last executing test programs: 5m15.694968135s ago: executing program 0 (id=3463): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 5m15.528462182s ago: executing program 0 (id=3465): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x67, 0x1, 0x4, 0x5, 0x7f, 0x81}) 5m15.335066487s ago: executing program 0 (id=3467): r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) write$smackfs_access(r0, 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2, 0x2, 0x7fff) 5m15.155044415s ago: executing program 0 (id=3469): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xcdba42bc5aac744f) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5m14.065622957s ago: executing program 0 (id=3478): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) 5m14.009041344s ago: executing program 0 (id=3480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m58.933551995s ago: executing program 32 (id=3480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 43.818936766s ago: executing program 4 (id=7964): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0007006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) 43.574296544s ago: executing program 4 (id=7968): syz_create_resource$binfmt(0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)) 43.378990853s ago: executing program 4 (id=7973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 43.094959722s ago: executing program 4 (id=7979): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000000)=r1, 0x4) 42.917724758s ago: executing program 4 (id=7982): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 42.683293374s ago: executing program 4 (id=7986): r0 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0x136}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff0f614b180080"], 0xd) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 27.56874532s ago: executing program 33 (id=7986): r0 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0x136}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff0f614b180080"], 0xd) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.579864102s ago: executing program 5 (id=8317): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f00)=@newchain={0x2070, 0x64, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0x2}, {0x0, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_route={{0xa}, {0x2038, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}, @TCA_ROUTE4_ACT={0x530, 0x6, [@m_skbedit={0x80, 0xf, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffe}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x60, 0xfffffe5e, 0x10000001, 0x9, 0x6}}]}, {0x29, 0x6, "4b49c458a9b31e2bd282e958dd1219a15edfee853b4b85e7a2d4b4c7b6e02de0ca9ca0b447"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x11c, 0x18, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xaeb0c}]}, {0xe5, 0x6, "ad95711bde824105f87f33b150891c20d4394d5777d1e4aa2370847c35666c048cee0c84bfd916df99c78672969c0bf69634b31f30b3163c11898b3c738d54579f72a758b5e04caedcf2a515551a15eaa01f67c6cc13e9dda6317de7181d3cb40361b06119c72ece145f6b7ad6f53e8c298751428515a5d5a2bb74dfb17fdf7d1634dbf182edc580b25939dbfd605d580319180f30ec608239dab2137023f24cec966c86203b97737c02a32c6b3e93a120261c37b43d92f52242841e767bee148881a196b5a79433be3109eb6b3ee96f4e07651e92db152a88f2459b40d50ee1c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}, @m_connmark={0x128, 0xf, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x4, 0x8, 0xec}, 0x4cdf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xa1, 0x0, 0x0, 0xf0}, 0x9}}]}, {0xbd, 0x6, "fec9f81054adb9ea2378b5f78cb821b6703bafc474a03df269b20158a7886685e143bdc47d00a24439476d183973c053673c7dac08422466bb23551b3c1482ed5213dcc3171dde168bc32ffd2f403050050fdb104947a41f95870be7f80ca6e63d44e7c627abe7d56af017134156caeb743c3716b638fde528fea971abe5cee0e225e7bd931fb7320f342d0cc74e81a510be4a2bfa0e2439d7fa80ad56bf80a2936f377b7c1b03474599805d464972f839876988e54101da83"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x268, 0x1a, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x3, 0xfffffd2f, 0xc0}, @multicast2, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x616af3ed, 0xe, 0x1, 0x7ff}, @multicast2, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x8, 0x4, 0x6}, @loopback, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x9ce6, 0x20000000, 0x10001, 0x1}, @remote, @private=0x5}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xb, 0x7, 0x3, 0x1000}, @loopback, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x3, 0x9, 0x5}, @multicast1, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x80000001, 0x5, 0x5, 0xe13}, @empty, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xf1, 0x2, 0x5, 0x4}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0xff, 0x2, 0x81, 0x8000}, @empty, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xcbe6, 0x2, 0xd}, @empty, @rand_addr=0x64010100, 0xffffff00}}]}, {0xad, 0x6, "8af13a577f7cd96781c801e273e15b77bde66443620f6fab7236a8e9f3430bbee94d86facb83e0bb80192b03fad046ed99a14b0f48fa5f9288c82d08f09431583d7b5df1fb38ddcbba86fc48c9b9dc086e9a2adb97a7e92f9dcd86be124149515b0b0e7658aa890dfb472ac0da48951a670a5b453a29a6738bd3e3d02dc5cae68e347d8e1a0d30c57aa7b9b16686b3b6317184b083f9973f1e8dc5607f1546abf57c88060f44e0ca2c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0xfff3}}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_ACT={0x1adc, 0x6, [@m_bpf={0x58, 0x14, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x25, 0x6, "b392471b820865e61fba4d538bd9d3012443cd74d401b4c4e79017b0a3fa6554e4"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x1030, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0xa50, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0xa21, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x2070}, 0x1, 0x0, 0x0, 0x4004845}, 0x408c4) 14.356179038s ago: executing program 5 (id=8319): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000001000)=""/90, 0x5a) 13.679133899s ago: executing program 5 (id=8327): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 13.522360184s ago: executing program 5 (id=8329): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x1, 0x4000800) 13.426694921s ago: executing program 5 (id=8332): r0 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000200)='./file0\x00', r1) 13.133663276s ago: executing program 5 (id=8336): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000001880)={0x141000300, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10.214363838s ago: executing program 2 (id=8374): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x3) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 9.865951154s ago: executing program 2 (id=8379): r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8e) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 9.434892573s ago: executing program 2 (id=8384): setresuid(0xee01, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000000)=0xc) setresuid(0x0, r1, r1) 9.16300388s ago: executing program 2 (id=8387): eventfd2(0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000240)={0x0, 0x0, 0x0}) 8.845199636s ago: executing program 2 (id=8390): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, r0}) 8.396316525s ago: executing program 2 (id=8397): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x3, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x10, 0x3, 0x4, 0x5, 0x400, 0xffff0001}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x5, 0xfffffffb, 0x3, 0x1}}]}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001d4}, 0x2000cc00) 6.494690398s ago: executing program 3 (id=8418): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) socket$rxrpc(0x21, 0x2, 0xa) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 6.387795618s ago: executing program 3 (id=8420): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r0) exit(0xffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 5.365295516s ago: executing program 3 (id=8433): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 5.144847691s ago: executing program 3 (id=8435): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='attr\x00') openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 4.994798301s ago: executing program 3 (id=8438): unshare(0x28000600) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) dup(r0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 4.920051629s ago: executing program 3 (id=8440): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffffffffffff09, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 348.004092ms ago: executing program 1 (id=8507): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000180)=""/143, 0x8f}], 0x1) 255.078976ms ago: executing program 1 (id=8508): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 250.809608ms ago: executing program 1 (id=8509): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x6a980) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0xa, 0x50000, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0x7fffffff], [0x10000, 0x0, 0x9, 0x0, 0x73], [0x0, 0x0, 0x0, 0x1, 0x0, 0x7e, 0xffffffff, 0xffffffff]], '\x00', [{0x3}, {0xfffffffd, 0x3}, {0xffffffff}, {0x0, 0xa0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8fd5}, {0x7}, {0x4}, {0x0, 0xfffff0a4}, {0x0, 0xfffffffd}], '\x00', 0xa7}) 201.100352ms ago: executing program 1 (id=8510): socket$inet_smc(0x2b, 0x1, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r0, 0x402, 0x5) preadv(r0, 0x0, 0x0, 0x0, 0x0) 106.780128ms ago: executing program 1 (id=8511): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 1 (id=8512): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x81, 0x2) kernel console output (not intermixed with test programs): 456.632611][ T31] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 456.632638][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.678829][ T31] usb 3-1: config 0 descriptor?? [ 456.812371][T21454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.884792][T21454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.137234][ T31] waltop 0003:172F:0502.0029: hidraw0: USB HID v10.00 Device [HID 172f:0502] on usb-dummy_hcd.2-1/input0 [ 457.365039][ T10] usb 3-1: USB disconnect, device number 33 [ 458.342171][T21505] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5268'. [ 458.454462][T21527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5276'. [ 458.522600][T10279] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.526526][T10279] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.526575][T10279] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.526614][T10279] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.575708][ T5897] IPVS: starting estimator thread 0... [ 458.659105][T21586] IPVS: using max 8 ests per chain, 19200 per kthread [ 458.676326][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 458.825946][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 458.827362][ T10] usb 3-1: config 7 has an invalid interface number: 9 but max is 1 [ 458.827391][ T10] usb 3-1: config 7 has an invalid descriptor of length 36, skipping remainder of the config [ 458.827414][ T10] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 458.827438][ T10] usb 3-1: config 7 has no interface number 0 [ 458.827470][ T10] usb 3-1: config 7 interface 9 has no altsetting 0 [ 458.878767][ T10] usb 3-1: New USB device found, idVendor=19d2, idProduct=1124, bcdDevice=88.34 [ 458.878800][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.878822][ T10] usb 3-1: Product: syz [ 458.880313][ T10] usb 3-1: Manufacturer: syz [ 458.880373][ T10] usb 3-1: SerialNumber: syz [ 459.172315][ T10] usb 3-1: bad CDC descriptors [ 459.194747][ T10] usb 3-1: USB disconnect, device number 34 [ 459.455443][T21628] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 460.782329][T21702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5341'. [ 460.912685][T21710] netlink: 'syz.5.5343': attribute type 1 has an invalid length. [ 460.929085][ T5897] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 460.929290][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 461.080357][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 461.080516][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 461.098701][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.098736][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.098824][ T5897] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 461.110146][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.164192][ T10] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 461.164229][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.164252][ T10] usb 5-1: Product: syz [ 461.164268][ T10] usb 5-1: Manufacturer: syz [ 461.164344][ T10] usb 5-1: SerialNumber: syz [ 461.200713][ T5897] usb 3-1: config 0 descriptor?? [ 461.654527][ T10] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 461.654639][ T10] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 461.718115][ T5897] zydacron 0003:13EC:0006.002A: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 461.838455][ T5809] usb 3-1: USB disconnect, device number 35 [ 461.883563][ T1186] usb 5-1: USB disconnect, device number 39 [ 462.479215][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.082070][T21816] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5378'. [ 463.947677][T21857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5398'. [ 463.947706][T21857] netlink: 212 bytes leftover after parsing attributes in process `syz.5.5398'. [ 463.947756][T21857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5398'. [ 464.939348][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 464.999129][ T5897] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 465.099216][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 465.102076][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.102111][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.102153][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 465.102177][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.112297][ T10] usb 5-1: config 0 descriptor?? [ 465.161999][ T10] hub 5-1:0.0: USB hub found [ 465.172537][ T5897] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 465.172566][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.172696][ T5897] usb 6-1: config 0 has no interface number 0 [ 465.172959][ T5897] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 465.173158][ T5897] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.226206][ T5897] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 465.226300][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.226323][ T5897] usb 6-1: Product: syz [ 465.226337][ T5897] usb 6-1: Manufacturer: syz [ 465.226352][ T5897] usb 6-1: SerialNumber: syz [ 465.311081][ T5897] usb 6-1: config 0 descriptor?? [ 465.358067][ T10] hub 5-1:0.0: 1 port detected [ 465.548210][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 465.553713][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 465.569202][ T10] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 465.569229][ T10] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 465.578765][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 465.580639][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 465.660573][ T10] usb 5-1: USB disconnect, device number 40 [ 465.853047][ T37] audit: type=1326 audit(1771471735.499:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21966 comm="syz.2.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 465.856596][ T37] audit: type=1326 audit(1771471735.499:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21966 comm="syz.2.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 465.856943][ T37] audit: type=1326 audit(1771471735.499:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21966 comm="syz.2.