 220.404431][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2434'. [ 220.707019][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 221.455310][ T30] audit: type=1326 audit(1746756020.619:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12370 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 221.525549][ T30] audit: type=1326 audit(1746756020.619:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12370 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 221.608452][ T30] audit: type=1326 audit(1746756020.659:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12370 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 221.727504][ T30] audit: type=1326 audit(1746756020.659:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12370 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 221.782663][ T30] audit: type=1326 audit(1746756020.659:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12370 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 222.018627][T12411] overlay: Bad value for 'workdir' [ 222.056546][T10365] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 222.136563][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 222.228862][T10365] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.239030][T10365] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.253323][T10365] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.262602][T10365] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.277217][T10365] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 222.288581][T10365] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.307713][ T5981] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 222.326431][T10365] usb 2-1: Product: syz [ 222.338294][T10365] usb 2-1: Manufacturer: syz [ 222.341981][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 222.343247][ T5981] usb 1-1: device reset changed ep0 maxpacket size! [ 222.378213][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 222.389557][T10365] cdc_wdm 2-1:1.0: skipping garbage [ 222.396507][T10365] cdc_wdm 2-1:1.0: skipping garbage [ 222.402453][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 222.416981][T10365] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 222.434734][T12434] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2473'. [ 222.438884][ T5883] usb 1-1: USB disconnect, device number 12 [ 222.452054][ T9] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 222.481460][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.489812][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2473'. [ 222.503467][ T9] usb 3-1: Product: syz [ 222.510132][ T9] usb 3-1: Manufacturer: syz [ 222.530732][ T9] usb 3-1: SerialNumber: syz [ 222.549495][ T9] usb 3-1: config 0 descriptor?? [ 222.674559][ T5878] usb 2-1: USB disconnect, device number 10 [ 222.678161][ T5883] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 222.862313][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 222.880366][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.911115][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.925550][ T5883] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 222.935992][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.966748][ T5883] usb 1-1: config 0 descriptor?? [ 222.983264][ T5883] hub 1-1:0.0: USB hub found [ 223.188344][ T5883] hub 1-1:0.0: 4 ports detected [ 223.382458][T12488] Cannot find del_set index 3 as target [ 223.404082][ T5883] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 223.425859][ T5883] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 223.474376][ T5883] usbhid 1-1:0.0: can't add hid device: -71 [ 223.495532][ T5883] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 223.557697][ T5883] usb 1-1: USB disconnect, device number 13 [ 223.861534][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2493'. [ 223.896237][ T5883] IPVS: starting estimator thread 0... [ 223.956273][T12521] binder: 12520:12521 ioctl 4018620d 0 returned -22 [ 224.007826][T12519] IPVS: using max 27 ests per chain, 64800 per kthread [ 224.177630][T12528] veth1_to_team: entered promiscuous mode [ 224.204535][T12528] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 224.824468][T12563] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2510'. [ 224.896862][T12565] netlink: 'syz.4.2512': attribute type 11 has an invalid length. [ 224.920499][T12565] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2512'. [ 225.221288][T12584] xt_connbytes: Forcing CT accounting to be enabled [ 225.252783][T12584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.045859][T12628] ceph: Bad value for 'source' [ 226.197433][T12632] netlink: 'syz.0.2539': attribute type 1 has an invalid length. [ 226.205415][T12632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2539'. [ 226.728345][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2548'. [ 227.524078][T12642] infiniband syz1: set down [ 227.580766][T12642] infiniband syz1: added ipvlan0 [ 227.604770][T12642] syz1: rxe_create_cq: returned err = -12 [ 227.624343][T12642] infiniband syz1: Couldn't create ib_mad CQ [ 227.646264][T12642] infiniband syz1: Couldn't open port 1 [ 227.769842][T12642] RDS/IB: syz1: added [ 227.774501][T12642] smc: adding ib device syz1 with port count 1 [ 227.843418][T12642] smc: ib device syz1 port 1 has pnetid [ 228.102199][T12707] netlink: 'syz.3.2563': attribute type 4 has an invalid length. [ 228.180066][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'. [ 228.489860][T12728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2570'. [ 228.741602][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 229.388602][T12767] netlink: 'syz.1.2583': attribute type 2 has an invalid length. [ 229.424629][T12767] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2583'. [ 229.471255][T12767] nbd: must specify at least one socket [ 229.586536][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 229.632873][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2586'. [ 229.769012][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 229.806422][ T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 229.825355][ T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 229.853501][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.879583][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 229.926411][ T10] usb 4-1: config 1 has no interface number 0 [ 229.932683][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 229.998531][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.071267][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 230.102371][T12796] openvswitch: netlink: Key type 81 is out of range max 32 [ 230.273342][ T10] snd_usb_pod 4-1:1.1: set_interface failed [ 230.315968][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 230.317669][ T30] audit: type=1326 audit(1746756029.479:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 230.341215][ T10] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 230.344764][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.379191][ T30] audit: type=1326 audit(1746756029.479:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 230.455978][ T10] usb 4-1: USB disconnect, device number 9 [ 230.462137][ T30] audit: type=1326 audit(1746756029.519:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 230.512690][ T30] audit: type=1326 audit(1746756029.519:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 230.542807][ T30] audit: type=1326 audit(1746756029.519:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 230.946897][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2603'. [ 231.046542][T12838] netlink: 'syz.3.2605': attribute type 10 has an invalid length. [ 231.132217][T12838] team0: Device hsr_slave_0 failed to register rx_handler [ 231.733873][T12868] process 'syz.4.2614' launched './file0' with NULL argv: empty string added [ 232.414366][T12899] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2625'. [ 232.744641][T12914] netlink: 'syz.4.2630': attribute type 10 has an invalid length. [ 232.832252][T12914] team0: Device hsr_slave_0 failed to register rx_handler [ 233.306550][ T5883] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 233.346893][ T9] iguanair 3-1:0.0: failed to get version [ 233.364625][ T9] iguanair 3-1:0.0: probe with driver iguanair failed with error -110 [ 233.414965][ T9] usb 3-1: USB disconnect, device number 15 [ 233.509708][ T5883] usb 2-1: config 0 has an invalid interface number: 138 but max is 0 [ 233.542321][T12949] IPv6: NLM_F_CREATE should be specified when creating new route [ 233.554672][ T5883] usb 2-1: config 0 has no interface number 0 [ 233.580298][ T5883] usb 2-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 233.622021][ T5883] usb 2-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 233.677503][ T5883] usb 2-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 233.725732][ T5883] usb 2-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 233.765199][ T5883] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 