last executing test programs: 9m30.416582907s ago: executing program 3 (id=5248): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000640)=0xcbb9, 0x6, 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000640)=0xcbb9, 0x6, 0x1) 9m30.329556095s ago: executing program 3 (id=5250): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000240)={0x5, "32a563fe52fbff72431f1c4638748e45589588f81c5fbf00", 0x420, 0x4e5, 0x4, 0x1, 0x1}) 9m30.197612064s ago: executing program 3 (id=5256): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{0x1, 0x6}, {0xfb}, 0x10dc, 0x2, 0xe}) 9m30.054743642s ago: executing program 3 (id=5260): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) 9m29.92969972s ago: executing program 3 (id=5264): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) 9m29.801798012s ago: executing program 3 (id=5268): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 9m13.729667271s ago: executing program 32 (id=5268): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 3m23.752799788s ago: executing program 1 (id=12371): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) 3m23.664195247s ago: executing program 1 (id=12373): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x7b}, @nested={0x4, 0x2}]}, 0x1c}}, 0x0) 3m23.462229264s ago: executing program 1 (id=12378): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250100000008000800", @ANYRES32=r0, @ANYBLOB], 0x1c}}, 0x4000) 3m23.343437498s ago: executing program 1 (id=12380): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000f0000000401a80016200a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) 3m23.110473895s ago: executing program 1 (id=12385): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3c7, 0x40482) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000140)={0x9, {0x401, 0x7, 0x9, 0x6}}) 3m22.976350732s ago: executing program 1 (id=12388): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f00000001c0)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000e00000000000200001800800020074637000140001000200080200dc00"/84, 0x54) 3m6.5265794s ago: executing program 33 (id=12388): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f00000001c0)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000e00000000000200001800800020074637000140001000200080200dc00"/84, 0x54) 2m32.628654466s ago: executing program 2 (id=12582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x14, 0x0, &(0x7f00000003c0)) 2m32.345823515s ago: executing program 2 (id=12583): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000040)) 2m32.094228762s ago: executing program 2 (id=12584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040) 2m31.818874136s ago: executing program 2 (id=12585): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x4, 0x1, 0x58565559, 0x2, 0x1, [{0xc, 0x6}, {0x8, 0x81}, {0x0, 0x2a68}, {0x0, 0x9}, {0x400, 0x8}, {0x4, 0xfff}, {0x2, 0x3}, {0x1000, 0x6}], 0x1, 0x2, 0x7, 0x1, 0x3}}) 2m31.549867497s ago: executing program 2 (id=12586): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000004c0)) 2m31.282654594s ago: executing program 2 (id=12587): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) 2m13.401331053s ago: executing program 34 (id=12587): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) 1m6.373309993s ago: executing program 4 (id=12787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f3c00128014000180090001006c6173740000000004000280140001960c000100636f756e74657200040002801000018008c0ff0064757000040002800800034000000106"], 0xc8}}, 0x20050800) 1m5.131185823s ago: executing program 4 (id=12791): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x8031, 0xffffffffffffffff, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={[0x7]}, 0x8) 1m4.636667725s ago: executing program 0 (id=12793): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53bb467d04f14562c5f463273ef4a720564f485a"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) 1m3.162874432s ago: executing program 4 (id=12795): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100000200dd402505a1a440000102030109025c0002010000000944000001020d0000052406000005240000400d240f0100000000000000000006249a0000000905810340000000000904010000020d00000904000102020d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m1.890475338s ago: executing program 0 (id=12798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 1m1.865095627s ago: executing program 5 (id=12799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 1m1.321191064s ago: executing program 6 (id=12800): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000480)=[{0x32, '\x00', @st={0x4, [{0x1, @uvalue=0x80000001}, {0x1, @uvalue=0xd093}, {0x1, @svalue=0x1}, {0x1, @uvalue=0x8}]}, 0x87}, {0x15, '\x00', @data=0x2, 0x86}, {0x38, '\x00', @data, 0x6}, {0x3, '\x00', @buffer={"072c0a1d5b3c89009675c3051f43214507732bfc10320a14580ace71f07eda63", 0x20}, 0x2}]}) 1m1.256456162s ago: executing program 0 (id=12801): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000001200)={0x80, 0x7, 0x1, 0xc}, 0x0) 1m1.154401428s ago: executing program 5 (id=12802): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) readv(r0, &(0x7f0000002440)=[{&(0x7f0000002380)=""/92, 0x5c}], 0x1) 1m0.928592497s ago: executing program 6 (id=12803): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x3}}, 0x30) 1m0.777946653s ago: executing program 0 (id=12804): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000001400)=ANY=[@ANYBLOB="a8"]) 59.957828292s ago: executing program 4 (id=12805): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 59.475191321s ago: executing program 5 (id=12806): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e@\xeec\x10\xc9g\x15H~\xddb\xdc\xb2\b\xfc\xf8\x01KV\xcbQ \xb5\x8c\xd9A\x1c\x1c`\xd4\xf7x\xc6\xad\xa7\xcc\xd4\xba\x1a\'fx&G\xd6$D!,\xa9\xb9\xd7\xebl>ua\x9d\x83Z\xaa\x12)]\xff\xc2\xec8$\x12v\x1bOY\fjM>\x81)&VG\x83.\x98\x86QM\xf0\xc5\nv\xc2\xb4\xa0\\z\xc3\x86g\xe8\xceN\v\x8f\x81\xe8z\xf8pJ\x7fM7\xa1\x7f\xf0\x9f\x15\xbdfz\xe5\xb4\xac\xf1\xb5\xbf\x06\xa88;PYz%U\x86\xb1t@\xbc$X\xa9\xaeL\xf2\x94\xd3\xeftb\xfe\xa9\a\x9dl\xff{kT\xab\xe2\xf2U\xc3\xaf8\x9d\xe3\xa7\xe3\x92X\xa2`\x96\x8ex\x85[\xe0\x7fa\x99F\xae\a\x913\xe9\x99eCA]B\x92\x93Qr\xf1U\x93\x89q!]