last executing test programs: 4.150315428s ago: executing program 0 (id=3336): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) 3.519408792s ago: executing program 0 (id=3344): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 3.320147606s ago: executing program 0 (id=3348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000400164b08000300", @ANYRES32=r2, @ANYBLOB="050033"], 0x2c}}, 0x80) 3.191209883s ago: executing program 0 (id=3351): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[@cred={{0x1c}}], 0x20, 0x40400d0}}], 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) 3.02861238s ago: executing program 0 (id=3358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000280)=""/13, &(0x7f0000000080)=0xd) 2.859059207s ago: executing program 0 (id=3361): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f0000000f40)=[{0x9, 0x200, 0x0, 0x0}, {0x9, 0x1011, 0x0, 0x0}], 0x2}) 2.193724485s ago: executing program 1 (id=3380): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001780)={r1, 0x0, 0x0}, 0x10) 2.165607215s ago: executing program 1 (id=3382): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}]}, 0x38}}, 0x20044050) 2.06537295s ago: executing program 1 (id=3386): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 1.95971982s ago: executing program 1 (id=3389): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0xd, [0x8003, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x2000006, 0x5f, 0x80000000, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000004, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x0, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x101, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0xfffffffb, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x7, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xffffeffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e8, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2, 0xffe, 0xa2, 0x7, 0xa9, 0x1800, 0xd, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a0ed, 0x2, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x80000000, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x9, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x6, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0x5, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x2, 0xf40, 0x7, 0x1, 0x2, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.868921941s ago: executing program 1 (id=3392): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000104000002000004000000000000", @ANYRES32=0x0, @ANYBLOB="8b90000010e3040008000500", @ANYRES32=r1, @ANYBLOB="2400128009000100766c616e00000000140002800600010004000000040004800400038008000a00", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.640586201s ago: executing program 1 (id=3395): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0xa, @string={0xa, 0x3, "31115117f7e431d0"}}, 0x0, 0x0, 0x0}, 0x0) 1.150058742s ago: executing program 2 (id=3405): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) 920.271559ms ago: executing program 2 (id=3408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1000000000000027, 0x0, [{0xc0000080, 0x0, 0x1}]}) 739.131328ms ago: executing program 3 (id=3410): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}], 0x1, 0x4000000) 661.017886ms ago: executing program 2 (id=3412): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 592.318367ms ago: executing program 3 (id=3413): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffff80}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xffe00000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6040090}, 0x0) 506.880128ms ago: executing program 3 (id=3415): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x101, 0xfffd, 0x4}, 0xc) listen(r0, 0x6) 433.294931ms ago: executing program 4 (id=3416): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, 0xa, 0xfe, 0x3], 0x0, [0x5, 0x4, 0x19, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x4005d, 0x0, 0x7ff, 0x1fe}}, {0x4}}]}]}, 0xb0}}, 0x0) 406.349992ms ago: executing program 3 (id=3417): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x3800048, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 401.648144ms ago: executing program 4 (id=3418): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 319.564694ms ago: executing program 3 (id=3419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) 319.363965ms ago: executing program 4 (id=3420): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) 315.580509ms ago: executing program 2 (id=3421): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32]) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x6044040}, 0x0) 145.259921ms ago: executing program 4 (id=3422): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 137.60536ms ago: executing program 3 (id=3423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000044) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1b8, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18c, 0x3, 0x0, 0x1, [{0x188, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x1b0, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x64, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xca4}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x87e}, @NFTA_LOG_QTHRESHOLD={0x6}]}}}]}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 128.105553ms ago: executing program 4 (id=3424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 73.417638ms ago: executing program 2 (id=3425): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 37.430831ms ago: executing program 2 (id=3426): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000440)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "ecad80", 0x30, 0x3a, 0xfe, @private1, @local, {[], @time_exceed={0x3, 0x1, 0x0, 0xf9, '\x00', {0x0, 0x6, "e4858e", 0x2, 0x11, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x1e}}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 0s ago: executing program 4 (id=3427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8040600) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r0, r1, 0xf, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) kernel console output (not intermixed with test programs): ut: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 108.553764][ T804] usb 4-1: USB disconnect, device number 4 [ 108.598422][ T6257] bridge0: entered promiscuous mode [ 108.705063][ T6263] netlink: 'syz.4.157': attribute type 11 has an invalid length. [ 109.229673][ T6283] Illegal XDP return value 4294967274 on prog (id 16) dev N/A, expect packet loss! [ 109.346896][ T5983] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 109.499346][ T5983] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.499373][ T5983] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 109.499392][ T5983] usb 3-1: config 1 has no interface number 0 [ 109.499436][ T5983] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.503439][ T5983] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.503469][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.503488][ T5983] usb 3-1: Product: syz [ 109.503501][ T5983] usb 3-1: Manufacturer: syz [ 109.503514][ T5983] usb 3-1: SerialNumber: syz [ 109.600314][ T5983] usb 3-1: selecting invalid altsetting 1 [ 110.006988][ T5983] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 110.007041][ T5983] cdc_ncm 3-1:1.1: bind() failure [ 110.041610][ T5983] usb 3-1: USB disconnect, device number 4 [ 110.495250][ T6313] capability: warning: `syz.4.178' uses deprecated v2 capabilities in a way that may be insecure [ 110.790768][ T5911] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.942410][ T5911] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 110.942458][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.942479][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 110.942518][ T5911] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 110.942539][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.949995][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 110.954518][ T5911] usb 4-1: config 0 descriptor?? [ 111.109758][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.109791][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.109813][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 111.109852][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=e104, bcdDevice= 0.00 [ 111.109873][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.185133][ T9] usb 3-1: config 0 descriptor?? [ 111.399332][ T5911] thrustmaster 0003:044F:B323.0002: item fetching failed at offset 3/5 [ 111.400044][ T5911] thrustmaster 0003:044F:B323.0002: parse failed [ 111.400112][ T5911] thrustmaster 0003:044F:B323.0002: probe with driver thrustmaster failed with error -22 [ 111.605075][ T5911] usb 4-1: USB disconnect, device number 5 [ 111.673204][ T9] hid-generic 0003:046D:E104.0003: unbalanced collection at end of report description [ 111.674054][ T9] hid-generic 0003:046D:E104.0003: probe with driver hid-generic failed with error -22 [ 111.893196][ T5911] usb 3-1: USB disconnect, device number 5 [ 112.356986][ T6365] netlink: 56 bytes leftover after parsing attributes in process `syz.4.204'. [ 112.359747][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 112.588324][ T6372] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 112.588324][ T6372] program syz.2.207 not setting count and/or reply_len properly [ 112.965403][ T6388] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 113.114169][ T6396] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.197146][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.214583][ T5983] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.321368][ T6403] pim6reg: entered allmulticast mode [ 113.324321][ T6403] pim6reg: left allmulticast mode [ 113.347176][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 113.352879][ T9] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 113.352905][ T9] usb 1-1: config 0 has no interface number 0 [ 113.352952][ T9] usb 1-1: config 0 interface 96 has no altsetting 0 [ 113.355923][ T9] usb 1-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 113.355949][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.355967][ T9] usb 1-1: Product: syz [ 113.355980][ T9] usb 1-1: Manufacturer: syz [ 113.355994][ T9] usb 1-1: SerialNumber: syz [ 113.418979][ T5983] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.419005][ T5983] usb 2-1: config 0 has no interface number 0 [ 113.419050][ T5983] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.419074][ T5983] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.419110][ T5983] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 113.419131][ T5983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.429040][ T9] usb 1-1: config 0 descriptor?? [ 113.448625][ T5983] usb 2-1: config 0 descriptor?? [ 113.563810][ T9] usbhid 1-1:0.96: couldn't find an input interrupt endpoint [ 113.679315][ T5911] usb 1-1: USB disconnect, device number 4 [ 113.868380][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 113.868456][ T37] audit: type=1326 audit(1767661122.885:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x50000 [ 113.868508][ T37] audit: type=1326 audit(1767661122.885:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x50000 [ 113.868642][ T37] audit: type=1326 audit(1767661122.885:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x50000 [ 113.868781][ T37] audit: type=1326 audit(1767661122.885:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x50000 [ 113.868941][ T37] audit: type=1326 audit(1767661122.885:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x50000 [ 113.869098][ T37] audit: type=1326 audit(1767661122.885:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x50000 [ 113.869183][ T37] audit: type=1326 audit(1767661122.885:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x50000 [ 113.869326][ T37] audit: type=1326 audit(1767661122.885:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x50000 [ 113.869474][ T37] audit: type=1326 audit(1767661122.885:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x50000 [ 113.869575][ T37] audit: type=1326 audit(1767661122.885:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x50000 [ 114.018280][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.227'. [ 114.117910][ T5983] prodikeys 0003:041E:2801.0004: report_id 2289684570 is invalid [ 114.117935][ T5983] prodikeys 0003:041E:2801.0004: item 0 4 1 8 parsing failed [ 114.118714][ T5983] prodikeys 0003:041E:2801.0004: hid parse failed [ 114.118817][ T5983] prodikeys 0003:041E:2801.0004: probe with driver prodikeys failed with error -22 [ 114.123790][ T5983] usb 2-1: USB disconnect, device number 2 [ 114.952371][ T6438] netlink: 'syz.0.237': attribute type 6 has an invalid length. [ 114.952392][ T6438] netlink: 104 bytes leftover after parsing attributes in process `syz.0.237'. [ 115.667629][ T6464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.248'. [ 116.408361][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 116.550318][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 117.127175][ T804] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.278965][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.278997][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.279019][ T804] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.279058][ T804] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 117.279080][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.286093][ T804] usb 1-1: config 0 descriptor?? [ 117.744436][ T804] waltop 0003:172F:0501.0005: item fetching failed at offset 2/5 [ 117.745289][ T804] waltop 0003:172F:0501.0005: probe with driver waltop failed with error -22 [ 117.943512][ T5997] usb 1-1: USB disconnect, device number 5 [ 118.333627][ T5997] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.500084][ T5997] usb 4-1: Using ep0 maxpacket: 16 [ 118.502317][ T5997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.502347][ T5997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.502368][ T5997] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.502408][ T5997] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.502429][ T5997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.536953][ T5997] usb 4-1: config 0 descriptor?? [ 118.902800][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 118.902847][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 119.020641][ T5997] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 119.020675][ T5997] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 119.020701][ T5997] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 119.020726][ T5997] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 119.020751][ T5997] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 119.020776][ T5997] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 119.020800][ T5997] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 119.020825][ T5997] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 119.020849][ T5997] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 119.020873][ T5997] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 119.272232][ T5997] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 119.272263][ T5997] microsoft 0003:045E:07DA.0006: no inputs found [ 119.272276][ T5997] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 119.297364][ T5997] usb 4-1: USB disconnect, device number 6 [ 119.740259][ T6573] fido_id[6573]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 120.247424][ T804] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.401198][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 120.412030][ T804] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 120.412057][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.438821][ T804] usb 4-1: config 0 descriptor?? [ 120.965136][ T804] magicmouse 0003:05AC:0324.0007: hidraw0: USB HID v0.05 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 121.146260][ T5983] usb 4-1: USB disconnect, device number 7 [ 121.266137][ T6616] fido_id[6616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 122.233874][ T6648] macvlan0: entered promiscuous mode [ 122.441435][ T37] kauditd_printk_skb: 2452 callbacks suppressed [ 122.441453][ T37] audit: type=1326 audit(1767661131.455:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 122.471756][ T37] audit: type=1326 audit(1767661131.485:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 122.475857][ T37] audit: type=1326 audit(1767661131.485:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 122.476289][ T37] audit: type=1326 audit(1767661131.485:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 122.476547][ T37] audit: type=1326 audit(1767661131.485:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 122.480044][ T37] audit: type=1326 audit(1767661131.495:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 122.489412][ T37] audit: type=1326 audit(1767661131.505:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 122.492186][ T37] audit: type=1326 audit(1767661131.505:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 122.682387][ T6662] process 'syz.0.339' launched './file0' with NULL argv: empty string added [ 123.091406][ T6679] netlink: 48 bytes leftover after parsing attributes in process `syz.3.348'. [ 124.275832][ T6718] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 124.683806][ T6731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.838371][ T6736] Bluetooth: MGMT ver 1.23 [ 125.176967][ T5983] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.326951][ T5983] usb 2-1: Using ep0 maxpacket: 8 [ 125.331712][ T5983] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 125.331737][ T5983] usb 2-1: config 179 has no interface number 0 [ 125.331785][ T5983] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 125.331810][ T5983] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 125.331835][ T5983] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 125.331859][ T5983] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 125.331884][ T5983] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 125.331909][ T5983] usb 2-1: config 179 interface 65 has no altsetting 0 [ 125.331940][ T5983] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 125.331961][ T5983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.536634][ T5983] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 125.619634][ T5154] input input8: unable to receive magic message: -110 [ 125.829709][ T5154] input input8: unable to receive magic message: -32 [ 125.955609][ T5976] usb 2-1: USB disconnect, device number 3 [ 125.955708][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 125.956038][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 126.177248][ T6768] capability: warning: `syz.3.388' uses 32-bit capabilities (legacy support in use) [ 126.341782][ T5983] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.513592][ T5983] usb 3-1: Using ep0 maxpacket: 32 [ 126.518438][ T5983] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 126.518464][ T5983] usb 3-1: config 0 has no interface number 0 [ 126.518507][ T5983] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 126.518529][ T5983] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.518549][ T5983] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 126.518571][ T5983] usb 3-1: config 0 interface 196 has no altsetting 0 [ 126.540640][ T5983] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 126.540669][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.540687][ T5983] usb 3-1: Product: syz [ 126.540700][ T5983] usb 3-1: Manufacturer: syz [ 126.540713][ T5983] usb 3-1: SerialNumber: syz [ 126.615653][ T5983] usb 3-1: config 0 descriptor?? [ 126.616556][ T6766] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 126.934227][ T6783] syz.3.394 uses obsolete (PF_INET,SOCK_PACKET) [ 127.068161][ T5983] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 127.068455][ T5983] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 127.289008][ T5997] usb 3-1: USB disconnect, device number 6 [ 127.321001][ T5983] IPVS: starting estimator thread 0... [ 127.417288][ T6790] IPVS: using max 9 ests per chain, 21600 per kthread [ 128.635527][ T6830] overlay: Unknown parameter '/ªîÌ(!cÊüKø™§Þv¬aIŸ¡½öæYš›nFÒ#à¾B8ºf¸\~\·>&_‹b´‡(Q_ž8¼['€tÅkç@3Q!ézr|Š_œjùwutõ-•p‚-ÊÞþ<7os£>A J×Í@KPéc¢' [ 129.020664][ T6840] netlink: 'syz.3.421': attribute type 3 has an invalid length. [ 129.273680][ T6850] netlink: 64 bytes leftover after parsing attributes in process `syz.0.425'. [ 129.274376][ T6850] netlink: 64 bytes leftover after parsing attributes in process `syz.0.425'. [ 129.548594][ T6854] netlink: 136 bytes leftover after parsing attributes in process `syz.3.427'. [ 129.548618][ T6854] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 129.746870][ T5977] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.859160][ T6858] syz.4.429 (6858) used greatest stack depth: 17888 bytes left [ 129.910783][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.910814][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.910860][ T5977] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 129.910882][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.939636][ T5977] usb 1-1: config 0 descriptor?? [ 130.488303][ T5977] usbhid 1-1:0.0: can't add hid device: -71 [ 130.490240][ T5977] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 130.513067][ T5977] usb 1-1: USB disconnect, device number 6 [ 130.538600][ T6259] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 130.691419][ T6259] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 130.691447][ T6259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.725298][ T6259] usb 3-1: config 0 descriptor?? [ 130.869368][ T6892] syz.4.444 uses old SIOCAX25GETINFO [ 131.185044][ T6259] smartjoyplus 0003:0925:8866.0008: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.2-1/input0 [ 131.185088][ T6259] smartjoyplus 0003:0925:8866.0008: Force feedback for SmartJoy PLUS PS2/USB adapter [ 131.348671][ T5977] usb 3-1: USB disconnect, device number 7 [ 131.425690][ T6911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.452'. [ 131.501387][ T6905] fido_id[6905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 131.653710][ T6917] macsec1: entered allmulticast mode [ 132.307522][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 132.588516][ T6958] ======================================================= [ 132.588516][ T6958] WARNING: The mand mount option has been deprecated and [ 132.588516][ T6958] and is ignored by this kernel. Remove the mand [ 132.588516][ T6958] option from the mount to silence this warning. [ 132.588516][ T6958] ======================================================= [ 132.755965][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.756066][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.098950][ T7019] xt_l2tp: invalid flags combination: 0 [ 135.087446][ T7053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'. [ 135.888446][ T7083] vivid-000: disconnect [ 135.890894][ T7080] vivid-000: reconnect [ 135.908046][ T7085] mmap: syz.1.523 (7085) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.083586][ T7093] netlink: 36 bytes leftover after parsing attributes in process `syz.4.529'. [ 136.083615][ T7093] netlink: 36 bytes leftover after parsing attributes in process `syz.4.529'. [ 136.156418][ T7097] [U] „ [ 136.497171][ T7110] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 136.497191][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'. [ 136.497205][ T7110] nbd: illegal input index 65544 [ 136.500327][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'. [ 137.508796][ T804] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.641736][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 137.658783][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.658813][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.658855][ T804] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 137.658876][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.729490][ T804] usb 5-1: config 0 descriptor?? [ 137.990361][ T7169] netlink: 100 bytes leftover after parsing attributes in process `syz.2.559'. [ 138.175400][ T804] wacom 0003:056A:030C.0009: unbalanced delimiter at end of report description [ 138.176149][ T804] wacom 0003:056A:030C.0009: parse failed [ 138.176253][ T804] wacom 0003:056A:030C.0009: probe with driver wacom failed with error -22 [ 138.317016][ T5977] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 138.373343][ T5997] usb 5-1: USB disconnect, device number 2 [ 138.476859][ T5977] usb 4-1: Using ep0 maxpacket: 16 [ 138.479561][ T5977] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 138.479584][ T5977] usb 4-1: config 0 has no interface number 0 [ 138.479626][ T5977] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.479649][ T5977] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.479683][ T5977] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 138.479703][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.484876][ T5977] usb 4-1: config 0 descriptor?? [ 138.987641][ T5977] logitech-djreceiver 0003:046D:C52B.000A: hidraw0: USB HID v0.00 Device [HID 046d:c52b] on usb-dummy_hcd.3-1/input46 [ 139.107186][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 139.107570][ T7206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.572'. [ 139.113221][ T5983] usb 4-1: USB disconnect, device number 8 [ 139.291715][ T804] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 139.429411][ T7210] fido_id[7210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 139.456470][ T804] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 139.456499][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.456518][ T804] usb 3-1: Product: syz [ 139.456532][ T804] usb 3-1: Manufacturer: syz [ 139.456546][ T804] usb 3-1: SerialNumber: syz [ 139.501000][ T804] usb 3-1: config 0 descriptor?? [ 139.687031][ T5997] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 139.840298][ T5997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.840330][ T5997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 139.840369][ T5997] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 139.840390][ T5997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.845737][ T5997] usb 1-1: config 0 descriptor?? [ 139.862264][ T7218] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 139.939153][ T804] airspy 3-1:0.0: Board ID: 00 [ 139.939174][ T804] airspy 3-1:0.0: Firmware version: [ 139.976948][ T5911] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.141057][ T804] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 140.145719][ T804] airspy 3-1:0.0: Registered as swradio24 [ 140.145737][ T804] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 140.163744][ T5911] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 140.163768][ T5911] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 140.163786][ T5911] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 140.163803][ T5911] usb 5-1: config 220 has no interface number 2 [ 140.164086][ T5911] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 140.164111][ T5911] usb 5-1: config 220 interface 0 has no altsetting 0 [ 140.164328][ T5911] usb 5-1: config 220 interface 76 has no altsetting 0 [ 140.164346][ T5911] usb 5-1: config 220 interface 1 has no altsetting 0 [ 140.225545][ T5911] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 140.225620][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.225639][ T5911] usb 5-1: Product: syz [ 140.225652][ T5911] usb 5-1: Manufacturer: syz [ 140.225665][ T5911] usb 5-1: SerialNumber: syz [ 140.275855][ T804] usb 3-1: USB disconnect, device number 8 [ 140.326881][ T5997] lenovo 0003:17EF:6067.000B: unknown main item tag 0x1 [ 140.521466][ T5997] lenovo 0003:17EF:6067.