233.818864][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.841267][ T5883] usb 2-1: config 0 descriptor?? [ 233.841791][T12969] netlink: 'syz.0.2643': attribute type 15 has an invalid length. [ 233.887159][T10365] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 234.053630][T10365] usb 5-1: Using ep0 maxpacket: 16 [ 234.071429][T10365] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 234.092170][ T5883] usb 2-1: string descriptor 0 read error: -71 [ 234.102172][T10365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 234.126280][ T5883] usbtest 2-1:0.138: Linux gadget zero [ 234.144386][ T5883] usbtest 2-1:0.138: full-speed {control in/out bulk-out int-in} tests (+alt) [ 234.158778][T10365] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 234.182175][T10365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.194051][ T5883] usb 2-1: USB disconnect, device number 11 [ 234.207183][T10365] usb 5-1: Product: syz [ 234.221248][T10365] usb 5-1: Manufacturer: syz [ 234.235199][T10365] usb 5-1: SerialNumber: syz [ 234.261399][T10365] usb 5-1: config 0 descriptor?? [ 234.499451][ T5833] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 234.511215][T10365] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 234.542263][T10365] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71 [ 234.573855][T10365] usb 5-1: USB disconnect, device number 3 [ 234.598647][T13021] SET target dimension over the limit! [ 234.760329][T13029] openvswitch: netlink: VXLAN extension 311 out of range max 1 [ 234.990948][T13042] netlink: 'syz.2.2665': attribute type 30 has an invalid length. [ 235.326718][T10365] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 235.514924][T10365] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 235.536999][T10365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.576530][T10365] usb 4-1: config 0 descriptor?? [ 235.613301][T10365] cp210x 4-1:0.0: cp210x converter detected [ 235.882625][T13136] binder: 13135:13136 ioctl c018620c 2000000000c0 returned -1 [ 236.021269][T13142] netlink: 'syz.2.2688': attribute type 7 has an invalid length. [ 236.037988][T10365] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 236.057203][T10365] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 236.076462][T13142] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2688'. [ 236.092050][T10365] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 236.156461][T10365] usb 4-1: cp210x converter now attached to ttyUSB0 [ 236.205593][T10365] usb 4-1: USB disconnect, device number 10 [ 236.271284][T10365] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 236.294220][T10365] cp210x 4-1:0.0: device disconnected [ 236.592094][T13189] xt_TCPMSS: Only works on TCP SYN packets [ 236.685296][T13192] netlink: 'syz.4.2700': attribute type 1 has an invalid length. [ 236.718153][T13192] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2700'. [ 236.875663][T13211] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 236.996728][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 237.167155][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 237.176146][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 237.220209][ T9] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 237.240805][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.267016][ T9] usb 4-1: Product: syz [ 237.271253][ T9] usb 4-1: Manufacturer: syz [ 237.275919][ T9] usb 4-1: SerialNumber: syz [ 237.327461][ T9] usb 4-1: config 0 descriptor?? [ 237.368658][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 237.374671][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 237.428399][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 237.467938][T13249] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2719'. [ 238.530570][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2743'. [ 238.628088][ T5883] usb 4-1: USB disconnect, device number 11 [ 239.893858][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2776'. [ 240.173995][T13436] netlink: 'syz.4.2783': attribute type 11 has an invalid length. [ 240.355910][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2787'. [ 240.723445][T13468] futex_wake_op: syz.1.2798 tries to shift op by 32; fix this program [ 241.346757][T13509] QAT: Invalid ioctl 1073935638 [ 241.522811][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2818'. [ 241.900127][T13545] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 242.202991][T13566] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2835'. [ 242.408759][T13580] netlink: 'syz.0.2839': attribute type 1 has an invalid length. [ 242.435067][T13580] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2839'. [ 242.555426][T13588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2841'. [ 242.974373][T13616] Invalid option length (0) for dns_resolver key [ 243.055055][T13624] xt_ecn: cannot match TCP bits for non-tcp packets [ 243.268893][T10365] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 243.426776][T10365] usb 1-1: Using ep0 maxpacket: 16 [ 243.449904][T10365] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.03 [ 243.474656][T10365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 243.501241][T10365] usb 1-1: SerialNumber: syz [ 243.529392][T10365] usb 1-1: config 0 descriptor?? [ 243.742312][ T30] audit: type=1326 audit(1746756042.909:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13668 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cf18e969 code=0x7ffc0000 [ 243.770193][T13669] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 243.791379][T10365] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 243.806473][ T30] audit: type=1326 audit(1746756042.909:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13668 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cf18e969 code=0x7ffc0000 [ 243.830106][T13669] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 243.846548][T10365] usb 1-1: Detected SIO [ 243.872260][T10365] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 243.882307][ T30] audit: type=1326 audit(1746756042.949:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13668 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f12cf18e969 code=0x7ffc0000 [ 243.922185][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 243.945652][T10365] usb 1-1: USB disconnect, device number 14 [ 243.983731][T10365] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 243.986429][ T30] audit: type=1326 audit(1746756042.949:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13668 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cf18e969 code=0x7ffc0000 [ 244.031457][T10365] ftdi_sio 1-1:0.0: device disconnected [ 244.104035][ T30] audit: type=1326 audit(1746756042.949:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13668 comm="syz.2.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cf18e969 code=0x7ffc0000 [ 244.125644][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.150120][ T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 244.173733][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.203847][ T9] usb 4-1: config 0 descriptor?? [ 244.225525][ T9] sisusb 4-1:0.0: Invalid USB2VGA device [ 244.253534][ T9] sisusb 4-1:0.0: probe with driver sisusb failed with error -22 [ 244.448589][ T9] usb 4-1: USB disconnect, device number 12 [ 244.885363][ T30] audit: type=1326 audit(1746756044.039:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.4.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ff00000 [ 244.906976][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.931533][T13752] ±ÿ: renamed from team_slave_1 [ 244.939056][ T30] audit: type=1326 audit(1746756044.039:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.4.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ff00000 [ 244.986458][ T30] audit: type=1326 audit(1746756044.039:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.4.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ff00000 [ 245.008110][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.074763][ T30] audit: type=1326 audit(1746756044.039:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.4.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ff00000 [ 245.145232][ T30] audit: type=1326 audit(1746756044.039:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.4.