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 465.857428][ T37] audit: type=1326 audit(1771471735.499:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21966 comm="syz.2.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 465.857723][ T37] audit: type=1326 audit(1771471735.499:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21966 comm="syz.2.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 465.858269][ T37] audit: type=1326 audit(1771471735.499:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21966 comm="syz.2.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 465.982587][ T37] audit: type=1326 audit(1771471735.559:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21966 comm="syz.2.5435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 466.320565][T21981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5440'. [ 467.260156][ T5809] kernel write not supported for file /uinput (pid: 5809 comm: kworker/1:3) [ 467.508090][T22029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5458'. [ 467.508119][T22029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5458'. [ 467.798635][ T5809] usb 6-1: USB disconnect, device number 11 [ 467.849085][ T809] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 468.003529][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 468.013220][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.013318][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.013385][ T809] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 468.013510][ T809] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 468.013574][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.101910][ T809] usb 5-1: config 0 descriptor?? [ 468.406359][T21972] syz.3.5437 (21972): drop_caches: 1 [ 468.545162][ T809] HID 045e:07da: Invalid code 65791 type 1 [ 468.629298][ T809] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002B/input/input27 [ 468.695959][ T809] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 468.745885][ T809] usb 5-1: USB disconnect, device number 41 [ 469.075218][T22096] fido_id[22096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 469.108986][ T5809] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 469.281107][ T5809] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 469.281245][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.307375][ T5809] usb 4-1: config 0 descriptor?? [ 469.318777][ T5809] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 469.737125][ T5809] gspca_sunplus: reg_w_riv err -71 [ 469.737247][ T5809] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 469.782684][ T5809] usb 4-1: USB disconnect, device number 34 [ 470.099025][ T1186] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 470.289529][ T1186] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 470.289560][ T1186] usb 3-1: config 0 has no interface number 0 [ 470.289607][ T1186] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.325082][ T1186] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 470.325114][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.325136][ T1186] usb 3-1: Product: syz [ 470.325152][ T1186] usb 3-1: Manufacturer: syz [ 470.325167][ T1186] usb 3-1: SerialNumber: syz [ 470.383400][ T1186] usb 3-1: config 0 descriptor?? [ 470.436450][ T1186] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 470.807785][T22174] syz.4.5495 (22174): drop_caches: 1 [ 470.823661][ T809] usb 3-1: USB disconnect, device number 36 [ 470.834027][ T809] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 471.095778][T22174] syz.4.5495 (22174): drop_caches: 1 [ 472.339097][T22284] usb usb9: usbfs: process 22284 (syz.4.5538) did not claim interface 0 before use [ 472.920482][T22312] sg_write: data in/out 139228/57 bytes for SCSI command 0x0-- guessing data in; [ 472.920482][T22312] program syz.5.5551 not setting count and/or reply_len properly [ 473.043702][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5554'. [ 473.642873][T22348] mkiss: ax0: crc mode is auto. [ 473.919416][ T1186] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 474.419241][ T1186] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 474.799073][ T1186] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 474.949002][ T1186] usb 5-1: Using ep0 maxpacket: 16 [ 474.957538][ T60] Bluetooth: hci3: unknown advertising packet type: 0x6f [ 474.957597][ T60] Bluetooth: hci3: Malformed LE Event: 0x02 [ 474.957781][ T1186] usb 5-1: unable to get BOS descriptor or descriptor too short [ 474.957868][ T1186] usb 5-1: too many configurations: 95, using maximum allowed: 8 [ 474.961107][ T1186] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 474.961147][ T1186] usb 5-1: can't read configurations, error -71 [ 476.168461][T22495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5627'. [ 476.218578][T22497] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 476.511540][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 476.662010][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 476.665313][ T10] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 476.665346][ T10] usb 5-1: config 0 has no interface number 0 [ 476.665396][ T10] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 476.665421][ T10] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 476.665448][ T10] usb 5-1: config 0 interface 196 has no altsetting 0 [ 476.681761][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 476.681842][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.681903][ T10] usb 5-1: Product: syz [ 476.681939][ T10] usb 5-1: Manufacturer: syz [ 476.681983][ T10] usb 5-1: SerialNumber: syz [ 476.758496][ T10] usb 5-1: config 0 descriptor?? [ 477.010684][ T10] ipheth 5-1:0.196: Unable to find endpoints [ 477.054253][ T10] usb 5-1: USB disconnect, device number 44 [ 477.429061][ T10] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 477.489021][ T1186] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 477.584412][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 477.584452][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.610658][ T10] usb 3-1: config 0 descriptor?? [ 477.643848][ T1186] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 477.643879][ T1186] usb 4-1: config 0 has no interface number 0 [ 477.643912][ T1186] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 477.643955][ T1186] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 477.643987][ T1186] usb 4-1: config 0 interface 255 has no altsetting 0 [ 477.644032][ T1186] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 477.644058][ T1186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.650313][ T10] cp210x 3-1:0.0: cp210x converter detected [ 477.731210][ T1186] usb 4-1: config 0 descriptor?? [ 477.943996][ T1186] usb 4-1: string descriptor 0 read error: -71 [ 477.945414][ T1186] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 478.060769][ T1186] usb 4-1: USB disconnect, device number 35 [ 478.133036][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 478.301745][ T10] usb 3-1: USB disconnect, device number 37 [ 478.327747][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 478.459500][ T10] cp210x 3-1:0.0: device disconnected [ 478.500707][T22592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 478.501093][T22592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 478.501373][T22592] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 478.501675][T22592] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 478.505674][T22592] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 478.505806][T22592] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 478.598105][T22592] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 478.708819][T22650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5668'. [ 479.759134][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 479.942804][T22705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5690'. [ 479.942830][T22705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5690'. [ 479.942858][T22705] netlink: 'syz.5.5690': attribute type 7 has an invalid length. [ 480.159378][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 480.209063][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 480.359286][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 480.363892][ T10] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 480.363926][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.363947][ T10] usb 4-1: Product: syz [ 480.363962][ T10] usb 4-1: Manufacturer: syz [ 480.363978][ T10] usb 4-1: SerialNumber: syz [ 480.414090][ T10] usb 4-1: config 0 descriptor?? [ 480.434796][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 480.434909][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 480.434926][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 480.435062][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 480.435079][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 480.497312][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 480.498124][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 480.498184][ T10] usb 4-1: media controller created [ 480.538027][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 480.569090][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 480.569326][ T60] Bluetooth: hci4: command 0x0405 tx timeout [ 480.569358][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 480.569389][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 480.604706][ T10] usb 4-1: selecting invalid altsetting 3 [ 480.604727][ T10] ttusb2: set interface to alts=3 failed [ 480.627085][T22707] dvb-usb: bulk message failed: -22 (8/0) [ 480.627102][T22707] ttusb2: there might have been an error during control message transfer. (rlen = 22, was 0) [ 480.627146][T22707] ttusb2: i2c transfer failed. [ 480.934178][ T10] DVB: Unable to find symbol tda10086_attach() [ 480.934194][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 480.935195][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 480.935217][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 480.935349][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 480.935364][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 480.935435][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 481.023127][ T10] usb 4-1: USB disconnect, device number 36 [ 481.101646][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 481.950486][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 482.099260][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 482.102006][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.102060][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 482.102085][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.150963][ T10] usb 4-1: config 0 descriptor?? [ 482.602004][ T10] hid-corsair-void 0003:1B1C:1B27.002C: unknown main item tag 0x0 [ 482.602055][ T10] hid-corsair-void 0003:1B1C:1B27.002C: unknown main item tag 0x0 [ 482.602082][ T10] hid-corsair-void 0003:1B1C:1B27.002C: unknown main item tag 0x0 [ 482.602110][ T10] hid-corsair-void 0003:1B1C:1B27.002C: unknown main item tag 0x0 [ 482.602137][ T10] hid-corsair-void 0003:1B1C:1B27.002C: unknown main item tag 0x0 [ 482.639065][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 482.661652][ T10] hid-corsair-void 0003:1B1C:1B27.002C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b27] on usb-dummy_hcd.3-1/input0 [ 482.807895][ T1186] usb 4-1: USB disconnect, device number 37 [ 482.808954][ T809] hid-corsair-void 0003:1B1C:1B27.002C: failed to request firmware (reason: -71) [ 482.827751][ T10] hid-corsair-void 0003:1B1C:1B27.002C: failed to request battery (reason: -71) [ 483.206449][T22863] fido_id[22863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 483.777005][T22926] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5765'. [ 483.777031][T22926] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5765'. [ 483.859142][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 484.019479][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.019530][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 484.019556][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.058097][ T10] usb 6-1: config 0 descriptor?? [ 484.289078][ T5897] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 484.442401][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 484.442516][ T5897] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 484.442544][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.488712][ T5897] usb 4-1: config 0 descriptor?? [ 484.515574][ T10] lg-g15 0003:046D:C222.002D: unbalanced delimiter at end of report description [ 484.531143][ T10] lg-g15 0003:046D:C222.002D: probe with driver lg-g15 failed with error -22 [ 484.659026][ T1186] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 484.704619][ T5809] usb 6-1: USB disconnect, device number 12 [ 484.719057][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 484.822996][ T1186] usb 3-1: Using ep0 maxpacket: 32 [ 484.826553][ T1186] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 484.826584][ T1186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.858297][ T1186] usb 3-1: config 0 descriptor?? [ 484.984531][ T5897] wacom 0003:056A:0094.002E: Using device in hidraw-only mode [ 485.027104][ T5897] wacom 0003:056A:0094.002E: hidraw0: USB HID v4.00 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 485.105604][ T5809] IPVS: starting estimator thread 0... [ 485.106984][ T1186] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 485.135814][ T1186] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 485.147654][ T1186] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 485.147816][ T1186] usb 3-1: media controller created [ 485.205954][ T5897] usb 4-1: USB disconnect, device number 38 [ 485.219064][T22989] IPVS: using max 8 ests per chain, 19200 per kthread [ 485.262840][ T1186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.336049][T22990] fido_id[22990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 485.528451][ T1186] DVB: Unable to find symbol dib7000p_attach() [ 485.528468][ T1186] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 485.629025][ T1186] rc_core: IR keymap rc-dib0700-rc5 not found [ 485.629047][ T1186] Registered IR keymap rc-empty [ 485.629371][ T1186] dvb-usb: could not initialize remote control. [ 485.629383][ T1186] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 485.700429][T23026] bpf: Bad value for 'gid' [ 485.719112][ T1186] usb 3-1: USB disconnect, device number 38 [ 485.917904][ T1186] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 486.829367][T23098] hugetlbfs: Bad value '%' for mount option 'size' [ 486.829367][T23098] [ 487.026893][T23113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5822'. [ 487.026919][T23113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5822'. [ 487.026947][T23113] netlink: 'syz.5.5822': attribute type 6 has an invalid length. [ 487.561459][ T10] kernel read not supported for file /vga_arbiter (pid: 10 comm: kworker/0:1) [ 488.669623][ T5809] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 488.829576][ T5809] usb 3-1: Using ep0 maxpacket: 8 [ 488.831859][ T5809] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 488.831900][ T5809] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 488.831952][ T5809] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 488.831990][ T5809] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 488.832018][ T5809] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 488.832047][ T5809] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 488.832076][ T5809] usb 3-1: config 168 interface 0 has no altsetting 0 [ 488.836292][ T5809] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 488.836330][ T5809] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 488.836371][ T5809] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 488.836400][ T5809] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 488.836427][ T5809] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 488.836456][ T5809] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 488.836483][ T5809] usb 3-1: config 168 interface 0 has no altsetting 0 [ 488.839444][ T5809] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 488.839536][ T5809] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 488.839654][ T5809] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 488.839723][ T5809] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 488.839782][ T5809] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 488.839849][ T5809] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 488.839910][ T5809] usb 3-1: config 168 interface 0 has no altsetting 0 [ 488.855843][ T5809] usb 3-1: string descriptor 0 read error: -22 [ 488.856243][ T5809] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 488.856302][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.920406][ T1186] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 489.046705][ T5809] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 489.080528][ T1186] usb 5-1: Using ep0 maxpacket: 8 [ 489.094615][ T1186] usb 5-1: unable to get BOS descriptor or descriptor too short [ 489.101149][ T1186] usb 5-1: config 7 has an invalid interface number: 58 but max is 0 [ 489.101216][ T1186] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 489.101269][ T1186] usb 5-1: config 7 has no interface number 0 [ 489.101371][ T1186] usb 5-1: config 7 interface 58 has no altsetting 0 [ 489.176210][ T1186] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 489.176239][ T1186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.176253][ T1186] usb 5-1: Product: syz [ 489.176262][ T1186] usb 5-1: Manufacturer: syz [ 489.176271][ T1186] usb 5-1: SerialNumber: syz [ 489.251196][ T5897] usb 3-1: USB disconnect, device number 39 [ 489.465689][ T1186] usb 5-1: USB disconnect, device number 45 [ 490.170381][T23266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5875'. [ 492.012189][T23357] syz.2.5916 uses old SIOCAX25GETINFO [ 492.532063][T23384] MPI: mpi too large (113288 bits) [ 492.921983][T23407] netlink: 'syz.2.5939': attribute type 4 has an invalid length. [ 493.039175][ T5897] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 493.192666][ T5897] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 493.193789][ T5897] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.193836][ T5897] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.193870][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.194922][ T5897] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.194970][ T5897] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.194996][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.196028][ T5897] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.196075][ T5897] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.196101][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.197242][ T5897] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.197296][ T5897] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.197327][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.313290][ T5897] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.313910][ T5897] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.313938][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.354955][ T5897] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.355009][ T5897] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.355034][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.360132][ T5897] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.360187][ T5897] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.360217][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.374170][ T5897] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 493.374217][ T5897] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 493.374242][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.378222][ T5897] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 493.378249][ T5897] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 493.378268][ T5897] usb 6-1: Product: syz [ 493.378282][ T5897] usb 6-1: Manufacturer: syz [ 493.378296][ T5897] usb 6-1: SerialNumber: syz [ 493.487702][ T5897] usb 6-1: config 0 descriptor?? [ 493.546587][ T5897] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 493.769701][ T5809] usb 6-1: USB disconnect, device number 13 [ 493.774198][ T5809] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 494.298981][ T5809] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 494.472141][ T5809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 494.481343][ T5809] usb 3-1: config 8 has an invalid interface number: 115 but max is 0 [ 494.481431][ T5809] usb 3-1: config 8 has no interface number 0 [ 494.481558][ T5809] usb 3-1: config 8 interface 115 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 494.481618][ T5809] usb 3-1: config 8 interface 115 altsetting 255 endpoint 0xB has an invalid bInterval 241, changing to 11 [ 494.481701][ T5809] usb 3-1: config 8 interface 115 has no altsetting 0 [ 494.541528][ T5809] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=d9.05 [ 494.541563][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.541585][ T5809] usb 3-1: Product: syz [ 494.541600][ T5809] usb 3-1: Manufacturer: syz [ 494.541616][ T5809] usb 3-1: SerialNumber: syz [ 494.885914][ T5809] usb 3-1: USB disconnect, device number 40 [ 496.245514][T23562] netlink: 'syz.4.5992': attribute type 27 has an invalid length. [ 496.273084][T23561] Invalid ELF header magic: != ELF [ 499.529032][ T5897] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 499.692077][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 499.693947][ T5897] usb 4-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 499.693975][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.725410][ T5897] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 499.725453][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.725475][ T5897] usb 4-1: Product: syz [ 499.725491][ T5897] usb 4-1: Manufacturer: syz [ 499.725506][ T5897] usb 4-1: SerialNumber: syz [ 500.008668][ T5897] usb 4-1: 0:2 : does not exist [ 500.038786][ T5897] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 500.146284][ T5897] usb 4-1: USB disconnect, device number 39 [ 500.181764][T23741] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 500.181764][T23741] [ 500.233684][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.861820][T23780] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6074'. [ 501.486499][T23820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6092'. [ 501.487306][T23820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6092'. [ 501.657078][T23827] sp0: Synchronizing with TNC [ 501.782060][T23840] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6098'. [ 501.782111][T23840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6098'. [ 502.276321][T23862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6105'. [ 502.276343][T23862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6105'. [ 502.276390][T23862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6105'. [ 502.729079][T23889] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6115'. [ 502.901431][T23896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6119'. [ 503.230372][T23908] team0: Device gtp0 is of different type [ 503.487694][T23928] netlink: 'syz.4.6130': attribute type 6 has an invalid length. [ 505.989006][ T809] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 506.141351][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.141388][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.141430][ T809] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= c.00 [ 506.141456][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.189993][ T809] usb 4-1: config 0 descriptor?? [ 506.620335][ T809] asus 0003:0B05:18C6.002F: ignoring exceeding usage max [ 506.645366][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.678324][ T809] asus 0003:0B05:18C6.002F: hidraw0: USB HID v0.06 Device [HID 0b05:18c6] on usb-dummy_hcd.3-1/input0 [ 506.678364][ T809] asus 0003:0B05:18C6.002F: Asus input not registered [ 506.700910][ T809] asus 0003:0B05:18C6.002F: probe with driver asus failed with error -12 [ 506.819980][ T5809] usb 4-1: USB disconnect, device number 40 [ 507.121267][T24129] __nla_validate_parse: 4 callbacks suppressed [ 507.121288][T24129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6203'. [ 507.121310][T24129] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 507.697142][T24157] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 507.894036][T24165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6218'. [ 508.319618][ T5809] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 508.414913][T24188] sctp: [Deprecated]: syz.5.6225 (pid 24188) Use of int in max_burst socket option. [ 508.414913][T24188] Use struct sctp_assoc_value instead [ 508.469662][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 508.474239][ T5809] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 508.474271][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.474292][ T5809] usb 4-1: Product: syz [ 508.474307][ T5809] usb 4-1: Manufacturer: syz [ 508.474321][ T5809] usb 4-1: SerialNumber: syz [ 508.526523][ T5809] r8152-cfgselector 4-1: Unknown version 0x0000 [ 508.526557][ T5809] r8152-cfgselector 4-1: config 0 descriptor?? [ 508.657620][T24200] use of bytesused == 0 is deprecated and will be removed in the future, [ 508.657633][T24200] use the actual size instead. [ 508.719643][ T1186] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 508.873423][ T1186] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 508.873458][ T1186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.873480][ T1186] usb 5-1: Product: syz [ 508.873495][ T1186] usb 5-1: Manufacturer: syz [ 508.873510][ T1186] usb 5-1: SerialNumber: syz [ 508.935039][ T1186] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 508.957228][ T809] r8152-cfgselector 4-1: USB disconnect, device number 41 [ 509.036709][ T5809] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 509.103775][T24221] netlink: 'syz.2.6233': attribute type 3 has an invalid length. [ 509.306885][ T37] audit: type=1326 audit(1771471778.949:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24227 comm="syz.2.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 509.307665][ T37] audit: type=1326 audit(1771471778.949:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24227 comm="syz.2.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 509.338079][ T37] audit: type=1326 audit(1771471778.959:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24227 comm="syz.2.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 509.338158][ T37] audit: type=1326 audit(1771471778.969:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24227 comm="syz.2.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 509.338266][ T37] audit: type=1326 audit(1771471778.979:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24227 comm="syz.2.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 509.338316][ T37] audit: type=1326 audit(1771471778.979:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24227 comm="syz.2.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 509.338424][ T37] audit: type=1326 audit(1771471778.979:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24227 comm="syz.2.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 509.338486][ T37] audit: type=1326 audit(1771471778.979:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24227 comm="syz.2.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde840c629 code=0x7ffc0000 [ 509.714956][ T809] usb 5-1: USB disconnect, device number 46 [ 510.163740][ T5809] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 510.163934][ T5809] ath9k_htc: Failed to initialize the device [ 510.164818][ T809] usb 5-1: ath9k_htc: USB layer deinitialized [ 510.731526][ T189] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.731581][ T189] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.731622][ T189] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.731661][ T189] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.961209][T24360] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6285'. [ 513.149661][T24423] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6312'. [ 514.959201][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 515.906407][T24527] netlink: 'syz.4.6359': attribute type 6 has an invalid length. [ 515.908002][T24527] netlink: 'syz.4.6359': attribute type 6 has an invalid length. [ 516.577688][T24561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6372'. [ 516.942025][T24581] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6382'. [ 516.959832][T24581] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6382'. [ 518.299843][ T5809] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 518.469698][ T5809] usb 6-1: Using ep0 maxpacket: 32 [ 518.471784][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.471817][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.471857][ T5809] usb 6-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 518.471882][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.488791][ T5809] usb 6-1: config 0 descriptor?? [ 518.669098][ T809] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 518.819114][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 518.821437][ T809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.821465][ T809] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 518.826119][ T809] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 518.826149][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.826169][ T809] usb 5-1: Product: syz [ 518.826184][ T809] usb 5-1: Manufacturer: syz [ 518.826197][ T809] usb 5-1: SerialNumber: syz [ 519.015014][ T5809] wacom 0003:056A:0016.0030: unknown main item tag 0x1 [ 519.110399][ T809] usb 5-1: 0:2 : does not exist [ 519.127969][ T809] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 519.164525][ T5809] usb 6-1: USB disconnect, device number 14 [ 519.236449][ T809] usb 5-1: USB disconnect, device number 47 [ 519.395296][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.434272][T24718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6426'. [ 519.434296][T24718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6426'. [ 519.535129][T24724] overlayfs: workdir and upperdir must be separate subtrees [ 519.699051][ T809] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 519.857239][ T809] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 519.857275][ T809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.857324][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 519.857372][ T809] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 519.857396][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.871315][ T809] usb 3-1: config 0 descriptor?? [ 519.931766][ T809] usb-storage 3-1:0.0: USB Mass Storage device detected [ 519.947031][ T809] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 520.107606][ T809] usb 3-1: USB disconnect, device number 41 [ 520.801116][T24799] gretap0: entered promiscuous mode [ 520.801479][T24799] vlan3: entered promiscuous mode [ 521.237388][T24821] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 521.402825][T24835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6466'. [ 