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0 [ 140.573743][ T5997] usb 1-1: USB disconnect, device number 7 [ 140.600107][ T5911] usb 5-1: selecting invalid altsetting 0 [ 140.623998][ T5911] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 140.624038][ T5911] uvcvideo 5-1:220.0: No valid video chain found. [ 140.662591][ T5911] usb 5-1: selecting invalid altsetting 0 [ 140.662630][ T5911] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 140.690577][ T5911] usb 5-1: USB disconnect, device number 3 [ 140.806288][ T7242] fido_id[7242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 141.220300][ T7262] netlink: 36 bytes leftover after parsing attributes in process `syz.4.594'. [ 141.221113][ T7262] netlink: 36 bytes leftover after parsing attributes in process `syz.4.594'. [ 141.546893][ T804] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 141.687286][ T5980] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.710158][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.710190][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.710212][ T804] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.710251][ T804] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.710273][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.718619][ T804] usb 1-1: config 0 descriptor?? [ 141.848561][ T5980] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 141.878794][ T5980] usb 2-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 141.878812][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.878821][ T5980] usb 2-1: Product: syz [ 141.878870][ T5980] usb 2-1: Manufacturer: syz [ 141.878878][ T5980] usb 2-1: SerialNumber: syz [ 141.925151][ T5980] usb 2-1: config 0 descriptor?? [ 141.962366][ T5980] go7007-loader 2-1:0.0: can't handle multiple config [ 141.962379][ T5980] go7007-loader 2-1:0.0: probe failed [ 142.144823][ T5997] usb 2-1: USB disconnect, device number 4 [ 142.176377][ T804] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 142.176495][ T804] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 142.176510][ T804] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 142.176525][ T804] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 142.176539][ T804] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 142.176554][ T804] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 142.292723][ T804] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 142.372835][ T7294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.610'. [ 142.400604][ T5983] usb 1-1: USB disconnect, device number 8 [ 142.401472][ T7297] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 142.519295][ T7295] fido_id[7295]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 142.544303][ T7301] warning: `syz.3.612' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.828284][ T7313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.860286][ T7315] sch_fq: defrate 4294967295 ignored. [ 144.013662][ T7381] tipc: Started in network mode [ 144.013673][ T7381] tipc: Node identity , cluster identity 4711 [ 144.013681][ T7381] tipc: Failed to set node id, please configure manually [ 144.013704][ T7381] tipc: Enabling of bearer rejected, failed to enable media [ 144.059320][ T5980] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.207122][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 144.209377][ T5980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.209399][ T5980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.241563][ T5980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.241592][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.241615][ T5980] usb 5-1: Product: syz [ 144.241623][ T5980] usb 5-1: Manufacturer: syz [ 144.241630][ T5980] usb 5-1: SerialNumber: syz [ 144.690110][ T5980] usb 5-1: cannot find UAC_HEADER [ 144.791285][ T5980] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 144.865262][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.881463][ T5980] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 144.948061][ T5980] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 144.951336][ T5983] usb 5-1: USB disconnect, device number 4 [ 145.102526][ T7415] fido_id[7415]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.420798][ T37] audit: type=1326 audit(1767661154.435:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7402 comm="syz.0.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4d14f749 code=0x7fc00000 [ 145.734580][ T7453] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.909383][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'. [ 146.476902][ T5977] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 146.630289][ T5977] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.630318][ T5977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.630350][ T5977] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 146.630371][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.675261][ T5977] usb 4-1: config 0 descriptor?? [ 147.105072][ T5977] elecom 0003:056E:00FD.000E: unknown main item tag 0x0 [ 147.105108][ T5977] elecom 0003:056E:00FD.000E: unknown main item tag 0x0 [ 147.105135][ T5977] elecom 0003:056E:00FD.000E: unknown main item tag 0x0 [ 147.105160][ T5977] elecom 0003:056E:00FD.000E: unknown main item tag 0x0 [ 147.105186][ T5977] elecom 0003:056E:00FD.000E: unknown main item tag 0x0 [ 147.111011][ T5977] elecom 0003:056E:00FD.000E: unknown main item tag 0x0 [ 147.111042][ T5977] elecom 0003:056E:00FD.000E: unknown main item tag 0x0 [ 147.203063][ T5977] elecom 0003:056E:00FD.000E: hidraw0: USB HID v0.03 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0 [ 147.318082][ T5977] usb 4-1: USB disconnect, device number 9 [ 147.433997][ T37] audit: type=1326 audit(1767661156.445:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7509 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x7ffc0000 [ 147.434549][ T37] audit: type=1326 audit(1767661156.445:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7509 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x7ffc0000 [ 147.448637][ T7507] fido_id[7507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 147.488780][ T37] audit: type=1326 audit(1767661156.505:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7509 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f6852bef749 code=0x7ffc0000 [ 147.488830][ T37] audit: type=1326 audit(1767661156.505:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7509 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x7ffc0000 [ 147.488867][ T37] audit: type=1326 audit(1767661156.505:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7509 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6852bef749 code=0x7ffc0000 [ 147.488905][ T37] audit: type=1326 audit(1767661156.505:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7509 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6852bef749 code=0x7ffc0000 [ 147.673364][ T7515] netlink: 104 bytes leftover after parsing attributes in process `syz.2.698'. [ 148.070531][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 148.414423][ T7541] ALSA: mixer_oss: invalid OSS volume '' [ 148.414444][ T7541] ALSA: mixer_oss: invalid index 1374389 [ 148.539625][ T7545] binder: 7544:7545 unknown command 0 [ 148.539760][ T7545] binder: 7544:7545 ioctl c0306201 200000004a40 returned -22 [ 148.594887][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 149.241671][ T7572] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 149.276905][ T5976] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 149.489338][ T5976] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 149.489383][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.489403][ T5976] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 149.489439][ T5976] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 149.489460][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.559107][ T5976] usb 3-1: config 0 descriptor?? [ 149.938152][ T7585] tipc: Enabling of bearer rejected, media not registered [ 150.013835][ T5976] sony 0003:054C:042F.000F: item fetching failed at offset 6/7 [ 150.019195][ T5976] sony 0003:054C:042F.000F: parse failed [ 150.019309][ T5976] sony 0003:054C:042F.000F: probe with driver sony failed with error -22 [ 150.210052][ T804] usb 3-1: USB disconnect, device number 9 [ 150.528675][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.736'. [ 151.392528][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 151.392549][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 153.729846][ T5911] kernel write not supported for file /input/mouse0 (pid: 5911 comm: kworker/1:5) [ 154.271458][ T5997] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 154.419102][ T5997] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 154.419130][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.419143][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 154.419155][ T5997] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 154.419178][ T5997] usb 3-1: New USB device found, idVendor=046d, idProduct=c70a, bcdDevice= 0.00 [ 154.419189][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.452419][ T5997] usb 3-1: config 0 descriptor?? [ 154.466852][ T804] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 154.519204][ T7684] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.639802][ T804] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 154.639833][ T804] usb 5-1: config 0 interface 0 has no altsetting 0 [ 154.673733][ T804] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.673760][ T804] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 154.673778][ T804] usb 5-1: Product: syz [ 154.673791][ T804] usb 5-1: Manufacturer: syz [ 154.673804][ T804] usb 5-1: SerialNumber: syz [ 154.710786][ T804] usb 5-1: config 0 descriptor?? [ 154.807489][ T804] usb 5-1: selecting invalid altsetting 0 [ 154.823596][ T5997] usbhid 3-1:0.0: can't add hid device: -71 [ 154.823714][ T5997] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 154.872107][ T5997] usb 3-1: USB disconnect, device number 10 [ 155.033350][ T804] usb 5-1: USB disconnect, device number 5 [ 155.188043][ T6282] udevd[6282]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.412629][ T7701] netlink: 60 bytes leftover after parsing attributes in process `syz.2.785'. [ 155.412650][ T7701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.785'. [ 155.412665][ T7701] netlink: 60 bytes leftover after parsing attributes in process `syz.2.785'. [ 156.667011][ T5997] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 156.831948][ T5997] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.831977][ T5997] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 156.832002][ T5997] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.832033][ T5997] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 156.832054][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.841447][ T5997] usb 3-1: config 0 descriptor?? [ 156.987046][ T5911] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 157.251185][ T5911] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.251214][ T5911] usb 4-1: config 0 interface 0 has no altsetting 0 [ 157.251451][ T5911] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 157.251473][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.275269][ T5911] usb 4-1: config 0 descriptor?? [ 157.520183][ T5997] hid-led 0003:0FC5:B080.0010: probe with driver hid-led failed with error -71 [ 157.600246][ T5977] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 157.604910][ T5997] usb 3-1: USB disconnect, device number 11 [ 157.701748][ T5911] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 157.701784][ T5911] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 157.701806][ T5911] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 157.701831][ T5911] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 157.701856][ T5911] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 157.701881][ T5911] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 157.701906][ T5911] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 157.701931][ T5911] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 157.701956][ T5911] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 157.701981][ T5911] monterey 0003:0566:3004.0011: unknown main item tag 0x0 [ 157.718759][ T7754] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001158 ! [ 157.759132][ T5977] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.759156][ T5977] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.761238][ T5977] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.761262][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.761280][ T5977] usb 1-1: SerialNumber: syz [ 157.775277][ T5911] monterey 0003:0566:3004.0011: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.3-1/input0 [ 157.919596][ T5983] usb 4-1: USB disconnect, device number 10 [ 158.015067][ T7757] fido_id[7757]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 158.070272][ T5977] usb 1-1: 0:2 : does not exist [ 158.144612][ T5977] usb 1-1: USB disconnect, device number 9 [ 158.205229][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.286864][ T5983] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.436948][ T5983] usb 5-1: Using ep0 maxpacket: 32 [ 158.439701][ T5983] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 158.439725][ T5983] usb 5-1: config 0 has no interface number 0 [ 158.439769][ T5983] usb 5-1: config 0 interface 12 has no altsetting 0 [ 158.442872][ T5983] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 158.442896][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.442915][ T5983] usb 5-1: Product: syz [ 158.442928][ T5983] usb 5-1: Manufacturer: syz [ 158.442940][ T5983] usb 5-1: SerialNumber: syz [ 158.510934][ T5983] usb 5-1: config 0 descriptor?? [ 158.561545][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 158.966928][ T5983] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 158.966983][ T5983] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 158.966998][ T5983] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 158.967088][ T5983] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 159.016427][ T5983] usb 5-1: USB disconnect, device number 6 [ 159.086436][ T5977] IPVS: starting estimator thread 0... [ 159.177278][ T7802] IPVS: using max 9 ests per chain, 21600 per kthread [ 159.237884][ T7809] netlink: 412 bytes leftover after parsing attributes in process `syz.3.833'. [ 159.377118][ T5911] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 159.469683][ T5977] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.536632][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.536673][ T5911] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 159.536694][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.544764][ T5911] usb 1-1: config 0 descriptor?? [ 159.617226][ T5977] usb 2-1: Using ep0 maxpacket: 16 [ 159.621653][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.621683][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.621754][ T5977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.621794][ T5977] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.621815][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.669988][ T5977] usb 2-1: config 0 descriptor?? [ 159.828243][ T7830] pimreg: entered allmulticast mode [ 159.834401][ T7830] pimreg: left allmulticast mode [ 160.089757][ T5911] hid-u2fzero 0003:20A0:4287.0012: item fetching failed at offset 5/7 [ 160.091173][ T5911] hid-u2fzero 0003:20A0:4287.0012: probe with driver hid-u2fzero failed with error -22 [ 160.117597][ T5977] microsoft 0003:045E:07DA.0013: item fetching failed at offset 31/34 [ 160.119530][ T5977] microsoft 0003:045E:07DA.0013: parse failed [ 160.119637][ T5977] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22 [ 160.172905][ T5977] usb 1-1: USB disconnect, device number 10 [ 160.216315][ T5911] IPVS: starting estimator thread 0... [ 160.291326][ T7844] netlink: 'syz.3.851': attribute type 15 has an invalid length. [ 160.333023][ T5875] usb 2-1: USB disconnect, device number 5 [ 160.337225][ T7842] IPVS: using max 15 ests per chain, 36000 per kthread [ 160.564110][ T5977] IPVS: starting estimator thread 0... [ 160.660804][ T7857] IPVS: using max 12 ests per chain, 28800 per kthread [ 160.947380][ T7877] netlink: 32 bytes leftover after parsing attributes in process `syz.0.864'. [ 161.393535][ T7901] netlink: 44 bytes leftover after parsing attributes in process `syz.2.877'. [ 161.393552][ T7901] netlink: 35 bytes leftover after parsing attributes in process `syz.2.877'. [ 161.393561][ T7901] netlink: 'syz.2.877': attribute type 5 has an invalid length. [ 161.393567][ T7901] netlink: 'syz.2.877': attribute type 6 has an invalid length. [ 161.393574][ T7901] netlink: 35 bytes leftover after parsing attributes in process `syz.2.877'. [ 162.458841][ T5977] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 