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ff00000 [ 246.078384][T13816] vlan0: entered promiscuous mode [ 246.160257][T13820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.489826][T13840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2920'. [ 247.544998][T13904] netlink: 'syz.1.2948': attribute type 10 has an invalid length. [ 247.738892][T13918] program syz.1.2953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.082030][T13939] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2962'. [ 248.705850][T13983] netlink: 'syz.3.2983': attribute type 10 has an invalid length. [ 248.740100][T13983] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2983'. [ 248.786554][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 248.950320][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.984421][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.010172][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 249.052896][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.075949][ T10] usb 3-1: config 0 descriptor?? [ 249.125415][T14005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2987'. [ 249.144321][T14009] x_tables: duplicate underflow at hook 2 [ 249.555767][ T10] sunplus 0003:04FC:05D8.0003: hidraw0: USB HID v0.07 Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0 [ 249.713385][ T10] usb 3-1: USB disconnect, device number 16 [ 249.784759][T14051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3002'. [ 249.897732][T14065] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 250.565838][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3016'. [ 250.766586][ T5878] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 250.934624][ T5878] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 250.951954][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.962553][ T5878] usb 5-1: Product: syz [ 250.973069][ T5878] usb 5-1: Manufacturer: syz [ 250.985470][ T5878] usb 5-1: SerialNumber: syz [ 251.003923][ T5878] usb 5-1: config 0 descriptor?? [ 251.215909][T14128] netlink: 'syz.3.3029': attribute type 3 has an invalid length. [ 251.256819][ T5878] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 251.469256][T10367] usb 5-1: USB disconnect, device number 4 [ 251.525262][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 251.525282][ T30] audit: type=1326 audit(1746756050.689:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14148 comm="syz.3.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ebb8e969 code=0x7ffc0000 [ 251.609900][ T30] audit: type=1326 audit(1746756050.699:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14148 comm="syz.3.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f07ebb8e969 code=0x7ffc0000 [ 251.640951][ T30] audit: type=1326 audit(1746756050.699:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14148 comm="syz.3.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ebb8e969 code=0x7ffc0000 [ 251.716739][ T30] audit: type=1326 audit(1746756050.699:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14148 comm="syz.3.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ebb8e969 code=0x7ffc0000 [ 251.738323][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.751813][ T30] audit: type=1326 audit(1746756050.699:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14148 comm="syz.3.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f07ebb8e969 code=0x7ffc0000 [ 251.773397][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.864802][ T30] audit: type=1326 audit(1746756050.699:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14148 comm="syz.3.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ebb8e969 code=0x7ffc0000 [ 251.897036][ T30] audit: type=1326 audit(1746756050.699:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14148 comm="syz.3.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ebb8e969 code=0x7ffc0000 [ 252.409504][T14195] can0: slcan on ptm0. [ 252.549756][T14194] can0 (unregistered): slcan off ptm0. [ 253.164769][T14245] delete_channel: no stack [ 253.182503][T14244] delete_channel: no stack [ 253.937761][ T5878] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 254.046582][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 254.106396][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 254.125371][ T5878] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.152492][ T5878] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.168225][ T5878] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.174981][ T5878] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 254.197937][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.220131][ T5878] usb 2-1: config 0 descriptor?? [ 254.229211][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.263174][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 254.286455][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.314403][ T9] usb 5-1: config 0 descriptor?? [ 254.651941][ T5878] chicony 0003:04F2:1236.0004: unknown main item tag 0x1 [ 254.671808][ T30] audit: type=1400 audit(1746756053.829:190): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14333 comm="syz.2.3090" daddr=::ffff:172.20.20.4 [ 254.692657][ T5878] chicony 0003:04F2:1236.0004: unknown main item tag 0x0 [ 254.705699][ T5878] chicony 0003:04F2:1236.0004: hidraw0: USB HID v0.05 Device [HID 04f2:1236] on usb-dummy_hcd.1-1/input0 [ 254.783105][ T9] lg-g15 0003:046D:C222.0005: unbalanced collection at end of report description [ 254.827353][ T9] lg-g15 0003:046D:C222.0005: probe with driver lg-g15 failed with error -22 [ 254.841076][ T5878] usb 2-1: USB disconnect, device number 12 [ 254.847260][T14346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3092'. [ 254.847308][T14346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3092'. [ 254.847328][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'. [ 254.983977][ T9] usb 5-1: USB disconnect, device number 5 [ 255.071341][T14369] tmpfs: Cannot enable quota on remount [ 255.686453][ T5878] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 255.720344][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 255.751237][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.855238][ T5878] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.876412][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.897239][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 255.910431][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.922398][ T5878] usb 1-1: config 0 descriptor?? [ 255.935560][ T5878] cp210x 1-1:0.0: cp210x converter detected [ 255.942920][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.959462][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.973720][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 255.983566][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.004280][ T9] usb 3-1: config 0 descriptor?? [ 256.195506][T14440] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3119'. [ 256.369362][ T5878] usb 1-1: cp210x converter now attached to ttyUSB0 [ 256.438542][ T9] cypress 0003:04B4:07B1.0006: unknown main item tag 0x0 [ 256.445675][ T9] cypress 0003:04B4:07B1.0006: unknown main item tag 0x0 [ 256.473525][ T9] cypress 0003:04B4:07B1.0006: unknown main item tag 0x0 [ 256.482630][ T9] cypress 0003:04B4:07B1.0006: unknown main item tag 0x0 [ 256.490895][ T9] cypress 0003:04B4:07B1.0006: unknown main item tag 0x0 [ 256.526215][ T9] cypress 0003:04B4:07B1.0006: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.2-1/input0 [ 256.545638][T10365] usb 1-1: USB disconnect, device number 15 [ 256.574486][T10365] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 256.632028][T10365] cp210x 1-1:0.0: device disconnected [ 256.668950][T14473] tmpfs: Cannot enable quota on remount [ 256.690128][ T9] usb 3-1: USB disconnect, device number 17 [ 256.741424][T14463] fido_id[14463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 257.426488][T10365] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 257.493692][T14529] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3141'. [ 257.610840][T10365] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.638090][T10365] usb 1-1: config 0 interface 0 has no altsetting 0 [ 257.644788][T10365] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 257.666457][T10365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.687836][T10365] usb 1-1: config 0 descriptor?? [ 258.057164][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 258.132793][T10365] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 258.168250][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 258.230984][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.253288][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 258.283751][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.311593][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.348688][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.360721][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.372686][T10365] usb 1-1: USB disconnect, device number 16 [ 258.380995][T14542] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 258.398054][ T9] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 258.411745][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.437496][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.487668][ T9] usb 4-1: config 0 descriptor?? [ 258.692393][T14542] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 258.698981][T14542] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 258.710170][T14542] vhci_hcd vhci_hcd.0: Device attached [ 258.719476][T14603] vhci_hcd: connection closed [ 258.735797][ T3543] vhci_hcd: stop threads [ 258.757877][ T3543] vhci_hcd: release socket [ 258.762852][ T3543] vhci_hcd: disconnect