\x87\xbd_(g\xc3\x14\xfc3S \xea\x90\xde\xf3\x11\xe3\xb9P7o-p\xb4\x92\xf2\xf0\x1a\x9a\xb0~\x06\xcb\xfc\x11\xab<7x\x94\x14\x8f\x8c\xfb\x05F\xf6\x86..\xc3\xeb\xd0-\x8e\xa8\xd5\x7f\xde\xdf\v\x0f\xc1\xc8K]\x90\x82\x167qD\xae\x9714\xd5\x1b\xa2v-\xae\xac') 58.759636522s ago: executing program 6 (id=12807): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005500ffe894000000fbdbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x80004}, 0x0) 57.947735201s ago: executing program 4 (id=12808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) 57.920430163s ago: executing program 5 (id=12809): r0 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x280) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000002c0)=0xc00) 57.244910487s ago: executing program 6 (id=12810): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x1, @pix_mp={0xb, 0x3ff, 0x38415262, 0x7, 0x8, [{0x2, 0x5}, {0x6, 0x400}, {0x0, 0xc48}, {0x5, 0x1}, {0x8, 0x40000}, {0xfc, 0x9}, {0x5, 0x83}, {0x9, 0xe000000}], 0x84, 0x7, 0xd, 0x2, 0x6}}) 56.166162249s ago: executing program 4 (id=12811): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x32}, @in6=@private2, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x4d, 0x2, {{'cbc(cast5)\x00'}, 0x28, '\x00@\x00\x00 '}}]}, 0x140}}, 0x44050) 56.063841841s ago: executing program 5 (id=12812): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x4a, {0x2, 0x1, @loopback}, 'lo\x00'}) 56.010919385s ago: executing program 6 (id=12813): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x4d, 0x1, 0x2, "08dd161a979cb0e43cb73d2d00000d0000814d0008000000000000000000005f", 0x31364d4e}) 55.872370895s ago: executing program 0 (id=12814): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000280)="580000001500192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) 55.512691393s ago: executing program 0 (id=12815): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x89, 0x2}]}}}], 0x18}, 0x20002800) 55.42408672s ago: executing program 6 (id=12816): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa00) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0xe, 0x41}, {0xe}, 0x7, 0x3, 0x2}) 51.094930819s ago: executing program 5 (id=12817): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f1814bffffffffffff807000000b800000000000000060005000d4530e9", 0x24) 0s ago: executing program 35 (id=12811): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x32}, @in6=@private2, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x4d, 0x2, {{'cbc(cast5)\x00'}, 0x28, '\x00@\x00\x00 '}}]}, 0x140}}, 0x44050) kernel console output (not intermixed with test programs): usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.157519][ T5937] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 16 [ 771.157543][ T5937] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 128 [ 771.157566][ T5937] usb 1-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 771.157591][ T5937] usb 1-1: config 1 interface 0 has no altsetting 0 [ 771.158597][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 771.158619][ T5937] usb 1-1: SerialNumber: syz [ 771.165198][T31597] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 771.165328][T31597] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 771.212948][ T5937] hub 1-1:1.0: bad descriptor, ignoring hub [ 771.212975][ T5937] hub 1-1:1.0: probe with driver hub failed with error -5 [ 771.280758][ T5937] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 771.517588][ T5937] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 771.569495][ T5937] usb 1-1: USB disconnect, device number 25 [ 771.835218][T31660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10547'. [ 772.141826][T31676] kAFS: unable to lookup cell '.' [ 772.446483][T31685] netlink: 'syz.2.10558': attribute type 1 has an invalid length. [ 772.446508][T31685] netlink: 'syz.2.10558': attribute type 1 has an invalid length. [ 772.940804][T31708] netlink: 1788 bytes leftover after parsing attributes in process `syz.2.10570'. [ 773.607738][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 773.639109][T31740] openvswitch: netlink: Flow key attribute not present in set flow. [ 774.197028][T31769] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 774.381594][T31779] 9pnet_fd: p9_fd_create_tcp (31779): problem connecting socket to 127.0.0.1 [ 774.449161][T31784] netlink: 'syz.2.10605': attribute type 10 has an invalid length. [ 774.449187][T31784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10605'. [ 774.449492][T31784] dummy0: entered promiscuous mode [ 774.449666][T31784] dummy0: entered allmulticast mode [ 774.508494][T31784] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 775.242865][T31822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10624'. [ 775.242889][T31822] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10624'. [ 775.486536][ T5937] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 775.543535][T31838] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 775.644189][ T5937] usb 1-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 775.645191][ T5937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.645235][ T5937] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 775.645260][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 775.645292][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 775.645313][ T5937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 775.648892][ T5937] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 775.648915][ T5937] usb 1-1: Manufacturer: syz [ 775.652957][ T5937] usb 1-1: config 0 descriptor?? [ 775.976153][ T5928] usb 1-1: USB disconnect, device number 26 [ 776.564507][T31894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10650'. [ 776.591182][T31896] sctp: [Deprecated]: syz.1.10658 (pid 31896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.591182][T31896] Use struct sctp_sack_info instead [ 776.616824][ T5937] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 776.778616][ T5937] usb 5-1: New USB device found: idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 776.784961][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.784987][ T5937] usb 5-1: Product: syz [ 776.785001][ T5937] usb 5-1: Manufacturer: syz [ 776.785021][ T5937] usb 5-1: SerialNumber: syz [ 776.820963][ T5937] usb 5-1: config 0 descriptor?? [ 776.826854][ T5937] usb 5-1: selecting invalid altsetting 1 [ 776.826874][ T5937] technisat-usb2: could not set alternate setting to 0 [ 777.051824][ T5937] technisat-usb2: firmware version: 0.0 [ 777.051869][ T5937] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 777.305963][ T5937] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 777.335693][ T5937] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 777.338614][ T5937] usb 5-1: USB disconnect, device number 39 [ 777.476512][T31946] veth0_virt_wifi: entered promiscuous mode [ 778.563695][T31997] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10689'. [ 778.563721][T31997] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 778.607251][ T5914] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 778.666289][T32001] binder: Write failure EFAULT in pid:5126 [ 778.766710][ T5914] usb 3-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=1.00 [ 778.767807][ T5914] usb 3-1: config index 0 descriptor too short (expected 69, got 51) [ 778.767872][ T5914] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.770348][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.770371][ T5914] usb 3-1: Product: syz [ 778.770384][ T5914] usb 3-1: Manufacturer: syz [ 778.770399][ T5914] usb 3-1: SerialNumber: syz [ 778.844510][ T5914] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 779.059975][ T5914] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 779.130175][ T5914] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 779.175517][T31599] udevd[31599]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.304345][ T5928] usb 3-1: USB disconnect, device number 50 [ 779.469210][ T5914] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 779.511969][ T5344] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 779.630209][ T5914] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 779.631752][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 779.631778][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1152, setting to 1024 [ 779.634118][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.634140][ T5914] usb 5-1: Product: syz [ 779.634154][ T5914] usb 5-1: Manufacturer: syz [ 779.634169][ T5914] usb 5-1: SerialNumber: syz [ 779.637525][ T5914] usb 5-1: config 0 descriptor?? [ 779.683015][ T5344] usb 2-1: Using ep0 maxpacket: 32 [ 779.697035][ T5344] usb 2-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 779.698017][ T5344] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 779.698044][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 245, changing to 11 [ 779.698069][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 58613, setting to 1024 [ 779.698093][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 779.698115][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 779.701166][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.701187][ T5344] usb 2-1: Product: syz [ 779.701201][ T5344] usb 2-1: Manufacturer: syz [ 779.701214][ T5344] usb 2-1: SerialNumber: syz [ 779.742403][ T5344] usb 2-1: config 0 descriptor?? [ 779.970844][ T5914] usb 5-1: USB disconnect, device number 40 [ 780.057140][T32080] udevd[32080]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.192302][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.192996][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.196920][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.208871][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.209284][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.212306][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.212992][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.221962][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.224708][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.225174][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.225561][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.225990][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.227882][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.228457][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.229838][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.230328][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.230718][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.231098][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.233371][ T5344] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 780.233418][ T5344] input input130: Timeout waiting for response from device. [ 780.248718][ T5344] usb 2-1: USB disconnect, device number 50 [ 780.923533][T32111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10718'. [ 781.027069][T32116] netlink: 228 bytes leftover after parsing attributes in process `syz.0.10720'. [ 781.192549][T32125] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10726'. [ 781.358382][T32138] netlink: 'syz.0.10730': attribute type 21 has an invalid length. [ 781.358443][T32138] netlink: 'syz.0.10730': attribute type 6 has an invalid length. [ 781.358457][T32138] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10730'. [ 781.448273][ T5907] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 781.607304][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 781.608051][ T5907] usb 2-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 781.609230][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 781.611228][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.611251][ T5907] usb 2-1: Product: syz [ 781.611265][ T5907] usb 2-1: Manufacturer: syz [ 781.611279][ T5907] usb 2-1: SerialNumber: syz [ 781.615663][ T5907] usb 2-1: config 0 descriptor?? [ 781.677601][ T5907] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 781.677633][ T5907] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 782.187543][ T5907] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 782.262598][ T5907] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 782.262631][ T5907] em28xx 2-1:0.0: board has no eeprom [ 782.355693][ T5907] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 782.355722][ T5907] em28xx 2-1:0.0: dvb set to bulk mode. [ 782.356627][ T5914] em28xx 2-1:0.0: Binding DVB extension [ 782.396510][ T5907] usb 2-1: USB disconnect, device number 51 [ 782.405084][ T5907] em28xx 2-1:0.0: Disconnecting em28xx [ 782.468422][ T5914] em28xx 2-1:0.0: Registering input extension [ 782.470693][ T5907] em28xx 2-1:0.0: Closing input extension [ 782.535495][ T5907] em28xx: Freeing device [ 783.214868][T32241] netlink: 'syz.4.10767': attribute type 10 has an invalid length. [ 783.214891][T32241] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10767'. [ 783.215134][T32241] team0: entered promiscuous mode [ 783.215151][T32241] team_slave_0: entered promiscuous mode [ 783.216005][T32241] team_slave_1: entered promiscuous mode [ 783.216892][T32241] team0: entered allmulticast mode [ 783.216906][T32241] team_slave_0: entered allmulticast mode [ 783.217234][T32241] team_slave_1: entered allmulticast mode [ 783.231425][T32241] bridge0: port 3(team0) entered blocking state [ 783.231841][T32241] bridge0: port 3(team0) entered disabled state [ 783.251461][T32241] bridge0: port 3(team0) entered blocking state [ 783.251567][T32241] bridge0: port 3(team0) entered forwarding state [ 783.501813][T32254] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.10772'. [ 783.905237][ T33] audit: type=1400 audit(2000000278.343:423): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=32273 comm="syz.0.10785" [ 784.299288][ T5937] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 784.462137][ T5937] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=0.40 [ 784.463129][ T5937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.463183][ T5937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.469179][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.469204][ T5937] usb 3-1: Product: syz [ 784.469219][ T5937] usb 3-1: Manufacturer: syz [ 784.469233][ T5937] usb 3-1: SerialNumber: syz [ 784.473720][T32307] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10796'. [ 784.555768][ T5907] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 784.720127][ T5907] usb 1-1: New USB device found: idVendor=0489, idProduct=e057, bcdDevice=0.00 [ 784.724348][ T5907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.724371][ T5907] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 784.724417][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.732728][ T5937] cdc_ncm 3-1:1.0: bind() failure [ 784.743843][ T5937] usbtest 3-1:1.0: Linux gadget zero [ 784.743863][ T5937] usbtest 3-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 784.747739][ T5907] usb 1-1: config 0 descriptor?? [ 784.775554][ T5937] usbtest 3-1:1.1: couldn't get endpoints, -22 [ 784.775655][ T5937] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 784.794159][ T5937] usbhid 3-1:1.1: couldn't find an input interrupt endpoint [ 784.812340][ T5937] usb 3-1: USB disconnect, device number 51 [ 785.214722][ T5907] Bluetooth: Can't get version to change to load ram patch err [ 785.214743][ T5907] Bluetooth: Loading patch file failed [ 785.214769][ T5907] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 785.222081][ T5907] usb 1-1: USB disconnect, device number 27 [ 785.838081][ T5914] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 785.999369][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 786.000089][ T5914] usb 5-1: New USB device found: idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 786.001087][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.001140][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.010549][ T5914] usb 5-1: config 0 descriptor?? [ 786.128030][T32374] dlm: no local IP address has been set [ 786.128047][T32374] dlm: cannot start dlm midcomms -107 [ 786.255290][ T5914] usb 5-1: string descriptor 0 read error: -71 [ 786.265167][ T5914] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 786.307410][ T5914] usb 5-1: USB disconnect, device number 41 [ 786.528904][T32396] netlink: 'syz.0.10823': attribute type 10 has an invalid length. [ 786.543873][T32396] bond0: (slave bond_slave_0): Releasing backup interface [ 787.318526][T32432] openvswitch: netlink: Multiple metadata blocks provided [ 787.442147][T32438] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10844'. [ 787.569793][T32446] netlink: 'syz.4.10848': attribute type 21 has an invalid length. [ 787.671051][T32449] cgroup: release_agent respecified [ 787.744047][T32456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10852'. [ 788.117423][ T5907] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 788.277315][ T5907] usb 2-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 788.278345][ T5907] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 788.278369][ T5907] usb 2-1: config 0 has no interface number 0 [ 788.278406][ T5907] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 788.278431][ T5907] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 788.280518][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.280541][ T5907] usb 2-1: Product: syz [ 788.280556][ T5907] usb 2-1: Manufacturer: syz [ 788.280570][ T5907] usb 2-1: SerialNumber: syz [ 788.315076][ T5907] usb 2-1: config 0 descriptor?? [ 788.369087][T32460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 788.385319][ T5907] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 788.403881][ T5907] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 788.913657][ T5914] usb 2-1: USB disconnect, device number 52 [ 788.948685][ T5914] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 788.949386][ T5914] cyberjack 2-1:0.69: device disconnected [ 788.985466][T32517] netlink: 'syz.2.10876': attribute type 1 has an invalid length. [ 790.267046][T32581] netlink: 'syz.1.10904': attribute type 1 has an invalid length. [ 790.267072][T32581] netlink: 'syz.1.10904': attribute type 1 has an invalid length. [ 790.406253][T32586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10910'. [ 791.106846][ T5928] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 791.266589][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 791.267256][ T5928] usb 