162.551914][ T7959] gretap0: entered promiscuous mode [ 162.564754][ T7959] gretap0: left promiscuous mode [ 162.609559][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.609590][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.609626][ T5977] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 162.609648][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.622466][ T5977] usb 4-1: config 0 descriptor?? [ 163.246338][ T5977] usb 4-1: string descriptor 0 read error: -71 [ 163.248767][ T5977] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71 [ 163.248836][ T5977] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 163.248852][ T5977] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71 [ 163.248902][ T5977] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 163.249006][ T5977] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 163.256484][ T5977] usb 4-1: USB disconnect, device number 11 [ 163.290413][ T805] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.452714][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.452745][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.452781][ T805] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 163.452803][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.464602][ T805] usb 2-1: config 0 descriptor?? [ 163.890696][ T805] hkems 0003:2006:0118.0015: ignoring exceeding usage max [ 163.910479][ T805] hkems 0003:2006:0118.0015: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 163.910511][ T805] hkems 0003:2006:0118.0015: no inputs found [ 163.910523][ T805] hkems 0003:2006:0118.0015: force feedback init failed [ 164.089977][ T5875] usb 2-1: USB disconnect, device number 6 [ 164.099635][ T56] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 164.163384][ T7993] fido_id[7993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 164.208430][ T7997] ip6gretap0: entered promiscuous mode [ 164.208733][ T7997] vlan2: entered promiscuous mode [ 164.256888][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 164.258939][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.258968][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.258988][ T56] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 164.259019][ T56] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 164.259031][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.263888][ T56] usb 1-1: config 0 descriptor?? [ 164.297136][ T805] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 164.452606][ T805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.452726][ T805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 164.452753][ T805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 164.452775][ T805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 164.452794][ T805] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.452972][ T805] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 164.453056][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.509598][ T805] usb 4-1: config 0 descriptor?? [ 164.667041][ T805] rc_core: IR keymap rc-hauppauge not found [ 164.667061][ T805] Registered IR keymap rc-empty [ 164.669380][ T805] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.687473][ T5911] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 164.695513][ T805] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.711759][ T805] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 164.715067][ T805] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 164.794280][ T56] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0016/input/input12 [ 164.806626][ T805] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.831333][ T805] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.847090][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 164.847308][ T805] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.852836][ T5911] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 164.852942][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.852961][ T5911] usb 3-1: Product: syz [ 164.852974][ T5911] usb 3-1: Manufacturer: syz [ 164.852988][ T5911] usb 3-1: SerialNumber: syz [ 164.866990][ T805] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.886997][ T805] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.890216][ T5911] usb 3-1: config 0 descriptor?? [ 164.902328][ T5911] usbtest 3-1:0.0: FX2 device [ 164.902347][ T5911] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 164.908401][ T805] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.934686][ T805] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.946930][ T805] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.956596][ T56] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 164.966996][ T805] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.989948][ T805] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 165.008810][ T805] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 165.008824][ T805] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 165.012768][ T56] usb 1-1: USB disconnect, device number 11 [ 165.070081][ T805] usb 4-1: USB disconnect, device number 12 [ 165.188009][ T8017] fido_id[8017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 165.201695][ T5911] usb 3-1: USB disconnect, device number 12 [ 166.133871][ T8055] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 166.135754][ T8055] team0: Device ipvlan2 is already an upper device of the team interface [ 166.320180][ T8065] netlink: 'syz.3.952': attribute type 10 has an invalid length. [ 166.545978][ T8065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.556840][ T805] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 166.590612][ T8065] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 166.711198][ T805] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.711231][ T805] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.711253][ T805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 166.711284][ T805] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00 [ 166.711305][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.776232][ T805] usb 1-1: config 0 descriptor?? [ 166.779054][ T56] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.929418][ T56] usb 2-1: Using ep0 maxpacket: 32 [ 166.935258][ T56] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 166.935284][ T56] usb 2-1: config 0 has no interface number 0 [ 166.935384][ T56] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 166.935408][ T56] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.935429][ T56] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 166.935450][ T56] usb 2-1: config 0 interface 196 has no altsetting 0 [ 166.949324][ T56] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 166.949399][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.949418][ T56] usb 2-1: Product: syz [ 166.949431][ T56] usb 2-1: Manufacturer: syz [ 166.949444][ T56] usb 2-1: SerialNumber: syz [ 167.141445][ T56] usb 2-1: config 0 descriptor?? [ 167.152164][ T8074] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 167.285226][ T805] hid-corsair-void 0003:1B1C:0A31.0017: unbalanced delimiter at end of report description [ 167.286125][ T805] hid-corsair-void 0003:1B1C:0A31.0017: parse failed (reason: -22) [ 167.289732][ T805] hid-corsair-void 0003:1B1C:0A31.0017: probe with driver hid-corsair-void failed with error -22 [ 167.469496][ T5875] usb 1-1: USB disconnect, device number 12 [ 167.819578][ T56] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 167.908601][ T56] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 167.944662][ T56] usb 2-1: USB disconnect, device number 7 [ 168.738413][ T56] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 168.819020][ T5977] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 168.967806][ T5977] usb 1-1: Using ep0 maxpacket: 8 [ 168.970406][ T5977] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 168.970463][ T5977] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.970487][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.970511][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 168.973340][ T5977] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 168.973366][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.973385][ T5977] usb 1-1: Product: syz [ 168.973398][ T5977] usb 1-1: Manufacturer: syz [ 168.973412][ T5977] usb 1-1: SerialNumber: syz [ 168.990272][ T5977] usb 1-1: config 0 descriptor?? [ 169.015913][ T8131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.224451][ T5977] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 169.372147][ T5977] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 169.650112][ C1] powermate: config urb returned -71 [ 169.654257][ C1] powermate: config urb returned -71 [ 169.655152][ C1] powermate: config urb returned -71 [ 169.655359][ C1] powermate: config urb returned -71 [ 169.706103][ T5977] usb 1-1: USB disconnect, device number 13 [ 169.706216][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 169.906238][ T8186] netlink: 'syz.2.1009': attribute type 2 has an invalid length. [ 169.949457][ T8186] netlink: 'syz.2.1009': attribute type 2 has an invalid length. [ 169.977491][ T8190] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1012'. [ 169.977558][ T8190] tipc: Started in network mode [ 169.977584][ T8190] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 169.978939][ T8190] tipc: Enabled bearer , priority 10 [ 170.006369][ T37] audit: type=1326 audit(1767661179.005:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 170.013163][ T37] audit: type=1326 audit(1767661179.015:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 170.013209][ T37] audit: type=1326 audit(1767661179.025:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 170.013247][ T37] audit: type=1326 audit(1767661179.025:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 170.013550][ T37] audit: type=1326 audit(1767661179.025:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 170.014305][ T37] audit: type=1326 audit(1767661179.025:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 170.608264][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1028'. [ 171.247330][ T5983] tipc: Node number set to 10005162 [ 171.319712][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'. [ 171.379857][ T37] audit: type=1326 audit(1767661180.395:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 171.417408][ T37] audit: type=1326 audit(1767661180.415:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 171.417725][ T37] audit: type=1326 audit(1767661180.435:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 171.418427][ T37] audit: type=1326 audit(1767661180.435:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 171.796998][ T8278] Bluetooth: MGMT ver 1.23 [ 172.245263][ T8298] nbd: must specify an index to disconnect [ 173.514659][ T8369] tipc: New replicast peer: 255.255.255.83 [ 173.515165][ T8369] tipc: Enabled bearer , priority 10 [ 173.758713][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 173.758778][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 174.779805][ T8420] bridge0: port 3(gretap0) entered blocking state [ 174.789051][ T8420] bridge0: port 3(gretap0) entered disabled state [ 174.791163][ T8420] gretap0: entered allmulticast mode [ 174.807154][ T8420] gretap0: entered promiscuous mode [ 175.874334][ T8478] team0: entered promiscuous mode [ 175.874356][ T8478] team_slave_0: entered promiscuous mode [ 175.874523][ T8478] team_slave_1: entered promiscuous mode [ 175.875042][ T8478] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 176.003528][ T8486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1157'. [ 176.437212][ T56] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 176.590011][ T56] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.590040][ T56] usb 4-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.590075][ T56] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.590107][ T56] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 176.590129][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.619749][ T56] usb 4-1: config 0 descriptor?? [ 177.056424][ T56] saitek 0003:06A3:0621.0018: item fetching failed at offset 5/7 [ 177.057375][ T56] saitek 0003:06A3:0621.0018: parse failed [ 177.057474][ T56] saitek 0003:06A3:0621.0018: probe with driver saitek failed with error -22 [ 177.250073][ T5983] usb 4-1: USB disconnect, device number 13 [ 179.159437][ T8633] Invalid ELF header magic: != ELF [ 179.256841][ T5875] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 179.418365][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 179.420732][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.420777][ T5875] usb 4-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 179.420799][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.475372][ T5976] kernel write not supported for file /sequencer (pid: 5976 comm: kworker/1:6) [ 179.495424][ T5875] usb 4-1: config 0 descriptor?? [ 179.720537][ T5875] usbhid 4-1:0.0: can't add hid device: -71 [ 179.720746][ T5875] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 179.751375][ T5875] usb 4-1: USB disconnect, device number 14 [ 179.976290][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 179.976312][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 181.103340][ T8723] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.023350][ T8806] sp0: Synchronizing with TNC [ 183.886876][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 184.058906][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.058933][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.062622][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.062649][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.062659][ T9] usb 4-1: Product: syz [ 184.062666][ T9] usb 4-1: Manufacturer: syz [ 184.062673][ T9] usb 4-1: SerialNumber: syz [ 184.338041][ T9] usb 4-1: 0:2 : does not exist [ 184.354464][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 184.440336][ T9] usb 4-1: USB disconnect, device number 15 [ 184.549834][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.079583][ T8901] No buffer was provided with the request [ 185.192579][ T8907] Invalid logical block size (8192) [ 186.073970][ T8954] tipc: MTU too low for tipc bearer [ 187.046315][ T9008] x_tables: ip6_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 168 [ 187.803851][ T9050] nbd: must specify at least one socket [ 188.078368][ T9024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.078539][ T9024] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 188.164197][ T9066] sctp: [Deprecated]: syz.2.1433 (pid 9066) Use of int in max_burst socket option. [ 188.164197][ T9066] Use struct sctp_assoc_value instead [ 188.200429][ T9024] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 188.283707][ T9024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.283816][ T9024] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 