device [ 258.805610][ T5878] usb 2-1: USB disconnect, device number 13 [ 258.958285][ T9] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 258.965854][ T9] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 258.977636][ T9] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 258.985018][ T9] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 258.994176][ T9] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 259.001655][ T9] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 259.013411][ T9] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 259.031888][ T9] dragonrise 0003:0079:0006.0008: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 259.056566][ T9] dragonrise 0003:0079:0006.0008: no inputs found [ 259.063065][ T9] dragonrise 0003:0079:0006.0008: force feedback init failed [ 259.185051][ T9] usb 4-1: USB disconnect, device number 13 [ 259.203645][T14639] CUSE: info not properly terminated [ 259.285689][T14650] netlink: 'syz.4.3162': attribute type 1 has an invalid length. [ 259.307980][T14650] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3162'. [ 260.166866][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 260.297291][T10365] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 260.347404][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.386091][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.414531][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 260.435605][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.449214][ T9] usb 4-1: config 0 descriptor?? [ 260.465068][T14715] autofs: Bad value for 'fd' [ 260.480779][T10365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 260.518439][T10365] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 260.545331][T10365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.588641][T10365] usb 1-1: config 0 descriptor?? [ 260.599450][T14691] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 260.834462][T14738] ip6tnl2: entered promiscuous mode [ 260.840359][T14738] ip6tnl2: entered allmulticast mode [ 260.848040][T14738] team0: Device ip6tnl2 is of different type [ 260.877184][ T9] creative-sb0540 0003:041E:3100.0009: item fetching failed at offset 2/5 [ 260.895779][ T9] creative-sb0540 0003:041E:3100.0009: parse failed [ 260.910142][ T9] creative-sb0540 0003:041E:3100.0009: probe with driver creative-sb0540 failed with error -22 [ 261.050246][T10365] a4tech 0003:09DA:022B.000A: unknown main item tag 0x5 [ 261.090439][ T9] usb 4-1: USB disconnect, device number 14 [ 261.090689][T10365] a4tech 0003:09DA:022B.000A: hidraw0: USB HID vd0.17 Device [HID 09da:022b] on usb-dummy_hcd.0-1/input0 [ 261.206114][ T30] audit: type=1326 audit(1746756060.369:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14767 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 261.264003][ T30] audit: type=1326 audit(1746756060.379:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14767 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 261.309878][ T5878] usb 1-1: USB disconnect, device number 17 [ 261.339695][ T30] audit: type=1326 audit(1746756060.379:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14767 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 261.386009][ T30] audit: type=1326 audit(1746756060.379:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14767 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 261.409731][ T30] audit: type=1326 audit(1746756060.379:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14767 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 261.431309][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.505116][ T30] audit: type=1326 audit(1746756060.379:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14767 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 261.552067][ T30] audit: type=1326 audit(1746756060.379:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14767 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 261.579101][T14791] mmap: syz.4.3197 (14791) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 261.946276][T14817] program syz.3.3204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.996824][T10367] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 262.158883][T10367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.170439][ C1] sd 0:0:1:0: [sda] tag#7015 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 262.180980][ C1] sd 0:0:1:0: [sda] tag#7015 CDB: Write(6) 0a 00 00 00 00 00 [ 262.196412][T10367] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.237146][T10367] usb 5-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 262.272723][T10367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.278032][T14831] hub 2-0:1.0: USB hub found [ 262.306242][T10367] usb 5-1: config 0 descriptor?? [ 262.311590][T14831] hub 2-0:1.0: 1 port detected [ 262.526078][T14844] sp0: Synchronizing with TNC [ 262.771507][T10367] maltron 0003:058F:9410.000B: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.4-1/input0 [ 262.946631][T10364] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 262.993895][T10367] usb 5-1: USB disconnect, device number 6 [ 263.113321][T10364] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.129178][T10364] usb 1-1: config 0 has no interface number 0 [ 263.138252][T10364] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 263.150038][T10364] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 263.161457][T10364] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 263.171251][T10364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.195596][T10364] usb 1-1: config 0 descriptor?? [ 263.209506][T14862] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 263.268977][T10364] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 263.512768][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 263.522648][ T5878] usb 1-1: USB disconnect, device number 18 [ 263.808887][ T30] audit: type=1400 audit(1746756062.979:198): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14934 comm="syz.2.3235" dest=10 [ 263.946982][T14941] »»»»»»XD_h3KI: renamed from lo [ 264.496465][ T5883] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 264.500334][T14975] netlink: 'syz.4.3250': attribute type 1 has an invalid length. [ 264.500359][T14975] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3250'. [ 264.551945][ T30] audit: type=1326 audit(1746756063.719:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14978 comm="syz.0.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 264.552002][ T30] audit: type=1326 audit(1746756063.719:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14978 comm="syz.0.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 264.653871][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 264.670535][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 264.677510][ T5883] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 264.697393][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.728808][ T5883] usb 4-1: config 0 descriptor?? [ 265.165015][ T5883] hid (null): report_id 4171247249 is invalid [ 265.208973][ T5883] vrc2 0003:07C0:1125.000C: fixing up VRC-2 report descriptor [ 265.247719][ T5883] input: HID 07c0:1125 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:07C0:1125.000C/input/input17 [ 265.441198][ T5883] vrc2 0003:07C0:1125.000C: input,hidraw0: USB HID v1.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.3-1/input0 [ 265.498331][ T5883] usb 4-1: USB disconnect, device number 15 [ 265.555550][T15031] sp0: Synchronizing with TNC [ 265.601672][T15024] [U] è` [ 265.687742][T15029] fido_id[15029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 266.105944][T15061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3277'. [ 266.460265][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3285'. [ 266.926556][ T5873] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 267.016732][T10364] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 267.121936][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.148244][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.179817][ T5873] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 267.187788][T10364] usb 1-1: Using ep0 maxpacket: 32 [ 267.190665][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.216695][T10364] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 267.217239][ T5873] usb 4-1: config 0 descriptor?? [ 267.251875][T10364] usb 1-1: config 0 interface 0 has no altsetting 0 [ 267.276997][T10364] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 267.303969][T10364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.335174][T10364] usb 1-1: config 0 descriptor?? [ 267.687010][ T5873] maltron 0003:058F:9410.000D: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.3-1/input0 [ 267.787432][T10364] asus 0003:0B05:17E0.000E: hidraw1: USB HID vff.fc Device [HID 0b05:17e0] on usb-dummy_hcd.0-1/input0 [ 267.820190][T10364] asus 0003:0B05:17E0.000E: Asus input not registered [ 267.871805][T10364] asus 0003:0B05:17E0.000E: probe with driver asus