521.553742][T24835] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 521.596394][T24835] bond1 (unregistering): Released all slaves [ 521.998799][T24922] netlink: 'syz.3.6478': attribute type 2 has an invalid length. [ 523.667001][T24950] wlan1 speed is unknown, defaulting to 1000 [ 526.191986][T25126] macvtap1: entered allmulticast mode [ 526.192737][T25126] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 526.583505][T25146] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6556'. [ 528.561877][T25263] program syz.5.6605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.779094][ T809] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 528.929294][ T809] usb 5-1: Using ep0 maxpacket: 8 [ 528.931202][ T809] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 528.934411][ T809] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 528.934440][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.934461][ T809] usb 5-1: Product: syz [ 528.934476][ T809] usb 5-1: Manufacturer: syz [ 528.934490][ T809] usb 5-1: SerialNumber: syz [ 529.000332][ T809] usb 5-1: config 0 descriptor?? [ 529.054439][ T809] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 529.054494][ T809] usb 5-1: setting power ON [ 529.054516][ T809] dvb-usb: bulk message failed: -22 (2/0) [ 529.085777][ T809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 529.100132][ T809] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 529.100206][ T809] usb 5-1: media controller created [ 529.146206][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.187532][ T809] usb 5-1: selecting invalid altsetting 6 [ 529.187557][ T809] usb 5-1: digital interface selection failed (-22) [ 529.187575][ T809] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 529.188766][ T809] usb 5-1: setting power OFF [ 529.188787][ T809] dvb-usb: bulk message failed: -22 (2/0) [ 529.220956][ T809] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 529.220979][ T809] (NULL device *): no alternate interface [ 529.244206][T25258] dvb-usb: bulk message failed: -22 (3/0) [ 529.244227][T25258] dvb-usb: bulk message failed: -22 (4/0) [ 529.244237][T25258] cxusb: i2c read failed [ 529.342297][ T809] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 529.346841][ T809] usb 5-1: USB disconnect, device number 48 [ 530.157652][ T37] audit: type=1800 audit(1771471799.799:317): pid=25357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.6637" name="bus" dev="tmpfs" ino=6284 res=0 errno=0 [ 531.409791][ T5809] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 531.562014][ T5809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 531.562070][ T5809] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 531.562096][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.648960][ T5809] usb 3-1: config 0 descriptor?? [ 532.086019][ T5809] hkems 0003:2006:0118.0031: unexpected long global item [ 532.086810][ T5809] hkems 0003:2006:0118.0031: parse failed [ 532.086884][ T5809] hkems 0003:2006:0118.0031: probe with driver hkems failed with error -22 [ 532.305909][ T809] usb 3-1: USB disconnect, device number 42 [ 533.048993][ T809] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 533.208550][ T809] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 533.208586][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.208609][ T809] usb 5-1: Product: syz [ 533.208625][ T809] usb 5-1: Manufacturer: syz [ 533.208641][ T809] usb 5-1: SerialNumber: syz [ 533.264757][ T809] usb 5-1: config 0 descriptor?? [ 533.288129][ T809] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 533.466395][T25532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6705'. [ 533.504201][ T809] gspca_stk1135: reg_w 0x2 err -71 [ 533.505270][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 533.505285][ T809] gspca_stk1135: Sensor write failed [ 533.505321][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 533.505331][ T809] gspca_stk1135: Sensor write failed [ 533.505375][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 533.505386][ T809] gspca_stk1135: Sensor read failed [ 533.505423][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 533.505433][ T809] gspca_stk1135: Sensor read failed [ 533.505441][ T809] gspca_stk1135: Detected sensor type unknown (0x0) [ 533.505480][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 533.505490][ T809] gspca_stk1135: Sensor read failed [ 533.505526][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 533.505535][ T809] gspca_stk1135: Sensor read failed [ 533.505570][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 533.505581][ T809] gspca_stk1135: Sensor write failed [ 533.505617][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 533.505627][ T809] gspca_stk1135: Sensor write failed [ 533.505722][ T809] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 533.630448][ T809] usb 5-1: USB disconnect, device number 49 [ 534.929552][ T5809] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 535.062094][T25617] bond0: (slave sit0): Error: Device type is different from other slaves [ 535.101749][ T5809] usb 6-1: Using ep0 maxpacket: 16 [ 535.122732][ T5809] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 535.122766][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.122787][ T5809] usb 6-1: Product: syz [ 535.122802][ T5809] usb 6-1: Manufacturer: syz [ 535.122817][ T5809] usb 6-1: SerialNumber: syz [ 535.161548][ T5809] usb 6-1: config 0 descriptor?? [ 535.176363][ T5809] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 535.586213][ T5809] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 535.790161][ T5809] usb 6-1: USB disconnect, device number 15 [ 535.830209][ T5809] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 535.831042][ T5809] visor 6-1:0.0: device disconnected [ 536.308485][T25667] digital: digital_start_poll: Unknown protocol [ 537.651103][T25746] Invalid ELF header magic: != ELF [ 540.043300][T25856] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6836'. [ 540.309095][ T809] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 540.461739][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 540.463786][ T809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.463853][ T809] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.463881][ T809] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.463908][ T809] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 540.463937][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 540.463972][ T809] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 540.463998][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.551209][ T809] usb 5-1: config 0 descriptor?? [ 541.006650][ T809] uclogic 0003:5543:0781.0032: item fetching failed at offset 5/7 [ 541.007462][ T809] uclogic 0003:5543:0781.0032: parse failed [ 541.007572][ T809] uclogic 0003:5543:0781.0032: probe with driver uclogic failed with error -22 [ 541.247884][ T5809] usb 5-1: USB disconnect, device number 50 [ 541.777969][T25954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6874'. [ 541.789320][ T5809] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 541.960998][ T5809] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 541.961079][ T5809] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 541.961106][ T5809] usb 3-1: config 0 interface 0 has no altsetting 0 [ 541.963511][ T5809] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 541.963542][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 541.963565][ T5809] usb 3-1: Product: syz [ 541.963580][ T5809] usb 3-1: Manufacturer: syz [ 541.963595][ T5809] usb 3-1: SerialNumber: syz [ 542.041268][ T5809] usb 3-1: config 0 descriptor?? [ 542.073359][ T5809] hub 3-1:0.0: bad descriptor, ignoring hub [ 542.073409][ T5809] hub 3-1:0.0: probe with driver hub failed with error -5 [ 542.077339][ T5809] usb 3-1: selecting invalid altsetting 0 [ 542.381283][ T5809] usb 3-1: USB disconnect, device number 43 [ 542.410285][ T5897] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 542.503352][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.536207][T25995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6884'. [ 542.603454][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.603486][ T5897] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 542.603534][ T5897] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 542.603551][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.614415][ T5897] usb 5-1: config 0 descriptor?? [ 542.672183][ T5897] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 542.672224][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 542.700744][ T5897] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 542.711714][ T5897] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 542.711853][ T5897] usb 5-1: media controller created [ 542.745201][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 542.892286][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 542.892493][ T5897] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 542.914938][ T5897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 542.956379][ T5897] dvb-usb: schedule remote query interval to 150 msecs. [ 542.956407][ T5897] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 542.985283][ T5897] usb 5-1: USB disconnect, device number 51 [ 543.119044][ T809] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 543.127878][ T5897] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 543.279908][ T809] usb 6-1: Using ep0 maxpacket: 8 [ 543.305503][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 543.305530][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.305547][ T809] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.305564][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 543.305584][ T809] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 543.305615][ T809] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 543.305632][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.387371][ T809] usb 6-1: config 0 descriptor?? [ 543.388411][T26016] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 543.655442][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.655532][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.655627][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.655705][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.655782][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.655859][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.655938][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656015][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656099][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656117][ C0] Bluetooth: hci1: Unexpected continuation: 1 bytes [ 543.656172][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656243][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656317][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656397][ T60] Bluetooth: hci1: unexpected event 0x01 length: 0 < 1 [ 543.656468][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656530][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656593][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656656][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656719][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656793][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656853][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.656918][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.658302][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.658390][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.658448][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.658503][ T60] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 543.861088][ T5809] usb 6-1: USB disconnect, device number 16 [ 543.872950][ T5814] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 544.389035][ T809] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 544.541576][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 544.544005][ T809] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.544039][ T809] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.548083][ T809] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 544.548114][ T809] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 544.548137][ T809] usb 3-1: Product: syz [ 544.548153][ T809] usb 3-1: Manufacturer: syz [ 544.650203][ T809] hub 3-1:4.0: USB hub found [ 544.789869][T26110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6913'. [ 544.867960][ T809] hub 3-1:4.0: 2 ports detected [ 545.268240][ T809] hub 3-1:4.0: set hub depth failed [ 545.295802][ T809] usb 3-1: USB disconnect, device number 44 [ 545.535844][ T37] audit: type=1326 audit(1771471815.169:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26150 comm="syz.3.6925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 545.545766][ T37] audit: type=1326 audit(1771471815.179:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26150 comm="syz.3.6925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 545.582629][ T37] audit: type=1326 audit(1771471815.229:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26150 comm="syz.3.6925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 545.588194][ T37] audit: type=1326 audit(1771471815.229:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26150 comm="syz.3.6925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 545.596202][ T37] audit: type=1326 audit(1771471815.239:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26150 comm="syz.3.6925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 545.598699][ T37] audit: type=1326 audit(1771471815.239:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26150 comm="syz.3.6925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 545.602436][ T37] audit: type=1326 audit(1771471815.249:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26150 comm="syz.3.6925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 545.651010][ T37] audit: type=1326 audit(1771471815.289:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26150 comm="syz.3.6925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 546.398183][ T37] audit: type=1326 audit(1771471816.039:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26183 comm="syz.5.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf74dc629 code=0x7ffc0000 [ 546.424642][ T37] audit: type=1326 audit(1771471816.039:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26183 comm="syz.5.