188.391148][ T9024] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 188.465621][ T9024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.465767][ T9024] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 188.558271][ T9024] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 188.632457][ T9024] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.632574][ T9024] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 188.711045][ T9024] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 188.793208][ T9024] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 188.835142][ T9024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.835366][ T9024] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 188.918511][ T9024] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 189.198495][ T9120] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1459'. [ 189.198697][ T9120] block nbd0: not configured, cannot reconfigure [ 189.470114][ T5118] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.496942][ T56] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 189.657505][ T56] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 189.657532][ T56] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 189.657549][ T56] usb 4-1: config 8 has no interface number 0 [ 189.657593][ T56] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.657618][ T56] usb 4-1: config 8 interface 177 has no altsetting 0 [ 189.657648][ T56] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 189.657669][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.681809][ T56] ir_toy 4-1:8.177: required endpoints not found [ 189.879582][ T804] usb 4-1: USB disconnect, device number 16 [ 190.346957][ T5118] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.506941][ T5118] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.666906][ T5118] Bluetooth: hci4: command 0x2016 tx timeout [ 190.823601][ T9206] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 190.907040][ T5118] Bluetooth: hci3: command 0x0405 tx timeout [ 191.096907][ T805] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 191.246910][ T805] usb 4-1: Using ep0 maxpacket: 8 [ 191.254813][ T805] usb 4-1: config 0 has an invalid interface number: 163 but max is 0 [ 191.254838][ T805] usb 4-1: config 0 has no interface number 0 [ 191.254883][ T805] usb 4-1: config 0 interface 163 altsetting 6 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 191.254908][ T805] usb 4-1: config 0 interface 163 has no altsetting 0 [ 191.291810][ T805] usb 4-1: New USB device found, idVendor=0499, idProduct=1059, bcdDevice=10.4d [ 191.291838][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.291856][ T805] usb 4-1: Product: syz [ 191.291869][ T805] usb 4-1: Manufacturer: syz [ 191.291882][ T805] usb 4-1: SerialNumber: syz [ 191.308798][ T805] usb 4-1: config 0 descriptor?? [ 191.548292][ T5118] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.605584][ T805] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.689377][ T805] snd-usb-audio 4-1:0.163: probe with driver snd-usb-audio failed with error -2 [ 191.706476][ T805] usb 4-1: USB disconnect, device number 17 [ 191.739352][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.163/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.922720][ T9260] tipc: Enabling of bearer rejected, failed to enable media [ 192.174118][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 192.399901][ T9290] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1543'. [ 192.426905][ T5118] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.559598][ T9300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1548'. [ 192.590740][ T5118] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.700781][ T9308] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1552'. [ 192.747068][ T5118] Bluetooth: hci4: command 0x2016 tx timeout [ 192.987219][ T5118] Bluetooth: hci3: command 0x0405 tx timeout [ 193.193862][ T804] hid_parser_main: 1261 callbacks suppressed [ 193.193884][ T804] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 193.193912][ T804] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 193.193936][ T804] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 193.193961][ T804] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 193.193986][ T804] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 193.194009][ T804] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 193.194032][ T804] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 193.194056][ T804] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 193.194080][ T804] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 193.194103][ T804] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 193.286216][ T804] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 193.361487][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1569'. [ 193.474130][ T9341] fido_id[9341]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.627222][ T5118] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.163556][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 194.193333][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.193400][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.507261][ T5118] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.667171][ T5118] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.704469][ T9416] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.1602'. [ 194.827201][ T5118] Bluetooth: hci4: command 0x2016 tx timeout [ 195.034915][ T9442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1617'. [ 195.067338][ T5118] Bluetooth: hci3: command 0x0405 tx timeout [ 195.796927][ T804] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 195.910352][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 195.955577][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.955617][ T804] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 195.955638][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.988288][ T5983] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 195.997620][ T804] usb 3-1: config 0 descriptor?? [ 196.141733][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.141758][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.141815][ T5983] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 196.141828][ T5983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.155713][ T5983] usb 2-1: config 0 descriptor?? [ 196.613420][ T5983] waltop 0003:172F:0034.001B: item fetching failed at offset 5/7 [ 196.614176][ T5983] waltop 0003:172F:0034.001B: probe with driver waltop failed with error -22 [ 196.632379][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1647'. [ 196.669047][ T804] usb 3-1: USB disconnect, device number 13 [ 196.801670][ T5977] usb 2-1: USB disconnect, device number 8 [ 196.906860][ T5118] Bluetooth: hci4: command 0x2016 tx timeout [ 197.265099][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 197.518860][ T9557] tmpfs: Cannot change global quota limit on remount [ 197.767907][ T9575] tipc: Enabling of bearer rejected, media not registered [ 198.217217][ T9601] Invalid ELF header magic: != ELF [ 198.707383][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1709'. [ 199.076564][ T9657] overlayfs: failed to resolve '/ õ0Ç' ': -2 [ 199.828029][ T5976] kernel read not supported for file /newroot/262 (pid: 5976 comm: kworker/1:6) [ 200.463488][ T9726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1754'. [ 200.509853][ T9730] ptrace attach of "./syz-executor exec"[5802] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[9730] [ 200.762573][ T9738] overlayfs: conflicting lowerdir path [ 200.926878][ T5977] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 201.078906][ T5977] usb 4-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 201.078938][ T5977] usb 4-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.078961][ T5977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 201.078993][ T5977] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 201.079015][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.139995][ T5977] usb 4-1: config 0 descriptor?? [ 201.533299][ T9779] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.578894][ T5977] hid_parser_main: 29 callbacks suppressed [ 201.578919][ T5977] cypress 0003:04B4:DE64.001C: unknown main item tag 0x7 [ 201.609254][ T5977] cypress 0003:04B4:DE64.001C: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.3-1/input0 [ 201.790949][ T5977] usb 4-1: USB disconnect, device number 18 [ 201.841360][ T9794] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.1787'. [ 202.073537][ T9804] mkiss: ax0: crc mode is auto. [ 202.537100][ T804] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 202.541454][ T9834] nftables ruleset with unbound set [ 202.688878][ T804] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 202.688904][ T804] usb 3-1: config 0 has no interface number 0 [ 202.688949][ T804] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 202.688971][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.699631][ T804] usb 3-1: config 0 descriptor?? [ 202.964799][ T9818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.965862][ T9818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.989599][ T5118] Bluetooth: hci3: adv larger than maximum supported [ 202.989622][ T5118] Bluetooth: hci3: Malformed LE Event: 0x0d [ 203.017528][ T804] usb 3-1: string descriptor 0 read error: -71 [ 203.019729][ T804] usb-storage 3-1:0.168: USB Mass Storage device detected [ 203.068627][ T804] usb-storage 3-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 203.197704][ T804] usb 3-1: USB disconnect, device number 14 [ 203.613810][ T9880] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1829'. [ 203.936889][ T5875] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 204.111151][ T5875] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 204.111179][ T5875] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 204.111198][ T5875] usb 3-1: Product: syz [ 204.111210][ T5875] usb 3-1: Manufacturer: syz [ 204.111223][ T5875] usb 3-1: SerialNumber: syz [ 204.116479][ T5875] usb 3-1: config 0 descriptor?? [ 204.180682][ T5875] ch341 3-1:0.0: ch341-uart converter detected [ 204.268274][ T804] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 204.365213][ T5875] usb 3-1: failed to receive control message: -121 [ 204.365274][ T5875] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 204.422103][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 204.424803][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.424833][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.424871][ T804] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 204.424892][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.435511][ T804] usb 4-1: config 0 descriptor?? [ 204.651410][ T9922] netlink: 'syz.1.1850': attribute type 2 has an invalid length. [ 205.051852][ T804] usb 4-1: string descriptor 0 read error: -71 [ 205.081304][ T804] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 205.081390][ T804] letsketch 0003:6161:4D15.001D: probe with driver letsketch failed with error -32 [ 205.094764][ T804] usb 4-1: USB disconnect, device number 19 [ 205.236956][ T5976] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 205.392963][ T5976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.392996][ T5976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.393033][ T5976] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 205.393055][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.439576][ T5976] usb 2-1: config 0 descriptor?? [ 205.856938][ T56] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 205.894565][ T5976] ryos 0003:1E7D:3138.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 206.006837][ T56] usb 4-1: Using ep0 maxpacket: 16 [ 206.011460][ T56] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 206.011496][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.011515][ T56] usb 4-1: Product: syz [ 206.011528][ T56] usb 4-1: Manufacturer: syz [ 206.011541][ T56] usb 4-1: SerialNumber: syz [ 206.054752][ T56] usb 4-1: config 0 descriptor?? [ 206.079066][ T804] usb 2-1: USB disconnect, device number 9 [ 206.081720][ T56] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 206.091515][ T9970] fido_id[9970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 206.273675][ T56] gspca_sn9c2028: read1 error -32 [ 206.477744][ T56] gspca_sn9c2028: read1 error -71 [ 206.477835][ T56] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 206.498499][ T56] usb 4-1: USB disconnect, device number 20 [ 206.510492][ T5918] udevd[5918]: setting mode of /dev/bus/usb/004/020 to 020664 failed: No such file or directory [ 206.510681][ T5918] udevd[5918]: setting owner of /dev/bus/usb/004/020 to uid=0, gid=0 failed: No such file or directory [ 206.702653][ T56] usb 3-1: USB disconnect, device number 15 [ 206.706354][ T56] ch341 3-1:0.0: device disconnected [ 207.685713][T10041] program syz.0.1907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.928483][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1914'. [ 208.091519][T10061] program syz.2.1917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.583172][T10087] netlink: 'syz.1.1928': attribute type 2 has an invalid length. [ 209.148244][T10114] can0: slcan on ttyS3. [ 209.297313][T10114] can0 (unregistered): slcan off ttyS3. [ 209.711673][T10149] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 210.006936][ T5976] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 210.156936][ T5976] usb 4-1: Using ep0 maxpacket: 8 [ 210.161292][ T5976] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 210.161331][ T5976] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 210.161368][ T5976] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 210.161392][ T5976] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.161416][ T5976] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 210.161439][ T5976] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 210.161461][ T5976] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 210.161482][ T5976] usb 4-1: config 168 interface 0 has no altsetting 0 [ 210.162558][ T5976] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 210.162593][ T5976] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 210.162630][ T5976] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 210.162653][ T5976] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.162674][ T5976] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 210.162695][ T5976] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 210.162718][ T5976] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 210.162742][ T5976] usb 4-1: config 168 interface 0 has no altsetting 0 [ 210.164303][ T5976] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 210.165522][ T5976] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 210.165566][ T5976] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 