failed with error -12 [ 267.908565][ T5883] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 267.945128][ T5873] usb 4-1: USB disconnect, device number 16 [ 267.986144][T10364] usb 1-1: USB disconnect, device number 19 [ 268.060561][T15173] fido_id[15173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 268.088384][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.101530][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.127673][ T5883] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 268.154003][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.173154][ T5883] usb 3-1: SerialNumber: syz [ 268.395195][ T5883] usb 3-1: 0:2 : does not exist [ 268.406830][ T5878] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 268.442597][ T5883] usb 3-1: USB disconnect, device number 18 [ 268.492942][ T6662] udevd[6662]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.595666][T15235] Bluetooth: MGMT ver 1.23 [ 268.611066][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 268.655598][ T5878] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 268.667683][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.675749][ T5878] usb 2-1: Product: syz [ 268.686569][ T5878] usb 2-1: Manufacturer: syz [ 268.691233][ T5878] usb 2-1: SerialNumber: syz [ 268.717126][ T5878] usb 2-1: config 0 descriptor?? [ 268.729996][ T5878] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 268.746569][ T5878] usb 2-1: setting power ON [ 268.751815][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 268.798123][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 268.812534][ T5878] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 268.834852][ T5878] usb 2-1: media controller created [ 268.901284][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.934380][T15200] dvb-usb: bulk message failed: -22 (3/0) [ 268.946451][T15200] usb 2-1: gpio_write failed. [ 268.962032][T15200] cxusb: i2c wr: len=79 is too big! [ 268.962032][T15200] [ 268.977583][ T5878] usb 2-1: selecting invalid altsetting 6 [ 268.983583][ T5878] usb 2-1: digital interface selection failed (-22) [ 269.010218][ T5878] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 269.038063][ T5878] usb 2-1: setting power OFF [ 269.044707][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 269.059344][ T5878] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 269.094292][ T5878] (NULL device *): no alternate interface [ 269.205873][ T5878] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 269.249015][ T5878] usb 2-1: USB disconnect, device number 14 [ 269.755673][T15300] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 269.849079][T10364] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 270.018659][T10364] usb 3-1: Using ep0 maxpacket: 16 [ 270.029938][T10364] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.043296][T10364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.059516][T10364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.079710][T10364] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 270.106481][T10364] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.136875][T10364] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 270.146205][T10364] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 270.155112][T10364] usb 3-1: Manufacturer: syz [ 270.160218][T10367] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 270.182207][T10364] usb 3-1: config 0 descriptor?? [ 270.318011][T10367] usb 2-1: Using ep0 maxpacket: 16 [ 270.344403][T10367] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 270.377505][T10367] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.391719][T10367] usb 2-1: config 0 has no interface number 0 [ 270.415315][T10367] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 270.433083][T10367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.451602][T10367] usb 2-1: Product: syz [ 270.455835][T10367] usb 2-1: Manufacturer: syz [ 270.476891][T10367] usb 2-1: SerialNumber: syz [ 270.495549][T10367] usb 2-1: config 0 descriptor?? [ 270.546660][T10364] rc_core: IR keymap rc-hauppauge not found [ 270.558731][T10364] Registered IR keymap rc-empty [ 270.577298][T10364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.606586][T10364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.636443][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 270.645775][T15358] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 270.652216][T10364] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 270.658515][T15358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.685374][T10364] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 270.737091][T10364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.746375][T10367] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 270.769781][T10367] usb 2-1: No valid video chain found. [ 270.786840][T10364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.819659][T10364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.856553][T10364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.886664][T10364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.915607][T10364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.936549][T10364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.956653][T10364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.980094][T10364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.994868][T10367] usb 2-1: USB disconnect, device number 15 [ 271.016764][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 271.017198][T10364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 271.071703][T10364] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 271.084928][T10364] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 271.130936][T10364] usb 3-1: USB disconnect, device number 19 [ 271.181453][T15401] tipc: Started in network mode [ 271.187211][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 271.211992][T15401] tipc: Node identity ac14140f, cluster identity 4711 [ 271.221023][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 271.238681][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 271.257107][T15401] tipc: New replicast peer: 10.1.1.2 [ 271.277206][T15401] tipc: Enabled bearer , priority 10 [ 271.286273][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 271.299674][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 271.323774][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.337030][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 271.353916][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 271.376510][ T9] usb 5-1: Product: syz [ 271.383252][ T9] usb 5-1: Manufacturer: syz [ 271.396743][ T9] usb 5-1: SerialNumber: syz [ 271.419844][ T9] usb 5-1: config 0 descriptor?? [ 271.438077][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 271.461530][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 271.750204][ T9] usb 5-1: USB disconnect, device number 7 [ 271.774834][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 272.288627][ T9] tipc: Node number set to 2886997007 [ 272.929448][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 272.929468][ T30] audit: type=1326 audit(1746756072.099:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 273.026733][ T30] audit: type=1326 audit(1746756072.099:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 273.041686][T15498] netlink: 'syz.3.3394': attribute type 21 has an invalid length. [ 273.080156][ T30] audit: type=1326 audit(1746756072.099:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 273.138104][ T30] audit: type=1326 audit(1746756072.099:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 273.216623][ T30] audit: type=1326 audit(1746756072.099:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 273.268432][ T30] audit: type=1326 audit(1746756072.099:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 273.290683][ T30] audit: type=1326 audit(1746756072.099:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 273.354374][ T30] audit: type=1326 audit(1746756072.099:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 273.836678][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 274.016554][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 274.035803][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 274.064328][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 274.084896][ T9] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 274.110646][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.131187][ T9] usb 2-1: config 0 descriptor?? [ 274.235693][T15565] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3421'. [ 274.604758][ T9] asus 0003:0B05:17E0.000F: hidraw0: USB HID vff.fc Device [HID 0b05:17e0] on usb-dummy_hcd.1-1/input0 [ 274.636421][ T9] asus 0003:0B05:17E0.000F: Asus input not registered [ 274.670728][ T9] asus 0003:0B05:17E0.000F: probe with driver asus failed with error -12 [ 274.804940][ T9] usb 2-1: USB disconnect, device number 16 [ 274.896467][ T5883] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 