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf74dc629 code=0x7ffc0000 [ 546.559079][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6940'. [ 546.581824][T26190] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 546.629483][T26191] GUP no longer grows the stack in syz.5.6942 (26191): 200000007000-200000008000 (200000004000) [ 546.629551][T26191] CPU: 0 UID: 0 PID: 26191 Comm: syz.5.6942 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 546.629585][T26191] Tainted: [L]=SOFTLOCKUP [ 546.629594][T26191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.629612][T26191] Call Trace: [ 546.629625][T26191] [ 546.629636][T26191] dump_stack_lvl+0xe8/0x150 [ 546.629676][T26191] fixup_user_fault+0x637/0x6f0 [ 546.629707][T26191] fault_in_user_writeable+0x71/0xd0 [ 546.629738][T26191] futex_lock_pi+0x80c/0xb00 [ 546.629786][T26191] ? __pfx_futex_lock_pi+0x10/0x10 [ 546.629866][T26191] ? __pfx_futex_wake_mark+0x10/0x10 [ 546.629917][T26191] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 546.629971][T26191] do_futex+0x292/0x420 [ 546.630006][T26191] ? __pfx_do_futex+0x10/0x10 [ 546.630035][T26191] ? __vm_munmap+0x2e6/0x3d0 [ 546.630074][T26191] __se_sys_futex+0x3a8/0x450 [ 546.630109][T26191] ? __pfx___se_sys_futex+0x10/0x10 [ 546.630139][T26191] ? rcu_is_watching+0x15/0xb0 [ 546.630178][T26191] ? __x64_sys_futex+0x21/0xf0 [ 546.630210][T26191] do_syscall_64+0x14d/0xf80 [ 546.630239][T26191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.630260][T26191] ? trace_irq_disable+0x37/0x100 [ 546.630278][T26191] ? clear_bhb_loop+0x40/0x90 [ 546.630306][T26191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.630328][T26191] RIP: 0033:0x7feaf74dc629 [ 546.630354][T26191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.630373][T26191] RSP: 002b:00007feaf5736028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 546.630400][T26191] RAX: ffffffffffffffda RBX: 00007feaf7755fa0 RCX: 00007feaf74dc629 [ 546.630417][T26191] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 546.630430][T26191] RBP: 00007feaf7572b39 R08: 0000000000000000 R09: 0000000000000082 [ 546.630444][T26191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.630457][T26191] R13: 00007feaf7756038 R14: 00007feaf7755fa0 R15: 00007ffdae6c1478 [ 546.630493][T26191] [ 546.955001][T26195] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6943'. [ 547.108118][T26200] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6944'. [ 547.108152][T26200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6944'. [ 547.629003][ T809] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 547.778994][ T809] usb 3-1: Using ep0 maxpacket: 8 [ 547.781544][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.781595][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.781641][ T809] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 547.781667][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.840342][ T809] usb 3-1: config 0 descriptor?? [ 548.259681][ T809] hid (null): nested delimiters [ 548.288044][ T809] wacom 0003:056A:0059.0033: nested delimiters [ 548.288068][ T809] wacom 0003:056A:0059.0033: item 0 4 2 10 parsing failed [ 548.304249][ T809] wacom 0003:056A:0059.0033: parse failed [ 548.304363][ T809] wacom 0003:056A:0059.0033: probe with driver wacom failed with error -22 [ 548.418098][T26264] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6970'. [ 548.457037][ T5809] usb 3-1: USB disconnect, device number 45 [ 549.538352][T26316] vlan2: entered promiscuous mode [ 549.538381][T26316] macvlan1: entered promiscuous mode [ 549.905426][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6994'. [ 549.906427][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6994'. [ 549.906811][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6994'. [ 549.907474][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6994'. [ 551.759573][T26415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7028'. [ 551.759595][T26415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7028'. [ 551.936247][T26424] netlink: 'syz.2.7031': attribute type 4 has an invalid length. [ 551.936271][T26424] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7031'. [ 552.399659][T26444] siw: device registration error -23 [ 552.609036][ T5897] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 552.764011][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 552.765931][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.765955][ T5897] usb 3-1: config 0 has no interfaces? [ 552.768456][ T5897] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 552.768482][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.768502][ T5897] usb 3-1: Product: syz [ 552.768514][ T5897] usb 3-1: Manufacturer: syz [ 552.768528][ T5897] usb 3-1: SerialNumber: syz [ 552.826355][ T5897] usb 3-1: config 0 descriptor?? [ 553.276767][T26482] sp0: Synchronizing with TNC [ 553.634095][ T5809] usb 3-1: USB disconnect, device number 46 [ 553.781546][T26510] netlink: 'syz.4.7061': attribute type 21 has an invalid length. [ 553.781575][T26510] IPv6: NLM_F_CREATE should be specified when creating new route [ 553.781700][T26510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 553.781712][T26510] IPv6: NLM_F_CREATE should be set when creating new route [ 553.781773][T26510] IPv6: NLM_F_CREATE should be set when creating new route [ 553.781808][T26510] IPv6: NLM_F_CREATE should be set when creating new route [ 554.132414][T26530] dvmrp8: entered allmulticast mode [ 554.134961][T26530] dvmrp8: left allmulticast mode [ 554.299023][ T5897] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 554.459122][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 554.482003][ T5897] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 554.482034][ T5897] usb 3-1: config 0 has no interface number 0 [ 554.482093][ T5897] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 554.482136][ T5897] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 554.482166][ T5897] usb 3-1: config 0 interface 255 has no altsetting 0 [ 554.486308][ T5897] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 554.486428][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.486451][ T5897] usb 3-1: Product: syz [ 554.486466][ T5897] usb 3-1: Manufacturer: syz [ 554.486481][ T5897] usb 3-1: SerialNumber: syz [ 554.574807][ T5897] usb 3-1: config 0 descriptor?? [ 554.596271][ T5897] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 554.596406][ T5897] dvb-usb: bulk message failed: -22 (4/0) [ 554.596428][ T5897] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 554.596565][ T5897] dvb-usb: bulk message failed: -22 (5/0) [ 554.596582][ T5897] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 554.642902][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 554.643796][ T5897] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 554.643863][ T5897] usb 3-1: media controller created [ 554.684522][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.714614][ T5897] ttusb2: set interface to alts=3 failed [ 554.843165][ T5897] DVB: Unable to find symbol tda10086_attach() [ 554.843182][ T5897] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 554.844716][ T5897] dvb-usb: bulk message failed: -22 (4/0) [ 554.844738][ T5897] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 554.844863][ T5897] dvb-usb: bulk message failed: -22 (5/0) [ 554.844879][ T5897] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 554.844958][ T5897] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 554.912754][ T5897] usb 3-1: USB disconnect, device number 47 [ 555.002506][ T5897] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 555.549838][ T5897] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 555.597606][T26563] syz.2.7069 (26563) used obsolete PPPIOCDETACH ioctl [ 555.713373][ T5897] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 555.713419][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.748107][ T5897] usb 4-1: config 0 descriptor?? [ 555.752323][ T5897] cp210x 4-1:0.0: cp210x converter detected [ 555.957805][T26584] netlink: 'syz.4.7078': attribute type 29 has an invalid length. [ 556.384108][ T5897] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 556.384140][ T5897] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 556.403652][ T809] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 556.426931][ T5897] usb 4-1: cp210x converter now attached to ttyUSB0 [ 556.446500][ T5897] usb 4-1: USB disconnect, device number 42 [ 556.469793][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 556.470699][ T5897] cp210x 4-1:0.0: device disconnected [ 556.551541][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.551591][ T809] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 556.551622][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.558220][ T809] usb 3-1: config 0 descriptor?? [ 556.799705][ T5809] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 556.949302][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 556.951495][ T5809] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 556.951522][ T5809] usb 5-1: config 0 has no interface number 0 [ 556.951573][ T5809] usb 5-1: config 0 interface 12 has no altsetting 0 [ 556.957023][ T5809] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 556.957052][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.957075][ T5809] usb 5-1: Product: syz [ 556.957090][ T5809] usb 5-1: Manufacturer: syz [ 556.957106][ T5809] usb 5-1: SerialNumber: syz [ 556.986158][ T5809] usb 5-1: config 0 descriptor?? [ 557.060749][ T809] lg-g15 0003:046D:C222.0034: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 557.263479][ T1186] usb 3-1: USB disconnect, device number 48 [ 557.662054][ T5809] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 557.662124][ T5809] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 557.662143][ T5809] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 557.662238][ T5809] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 557.714503][ T5809] usb 5-1: USB disconnect, device number 52 [ 557.867395][T26703] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 558.091764][T26721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7112'. [ 558.322161][T26733] Invalid source name [ 558.774325][T26762] fuse: Bad value for 'user_id' [ 558.774346][T26762] fuse: Bad value for 'user_id' [ 558.871887][T26768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7132'. [ 559.066092][T26781] nfs: Unknown parameter 'GPL' [ 559.469387][ T5809] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 559.588194][T26815] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7151'. [ 559.649025][ T5809] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 559.649076][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.649117][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.649141][ T5809] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 559.652415][ T5809] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 559.652446][ T5809] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 559.652470][ T5809] usb 6-1: Manufacturer: syz [ 559.675782][ T5809] usb 6-1: config 0 descriptor?? [ 560.098338][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 560.098411][ T37] audit: type=1326 audit(1771471829.739:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26832 comm="syz.4.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa145c629 code=0x7ffc0000 [ 560.098487][ T37] audit: type=1326 audit(1771471829.739:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26832 comm="syz.4.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa145c629 code=0x7ffc0000 [ 560.174908][ T5809] appleir 0003:05AC:8243.0035: item fetching failed at offset 0/1 [ 560.175444][ T5809] appleir 0003:05AC:8243.0035: parse failed [ 560.175520][ T5809] appleir 0003:05AC:8243.0035: probe with driver appleir failed with error -22 [ 560.199849][ T37] audit: type=1326 audit(1771471829.829:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26832 comm="syz.4.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fbfa145c629 code=0x7ffc0000 [ 560.200005][ T37] audit: type=1326 audit(1771471829.829:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26832 comm="syz.4.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa145c629 code=0x7ffc0000 [ 560.200139][ T37] audit: type=1326 audit(1771471829.829:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26832 comm="syz.4.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa145c629 code=0x7ffc0000 [ 560.216934][ T37] audit: type=1326 audit(1771471829.849:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26832 comm="syz.4.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fbfa145c629 code=0x7ffc0000 [ 560.217081][ T37] audit: type=1326 audit(1771471829.849:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26832 comm="syz.4.7158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa145c629 code=0x7ffc0000 [ 560.415249][ T5809] usb 6-1: USB disconnect, device number 17 [ 560.679224][ T809] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 560.828977][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 560.831819][ T809] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 560.831852][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.875297][ T809] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 560.907260][T26881] overlayfs: missing 'workdir' [ 561.355897][T26900] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7182'. [ 561.511239][ T809] gspca_nw80x: reg_w err -71 [ 561.511346][ T809] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 561.535711][ T809] usb 4-1: USB disconnect, device number 43 [ 561.989299][ T5809] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 562.179135][ T5809] usb 6-1: Using ep0 maxpacket: 32 [ 562.184931][ T5809] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 562.211914][ T5809] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 562.211946][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.211967][ T5809] usb 6-1: Product: syz [ 562.211982][ T5809] usb 6-1: Manufacturer: syz [ 562.211997][ T5809] usb 6-1: SerialNumber: syz [ 562.218027][ T5809] usb 6-1: config 0 descriptor?? [ 562.218782][T26923] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 562.293104][ T5809] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 562.525438][ T5809] usb 6-1: USB disconnect, device number 18 [ 562.600679][T26987] binder: 26986:26987 ioctl c0306201 2000000001c0 returned -14 [ 562.618979][ T1186] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 562.713382][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.784225][ T1186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.784273][ T1186] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 562.784290][ T1186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.806886][ T1186] usb 4-1: config 0 descriptor?? [ 563.290509][ T1186] konepure 0003:1E7D:2DB4.0036: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 563.406480][T27028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7218'. [ 563.461304][ T5897] usb 4-1: USB disconnect, device number 44 [ 563.606180][T27029] fido_id[27029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 563.690261][T27055] netlink: 120 bytes leftover after parsing attributes in process `syz.5.7223'. [ 563.690285][T27055] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7223'. [ 564.139550][ T809] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 564.298772][ T809] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 564.299268][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.299293][ T809] usb 5-1: Product: syz [ 564.299308][ T809] usb 5-1: Manufacturer: syz [ 564.299323][ T809] usb 5-1: SerialNumber: syz [ 564.359260][ T809] usb 5-1: config 0 descriptor?? [ 564.364870][ T809] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 564.436519][ T809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 564.439625][ T809] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 564.439755][ T809] usb 5-1: media controller created [ 564.489317][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 564.572833][T27067] dvb-usb: bulk message failed: -22 (7/0) [ 564.600614][ T809] DVB: Unable to find symbol mt352_attach() [ 564.681646][ T809] DVB: Unable to find symbol nxt6000_attach() [ 564.681664][ T809] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 564.714208][ T809] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 564.739035][ T809] dvb-usb: schedule remote query interval to 1000 msecs. [ 564.739052][ T809] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 564.739064][ T809] dvb-usb: bulk message failed: -22 (7/0) [ 564.739076][ T809] dvb-usb: bulk message failed: -22 (7/0) [ 564.780850][ T809] usb 5-1: USB disconnect, device number 53 [ 565.074224][ T809] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 565.169043][ T5897] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 