5-1: New USB device found: idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 791.268280][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 791.276588][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.276614][ T5928] usb 5-1: Product: syz [ 791.276628][ T5928] usb 5-1: Manufacturer: syz [ 791.276642][ T5928] usb 5-1: SerialNumber: syz [ 791.294030][T32641] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 791.321146][ T5928] usb 5-1: config 0 descriptor?? [ 791.394843][ T5907] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 791.560173][ T5928] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 791.577443][ T5907] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 791.578533][ T5907] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 791.578555][ T5907] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 791.578572][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 791.578590][ T5907] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 791.578609][ T5907] usb 1-1: config 1 has no interface number 1 [ 791.578647][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 791.585764][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.585821][ T5907] usb 1-1: Product: syz [ 791.585836][ T5907] usb 1-1: Manufacturer: syz [ 791.585851][ T5907] usb 1-1: SerialNumber: syz [ 791.725149][ T5928] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 791.745299][ T5928] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 791.786904][ T5914] usb 5-1: USB disconnect, device number 42 [ 791.833444][T32663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10932'. [ 791.928612][ T5907] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 791.928670][ T5907] usb 1-1: MIDIStreaming interface descriptor not found [ 792.025521][ T5907] usb 1-1: USB disconnect, device number 28 [ 792.149116][T31603] udevd[31603]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.849703][ T5907] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 792.955019][ T32] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 793.009870][ T5907] usb 3-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 793.012164][ T5907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.012211][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 793.012232][ T5907] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 793.012273][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.128640][ T32] usb 2-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 793.136132][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.155204][ T32] usb 2-1: config 0 descriptor?? [ 793.308818][ T5907] cxacru 3-1:1.0: receive of cm 0x90 failed (-71) [ 793.308851][ T5907] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 793.309034][ T5907] cxacru 3-1:1.0: probe with driver cxacru failed with error -22 [ 793.340726][ T5907] usb 3-1: USB disconnect, device number 52 [ 793.799273][ T32] usb 2-1: Cannot set MAC address [ 793.799500][ T32] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 793.804290][ T32] usb 2-1: USB disconnect, device number 53 [ 794.181811][ T338] netlink: 'syz.2.10977': attribute type 10 has an invalid length. [ 794.216942][ T338] team0: left promiscuous mode [ 794.216967][ T338] team_slave_0: left promiscuous mode [ 794.217171][ T338] team_slave_1: left promiscuous mode [ 794.217324][ T338] bond0: left promiscuous mode [ 794.217340][ T338] bond_slave_1: left promiscuous mode [ 794.217683][ T338] team0: left allmulticast mode [ 794.217697][ T338] team_slave_0: left allmulticast mode [ 794.217712][ T338] team_slave_1: left allmulticast mode [ 794.217726][ T338] bond0: left allmulticast mode [ 794.217737][ T338] bond_slave_1: left allmulticast mode [ 794.298030][ T338] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.825223][ T5937] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 794.987449][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 795.002131][ T5937] usb 1-1: unable to get BOS descriptor or descriptor too short [ 795.002182][ T5937] usb 1-1: New USB device found: idVendor=1199, idProduct=907b, bcdDevice=7c.3d [ 795.006237][ T5937] usb 1-1: config 4 has an invalid interface number: 40 but max is 2 [ 795.006262][ T5937] usb 1-1: config 4 has an invalid interface descriptor of length 2, skipping [ 795.006279][ T5937] usb 1-1: config 4 has an invalid interface number: 40 but max is 2 [ 795.006298][ T5937] usb 1-1: config 4 has an invalid interface number: 198 but max is 2 [ 795.006318][ T5937] usb 1-1: config 4 has 2 interfaces, different from the descriptor's value: 3 [ 795.006337][ T5937] usb 1-1: config 4 has no interface number 0 [ 795.006352][ T5937] usb 1-1: config 4 has no interface number 1 [ 795.006408][ T5937] usb 1-1: config 4 interface 40 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 795.006430][ T5937] usb 1-1: config 4 interface 40 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 795.006466][ T5937] usb 1-1: config 4 interface 198 altsetting 14 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 795.006492][ T5937] usb 1-1: config 4 interface 40 has no altsetting 1 [ 795.006509][ T5937] usb 1-1: config 4 interface 198 has no altsetting 0 [ 795.130068][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.130094][ T5937] usb 1-1: Product: syz [ 795.130108][ T5937] usb 1-1: Manufacturer: syz [ 795.130123][ T5937] usb 1-1: SerialNumber: syz [ 795.442931][ T5937] usb 1-1: USB disconnect, device number 29 [ 795.959094][ T420] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11010'. [ 795.959120][ T420] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11010'. [ 795.959136][ T420] netlink: 'syz.4.11010': attribute type 6 has an invalid length. [ 795.959149][ T420] netlink: 'syz.4.11010': attribute type 5 has an invalid length. [ 795.959163][ T420] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11010'. [ 796.126858][ T426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11014'. [ 796.535458][ T447] netlink: 160 bytes leftover after parsing attributes in process `syz.1.11022'. [ 796.919514][ T5907] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 796.960693][ T474] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11034'. [ 