275.068525][ T5883] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.090376][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 275.106800][ T5883] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 275.131353][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.167690][ T5883] usb 4-1: config 0 descriptor?? [ 275.602197][ T5883] cypress 0003:04B4:BCA1.0010: unknown main item tag 0x0 [ 275.610124][ T5883] cypress 0003:04B4:BCA1.0010: unknown main item tag 0x0 [ 275.626454][ T5883] cypress 0003:04B4:BCA1.0010: unknown main item tag 0x0 [ 275.644966][ T5883] cypress 0003:04B4:BCA1.0010: hidraw0: USB HID v1.05 Device [HID 04b4:bca1] on usb-dummy_hcd.3-1/input0 [ 275.819523][T10367] usb 4-1: USB disconnect, device number 17 [ 276.046466][ T5883] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 276.086453][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 276.208791][ T5883] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 276.221291][ T5883] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 276.230155][ T5883] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 276.246761][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 276.247573][ T5883] usb 3-1: config 0 has no interface number 0 [ 276.260012][ T9] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 276.263494][ T5883] usb 3-1: config 0 has no interface number 1 [ 276.275825][ T5883] usb 3-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 276.276448][ T9] usb 2-1: config 2 has no interface number 0 [ 276.292243][ T5883] usb 3-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 276.296440][ T9] usb 2-1: config 2 interface 31 has no altsetting 0 [ 276.311419][ T5883] usb 3-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 276.325140][ T5883] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 276.341253][ T5883] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 276.354422][ T5883] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 276.399654][ T5883] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 53 [ 276.425934][ T5883] usb 3-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 276.465281][ T5883] usb 3-1: config 0 interface 66 has no altsetting 0 [ 276.485994][ T5883] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 276.495417][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.514405][ T5883] usb 3-1: Product: syz [ 276.528861][ T5883] usb 3-1: Manufacturer: syz [ 276.540866][ T5883] usb 3-1: SerialNumber: syz [ 276.588111][ T5883] usb 3-1: config 0 descriptor?? [ 276.614240][ T5883] ljca 3-1:0.84: bulk endpoints not found [ 276.711058][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 276.736393][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.744465][ T9] usb 2-1: Product: syz [ 276.749446][ T9] usb 2-1: Manufacturer: syz [ 276.754092][ T9] usb 2-1: SerialNumber: syz [ 276.844728][ T5883] ljca 3-1:0.66: probe with driver ljca failed with error -71 [ 276.887435][ T5883] usb 3-1: USB disconnect, device number 20 [ 277.120293][T15709] block nbd3: not configured, cannot reconfigure [ 277.203373][ T9] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 277.208145][ T9] usb 2-1: USB disconnect, device number 17 [ 277.847502][T15755] ======================================================= [ 277.847502][T15755] WARNING: The mand mount option has been deprecated and [ 277.847502][T15755] and is ignored by this kernel. Remove the mand [ 277.847502][T15755] option from the mount to silence this warning. [ 277.847502][T15755] ======================================================= [ 278.121494][T15775] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 278.292396][T15786] usb usb1: usbfs: process 15786 (syz.1.3487) did not claim interface 63 before use [ 278.616793][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 278.760410][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'. [ 278.784538][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.796590][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.807256][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.838780][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.856437][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.877790][ T9] usb 2-1: config 0 descriptor?? [ 279.317698][ T9] plantronics 0003:047F:FFFF.0011: unbalanced collection at end of report description [ 279.334767][ T9] plantronics 0003:047F:FFFF.0011: parse failed [ 279.343334][ T9] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 279.516709][ T5873] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 279.546224][ T9] usb 2-1: USB disconnect, device number 18 [ 279.670108][ T30] audit: type=1326 audit(1746756078.839:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15854 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 279.702306][ T30] audit: type=1326 audit(1746756078.839:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15854 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 279.732960][ T5873] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 279.746508][ T5873] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 279.751345][ T30] audit: type=1326 audit(1746756078.839:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15854 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 279.772505][ T5873] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 279.791242][ T30] audit: type=1326 audit(1746756078.839:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15854 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 279.791296][ T30] audit: type=1326 audit(1746756078.839:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15854 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff126b8e969 code=0x7ffc0000 [ 279.910107][ T5873] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 279.925386][ T5873] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 279.949672][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.968590][ T5873] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 279.984491][ T5873] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 280.002308][ T5873] usb 5-1: Product: syz [ 280.010201][ T5873] usb 5-1: Manufacturer: syz [ 280.010231][ T5873] usb 5-1: SerialNumber: syz [ 280.017481][ T5873] usb 5-1: config 0 descriptor?? [ 280.018386][T15831] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 280.021315][ T5873] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 280.029361][ T5873] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 280.302709][ T5873] usb 5-1: USB disconnect, device number 8 [ 280.331724][ T5873] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 280.592647][T15911] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3528'. [ 281.742317][T15973] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3555'. [ 281.783772][T15977] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3557'. [ 282.155725][T16002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3565'. [ 282.165556][T16002] smc: net device bond0 applied user defined pnetid S [ 282.173124][ T5873] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 282.244161][T16009] overlayfs: disabling nfs_export due to verity=require [ 282.251551][T16009] overlayfs: missing 'lowerdir' [ 282.336456][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 282.348082][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.363731][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.374458][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 282.394941][ T5873] usb 2-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 282.405431][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.429122][ T5873] usb 2-1: config 0 descriptor?? [ 282.456811][ T5878] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 282.606474][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 282.613809][ T5878] usb 1-1: config 0 has no interfaces? [ 282.622560][ T5878] usb 1-1: New USB device found, idVendor=0a88, idProduct=c301, bcdDevice=82.d5 [ 282.632155][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.640682][ T5878] usb 1-1: Product: syz [ 282.645255][ T5878] usb 1-1: Manufacturer: syz [ 282.650577][ T5878] usb 1-1: SerialNumber: syz [ 282.660929][ T5878] usb 1-1: config 0 descriptor?? [ 282.882011][ T5883] usb 1-1: USB disconnect, device number 20 [ 283.075060][ T5873] usb 2-1: USB disconnect, device number 19 [ 283.810439][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3591'. [ 283.925394][T16084] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3594'. [ 284.733306][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3608'. [ 284.946616][T10364] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 285.116486][T10364] usb 2-1: Using ep0 maxpacket: 16 [ 285.130480][T10364] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 285.149998][T10364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.173457][T10364] usb 2-1: Product: syz [ 285.183618][T10364] usb 2-1: Manufacturer: syz [ 285.193754][T10364] usb 2-1: SerialNumber: syz [ 