210.165591][ T5976] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.165615][ T5976] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 210.165638][ T5976] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 210.165663][ T5976] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 210.165687][ T5976] usb 4-1: config 168 interface 0 has no altsetting 0 [ 210.191170][ T5976] usb 4-1: string descriptor 0 read error: -22 [ 210.191321][ T5976] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 210.191342][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.318094][ T5976] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 210.532508][ T5976] usb 4-1: USB disconnect, device number 21 [ 210.577958][T10183] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 210.578094][T10183] ALSA: mixer_oss: invalid OSS volume '' [ 210.748035][T10189] loop6: detected capacity change from 0 to 524287999 [ 211.485164][T10223] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1979'. [ 212.056879][ T805] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 212.207467][ T805] usb 4-1: Using ep0 maxpacket: 8 [ 212.221594][ T805] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 212.221628][ T805] usb 4-1: config 150 has no interface number 0 [ 212.221674][ T805] usb 4-1: config 150 interface 204 has no altsetting 0 [ 212.221692][ T805] usb 4-1: config 150 interface 1 has no altsetting 0 [ 212.260098][ T805] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 212.260126][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.260143][ T805] usb 4-1: Product: syz [ 212.260156][ T805] usb 4-1: Manufacturer: syz [ 212.260169][ T805] usb 4-1: SerialNumber: syz [ 212.535588][ T805] xr_serial 4-1:150.204: xr_serial converter detected [ 213.127699][ T805] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 213.127758][ T805] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 213.157852][ T805] usb 4-1: USB disconnect, device number 22 [ 213.162131][ T805] xr_serial 4-1:150.204: device disconnected [ 213.433639][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2014'. [ 214.287118][ T805] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 214.440694][ T805] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.440765][ T805] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.440805][ T805] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.443327][ T805] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.443354][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.443373][ T805] usb 2-1: Product: syz [ 214.443386][ T805] usb 2-1: Manufacturer: syz [ 214.443400][ T805] usb 2-1: SerialNumber: syz [ 214.548774][ T805] cdc_mbim 2-1:1.0: skipping garbage [ 214.817232][T10355] netlink: 'syz.2.2038': attribute type 21 has an invalid length. [ 214.817434][T10355] netlink: 'syz.2.2038': attribute type 6 has an invalid length. [ 214.817449][T10355] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2038'. [ 215.267900][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2048'. [ 215.342370][ T805] cdc_mbim 2-1:1.0: bind() failure [ 215.376302][ T805] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 215.376341][ T805] cdc_ncm 2-1:1.1: bind() failure [ 215.419381][ T805] usb 2-1: USB disconnect, device number 10 [ 215.538369][T10387] program syz.2.2054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.738153][ T5976] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 215.886898][ T5976] usb 4-1: Using ep0 maxpacket: 32 [ 215.910163][ T5976] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 215.910192][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.910213][ T5976] usb 4-1: Product: syz [ 215.910226][ T5976] usb 4-1: Manufacturer: syz [ 215.910240][ T5976] usb 4-1: SerialNumber: syz [ 215.952421][ T5976] usb 4-1: config 0 descriptor?? [ 216.251032][ T5976] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 023 [ 216.648367][T10424] ip6gre1: entered promiscuous mode [ 216.648394][T10424] ip6gre1: entered allmulticast mode [ 216.682240][ T7350] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.682905][ T5976] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.683944][ T7350] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.128362][T10447] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2083'. [ 217.247072][ T56] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.356908][ T805] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 217.507941][ T805] usb 3-1: Using ep0 maxpacket: 8 [ 217.521061][ T805] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.521089][ T805] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.532502][ T805] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.532531][ T805] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.532577][ T805] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.547366][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.567331][ T56] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.843921][ T805] usb 3-1: GET_CAPABILITIES returned 0 [ 217.844187][ T805] usbtmc 3-1:16.0: can't read capabilities [ 218.031273][T10484] option changes via remount are deprecated (pid=10483 comm=syz.0.2100) [ 218.031296][T10484] cgroup: option or name mismatch, new: 0x0 "nofavordynmods", old: 0x0 "" [ 218.062510][ T804] usb 3-1: USB disconnect, device number 16 [ 218.518420][T10384] i2c i2c-1: failure reading data [ 218.521110][ T805] usb 4-1: USB disconnect, device number 23 [ 218.682583][T10513] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2116'. [ 219.056859][ T805] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 219.208765][ T805] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.208790][ T805] usb 3-1: config 0 has no interface number 0 [ 219.212742][ T805] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 219.212770][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.212790][ T805] usb 3-1: Product: syz [ 219.212803][ T805] usb 3-1: Manufacturer: syz [ 219.212818][ T805] usb 3-1: SerialNumber: syz [ 219.285196][ T805] usb 3-1: config 0 descriptor?? [ 219.331003][T10548] loop7: detected capacity change from 0 to 7 [ 219.361089][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 219.361266][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 219.362981][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 219.363011][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 219.363267][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 219.363295][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 219.363535][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 219.363566][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 219.363901][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 219.363929][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 219.364252][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 219.364280][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 219.364509][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 219.364538][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 219.364616][ T5918] ldm_validate_partition_table(): Disk read failed. [ 219.364776][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 219.364805][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 219.365028][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 219.365056][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 219.365374][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 219.365401][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 219.365744][ T5918] Dev loop7: unable to read RDB block 0 [ 219.374562][ T5918] loop7: unable to read partition table [ 219.374794][ T5918] loop7: partition table beyond EOD, truncated [ 219.546913][ T805] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 219.600867][ T805] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 219.601276][ T805] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 219.601337][ T805] usb 3-1: media controller created [ 219.643308][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.653478][T10552] loop7: detected capacity change from 7 to 0 [ 219.667602][T10548] ldm_validate_partition_table(): Disk read failed. [ 219.667634][T10548] Dev loop7: unable to read RDB block 0 [ 219.667663][T10548] loop7: unable to read partition table [ 219.667860][T10548] loop7: partition table beyond EOD, truncated [ 219.667894][T10548] loop_reread_partitions: partition scan of loop7 (VÅå=ì³pÿ7ª·¤ ËŠ6ΘhÄ ¶–)·rìjó‡ÅêzNâ5î&ŠqMqÏ-+ƒ-¶@ß+Œ) failed (rc=-5) [ 219.769927][ T805] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 219.795197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.853354][ T805] usb 3-1: USB disconnect, device number 17 [ 220.083275][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2141'. [ 220.666976][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.347911][T10623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.351401][T10623] bond0: (slave bond2): Enslaving as an active interface with an up link [ 222.010684][T10651] overlayfs: failed to clone upperpath [ 222.494760][ T5976] IPVS: starting estimator thread 0... [ 222.606911][T10666] IPVS: using max 9 ests per chain, 21600 per kthread [ 223.636919][ T5976] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 223.790305][ T5976] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 223.790335][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.823166][ T5976] usb 3-1: config 0 descriptor?? [ 224.298114][ T5976] playstation 0003:054C:0DF2.001F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 224.472810][ T5976] playstation 0003:054C:0DF2.001F: Invalid byte count transferred, expected 20 got 0 [ 224.472849][ T5976] playstation 0003:054C:0DF2.001F: Failed to retrieve DualSense pairing info: -22 [ 224.472902][ T5976] playstation 0003:054C:0DF2.001F: Failed to get MAC address from DualSense [ 224.473129][ T5976] playstation 0003:054C:0DF2.001F: Failed to create dualsense. [ 224.530263][ T5976] playstation 0003:054C:0DF2.001F: probe with driver playstation failed with error -22 [ 224.683513][ T5875] usb 3-1: USB disconnect, device number 18 [ 224.866218][T10743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2221'. [ 225.316617][T10757] binder: 10756:10757 ioctl c018620c 200000000000 returned -22 [ 226.076860][ T56] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 226.226832][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 226.230556][ T56] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.230583][ T56] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.230607][ T56] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.230632][ T56] usb 3-1: config 1 interface 0 has no altsetting 0 [ 226.292376][ T56] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 226.292407][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.292427][ T56] usb 3-1: Product: syz [ 226.292441][ T56] usb 3-1: Manufacturer: syz [ 226.292456][ T56] usb 3-1: SerialNumber: syz [ 226.572024][ T56] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 226.807162][ T56] usb 3-1: USB disconnect, device number 19 [ 226.829865][ T56] usblp0: removed [ 227.304053][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 228.117397][ T804] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 228.267565][T10896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2293'. [ 228.268321][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2293'. [ 228.268342][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2293'. [ 228.269182][ T804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.269236][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 228.269264][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 228.269290][ T804] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 228.271508][ T804] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 228.271534][ T804] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 228.271553][ T804] usb 4-1: Manufacturer: syz [ 228.279136][ T804] usb 4-1: config 0 descriptor?? [ 228.628648][ T804] rc_core: IR keymap rc-hauppauge not found [ 228.628670][ T804] Registered IR keymap rc-empty [ 228.630117][ T804] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 228.659299][ T804] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 228.688694][ T804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 228.692377][ T804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 228.727765][ T804] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 228.746986][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.750361][ T804] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 228.767437][ T804] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 228.787318][ T804] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 228.817518][ T804] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 228.847373][ T804] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 228.867901][ T804] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 228.887325][ T804] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 228.909451][ T804] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 228.911583][T10928] netlink: 'syz.2.2307': attribute type 10 has an invalid length. [ 228.927334][ T804] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 228.963899][ T804] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 228.963925][ T804] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 228.996620][T10928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.029346][ T804] usb 4-1: USB disconnect, device number 24 [ 229.047339][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'. [ 229.047370][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2309'. [ 230.118127][T10988] netlink: 'syz.0.2337': attribute type 10 has an invalid length. [ 230.118148][T10988] netem: change failed [ 230.730669][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2351'. [ 230.745665][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2351'. [ 231.291941][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 231.291959][ T37] audit: type=1326 audit(1767661240.305:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11053 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 231.292782][ T37] audit: type=1326 audit(1767661240.305:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11053 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 231.292830][ T37] audit: type=1326 audit(1767661240.305:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11053 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 231.294354][ T37] audit: type=1326 audit(1767661240.305:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11053 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 231.294406][ T37] audit: type=1326 audit(1767661240.305:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11053 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 231.402382][ T37] audit: type=1326 audit(1767661240.305:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11053 