797.080569][ T5907] usb 5-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=1.00 [ 797.081654][ T5907] usb 5-1: config index 0 descriptor too short (expected 69, got 51) [ 797.081718][ T5907] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.084204][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.084227][ T5907] usb 5-1: Product: syz [ 797.084241][ T5907] usb 5-1: Manufacturer: syz [ 797.084255][ T5907] usb 5-1: SerialNumber: syz [ 797.148530][ T5907] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 797.240241][ T5928] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 797.376531][ T5907] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 797.554555][ T5907] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 797.592698][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 797.594819][ T5928] usb 1-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 797.598550][ T5928] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 797.598574][ T5928] usb 1-1: config 0 has no interface number 0 [ 797.598614][ T5928] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 797.598638][ T5928] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 797.598659][ T5928] usb 1-1: config 0 interface 85 has no altsetting 0 [ 797.605573][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.605596][ T5928] usb 1-1: Product: syz [ 797.605610][ T5928] usb 1-1: Manufacturer: syz [ 797.605624][ T5928] usb 1-1: SerialNumber: syz [ 797.639836][ T5928] usb 1-1: config 0 descriptor?? [ 797.699378][ T5907] usb 5-1: USB disconnect, device number 43 [ 797.737586][T32705] udevd[32705]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.770251][ T515] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 797.891871][ T519] netlink: 228 bytes leftover after parsing attributes in process `syz.1.11045'. [ 798.107001][ T5928] appletouch 1-1:0.85: Failed to request geyser raw mode [ 798.107381][ T5928] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 798.136900][ T5928] usb 1-1: USB disconnect, device number 30 [ 798.501229][ T551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11058'. [ 798.666282][ T558] block device autoloading is deprecated and will be removed. [ 799.700846][ T606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11084'. [ 800.435349][ T643] netlink: 240 bytes leftover after parsing attributes in process `syz.4.11101'. [ 800.758309][ T5907] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 800.808212][ T667] netlink: 'syz.1.11111': attribute type 11 has an invalid length. [ 800.919192][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 800.922504][ T5907] usb 3-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 800.923646][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 800.923672][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 245, changing to 11 [ 800.923698][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 58613, setting to 1024 [ 800.923724][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 800.923748][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 800.925895][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.925918][ T5907] usb 3-1: Product: syz [ 800.925932][ T5907] usb 3-1: Manufacturer: syz [ 800.925946][ T5907] usb 3-1: SerialNumber: syz [ 801.039387][ T5907] usb 3-1: config 0 descriptor?? [ 801.061121][ T677] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 801.494169][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.494581][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.494966][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.495794][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.523462][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.525433][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.531864][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.544512][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.551249][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.552863][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.553307][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.553705][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.554109][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.554505][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.554899][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.556182][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.556570][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.556962][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.621062][ T5907] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 801.621112][ T5907] input input133: Timeout waiting for response from device. [ 801.639347][ T5907] usb 3-1: USB disconnect, device number 53 [ 801.676273][ T702] netlink: 'syz.4.11126': attribute type 1 has an invalid length. [ 801.676296][ T702] netlink: 'syz.4.11126': attribute type 2 has an invalid length. [ 801.753842][ T706] netlink: 'syz.0.11125': attribute type 2 has an invalid length. [ 801.868170][ T712] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11129'. [ 802.369504][ T5907] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 802.373000][ T739] netlink: 'syz.1.11142': attribute type 10 has an invalid length. [ 802.416773][ T739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 802.421909][ T739] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 802.422192][ T739] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 802.450033][ T739] team0: Port device netdevsim1 added [ 802.529661][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 802.530383][ T5907] usb 1-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 802.531387][ T5907] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 802.531410][ T5907] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 802.531430][ T5907] usb 1-1: config 0 has no interface number 0 [ 802.531474][ T5907] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 802.531500][ T5907] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 802.531525][ T5907] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 802.533461][ T5907] usb 1-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 