285.195859][T16389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3616'. [ 285.213088][T10364] r8152-cfgselector 2-1: Unknown version 0x0000 [ 285.229853][T10364] r8152-cfgselector 2-1: config 0 descriptor?? [ 285.241014][T16392] program syz.4.3617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.316739][ T5873] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 285.352001][T16397] option changes via remount are deprecated (pid=16395 comm=syz.2.3619) [ 285.478494][ T5873] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.492346][ T5873] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.504922][ T5873] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 285.506727][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 285.520294][ T5833] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 285.532109][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.550150][ T5873] hub 1-1:4.0: USB hub found [ 285.695233][T10364] r8152-cfgselector 2-1: USB disconnect, device number 20 [ 285.755169][ T5873] hub 1-1:4.0: 2 ports detected [ 285.761665][ T5873] usb 1-1: selecting invalid altsetting 1 [ 285.771033][ T5873] hub 1-1:4.0: Using single TT (err -22) [ 285.955947][ T5873] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 285.966578][ T5873] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 286.009228][ T5873] usb 1-1: USB disconnect, device number 21 [ 286.899370][T16483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3648'. [ 287.886691][ T5873] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 288.006618][ T5878] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 288.066673][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 288.089195][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 288.131742][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 288.166556][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 288.175895][ T5873] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 288.189392][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.206830][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.217526][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.236992][ T5873] usb 4-1: Product: syz [ 288.241452][ T5873] usb 4-1: Manufacturer: syz [ 288.249478][ T5878] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 288.263478][ T5873] usb 4-1: SerialNumber: syz [ 288.278170][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.289919][ T5873] usb 4-1: config 0 descriptor?? [ 288.347509][ T5878] usb 2-1: config 0 descriptor?? [ 288.587112][ T5873] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 288.622645][ C0] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 288.643619][ T5873] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 288.664814][ T5873] usb 4-1: USB disconnect, device number 18 [ 288.784662][ T5878] greenasia 0003:0E8F:0012.0013: item fetching failed at offset 0/3 [ 288.805499][ T5878] greenasia 0003:0E8F:0012.0013: parse failed [ 288.813339][ T5878] greenasia 0003:0E8F:0012.0013: probe with driver greenasia failed with error -22 [ 288.989800][ T5873] usb 2-1: USB disconnect, device number 21 [ 289.013670][T16602] netlink: 'syz.2.3686': attribute type 1 has an invalid length. [ 289.176748][T16618] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3689'. [ 289.196452][ T5883] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 289.359443][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 289.378883][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.401118][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.401787][T16632] netlink: 'syz.3.3695': attribute type 1 has an invalid length. [ 289.413685][ T5883] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 289.423431][T16632] NCSI netlink: No device for ifindex 0 [ 289.444709][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.475350][ T5883] usb 1-1: config 0 descriptor?? [ 289.653730][T16645] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3700'. [ 289.677572][T16645] tipc: Enabling of bearer rejected, media not registered [ 289.930244][ T5883] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 289.967748][T16662] Invalid source name [ 290.110193][ T5883] ft260 0003:0403:6030.0014: failed to retrieve chip version [ 290.110599][ T5883] ft260 0003:0403:6030.0014: probe with driver ft260 failed with error -71 [ 290.138579][ T5883] usb 1-1: USB disconnect, device number 22 [ 291.186613][ T30] audit: type=1326 audit(1746756090.349:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16727 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 291.249437][ T30] audit: type=1326 audit(1746756090.349:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16727 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 291.307396][ T30] audit: type=1326 audit(1746756090.379:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16727 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 291.335034][T16732] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3734'. [ 291.336182][ T30] audit: type=1326 audit(1746756090.379:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16727 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 291.407610][ T30] audit: type=1326 audit(1746756090.379:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16727 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 291.458317][ T30] audit: type=1326 audit(1746756090.379:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16727 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 291.556026][ T30] audit: type=1326 audit(1746756090.379:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16727 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 291.622321][ T30] audit: type=1326 audit(1746756090.379:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16727 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7b18e969 code=0x7ffc0000 [ 291.781197][ T30] audit: type=1326 audit(1746756090.949:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16752 comm="syz.1.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 291.872849][ T30] audit: type=1326 audit(1746756090.949:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16752 comm="syz.1.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdcf2f8e969 code=0x7ffc0000 [ 292.123796][T16773] bond0: option mode: unable to set because the bond device has slaves [ 292.429131][T16801] tipc: Enabling of bearer rejected, failed to enable media [ 292.865691][T16830] nbd: socks must be embedded in a SOCK_ITEM attr [ 293.871246][T16888] overlayfs: conflicting options: metacopy=off,verity=require [ 294.306458][ T5883] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 294.366970][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3807'. [ 294.381990][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3807'. [ 294.395352][T16929] netlink: 'syz.0.3807': attribute type 14 has an invalid length. [ 294.400944][T16913] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 294.409993][T16929] netlink: 'syz.0.3807': attribute type 12 has an invalid length. [ 294.468701][ T5883] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 294.490584][ T5883] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x82 is Bulk; changing to Interrupt [ 294.524331][ T5883] usb 3-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 294.554767][T16938] program syz.1.3808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.564262][ T5883] usb 3-1: config 1 interface 0 has no altsetting 0 [ 294.585885][ T5883] usb 3-1: string descriptor 0 read error: -22 [ 294.596946][T16941] vivid-001: disconnect [ 294.605816][ T5883] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.615270][T16940] vivid-001: reconnect [ 294.624947][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.673806][T16903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.690589][T16903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.725264][T16903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.751500][T16951] program syz.1.3812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.779602][ T5883] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 294.928995][T10364] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 294.932108][T16965] netlink: 'syz.4.3817': attribute type 2 has an invalid length. [ 294.944662][T16965] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 295.028396][ T5883] usb 3-1: USB disconnect, device number 21 [ 295.097670][T10364] usb 1-1: Using ep0 maxpacket: 32 [ 295.105296][T16977] tmpfs: Cannot change global quota limit on remount [ 295.111611][T10364] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 295.128225][T10364] usb 1-1: config 0 has no interface number 0 [ 295.142375][T10364] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 295.158362][T10364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.176500][T10364] usb 1-1: Product: syz [ 295.181910][T10364] usb 1-1: Manufacturer: syz [ 295.192188][T10364] usb 1-1: SerialNumber: syz [ 295.208129][T10364] usb 1-1: config 0 descriptor?? [ 295.321423][T16994] vivid-000: disconnect [ 