565.350710][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 565.351284][ T5897] usb 3-1: not running at top speed; connect to a high speed hub [ 565.352878][ T5897] usb 3-1: config 15 has an invalid interface number: 64 but max is 0 [ 565.352903][ T5897] usb 3-1: config 15 has no interface number 0 [ 565.356893][ T5897] usb 3-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=6b.e3 [ 565.356925][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.356963][ T5897] usb 3-1: Product: syz [ 565.356978][ T5897] usb 3-1: Manufacturer: syz [ 565.356994][ T5897] usb 3-1: SerialNumber: syz [ 565.650313][ T5897] rndis_host 3-1:15.64: More than one union descriptor, skipping ... [ 565.650337][ T5897] usb 3-1: bad CDC descriptors [ 565.652438][ T5897] cdc_acm 3-1:15.64: More than one union descriptor, skipping ... [ 565.679287][ T1186] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 565.682344][ T5897] usb 3-1: USB disconnect, device number 49 [ 565.853901][ T1186] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 565.853937][ T1186] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 565.853966][ T1186] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 565.860515][ T1186] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 565.860545][ T1186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.860567][ T1186] usb 5-1: Product: syz [ 565.860583][ T1186] usb 5-1: Manufacturer: syz [ 565.860598][ T1186] usb 5-1: SerialNumber: syz [ 565.933300][ T1186] usb 5-1: config 0 descriptor?? [ 565.935194][T27155] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 565.935338][T27155] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 565.938518][ T1186] usb 5-1: ucan: probing device on interface #0 [ 566.390782][ T1186] usb 5-1: ucan: failed to retrieve device info [ 566.390802][ T1186] usb 5-1: ucan: probe failed; try to update the device firmware [ 566.423707][ T1186] usb 5-1: USB disconnect, device number 54 [ 567.256101][T27241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7280'. [ 567.298941][ T1186] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 567.459621][ T1186] usb 5-1: Using ep0 maxpacket: 8 [ 567.462556][ T1186] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 567.462592][ T1186] usb 5-1: config 0 has no interface number 0 [ 567.465588][ T1186] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 567.465615][ T1186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.465634][ T1186] usb 5-1: Product: syz [ 567.465648][ T1186] usb 5-1: Manufacturer: syz [ 567.465661][ T1186] usb 5-1: SerialNumber: syz [ 567.520321][ T1186] usb 5-1: config 0 descriptor?? [ 567.741817][ T1186] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 567.741890][ T1186] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized! [ 567.804886][ T1186] usb 5-1: USB disconnect, device number 55 [ 568.087117][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.468966][ T5897] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 568.621613][ T5897] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 568.621668][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 568.621697][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 568.621741][ T5897] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 568.621766][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.630994][ T5897] usb 3-1: config 0 descriptor?? [ 568.655435][T27289] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 569.125955][ T5897] input: HID 28bd:0909 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0909.0037/input/input33 [ 569.146394][T27335] EXT4-fs: Conflicting test_dummy_encryption options [ 569.339677][ T5897] uclogic 0003:28BD:0909.0037: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.2-1/input0 [ 569.442353][ T5897] usb 3-1: USB disconnect, device number 50 [ 569.514502][T27356] fido_id[27356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 570.768946][ T1186] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 570.929563][ T1186] usb 4-1: Using ep0 maxpacket: 32 [ 570.931404][ T1186] usb 4-1: config 4 has an invalid interface number: 196 but max is 0 [ 570.931430][ T1186] usb 4-1: config 4 has no interface number 0 [ 570.931477][ T1186] usb 4-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 570.931515][ T1186] usb 4-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 570.931537][ T1186] usb 4-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 570.931561][ T1186] usb 4-1: config 4 interface 196 has no altsetting 0 [ 570.933951][ T1186] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 570.933980][ T1186] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 570.934012][ T1186] usb 4-1: Product: syz [ 570.934026][ T1186] usb 4-1: Manufacturer: syz [ 570.934039][ T1186] usb 4-1: SerialNumber: syz [ 571.081606][T27427] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 571.253809][T27468] sp0: Synchronizing with TNC [ 571.269692][T27467] [U] è` [ 571.543719][ T1186] ipheth 4-1:4.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 571.544032][ T1186] ipheth 4-1:4.196: probe with driver ipheth failed with error -22 [ 571.752417][ T809] usb 4-1: USB disconnect, device number 45 [ 572.207733][T27534] binder: 27533:27534 unknown command 0 [ 572.207756][T27534] binder: 27533:27534 ioctl c0306201 2000000002c0 returned -22 [ 572.229045][ T1186] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 572.389335][ T1186] usb 5-1: Using ep0 maxpacket: 16 [ 572.394696][ T1186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.394729][ T1186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.394753][ T1186] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 572.394797][ T1186] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 572.394821][ T1186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.423407][ T1186] usb 5-1: config 0 descriptor?? [ 572.641138][T27557] ALSA: mixer_oss: invalid OSS volume '' [ 572.891428][ T1186] microsoft 0003:045E:07DA.0038: unknown main item tag 0x1 [ 572.891464][ T1186] microsoft 0003:045E:07DA.0038: unknown main item tag 0x2 [ 572.891491][ T1186] microsoft 0003:045E:07DA.0038: unbalanced collection at end of report description [ 572.892391][ T1186] microsoft 0003:045E:07DA.0038: parse failed [ 572.892502][ T1186] microsoft 0003:045E:07DA.0038: probe with driver microsoft failed with error -22 [ 573.139306][ T1186] usb 5-1: USB disconnect, device number 56 [ 573.335121][T27607] netlink: 'syz.5.7402': attribute type 3 has an invalid length. [ 573.335142][T27607] netlink: 'syz.5.7402': attribute type 1 has an invalid length. [ 573.335154][T27607] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7402'. [ 573.449366][ T31] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 573.619035][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 573.623124][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 573.623166][ T31] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 573.623191][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.628727][ T31] usb 4-1: config 0 descriptor?? [ 574.083913][ T31] aureal 0003:0755:2626.0039: unknown main item tag 0x0 [ 574.083953][ T31] aureal 0003:0755:2626.0039: unknown main item tag 0x0 [ 574.083981][ T31] aureal 0003:0755:2626.0039: unknown main item tag 0x0 [ 574.084008][ T31] aureal 0003:0755:2626.0039: unknown main item tag 0x0 [ 574.084035][ T31] aureal 0003:0755:2626.0039: unknown main item tag 0x0 [ 574.084062][ T31] aureal 0003:0755:2626.0039: unknown main item tag 0x0 [ 574.084090][ T31] aureal 0003:0755:2626.0039: unknown main item tag 0x0 [ 574.084116][ T31] aureal 0003:0755:2626.0039: unknown main item tag 0x0 [ 574.084949][ T31] aureal 0003:0755:2626.0039: unexpected long global item [ 574.085869][ T31] aureal 0003:0755:2626.0039: probe with driver aureal failed with error -22 [ 574.187253][T27645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7419'. [ 574.284261][ T5900] usb 4-1: USB disconnect, device number 46 [ 574.362369][T27669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7422'. [ 574.438973][ T1186] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 574.619185][ T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 574.620987][ T1186] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 574.621012][ T1186] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 574.621037][ T1186] usb 5-1: config 220 has no interface number 2 [ 574.621082][ T1186] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 574.621101][ T1186] usb 5-1: config 220 interface 0 has no altsetting 0 [ 574.621119][ T1186] usb 5-1: config 220 interface 76 has no altsetting 0 [ 574.621131][ T1186] usb 5-1: config 220 interface 1 has no altsetting 0 [ 574.623398][ T1186] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 574.623424][ T1186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.623436][ T1186] usb 5-1: Product: syz [ 574.623445][ T1186] usb 5-1: Manufacturer: syz [ 574.623454][ T1186] usb 5-1: SerialNumber: syz [ 574.833107][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 574.837988][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.838046][ T31] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.838132][ T31] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.838170][ T31] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 574.838198][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 574.838233][ T31] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 574.838309][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.945181][ T31] usb 6-1: config 0 descriptor?? [ 575.010649][ T1186] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 575.011421][ T1186] uvcvideo 5-1:220.0: No valid video chain found. [ 575.011490][ T1186] usb 5-1: selecting invalid altsetting 0 [ 575.108622][ T1186] usb 5-1: selecting invalid altsetting 0 [ 575.108662][ T1186] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 575.168013][ T1186] usb 5-1: USB disconnect, device number 57 [ 575.384413][ T31] hid-thrustmaster 0003:044F:B65D.003A: unbalanced collection at end of report description [ 575.385207][ T31] hid-thrustmaster 0003:044F:B65D.003A: parse failed with error -22 [ 575.385296][ T31] hid-thrustmaster 0003:044F:B65D.003A: probe with driver hid-thrustmaster failed with error -22 [ 575.589640][ T5900] usb 6-1: USB disconnect, device number 19 [ 575.914003][T27756] bridge1: entered promiscuous mode [ 575.914039][T27756] bridge1: entered allmulticast mode [ 575.929950][T27756] team0: Port device bridge1 added [ 577.495604][T27841] openvswitch: netlink: Message has 536 unknown bytes. [ 577.495641][T27841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.675425][T27855] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7488'. [ 577.675477][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7488'. [ 577.773792][T27859] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7490'. [ 577.860783][ T1186] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 578.004017][T27873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7496'. [ 578.004042][T27873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7496'. [ 578.051047][ T1186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 578.051100][ T1186] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 578.051124][ T1186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.065705][ T1186] usb 3-1: config 0 descriptor?? [ 578.160188][T27879] bond0: option arp_interval: invalid value (18446744073709551615) [ 578.160217][T27879] bond0: option arp_interval: allowed values 0 - 2147483647 [ 578.320220][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.539440][ T1186] logitech 0003:046D:C626.003B: bogus close delimiter [ 578.539464][ T1186] logitech 0003:046D:C626.003B: item 0 4 2 10 parsing failed [ 578.540355][ T1186] logitech 0003:046D:C626.003B: parse failed [ 578.540464][ T1186] logitech 0003:046D:C626.003B: probe with driver logitech failed with error -22 [ 578.722458][ T1186] usb 3-1: USB disconnect, device number 51 [ 579.393688][T27944] netlink: 'syz.2.7520': attribute type 1 has an invalid length. [ 580.845834][T28028] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 581.064120][T28044] sctp: [Deprecated]: syz.4.7564 (pid 28044) Use of int in max_burst socket option. [ 581.064120][T28044] Use struct sctp_assoc_value instead [ 581.313400][T28058] input: syz1 as /devices/virtual/input/input34 [ 581.389360][ T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 581.559781][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 581.563136][ T31] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 581.563163][ T31] usb 5-1: config 0 has no interface number 0 [ 581.565943][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 581.565972][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.565985][ T31] usb 5-1: Product: syz [ 581.565996][ T31] usb 5-1: Manufacturer: syz [ 581.566006][ T31] usb 5-1: SerialNumber: syz [ 581.621263][ T31] usb 5-1: config 0 descriptor?? [ 581.637196][ T31] smsc95xx v2.0.0 [ 582.189346][ T1186] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 582.250708][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 582.250740][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 582.251245][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 582.251562][ T31] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 582.311211][ T31] usb 5-1: USB disconnect, device number 58 [ 582.369230][ T1186] usb 3-1: Using ep0 maxpacket: 8 [ 582.371116][ T1186] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 582.371151][ T1186] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 582.371188][ T1186] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 582.371205][ T1186] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 582.371221][ T1186] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 582.371238][ T1186] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 582.371255][ T1186] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 582.371274][ T1186] usb 3-1: config 168 interface 0 has no altsetting 0 [ 582.372333][ T1186] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 582.372367][ T1186] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 582.372405][ T1186] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 582.372422][ T1186] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 582.372438][ T1186] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 582.372455][ T1186] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 582.372472][ T1186] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 582.372489][ T1186] usb 3-1: config 168 interface 0 has no altsetting 0 [ 582.373621][ T1186] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 582.373656][ T1186] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 582.373717][ T1186] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 582.373745][ T1186] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 582.373770][ T1186] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 582.373797][ T1186] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 582.373828][ T1186] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 582.373847][ T1186] usb 3-1: config 168 interface 0 has no altsetting 0 [ 582.377323][ T1186] usb 3-1: string descriptor 0 read error: -22 [ 582.377462][ T1186] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 582.377480][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.687535][ T1186] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 582.729314][ T1186] usb 3-1: USB disconnect, device number 52 [ 582.954552][T28140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7588'. [ 582.955508][T28140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7588'. [ 583.138976][ T809] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 583.201911][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 583.315135][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.315165][ T809] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 583.315206][ T809] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 583.315229][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.362164][ T809] usb 6-1: config 0 descriptor?? [ 583.439010][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.795418][ T809] waterforce 0003:1044:7A4D.003C: item fetching failed at offset 0/1 [ 583.796164][ T809] waterforce 0003:1044:7A4D.003C: hid parse failed with -22 [ 583.796268][ T809] waterforce 0003:1044:7A4D.003C: probe with driver waterforce failed with error -22 [ 583.896544][T28189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7609'. [ 583.897496][T28189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7609'. [ 583.974473][ T1186] usb 6-1: USB disconnect, device number 20 [ 584.256979][T28214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7614'. [ 585.629389][ T1186] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 585.782548][ T1186] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 585.782579][ T1186] usb 6-1: config 1 has no interface number 0 [ 585.782625][ T1186] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 585.782652][ T1186] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 585.782680][ T1186] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.785530][ T1186] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 585.785557][ T1186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.785578][ T1186] usb 6-1: Product: syz [ 585.785592][ T1186] usb 6-1: Manufacturer: syz [ 585.785607][ T1186] usb 6-1: SerialNumber: syz [ 585.832679][T28283] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 586.117899][T28283] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 586.227455][T28324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7658'. [ 586.397421][ T1186] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 586.529558][ T1186] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 586.529578][ T1186] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 586.550901][ T1186] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 586.553143][ T1186] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 586.631624][ T1186] usb 6-1: USB disconnect, device number 21 [ 586.659474][ T1186] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 586.792396][ T1186] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 588.548540][T28447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7703'. [ 590.659208][ T31] kernel read not supported for file /audio (pid: 31 comm: kworker/1:0) [ 591.328466][T28587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7767'. [ 593.587925][T28705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7814'. [ 593.729647][T28709] usb usb7: usbfs: process 28709 (syz.2.7817) did not claim interface 0 before use [ 593.729924][T28709] usb usb7: selecting invalid altsetting 6 [ 594.058964][ T1186] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 594.242022][ T1186] usb 3-1: unable to get BOS descriptor or descriptor too short [ 594.244005][ T1186] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 594.244029][ T1186] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.244093][ T1186] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.290471][ T1186] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.290500][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.290519][ T1186] usb 3-1: Product: syz [ 594.290532][ T1186] usb 3-1: Manufacturer: syz [ 594.290545][ T1186] usb 3-1: SerialNumber: syz [ 594.540553][ T1186] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 594.540602][ T1186] cdc_ncm 3-1:1.0: bind() failure [ 594.585737][ T1186] cdc_ncm 3-1:1.1: skipping garbage [ 594.585759][ T1186] cdc_ncm 3-1:1.1: invalid descriptor buffer length [ 594.585775][ T1186] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 594.585816][ T1186] cdc_ncm 3-1:1.1: bind() failure [ 594.650209][ T1186] usb 3-1: USB disconnect, device number 53 [ 595.492565][ T5814] Bluetooth: hci0: unexpected event for opcode 0x040d [ 595.929880][T28814] netlink: 'syz.2.7855': attribute type 11 has an invalid length. [ 595.929904][T28814] netlink: 212332 bytes leftover after parsing attributes in process `syz.2.7855'. [ 597.663995][T28883] ªªªªªª: renamed from vlan0 [ 598.015174][T28898] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.7891'. [ 598.268699][T28909] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7896'. [ 600.418555][T29001] ip6tnl3: entered allmulticast mode [ 600.539949][ T155] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 600.540313][ T155] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 600.569748][ T5897] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 600.667120][T29014] pim6reg: left allmulticast mode [ 600.689308][ T5897] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 600.979333][ T5897] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 601.736507][T29071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7964'. [ 601.767299][T29071] netlink: 'syz.4.7964': attribute type 2 has an invalid length. [ 602.354663][T29101] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7975'. [ 602.704902][T29121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.909878][T29134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7988'. [ 602.910023][T29134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7988'. [ 603.009062][ T1186] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 603.160965][ T1186] usb 6-1: config 0 interface 0 has no altsetting 0 [ 603.161013][ T1186] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 603.161039][ T1186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.202138][ T1186] usb 6-1: config 0 descriptor?? [ 604.022810][ T1186] video4linux radio48: keene_cmd_main failed (-71) [ 604.022837][ T1186] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 604.029018][ T809] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 604.101880][ T1186] usb 6-1: USB disconnect, device number 22 [ 604.222919][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.222962][ T809] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 604.222985][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.280616][ T809] usb 3-1: config 0 descriptor?? [ 604.406362][T29197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8008'. [ 604.761436][ T809] nintendo 0003:057E:200E.003D: unbalanced collection at end of report description [ 604.762324][ T809] nintendo 0003:057E:200E.003D: HID parse failed [ 604.767509][ T809] nintendo 0003:057E:200E.003D: probe - fail = -22 [ 604.767641][ T809] nintendo 0003:057E:200E.003D: probe with driver nintendo failed with error -22 [ 604.947128][ T809] usb 3-1: USB disconnect, device number 54 [ 604.959189][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 606.905927][T29288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8044'. [ 607.198974][ T5814] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 607.199010][T29228] Bluetooth: hci0: command 0x0c1a tx timeout [ 607.228938][ T5897] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 607.384426][ T5897] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 607.384458][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.410861][ T5897] usb 6-1: config 0 descriptor?? [ 607.599280][ T809] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 607.629578][ T5897] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 607.754018][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 607.754593][ T809] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 607.754714][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.798564][ T809] usb 4-1: config 0 descriptor?? [ 607.936959][ T5897] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 607.936988][ T5897] [drm] Initialized udl on minor 2 [ 608.245408][ T5897] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 608.245896][ T5897] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 608.250240][ T809] hid_parser_main: 70 callbacks suppressed [ 608.250263][ T809] hid-thrustmaster 0003:044F:B65D.003E: unknown main item tag 0x0 [ 608.289352][ T5900] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 608.313976][ T809] hid-thrustmaster 0003:044F:B65D.003E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 608.314290][ T809] hid-thrustmaster 0003:044F:B65D.003E: Wrong number of endpoints? [ 608.339366][ T5897] usb 6-1: USB disconnect, device number 23 [ 608.363258][ T5900] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 608.368649][ T5900] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 608.464456][ C0] hid-thrustmaster 0003:044F:B65D.003E: Unknown packet type 0x0, unable to proceed further with wheel init [ 608.679037][ T1186] usb 4-1: USB disconnect, device number 47 [ 609.426930][T29390] loop5: detected capacity change from 0 to 7 [ 609.453121][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 609.462062][T29393] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 609.975068][T29409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8077'. [ 610.109450][T29416] mkiss: ax0: crc mode is auto. [ 610.589305][ T809] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 610.751676][ T809] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 610.751710][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.788727][ T809] usb 3-1: config 0 descriptor?? [ 611.483638][T29467] input: syz1 as /devices/virtual/input/input35 [ 611.671934][ T809] usb 3-1: Cannot set autoneg [ 611.672207][ T809] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 611.720049][ T809] usb 3-1: USB disconnect, device number 55 [ 612.664564][T29516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.739006][ T5900] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 612.890105][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 612.914054][ T5900] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 612.914082][ T5900] usb 3-1: config 0 has no interface number 0 [ 612.914122][ T5900] usb 3-1: config 0 interface 12 has no altsetting 0 [ 612.957981][ T5900] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 612.958010][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.958029][ T5900] usb 3-1: Product: syz [ 612.958041][ T5900] usb 3-1: Manufacturer: syz [ 612.958054][ T5900] usb 3-1: SerialNumber: syz [ 613.018957][ T5900] usb 3-1: config 0 descriptor?? [ 614.163231][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 614.176584][ T37] audit: type=1326 audit(1771471883.789:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29552 comm="syz.3.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 614.176678][ T37] audit: type=1326 audit(1771471883.789:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29552 comm="syz.3.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 614.176719][ T37] audit: type=1326 audit(1771471883.799:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29552 comm="syz.3.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 614.176757][ T37] audit: type=1326 audit(1771471883.799:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29552 comm="syz.3.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 614.176836][ T37] audit: type=1326 audit(1771471883.799:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29552 comm="syz.3.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 614.176887][ T37] audit: type=1326 audit(1771471883.799:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29552 comm="syz.3.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 614.176993][ T37] audit: type=1326 audit(1771471883.799:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29552 comm="syz.3.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 614.177046][ T37] audit: type=1326 audit(1771471883.799:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29552 comm="syz.3.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 614.177086][ T37] audit: type=1326 audit(1771471883.799:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29552 comm="syz.3.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 614.177188][ T37] audit: type=1326 audit(1771471883.799:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29552 comm="syz.3.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe2929dc629 code=0x7ffc0000 [ 614.655825][T29563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8127'. [ 614.658618][T29563] netlink: 'syz.3.8127': attribute type 15 has an invalid length. [ 614.961512][T29228] Bluetooth: hci2: command 0x0c1a tx timeout [ 614.961683][ T5814] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 615.128424][ T5900] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 615.128553][ T5900] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32 [ 615.128569][ T5900] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 615.128657][ T5900] f81534 3-1:0.12: probe with driver f81534 failed with error -32 [ 615.563063][ T1186] usb 3-1: USB disconnect, device number 56 [ 618.369123][ T5900] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 618.519044][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 618.525879][ T5900] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 16 [ 618.525909][ T5900] usb 6-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 618.525936][ T5900] usb 6-1: config 1 interface 0 has no altsetting 0 [ 618.527243][ T5900] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 618.527272][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 618.527294][ T5900] usb 6-1: SerialNumber: syz [ 618.619532][T29671] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 618.824675][T29671] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 618.971036][T29228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 618.991679][T29228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 618.997510][T29228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 619.039405][T29228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 619.066032][T29228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 619.585186][ T5900] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 619.613747][ T5900] usb 6-1: USB disconnect, device number 24 [ 619.630473][ T5900] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 619.923707][T29722] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8182'. [ 620.832274][ T3547] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.832313][ T3547] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.125757][ T5814] Bluetooth: hci1: command tx timeout [ 621.194652][T29773] netlink: 'syz.5.8199': attribute type 10 has an invalid length. [ 621.246673][T29776] netlink: 'syz.5.8199': attribute type 10 has an invalid length. [ 621.370329][ T3547] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.370370][ T3547] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.521874][T29773] team0: Port device dummy0 added [ 621.577308][T29776] team0: Port device dummy0 removed [ 621.943938][ T3547] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.943980][ T3547] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.052240][T29790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8205'. [ 622.253236][T29690] wlan1 speed is unknown, defaulting to 1000 [ 622.542929][ T3547] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.542968][ T3547] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.198980][T29228] Bluetooth: hci1: command tx timeout [ 623.570837][ T3547] bridge_slave_1: left allmulticast mode [ 623.570867][ T3547] bridge_slave_1: left promiscuous mode [ 