802.533484][ T5907] usb 1-1: Product: syz [ 802.533498][ T5907] usb 1-1: Manufacturer: syz [ 802.537712][ T5907] usb 1-1: config 0 descriptor?? [ 802.540422][ T725] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 802.670361][ T748] netlink: 'syz.4.11145': attribute type 2 has an invalid length. [ 802.709659][ T749] netlink: 'syz.2.11144': attribute type 1 has an invalid length. [ 803.030406][ T763] openvswitch: netlink: Multiple metadata blocks provided [ 803.062868][ T5907] usb 1-1: USB disconnect, device number 31 [ 803.312966][ T783] netlink: 'syz.1.11156': attribute type 28 has an invalid length. [ 803.312989][ T783] netlink: 'syz.1.11156': attribute type 28 has an invalid length. [ 803.313002][ T783] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11156'. [ 803.459718][ T788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11159'. [ 803.481034][ T5937] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 803.646936][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 803.646988][ T5937] usb 5-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 803.647988][ T5937] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.648009][ T5937] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 803.650983][ T5937] usb 5-1: string descriptor 0 read error: -22 [ 803.651119][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.722658][ T5937] usb 5-1: selecting invalid altsetting 1 [ 803.723387][ T5937] usb 5-1: unit 3 not found! [ 803.946201][ T5937] usb 5-1: invalid channels for MIXER UNIT 6: input=2, output=161 [ 804.071393][ T5937] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 804.198995][ T5937] usb 5-1: USB disconnect, device number 44 [ 804.356547][ T839] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 804.756720][ T859] netlink: 'syz.2.11186': attribute type 1 has an invalid length. [ 805.190541][ T5914] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 805.356351][ T5914] usb 5-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 805.359401][ T5914] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 805.359427][ T5914] usb 5-1: config 0 has no interface number 0 [ 805.359466][ T5914] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 805.359492][ T5914] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 805.412735][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.412761][ T5914] usb 5-1: Product: syz [ 805.412776][ T5914] usb 5-1: Manufacturer: syz [ 805.412790][ T5914] usb 5-1: SerialNumber: syz [ 805.443033][ T5914] usb 5-1: config 0 descriptor?? [ 805.445181][ T869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 805.464334][ T5914] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 805.522426][ T5914] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 805.960880][ T5937] usb 5-1: USB disconnect, device number 45 [ 805.989452][ T5937] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 806.014929][ T5937] cyberjack 5-1:0.69: device disconnected [ 806.280899][ T935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11207'. [ 806.644851][ T956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.537131][ T1006] netlink: 'syz.0.11239': attribute type 1 has an invalid length. [ 807.537155][ T1006] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11239'. [ 807.656248][ T1014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11242'. [ 808.078334][ T1040] netlink: 'syz.0.11250': attribute type 2 has an invalid length. [ 808.977412][ T1104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11273'. [ 809.101808][ T5937] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 809.165527][ T1115] binder: Write failure EINVAL in pid:5788 [ 809.264511][ T5937] usb 5-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 809.265624][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.299183][ T5937] usb 5-1: config 0 descriptor?? [ 809.301694][ T5937] cp210x 5-1:0.0: cp210x converter detected [ 809.358583][ T5914] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 809.518358][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 809.519142][ T5914] usb 3-1: New USB device found: idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 809.528262][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.528289][ T5914] usb 3-1: Product: syz [ 809.528303][ T5914] usb 3-1: Manufacturer: syz [ 809.528343][ T5914] usb 3-1: SerialNumber: syz [ 809.571997][ T5914] usb 3-1: config 0 descriptor?? [ 809.575955][ T5937] usb 5-1: cp210x converter now attached to ttyUSB0 [ 809.577741][ T5914] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 809.769345][ T5344] usb 5-1: USB disconnect, device number 46 [ 809.784523][ T5344] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 809.791053][ T5344] cp210x 5-1:0.0: device disconnected [ 809.997133][ T1161] netlink: 'syz.1.11293': attribute type 16 has an invalid length. [ 809.997157][ T1161] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.11293'. [ 810.030575][ T5914] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 810.030724][ T5914] visor 3-1:0.0: probe with driver visor failed with error -71 [ 810.053701][ T5914] usb 3-1: USB disconnect, device number 54 [ 810.310853][ T1182] netlink: 'syz.0.11298': attribute type 10 has an invalid length. [ 811.027620][ T1205] ntfs3(loop4): try to read out of volume at offset 0x0 [ 811.688165][ T1236] netlink: 768 bytes leftover after parsing attributes in process `syz.4.11320'. [ 812.126376][ T5914] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 812.242272][ T1267] debugfs: '1ùà^!' already exists in 'ieee80211' [ 812.286299][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 812.288328][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short [ 812.288376][ T5914] usb 3-1: New USB device found: idVendor=1199, idProduct=907b, bcdDevice=7c.3d [ 812.289319][ T5914] usb 3-1: config 4 has an invalid interface number: 40 but max is 2 [ 812.289340][ T5914] usb 3-1: config 4 has an invalid interface descriptor of length 2, skipping [ 812.289357][ T5914] usb 3-1: config 4 has an invalid interface number: 40 but max is 2 [ 812.289375][ T5914] usb 3-1: config 4 has an invalid interface number: 198 