295.329137][T16989] vivid-000: reconnect [ 295.367315][ T5878] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 295.537066][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 295.549170][ T5878] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 295.562062][ T5878] usb 4-1: config 2 has no interface number 0 [ 295.569382][ T5878] usb 4-1: config 2 interface 31 has no altsetting 0 [ 295.582853][ T5878] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 295.603403][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.616410][ T5878] usb 4-1: Product: syz [ 295.620631][ T5878] usb 4-1: Manufacturer: syz [ 295.635384][ T5878] usb 4-1: SerialNumber: syz [ 295.670341][ T5883] usb 1-1: USB disconnect, device number 23 [ 295.712444][ T5883] f81534a_ctrl 1-1:0.88: failed to set register 0x116: -19 [ 295.740621][ T5883] f81534a_ctrl 1-1:0.88: failed to enable ports: -19 [ 295.777060][T17020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3832'. [ 296.047004][T10364] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 296.092427][ T5878] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 296.115733][ T5878] usb 4-1: USB disconnect, device number 19 [ 296.210051][T10364] usb 3-1: Using ep0 maxpacket: 16 [ 296.229569][T10364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 296.249752][T10364] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 296.293553][T10364] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 296.307416][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 296.314920][T10364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.367532][T10364] usb 3-1: config 0 descriptor?? [ 296.792947][T10364] kovaplus 0003:1E7D:2D50.0015: item fetching failed at offset 0/3 [ 296.811777][T10364] kovaplus 0003:1E7D:2D50.0015: parse failed [ 296.825636][T10364] kovaplus 0003:1E7D:2D50.0015: probe with driver kovaplus failed with error -22 [ 297.016227][ T5878] usb 3-1: USB disconnect, device number 22 [ 297.726608][T10364] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 297.837865][T17154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3872'. [ 297.913394][T10364] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.935302][T10364] usb 1-1: config 0 interface 0 has no altsetting 0 [ 297.968652][T10364] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 297.987075][T10364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.987122][T10364] usb 1-1: Product: syz [ 297.987138][T10364] usb 1-1: Manufacturer: syz [ 297.987153][T10364] usb 1-1: SerialNumber: syz [ 298.025824][T17153] ================================================================== [ 298.033955][T17153] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 298.042583][T17153] Write of size 2880 at addr ffffc9001b398000 by task vivid-000-vid-c/17153 [ 298.051292][T17153] [ 298.053653][T17153] CPU: 1 UID: 0 PID: 17153 Comm: vivid-000-vid-c Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 298.053680][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 298.053693][T17153] Call Trace: [ 298.053700][T17153] [ 298.053708][T17153] dump_stack_lvl+0x189/0x250 [ 298.053741][T17153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.053765][T17153] ? __pfx__printk+0x10/0x10 [ 298.053795][T17153] ? __pfx__printk+0x10/0x10 [ 298.053829][T17153] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 298.053850][T17153] ? __virt_addr_valid+0xc3/0x540 [ 298.053875][T17153] print_report+0xb4/0x290 [ 298.053896][T17153] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 298.053918][T17153] kasan_report+0x118/0x150 [ 298.053948][T17153] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 298.053973][T17153] kasan_check_range+0x29a/0x2b0 [ 298.054001][T17153] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 298.054023][T17153] __asan_memcpy+0x40/0x70 [ 298.054045][T17153] tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 298.054099][T17153] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 298.054118][T17153] ? do_raw_spin_unlock+0x122/0x240 [ 298.054143][T17153] ? kvm_sched_clock_read+0x11/0x20 [ 298.054160][T17153] ? __lock_acquire+0xaac/0xd20 [ 298.054183][T17153] ? ktime_get+0x3e/0x1f0 [ 298.054200][T17153] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 298.054223][T17153] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.054242][T17153] vivid_thread_vid_cap+0x8d8/0x10d0 [ 298.054269][T17153] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 298.054284][T17153] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 298.054299][T17153] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.054317][T17153] ? __kthread_parkme+0x7b/0x200 [ 298.054331][T17153] ? __kthread_parkme+0x1a1/0x200 [ 298.054346][T17153] kthread+0x70e/0x8a0 [ 298.054364][T17153] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 298.054379][T17153] ? __pfx_kthread+0x10/0x10 [ 298.054395][T17153] ? __pfx_kthread+0x10/0x10 [ 298.054410][T17153] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.054424][T17153] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.054440][T17153] ? __pfx_kthread+0x10/0x10 [ 298.054454][T17153] ret_from_fork+0x4b/0x80 [ 298.054468][T17153] ? __pfx_kthread+0x10/0x10 [ 298.054484][T17153] ret_from_fork_asm+0x1a/0x30 [ 298.054512][T17153] [ 298.054518][T17153] [ 298.275895][T17153] The buggy address belongs to the virtual mapping at [ 298.275895][T17153] [ffffc9001b36b000, ffffc9001b399000) created by: [ 298.275895][T17153] vb2_vmalloc_alloc+0xef/0x340 [ 298.293801][T17153] [ 298.296144][T17153] Memory state around the buggy address: [ 298.301773][T17153] ffffc9001b397f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.309853][T17153] ffffc9001b397f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.317919][T17153] >ffffc9001b398000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 298.326064][T17153] ^ [ 298.330135][T17153] ffffc9001b398080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 298.338197][T17153] ffffc9001b398100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 298.346267][T17153] ================================================================== [ 298.387568][T10364] usb 1-1: config 0 descriptor?? [ 298.399686][T17153] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 298.406966][T17153] CPU: 1 UID: 0 PID: 17153 Comm: vivid-000-vid-c Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 298.419503][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 298.429587][T17153] Call Trace: [ 298.432872][T17153] [ 298.435814][T17153] dump_stack_lvl+0x99/0x250 [ 298.440431][T17153] ? __asan_memcpy+0x40/0x70 [ 298.445031][T17153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.450239][T17153] ? __pfx__printk+0x10/0x10 [ 298.454842][T17153] panic+0x2db/0x790 [ 298.458755][T17153] ? __pfx_panic+0x10/0x10 [ 298.463204][T17153] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 298.469104][T17153] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.475436][T17153] ? print_memory_metadata+0x314/0x400 [ 298.480899][T17153] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 298.486534][T17153] check_panic_on_warn+0x89/0xb0 [ 298.491480][T17153] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 298.497117][T17153] end_report+0x78/0x160 [ 298.501366][T17153] kasan_report+0x129/0x150 [ 298.505878][T17153] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 298.511551][T17153] kasan_check_range+0x29a/0x2b0 [ 298.516530][T17153] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 298.522198][T17153] __asan_memcpy+0x40/0x70 [ 298.526644][T17153] tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 298.532173][T17153] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 298.537923][T17153] ? do_raw_spin_unlock+0x122/0x240 [ 298.543147][T17153] ? kvm_sched_clock_read+0x11/0x20 [ 298.548351][T17153] ? __lock_acquire+0xaac/0xd20 [ 298.553229][T17153] ? ktime_get+0x3e/0x1f0 [ 298.557571][T17153] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 298.563740][T17153] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.568956][T17153] vivid_thread_vid_cap+0x8d8/0x10d0 [ 298.574258][T17153] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 298.579983][T17153] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 298.585877][T17153] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.592214][T17153] ? __kthread_parkme+0x7b/0x200 [ 298.597157][T17153] ? __kthread_parkme+0x1a1/0x200 [ 298.602203][T17153] kthread+0x70e/0x8a0 [ 298.606279][T17153] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 298.612005][T17153] ? __pfx_kthread+0x10/0x10 [ 298.616603][T17153] ? __pfx_kthread+0x10/0x10 [ 298.621194][T17153] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.626398][T17153] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.631599][T17153] ? __pfx_kthread+0x10/0x10 [ 298.636205][T17153] ret_from_fork+0x4b/0x80 [ 298.640625][T17153] ? __pfx_kthread+0x10/0x10 [ 298.645216][T17153] ret_from_fork_asm+0x1a/0x30 [ 298.650007][T17153] [ 298.653416][T17153] Kernel Offset: disabled [ 298.657777][T17153] Rebooting in 86400 seconds..