623.571173][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.685898][ T3547] bridge_slave_0: left allmulticast mode [ 623.685927][ T3547] bridge_slave_0: left promiscuous mode [ 623.686179][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.764435][T29874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8230'. [ 623.764568][T29874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8230'. [ 625.292708][T29228] Bluetooth: hci1: command tx timeout [ 626.643041][ T3547] team0: Port device bridge1 removed [ 626.894568][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.989677][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.040313][ T3547] bond0 (unregistering): Released all slaves [ 627.117939][T29898] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8239'. [ 627.117947][T29928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8254'. [ 627.359310][T29228] Bluetooth: hci1: command tx timeout [ 628.137252][T29690] chnl_net:caif_netlink_parms(): no params data found [ 628.287881][T30069] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8290'. [ 628.287937][T30069] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8290'. [ 628.519679][T30103] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.8295'. [ 628.838557][T29690] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.864022][T29690] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.864279][T29690] bridge_slave_0: entered allmulticast mode [ 628.867027][T29690] bridge_slave_0: entered promiscuous mode [ 628.868360][T30139] netlink: 'syz.5.8297': attribute type 11 has an invalid length. [ 628.940206][T29690] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.940345][T29690] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.940588][T29690] bridge_slave_1: entered allmulticast mode [ 628.983502][T29690] bridge_slave_1: entered promiscuous mode [ 629.286784][T29690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.340859][T29690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.378994][ T31] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 629.385186][ T3547] IPVS: stopping master sync thread 15910 ... [ 629.388682][ T3547] IPVS: stopping backup sync thread 13718 ... [ 629.527305][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.549058][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 629.567517][ T31] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 629.567549][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.567566][ T31] usb 6-1: Product: syz [ 629.567579][ T31] usb 6-1: Manufacturer: syz [ 629.567591][ T31] usb 6-1: SerialNumber: syz [ 629.606639][ T31] usb 6-1: config 0 descriptor?? [ 629.621388][ T31] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 629.647040][ T31] usb 6-1: Detected FT232H [ 629.732906][T29690] team0: Port device team_slave_0 added [ 629.754923][ T1186] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 629.785918][T29690] team0: Port device team_slave_1 added [ 629.907510][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 629.938615][ T1186] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.938646][ T1186] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 629.938753][ T1186] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 629.939440][ T1186] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 629.939647][ T1186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.088322][T29690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.088341][T29690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.088366][T29690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.139118][T30187] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 630.141453][ T31] ftdi_sio 6-1:0.0: GPIO initialisation failed: -32 [ 630.141654][T29690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.141669][T29690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.141697][T29690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.179450][ T31] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 630.472017][ T31] usb 6-1: USB disconnect, device number 25 [ 630.481786][ T1186] hub 3-1:1.0: bad descriptor, ignoring hub [ 630.481822][ T1186] hub 3-1:1.0: probe with driver hub failed with error -5 [ 630.482709][ T1186] cdc_wdm 3-1:1.0: skipping garbage [ 630.482722][ T1186] cdc_wdm 3-1:1.0: skipping garbage [ 630.515285][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 630.516225][ T31] ftdi_sio 6-1:0.0: device disconnected [ 630.527693][ T1186] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 630.527748][ T1186] cdc_wdm 3-1:1.0: Unknown control protocol [ 630.640662][ T1186] usb 3-1: USB disconnect, device number 57 [ 631.094676][T29690] hsr_slave_0: entered promiscuous mode [ 631.096019][T29690] hsr_slave_1: entered promiscuous mode [ 631.096845][T29690] debugfs: 'hsr0' already exists in 'hsr' [ 631.096866][T29690] Cannot create hsr debugfs directory [ 632.079140][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 632.687217][ T5897] wlan1 speed is unknown, defaulting to 1000 [ 632.687261][ T5897] óyz2: Port: 1 Link DOWN [ 634.762448][T29690] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 634.864586][T29690] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 634.917008][T29690] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 635.035064][T29690] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 635.736803][T29690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.490593][T29690] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.550907][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.551052][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.595679][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.595841][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.991885][ T3547] hsr_slave_0: left promiscuous mode [ 637.069276][ T3547] hsr_slave_1: left promiscuous mode [ 637.070264][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.070290][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.122875][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.122905][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.283639][ T3547] veth1_macvtap: left promiscuous mode [ 637.283746][ T3547] veth0_macvtap: left promiscuous mode [ 637.287549][ T3547] veth1_vlan: left promiscuous mode [ 637.954367][ T3547] pimreg3 (unregistering): left allmulticast mode [ 638.702471][ T155] smc: removing ib device syz2 [ 641.754456][ T3547] team0 (unregistering): Port device team_slave_1 removed [ 642.123666][ T3547] team0 (unregistering): Port device team_slave_0 removed [ 645.489209][ T5897] ================================================================== [ 645.489231][ T5897] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 645.489274][ T5897] Read of size 8 at addr ffff88805de362e8 by task kworker/0:4/5897 [ 645.489292][ T5897] [ 645.489308][ T5897] CPU: 0 UID: 0 PID: 5897 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 645.489336][ T5897] Tainted: [L]=SOFTLOCKUP [ 645.489343][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.489356][ T5897] Workqueue: events smc_ib_port_event_work [ 645.489382][ T5897] Call Trace: [ 645.489390][ T5897] [ 645.489399][ T5897] dump_stack_lvl+0xe8/0x150 [ 645.489431][ T5897] print_report+0xba/0x230 [ 645.489458][ T5897] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 645.489490][ T5897] kasan_report+0x117/0x150 [ 645.489516][ T5897] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 645.489551][ T5897] __ethtool_get_link_ksettings+0x5e/0x170 [ 645.489586][ T5897] ib_get_eth_speed+0x180/0x7f0 [ 645.489615][ T5897] ? lock_acquire+0x106/0x330 [ 645.489641][ T5897] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 645.489671][ T5897] ? lockdep_hardirqs_on+0x7a/0x110 [ 645.489694][ T5897] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 645.489718][ T5897] ? rxe_query_port+0x7e/0x3d0 [ 645.489741][ T5897] rxe_query_port+0x93/0x3d0 [ 645.489765][ T5897] ib_query_port+0x170/0x830 [ 645.489785][ T5897] smc_ib_port_event_work+0x16f/0x940 [ 645.489805][ T5897] ? process_scheduled_works+0xa0f/0x17a0 [ 645.489830][ T5897] ? process_scheduled_works+0xa0f/0x17a0 [ 645.489850][ T5897] process_scheduled_works+0xaec/0x17a0 [ 645.489883][ T5897] ? __pfx_process_scheduled_works+0x10/0x10 [ 645.489906][ T5897] ? assign_work+0x3d5/0x5e0 [ 645.489927][ T5897] worker_thread+0xa50/0xfc0 [ 645.489960][ T5897] kthread+0x388/0x470 [ 645.489985][ T5897] ? __pfx_worker_thread+0x10/0x10 [ 645.490004][ T5897] ? __pfx_kthread+0x10/0x10 [ 645.490038][ T5897] ret_from_fork+0x51e/0xb90 [ 645.490061][ T5897] ? __pfx_ret_from_fork+0x10/0x10 [ 645.490081][ T5897] ? __switch_to+0xc7d/0x1400 [ 645.490101][ T5897] ? __pfx_kthread+0x10/0x10 [ 645.490126][ T5897] ret_from_fork_asm+0x1a/0x30 [ 645.490161][ T5897] [ 645.490168][ T5897] [ 645.490171][ T5897] Allocated by task 5805: [ 645.490184][ T5897] kasan_save_track+0x3e/0x80 [ 645.490199][ T5897] __kasan_kmalloc+0x93/0xb0 [ 645.490214][ T5897] __kvmalloc_node_noprof+0x3c2/0x8e0 [ 645.490234][ T5897] alloc_netdev_mqs+0xa6/0x11b0 [ 645.490251][ T5897] rtnl_create_link+0x31f/0xd70 [ 645.490269][ T5897] rtnl_newlink_create+0x277/0xb70 [ 645.490293][ T5897] rtnl_newlink+0x1666/0x1be0 [ 645.490314][ T5897] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 645.490335][ T5897] netlink_rcv_skb+0x232/0x4b0 [ 645.490355][ T5897] netlink_unicast+0x831/0x9f0 [ 645.490371][ T5897] netlink_sendmsg+0x813/0xb40 [ 645.490391][ T5897] __sys_sendto+0x72a/0x7d0 [ 645.490414][ T5897] __x64_sys_sendto+0xde/0x100 [ 645.490437][ T5897] do_syscall_64+0x14d/0xf80 [ 645.490457][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.490473][ T5897] [ 645.490477][ T5897] Freed by task 3547: [ 645.490484][ T5897] kasan_save_track+0x3e/0x80 [ 645.490498][ T5897] kasan_save_free_info+0x46/0x50 [ 645.490519][ T5897] __kasan_slab_free+0x5c/0x80 [ 645.490533][ T5897] kfree+0x1c1/0x690 [ 645.490546][ T5897] device_release+0x9e/0x1d0 [ 645.490564][ T5897] kobject_put+0x228/0x560 [ 645.490586][ T5897] netdev_run_todo+0xc75/0xde0 [ 645.490603][ T5897] default_device_exit_batch+0x986/0xa00 [ 645.490626][ T5897] ops_undo_list+0x52b/0x940 [ 645.490649][ T5897] cleanup_net+0x4e5/0x7b0 [ 645.490670][ T5897] process_scheduled_works+0xaec/0x17a0 [ 645.490688][ T5897] worker_thread+0xa50/0xfc0 [ 645.490706][ T5897] kthread+0x388/0x470 [ 645.490727][ T5897] ret_from_fork+0x51e/0xb90 [ 645.490745][ T5897] ret_from_fork_asm+0x1a/0x30 [ 645.490769][ T5897] [ 645.490773][ T5897] The buggy address belongs to the object at ffff88805de36000 [ 645.490773][ T5897] which belongs to the cache kmalloc-cg-4k of size 4096 [ 645.490789][ T5897] The buggy address is located 744 bytes inside of [ 645.490789][ T5897] freed 4096-byte region [ffff88805de36000, ffff88805de37000) [ 645.490807][ T5897] [ 645.490811][ T5897] The buggy address belongs to the physical page: [ 645.490824][ T5897] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5de30 [ 645.490844][ T5897] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 645.490858][ T5897] flags: 0x80000000000040(head|node=0|zone=1) [ 645.490876][ T5897] page_type: f5(slab) [ 645.490892][ T5897] raw: 0080000000000040 ffff88813fe2a500 dead000000000100 dead000000000122 [ 645.490907][ T5897] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 645.490924][ T5897] head: 0080000000000040 ffff88813fe2a500 dead000000000100 dead000000000122 [ 645.490938][ T5897] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 645.490954][ T5897] head: 0080000000000003 ffffea0001778c01 00000000ffffffff 00000000ffffffff [ 645.490968][ T5897] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 645.490977][ T5897] page dumped because: kasan: bad access detected [ 645.490990][ T5897] page_owner tracks the page as allocated [ 645.490996][ T5897] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5804, tgid 5804 (syz-executor), ts 97202760222, free_ts 0 [ 645.491032][ T5897] post_alloc_hook+0x228/0x280 [ 645.491049][ T5897] get_page_from_freelist+0x28bb/0x2950 [ 645.491069][ T5897] __alloc_frozen_pages_noprof+0x18d/0x380 [ 645.491090][ T5897] allocate_slab+0x77/0x660 [ 645.491112][ T5897] refill_objects+0x334/0x3c0 [ 645.491132][ T5897] __pcs_replace_empty_main+0x328/0x5f0 [ 645.491155][ T5897] __kmalloc_noprof+0x530/0x7b0 [ 645.491170][ T5897] __register_sysctl_table+0x72/0x1340 [ 645.491190][ T5897] __addrconf_sysctl_register+0x331/0x4d0 [ 645.491206][ T5897] addrconf_sysctl_register+0x168/0x1c0 [ 645.491223][ T5897] ipv6_add_dev+0xd64/0x1400 [ 645.491245][ T5897] addrconf_notify+0x771/0x1050 [ 645.491261][ T5897] notifier_call_chain+0x19d/0x3a0 [ 645.491283][ T5897] register_netdevice+0x1731/0x1cf0 [ 645.491299][ T5897] veth_newlink+0x4a4/0xb70 [ 645.491324][ T5897] rtnl_newlink_create+0x329/0xb70 [ 645.491348][ T5897] page_owner free stack trace missing [ 645.491354][ T5897] [ 645.491357][ T5897] Memory state around the buggy address: [ 645.491367][ T5897] ffff88805de36180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 645.491379][ T5897] ffff88805de36200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 645.491391][ T5897] >ffff88805de36280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 645.491400][ T5897] ^ [ 645.491410][ T5897] ffff88805de36300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 645.491421][ T5897] ffff88805de36380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 645.491430][ T5897] ================================================================== [ 645.491456][ T5897] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 645.491478][ T5897] CPU: 0 UID: 0 PID: 5897 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 645.491507][ T5897] Tainted: [L]=SOFTLOCKUP [ 645.491515][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.491529][ T5897] Workqueue: events smc_ib_port_event_work [ 645.491553][ T5897] Call Trace: [ 645.491561][ T5897] [ 645.491570][ T5897] vpanic+0x1e0/0x670 [ 645.491603][ T5897] panic+0xc5/0xd0 [ 645.491633][ T5897] ? __pfx_panic+0x10/0x10 [ 645.491666][ T5897] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 645.491704][ T5897] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 645.491737][ T5897] check_panic_on_warn+0x89/0xb0 [ 645.491758][ T5897] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 645.491790][ T5897] end_report+0x6f/0x140 [ 645.491813][ T5897] kasan_report+0x128/0x150 [ 645.491837][ T5897] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 645.491876][ T5897] __ethtool_get_link_ksettings+0x5e/0x170 [ 645.491911][ T5897] ib_get_eth_speed+0x180/0x7f0 [ 645.491950][ T5897] ? lock_acquire+0x106/0x330 [ 645.491981][ T5897] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 645.492016][ T5897] ? lockdep_hardirqs_on+0x7a/0x110 [ 645.492049][ T5897] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 645.492079][ T5897] ? rxe_query_port+0x7e/0x3d0 [ 645.492109][ T5897] rxe_query_port+0x93/0x3d0 [ 645.492139][ T5897] ib_query_port+0x170/0x830 [ 645.492163][ T5897] smc_ib_port_event_work+0x16f/0x940 [ 645.492188][ T5897] ? process_scheduled_works+0xa0f/0x17a0 [ 645.492218][ T5897] ? process_scheduled_works+0xa0f/0x17a0 [ 645.492244][ T5897] process_scheduled_works+0xaec/0x17a0 [ 645.492288][ T5897] ? __pfx_process_scheduled_works+0x10/0x10 [ 645.492316][ T5897] ? assign_work+0x3d5/0x5e0 [ 645.492344][ T5897] worker_thread+0xa50/0xfc0 [ 645.492386][ T5897] kthread+0x388/0x470 [ 645.492416][ T5897] ? __pfx_worker_thread+0x10/0x10 [ 645.492441][ T5897] ? __pfx_kthread+0x10/0x10 [ 645.492472][ T5897] ret_from_fork+0x51e/0xb90 [ 645.492501][ T5897] ? __pfx_ret_from_fork+0x10/0x10 [ 645.492527][ T5897] ? __switch_to+0xc7d/0x1400 [ 645.492552][ T5897] ? __pfx_kthread+0x10/0x10 [ 645.492596][ T5897] ret_from_fork_asm+0x1a/0x30 [ 645.492637][ T5897] [ 645.493219][ T5897] Kernel Offset: disabled