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 231.402433][ T37] audit: type=1326 audit(1767661240.305:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11053 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 231.402473][ T37] audit: type=1326 audit(1767661240.305:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11053 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 233.464965][T11159] kvm: kvm [11156]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 233.950057][T11192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2434'. [ 233.950090][T11192] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2434'. [ 234.565944][T11231] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2454'. [ 234.984002][T11206] [U]  [ 235.082235][T11261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2468'. [ 235.082293][T11261] netem: change failed [ 235.222881][T11267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2471'. [ 235.315271][T11271] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 235.315292][T11271] dvmrp1: persist disabled [ 236.206303][ T37] audit: type=1326 audit(1767661245.215:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11325 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 236.206437][ T37] audit: type=1326 audit(1767661245.215:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11325 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 237.468003][T11405] netlink: 'syz.3.2534': attribute type 12 has an invalid length. [ 237.468025][T11405] netlink: 'syz.3.2534': attribute type 29 has an invalid length. [ 237.468039][T11405] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2534'. [ 237.468077][T11405] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2534'. [ 237.544887][ T805] kernel read not supported for file 1049/task/1050/setgroups (pid: 805 comm: kworker/1:2) [ 237.730276][T11422] Dead loop on virtual device ip6_vti0, fix it urgently! [ 237.817496][T11426] netlink: 'syz.3.2546': attribute type 13 has an invalid length. [ 237.817519][T11426] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2546'. [ 237.819348][T11426] syz_tun: refused to change device tx_queue_len [ 237.819368][T11426] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 237.977094][T11434] program syz.3.2550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.187032][ T5980] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 238.347331][ T5980] usb 2-1: Using ep0 maxpacket: 8 [ 238.349692][ T5980] usb 2-1: config 0 has an invalid interface number: 88 but max is 3 [ 238.349716][ T5980] usb 2-1: config 0 has an invalid interface number: 250 but max is 3 [ 238.349735][ T5980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.349752][ T5980] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 238.349772][ T5980] usb 2-1: config 0 has no interface number 0 [ 238.349787][ T5980] usb 2-1: config 0 has no interface number 1 [ 238.349830][ T5980] usb 2-1: config 0 interface 88 has no altsetting 0 [ 238.349848][ T5980] usb 2-1: config 0 interface 250 has no altsetting 0 [ 238.349879][ T5980] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 238.349900][ T5980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.389522][ T5980] usb 2-1: config 0 descriptor?? [ 238.398802][T11458] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2562'. [ 238.602335][ T5980] usb 2-1: string descriptor 0 read error: -71 [ 238.643842][ T5980] usb 2-1: selecting invalid altsetting 0 [ 238.643866][ T5980] usb 2-1: Could not set interface, error -22 [ 238.671353][ T5980] usb 2-1: USB disconnect, device number 11 [ 239.386925][ T805] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 239.445782][T11509] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2586'. [ 239.539380][ T805] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 239.539409][ T805] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 239.539428][ T805] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 239.539449][ T805] usb 3-1: config 150 has no interface number 0 [ 239.539496][ T805] usb 3-1: config 150 interface 204 has no altsetting 0 [ 239.541892][ T805] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 239.541919][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.541939][ T805] usb 3-1: Product: syz [ 239.541953][ T805] usb 3-1: Manufacturer: syz [ 239.541966][ T805] usb 3-1: SerialNumber: syz [ 240.055347][ T9] usb 3-1: USB disconnect, device number 20 [ 240.543363][T11566] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2613'. [ 240.846216][T11578] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 240.846216][T11578] program syz.0.2620 not setting count and/or reply_len properly [ 241.748173][ T5118] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 243.096917][ T5875] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 243.259378][ T5875] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 243.259405][ T5875] usb 3-1: config 0 has no interface number 0 [ 243.259437][ T5875] usb 3-1: config 0 interface 84 has no altsetting 0 [ 243.265043][ T5875] usb 3-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=fb.88 [ 243.265073][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.265093][ T5875] usb 3-1: Product: syz [ 243.265107][ T5875] usb 3-1: Manufacturer: syz [ 243.265121][ T5875] usb 3-1: SerialNumber: syz [ 243.336073][ T5875] usb 3-1: config 0 descriptor?? [ 243.568320][ T5875] kaweth 3-1:0.84: Firmware present in device. [ 243.754945][ T5875] kaweth 3-1:0.84: Statistics collection: 0 [ 243.754962][ T5875] kaweth 3-1:0.84: Multicast filter limit: 0 [ 243.754969][ T5875] kaweth 3-1:0.84: MTU: 0 [ 243.754976][ T5875] kaweth 3-1:0.84: Read MAC address 00:00:00:00:00:00 [ 244.157607][ T5875] kaweth 3-1:0.84: Error setting SOFS wait [ 244.157883][ T5875] kaweth 3-1:0.84: probe with driver kaweth failed with error -5 [ 244.208177][ T5875] usb 3-1: USB disconnect, device number 21 [ 245.190268][T11785] bond0: option packets_per_slave: invalid value (18446744072268814746) [ 245.190295][T11785] bond0: option packets_per_slave: allowed values 0 - 65535 [ 245.387960][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.790511][ T5118] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 245.790707][ T5118] Bluetooth: hci3: Injecting HCI hardware error event [ 245.792708][ T5118] Bluetooth: hci3: hardware error 0x00 [ 246.424052][T11850] netem: change failed [ 246.843417][T11867] input: syz0 as /devices/virtual/input/input18 [ 247.171373][T11884] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 247.171602][T11884] dvmrp1: linktype set to 804 [ 247.689115][T11919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2779'. [ 247.689470][T11917] pimreg: tun_chr_ioctl cmd 1074025673 [ 247.866886][ T5118] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 247.962425][T11932] program syz.0.2786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.344555][T11952] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 248.344584][T11952] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 248.346262][T11952] overlayfs: failed to get uuid (466/file0, err=-13); falling back to uuid=null. [ 248.498938][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2796'. [ 248.835240][T11980] program syz.0.2808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.835546][T11980] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 249.706306][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2823'. [ 250.317668][T12030] netlink: 'syz.3.2833': attribute type 1 has an invalid length. [ 250.317689][T12030] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2833'. [ 250.454473][T12033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.333543][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 251.333561][ T37] audit: type=1326 audit(2000000006.389:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12073 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 251.333852][ T37] audit: type=1326 audit(2000000006.419:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12073 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 251.338244][ T37] audit: type=1326 audit(2000000006.419:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12073 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 251.338293][ T37] audit: type=1326 audit(2000000006.429:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12073 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 251.338954][ T37] audit: type=1326 audit(2000000006.429:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12073 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 251.339557][ T37] audit: type=1326 audit(2000000006.429:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12073 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 251.343155][ T37] audit: type=1326 audit(2000000006.429:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12073 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 251.345678][ T37] audit: type=1326 audit(2000000006.429:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12073 comm="syz.3.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38aed4f749 code=0x7ffc0000 [ 251.561743][T12085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2860'. [ 251.575366][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2860'. [ 251.575399][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2860'. [ 252.175854][T12114] block nbd1: NBD_DISCONNECT [ 253.274558][T12159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2894'. [ 254.872889][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2931'. [ 254.872913][T12236] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2931'. [ 254.872933][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2931'. [ 255.011130][T12246] netlink: 'syz.0.2935': attribute type 3 has an invalid length. [ 255.631792][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.631859][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.014233][T12288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2954'. [ 256.014551][T12288] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2954'. [ 256.595497][T12322] program syz.1.2971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.148796][T12398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3006'. [ 258.148818][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3006'. [ 259.003537][T12443] can0: slcan on ttyS3. [ 259.176958][T12443] can0 (unregistered): slcan off ttyS3. [ 259.995561][T12493] IPVS: nq: SCTP 127.0.0.1:0 - no destination available [ 260.606107][T12519] input: syz1 as /devices/virtual/input/input19 [ 261.774655][ T5983] kernel read not supported for file /video7 (pid: 5983 comm: kworker/0:8) [ 262.575571][ T5983] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 262.668064][ T7328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.728665][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.728698][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.728734][ T5983] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 262.728756][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.735225][ T5983] usb 3-1: config 0 descriptor?? [ 263.010495][T12645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.011108][T12645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.025932][T12645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.026194][T12645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.026423][T12645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.026657][T12645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.031341][T12645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.031601][T12645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.158300][ T5983] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 263.175855][ T5983] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 263.351295][ T5983] cp2112 0003:10C4:EA90.0020: Part Number: 0x82 Device Version: 0xFE [ 263.554315][ T5983] cp2112 0003:10C4:EA90.0020: error requesting SMBus config [ 263.573593][ T5983] cp2112 0003:10C4:EA90.0020: probe with driver cp2112 failed with error -71 [ 263.601427][ T5983] usb 3-1: USB disconnect, device number 22 [ 263.924860][T12676] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3136'. [ 264.264071][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 264.856586][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3158'. [ 264.856615][T12721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3158'. [ 265.165897][T12739] syz_tun: entered allmulticast mode [ 265.176005][T12737] syz_tun: left allmulticast mode [ 266.677154][T12823] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 268.172000][T12913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3249'. [ 268.440065][ T7349] net_ratelimit: 1016 callbacks suppressed [ 268.440085][ T7349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.751416][ T804] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 268.896857][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 268.899792][ T804] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 268.899824][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.959347][ T804] pvrusb2: Hardware description: Terratec Grabster AV400 [ 268.959464][ T804] pvrusb2: ********** [ 268.959473][ T804] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 268.959486][ T804] pvrusb2: Important functionality might not be entirely working. [ 268.959495][ T804] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 268.959506][ T804] pvrusb2: ********** [ 269.180218][ T2361] pvrusb2: Invalid write control endpoint [ 269.378351][T12932] pvrusb2: Invalid write control endpoint [ 269.382697][T12957] bond2 (unregistering): Released all slaves [ 269.394154][ T804] usb 2-1: USB disconnect, device number 12 [ 269.541506][ T2361] pvrusb2: Invalid write control endpoint [ 269.541517][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 269.541522][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 269.541527][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 269.541532][ T2361] pvrusb2: Device being rendered inoperable [ 269.558183][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 269.558290][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 269.571691][ T2361] pvrusb2: Attached sub-driver cx25840 [ 269.571718][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 269.571728][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 269.980806][ T37] audit: type=1326 audit(2000000025.069:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 269.980971][ T37] audit: type=1326 audit(2000000025.069:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 269.982810][ T37] audit: type=1326 audit(2000000025.069:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 269.982985][ T37] audit: type=1326 audit(2000000025.069:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 269.983128][ T37] audit: type=1326 audit(2000000025.069:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 270.097519][ T37] audit: type=1326 audit(2000000025.189:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 270.097881][ T37] audit: type=1326 audit(2000000025.189:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 270.098104][ T37] audit: type=1326 audit(2000000025.189:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 270.098322][ T37] audit: type=1326 audit(2000000025.189:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 270.098368][ T37] audit: type=1326 audit(2000000025.189:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.1.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18be2ef749 code=0x7ffc0000 [ 270.584681][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3299'. [ 270.584705][T13018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.584728][T13018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.639843][T13018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.639872][T13018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.758809][ T5118] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 270.832580][ T7332] wlan1: Trigger new scan to find an IBSS to join [ 270.937458][T13018] bond0: (slave batadv0): Releasing backup interface [ 271.234055][T13035] netem: incorrect gi model size [ 271.234087][T13035] netem: change failed [ 271.367262][T13039] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.468790][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3313'. [ 271.535398][T13052] loop9: detected capacity change from 0 to 7 [ 271.564756][T13052] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 271.564799][T13052] loop9: partition table partially beyond EOD, truncated [ 271.590472][T13052] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 271.685862][T12456] udevd[12456]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 272.004702][T13072] loop2: detected capacity change from 0 to 7 [ 272.042100][T12456] Dev loop2: unable to read RDB block 7 [ 272.042131][T12456] loop2: unable to read partition table [ 272.042266][T12456] loop2: partition table beyond EOD, truncated [ 272.071896][T13072] Dev loop2: unable to read RDB block 7 [ 272.071941][T13072] loop2: unable to read partition table [ 272.072154][T13072] loop2: partition table beyond EOD, truncated [ 272.072195][T13072] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 274.161895][T13164] macvlan0: entered promiscuous mode [ 274.187245][ T7342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.959172][T13215] batman_adv: batadv0: Adding interface: vlan3 [ 274.959190][T13215] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.959219][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.959235][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.959245][T13215] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 275.416980][ T56] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 275.572776][ T56] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 275.574018][ T56] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.574039][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 275.574049][ T56] usb 2-1: SerialNumber: syz [ 275.787078][ T7342] wlan1: Trigger new scan to find an IBSS to join [ 276.174473][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3412'. [ 276.233020][ T56] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 276.465957][ T5983] usb 2-1: USB disconnect, device number 13 [ 276.664694][ T804] kernel write not supported for file /sg0 (pid: 804 comm: kworker/0:2) [ 276.708037][T13282] netlink: 340 bytes leftover after parsing attributes in process `syz.3.3423'. [ 276.708073][T13282] netlink: 340 bytes leftover after parsing attributes in process `syz.3.3423'. [ 276.709144][ T7342] wlan1: Creating new IBSS network, BSSID d6:a1:d4:f5:6a:69 [ 276.738733][ T5976] ------------[ cut here ]------------ [ 276.738746][ T5976] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 276.738772][ T5976] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: kworker/1:6/5976 [ 276.738814][ T5976] Modules linked in: [ 276.738852][ T5976] CPU: 1 UID: 0 PID: 5976 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 276.738878][ T5976] Tainted: [L]=SOFTLOCKUP [ 276.738885][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.738897][ T5976] Workqueue: mld mld_ifc_work [ 276.738926][ T5976] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 276.738953][ T5976] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 276.738987][ T5976] RSP: 0018:ffffc900052fe510 EFLAGS: 00010246 [ 276.739003][ T5976] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 276.739015][ T5976] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8eeadc00 [ 276.739028][ T5976] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.739040][ T5976] R10: 0000000000000100 R11: 0000000000000004 R12: ffff88802eebf7a8 [ 276.739053][ T5976] R13: 0000000000000000 R14: ffffffff8eeadc00 R15: ffff88805c2b3c38 [ 276.739066][ T5976] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 276.739082][ T5976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.739095][ T5976] CR2: 00007fff23f81c28 CR3: 00000000241f6000 CR4: 00000000003526f0 [ 276.739111][ T5976] Call Trace: [ 276.739124][ T5976] [ 276.739154][ T5976] rate_control_send_low+0x1a7/0x7b0 [ 276.739190][ T5976] rate_control_get_rate+0x20b/0x5f0 [ 276.739230][ T5976] ieee80211_tx_h_rate_ctrl+0xaec/0x1760 [ 276.739282][ T5976] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 276.739330][ T5976] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 276.739355][ T5976] invoke_tx_handlers_late+0xbd/0x18b0 [ 276.739381][ T5976] ? rt_mutex_slowunlock+0x493/0x8a0 [ 276.739403][ T5976] ? reacquire_held_locks+0x104/0x190 [ 276.739443][ T5976] ? ieee80211_tx_h_select_key+0xd24/0x1a00 [ 276.739486][ T5976] ieee80211_tx_dequeue+0x30b3/0x43d0 [ 276.739548][ T5976] ? ieee80211_tx_dequeue+0x45c/0x43d0 [ 276.739608][ T5976] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 276.739686][ T5976] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 276.739724][ T5976] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 276.739754][ T5976] ? __local_bh_enable_ip+0x1af/0x2c0 [ 276.739776][ T5976] ? lockdep_hardirqs_on+0x7b/0x110 [ 276.739802][ T5976] ieee80211_queue_skb+0x1961/0x2210 [ 276.739858][ T5976] ? ieee80211_queue_skb+0x357/0x2210 [ 276.739893][ T5976] ieee80211_tx+0x297/0x460 [ 276.739923][ T5976] ? __pfx_ieee80211_tx+0x10/0x10 [ 276.739988][ T5976] ? ieee80211_xmit+0x315/0x400 [ 276.740020][ T5976] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 276.740042][ T5976] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 276.740079][ T5976] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 276.740107][ T5976] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 276.740131][ T5976] ieee80211_subif_start_xmit+0xe6/0x510 [ 276.740156][ T5976] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 276.740178][ T5976] ? netif_skb_features+0xa69/0x1540 [ 276.740203][ T5976] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 276.740233][ T5976] ? rt_spin_lock+0x1c1/0x3e0 [ 276.740259][ T5976] ? rt_spin_lock+0x1c1/0x3e0 [ 276.740302][ T5976] dev_hard_start_xmit+0x2e0/0x840 [ 276.740354][ T5976] __dev_queue_xmit+0x1482/0x3210 [ 276.740378][ T5976] ? __lock_acquire+0x6b6/0x2cf0 [ 276.740424][ T5976] ? __dev_queue_xmit+0x253/0x3210 [ 276.740453][ T5976] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 276.740482][ T5976] ? __pfx___dev_queue_xmit+0x10/0x10 [ 276.740508][ T5976] ? neigh_resolve_output+0x46e/0x780 [ 276.740533][ T5976] ? eth_header+0x11b/0x200 [ 276.740560][ T5976] ? __asan_memcpy+0x40/0x70 [ 276.740616][ T5976] ? ip6_output+0x126/0x550 [ 276.740641][ T5976] ip6_output+0x340/0x550 [ 276.740673][ T5976] NF_HOOK+0x9e/0x380 [ 276.740704][ T5976] ? NF_HOOK+0x101/0x380 [ 276.740729][ T5976] ? __pfx_NF_HOOK+0x10/0x10 [ 276.740752][ T5976] ? __local_bh_enable_ip+0x1af/0x2c0 [ 276.740777][ T5976] ? __pfx_dst_output+0x10/0x10 [ 276.740812][ T5976] ? icmp6_dst_alloc+0x2b4/0x460 [ 276.740841][ T5976] mld_sendpack+0x8d4/0xe60 [ 276.740890][ T5976] ? mld_sendpack+0x1e7/0xe60 [ 276.740918][ T5976] ? __pfx_mld_sendpack+0x10/0x10 [ 276.740972][ T5976] mld_ifc_work+0x83e/0xd60 [ 276.741006][ T5976] ? process_scheduled_works+0x9ef/0x1770 [ 276.741030][ T5976] process_scheduled_works+0xad1/0x1770 [ 276.741090][ T5976] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.741108][ T5976] ? do_raw_spin_lock+0x121/0x290 [ 276.741151][ T5976] worker_thread+0x8a0/0xda0 [ 276.741191][ T5976] ? __kthread_parkme+0x7b/0x200 [ 276.741228][ T5976] kthread+0x711/0x8a0 [ 276.741257][ T5976] ? __pfx_worker_thread+0x10/0x10 [ 276.741277][ T5976] ? __pfx_kthread+0x10/0x10 [ 276.741299][ T5976] ? rt_spin_unlock+0x150/0x200 [ 276.741335][ T5976] ? rt_spin_unlock+0x161/0x200 [ 276.741355][ T5976] ? __pfx_kthread+0x10/0x10 [ 276.741382][ T5976] ret_from_fork+0x510/0xa50 [ 276.741407][ T5976] ? __pfx_ret_from_fork+0x10/0x10 [ 276.741426][ T5976] ? __switch_to+0xc9e/0x1480 [ 276.741459][ T5976] ? __pfx_kthread+0x10/0x10 [ 276.741485][ T5976] ret_from_fork_asm+0x1a/0x30 [ 276.741536][ T5976] [ 276.741553][ T5976] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 276.741569][ T5976] CPU: 1 UID: 0 PID: 5976 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 276.741594][ T5976] Tainted: [L]=SOFTLOCKUP [ 276.741601][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.741613][ T5976] Workqueue: mld mld_ifc_work [ 276.741636][ T5976] Call Trace: [ 276.741644][ T5976] [ 276.741651][ T5976] vpanic+0x1e0/0x670 [ 276.741681][ T5976] panic+0xb9/0xc0 [ 276.741706][ T5976] ? __pfx_panic+0x10/0x10 [ 276.741744][ T5976] ? ret_from_fork_asm+0x1a/0x30 [ 276.741777][ T5976] __warn+0x317/0x4b0 [ 276.741800][ T5976] ? __rate_control_send_low+0x524/0x800 [ 276.741831][ T5976] ? __rate_control_send_low+0x524/0x800 [ 276.741857][ T5976] __report_bug+0x288/0x500 [ 276.741883][ T5976] ? __lock_acquire+0x6b6/0x2cf0 [ 276.741921][ T5976] ? __rate_control_send_low+0x524/0x800 [ 276.741956][ T5976] ? __pfx___report_bug+0x10/0x10 [ 276.741993][ T5976] ? unwind_next_frame+0xa5/0x23d0 [ 276.742030][ T5976] report_bug_entry+0x19a/0x290 [ 276.742058][ T5976] ? __rate_control_send_low+0x5bb/0x800 [ 276.742081][ T5976] ? __rate_control_send_low+0x5c0/0x800 [ 276.742106][ T5976] handle_bug+0xca/0x200 [ 276.742128][ T5976] exc_invalid_op+0x1a/0x50 [ 276.742150][ T5976] asm_exc_invalid_op+0x1a/0x20 [ 276.742167][ T5976] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 276.742193][ T5976] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 276.742209][ T5976] RSP: 0018:ffffc900052fe510 EFLAGS: 00010246 [ 276.742224][ T5976] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 276.742236][ T5976] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8eeadc00 [ 276.742249][ T5976] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.742261][ T5976] R10: 0000000000000100 R11: 0000000000000004 R12: ffff88802eebf7a8 [ 276.742274][ T5976] R13: 0000000000000000 R14: ffffffff8eeadc00 R15: ffff88805c2b3c38 [ 276.742399][ T5976] rate_control_send_low+0x1a7/0x7b0 [ 276.742442][ T5976] rate_control_get_rate+0x20b/0x5f0 [ 276.742476][ T5976] ieee80211_tx_h_rate_ctrl+0xaec/0x1760 [ 276.742521][ T5976] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 276.742559][ T5976] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 276.742584][ T5976] invoke_tx_handlers_late+0xbd/0x18b0 [ 276.742608][ T5976] ? rt_mutex_slowunlock+0x493/0x8a0 [ 276.742629][ T5976] ? reacquire_held_locks+0x104/0x190 [ 276.742666][ T5976] ? ieee80211_tx_h_select_key+0xd24/0x1a00 [ 276.742705][ T5976] ieee80211_tx_dequeue+0x30b3/0x43d0 [ 276.742764][ T5976] ? ieee80211_tx_dequeue+0x45c/0x43d0 [ 276.742826][ T5976] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 276.742902][ T5976] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 276.742938][ T5976] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 276.742966][ T5976] ? __local_bh_enable_ip+0x1af/0x2c0 [ 276.742988][ T5976] ? lockdep_hardirqs_on+0x7b/0x110 [ 276.743017][ T5976] ieee80211_queue_skb+0x1961/0x2210 [ 276.743075][ T5976] ? ieee80211_queue_skb+0x357/0x2210 [ 276.743110][ T5976] ieee80211_tx+0x297/0x460 [ 276.743141][ T5976] ? __pfx_ieee80211_tx+0x10/0x10 [ 276.743218][ T5976] ? ieee80211_xmit+0x315/0x400 [ 276.743253][ T5976] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 276.743277][ T5976] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 276.743316][ T5976] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 276.743342][ T5976] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 276.743365][ T5976] ieee80211_subif_start_xmit+0xe6/0x510 [ 276.743392][ T5976] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 276.743413][ T5976] ? netif_skb_features+0xa69/0x1540 [ 276.743436][ T5976] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 276.743464][ T5976] ? rt_spin_lock+0x1c1/0x3e0 [ 276.743489][ T5976] ? rt_spin_lock+0x1c1/0x3e0 [ 276.743534][ T5976] dev_hard_start_xmit+0x2e0/0x840 [ 276.743585][ T5976] __dev_queue_xmit+0x1482/0x3210 [ 276.743610][ T5976] ? __lock_acquire+0x6b6/0x2cf0 [ 276.743657][ T5976] ? __dev_queue_xmit+0x253/0x3210 [ 276.743687][ T5976] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 276.743719][ T5976] ? __pfx___dev_queue_xmit+0x10/0x10 [ 276.743747][ T5976] ? neigh_resolve_output+0x46e/0x780 [ 276.743775][ T5976] ? eth_header+0x11b/0x200 [ 276.743803][ T5976] ? __asan_memcpy+0x40/0x70 [ 276.743864][ T5976] ? ip6_output+0x126/0x550 [ 276.743893][ T5976] ip6_output+0x340/0x550 [ 276.743928][ T5976] NF_HOOK+0x9e/0x380 [ 276.743957][ T5976] ? NF_HOOK+0x101/0x380 [ 276.743984][ T5976] ? __pfx_NF_HOOK+0x10/0x10 [ 276.744008][ T5976] ? __local_bh_enable_ip+0x1af/0x2c0 [ 276.744035][ T5976] ? __pfx_dst_output+0x10/0x10 [ 276.744072][ T5976] ? icmp6_dst_alloc+0x2b4/0x460 [ 276.744103][ T5976] mld_sendpack+0x8d4/0xe60 [ 276.744160][ T5976] ? mld_sendpack+0x1e7/0xe60 [ 276.744189][ T5976] ? __pfx_mld_sendpack+0x10/0x10 [ 276.744254][ T5976] mld_ifc_work+0x83e/0xd60 [ 276.744291][ T5976] ? process_scheduled_works+0x9ef/0x1770 [ 276.744317][ T5976] process_scheduled_works+0xad1/0x1770 [ 276.744377][ T5976] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.744396][ T5976] ? do_raw_spin_lock+0x121/0x290 [ 276.744442][ T5976] worker_thread+0x8a0/0xda0 [ 276.744485][ T5976] ? __kthread_parkme+0x7b/0x200 [ 276.744525][ T5976] kthread+0x711/0x8a0 [ 276.744556][ T5976] ? __pfx_worker_thread+0x10/0x10 [ 276.744578][ T5976] ? __pfx_kthread+0x10/0x10 [ 276.744600][ T5976] ? rt_spin_unlock+0x150/0x200 [ 276.744633][ T5976] ? rt_spin_unlock+0x161/0x200 [ 276.744655][ T5976] ? __pfx_kthread+0x10/0x10 [ 276.744684][ T5976] ret_from_fork+0x510/0xa50 [ 276.744711][ T5976] ? __pfx_ret_from_fork+0x10/0x10 [ 276.744731][ T5976] ? __switch_to+0xc9e/0x1480 [ 276.744766][ T5976] ? __pfx_kthread+0x10/0x10 [ 276.744795][ T5976] ret_from_fork_asm+0x1a/0x30 [ 276.744848][ T5976] [ 276.745329][ T5976] Kernel Offset: disabled