but max is 2 [ 812.289394][ T5914] usb 3-1: config 4 has 2 interfaces, different from the descriptor's value: 3 [ 812.289413][ T5914] usb 3-1: config 4 has no interface number 0 [ 812.289428][ T5914] usb 3-1: config 4 has no interface number 1 [ 812.289474][ T5914] usb 3-1: config 4 interface 40 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 812.289494][ T5914] usb 3-1: config 4 interface 40 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 812.289529][ T5914] usb 3-1: config 4 interface 198 altsetting 14 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 812.289553][ T5914] usb 3-1: config 4 interface 40 has no altsetting 1 [ 812.289568][ T5914] usb 3-1: config 4 interface 198 has no altsetting 0 [ 812.293484][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.293507][ T5914] usb 3-1: Product: syz [ 812.293521][ T5914] usb 3-1: Manufacturer: syz [ 812.293535][ T5914] usb 3-1: SerialNumber: syz [ 812.543644][ T1281] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11334'. [ 812.695386][ T5914] usb 3-1: USB disconnect, device number 55 [ 812.755970][ T1295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11338'. [ 812.756030][ T1295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11338'. [ 812.920038][ T1307] netlink: 'syz.1.11344': attribute type 4 has an invalid length. [ 812.941721][ T1308] openvswitch: netlink: EtherType 548 is less than min 600 [ 812.962599][ T1310] UBIFS error (pid: 1310): cannot open "ubi:0", error -19 [ 813.488963][ T1340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11355'. [ 813.643871][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 813.701569][ T1350] ubi0: attaching mtd0 [ 813.703505][ T1350] ubi0: scanning is finished [ 813.703551][ T1350] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 813.798797][ T1350] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 813.811470][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 813.813633][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 813.813680][ T9] usb 5-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 813.840063][ T9] usb 5-1: config 4 interface 0 has no altsetting 0 [ 813.844795][ T9] usb 5-1: string descriptor 0 read error: -22 [ 813.844890][ T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 813.881090][ T9] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 813.914660][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 813.914989][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 813.915032][ T9] usb 5-1: media controller created [ 813.968365][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 814.010035][ T5914] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 814.038071][ T1369] netlink: 'syz.2.11365': attribute type 4 has an invalid length. [ 814.038094][ T1369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11365'. [ 814.167556][ T5914] usb 1-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 814.168541][ T5914] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 814.168587][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.214736][ T5914] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 814.388030][ T5907] usb 5-1: USB disconnect, device number 47 [ 815.185553][ T1422] CIFS mount error: No usable UNC path provided in device string! [ 815.185553][ T1422] [ 815.185579][ T1422] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 815.321662][ T5914] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 815.390433][ T1430] misc userio: No port type given on /dev/userio [ 815.537417][ T5914] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 815.537442][ T5914] stv0680 1-1:4.0: last error: 86, command = 0x58 [ 815.566681][ T5914] usb 1-1: USB disconnect, device number 32 [ 815.717762][ T1450] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11394'. [ 815.813434][ T1450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.119062][ T1472] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11402'. [ 816.134257][ T1472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.165164][ T5914] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 816.264324][ T1477] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11404'. [ 816.325329][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 816.327436][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short [ 816.327483][ T5914] usb 2-1: New USB device found: idVendor=041e, idProduct=3f19, bcdDevice=0.40 [ 816.328465][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.328487][ T5914] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 816.331745][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.331767][ T5914] usb 2-1: Product: syz [ 816.331782][ T5914] usb 2-1: Manufacturer: syz [ 816.331797][ T5914] usb 2-1: SerialNumber: syz [ 816.623572][ T1491] kAFS: No cell specified [ 816.678331][ T5914] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 816.873405][ T5914] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 816.906684][ T5914] usb 2-1: USB disconnect, device number 54 [ 817.003089][T32705] udevd[32705]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.449336][ T1527] netlink: 'syz.0.11420': attribute type 11 has an invalid length. [ 817.798364][ T1547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11430'. [ 817.885345][ T1553] netlink: 'syz.2.11435': attribute type 2 has an invalid length. [ 817.943298][ T4928] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 818.134793][ T1565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11439'. [ 818.574435][ T1585] netlink: 'syz.4.11449': attribute type 10 has an invalid length. [ 818.581188][ T1585] bond0: (slave bond_slave_0): Releasing backup interface [ 819.310459][ T1624] netlink: 'syz.2.11466': attribute type 10 has an invalid length. [ 819.389625][ T1624] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 819.389851][ T1624] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 819.389872][ T1624] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 820.020079][ T1661] openvswitch: netlink: IP tunnel TTL not specified. [ 820.020113][ T1661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.529141][ T1680] tmpfs: Group quota block hardlimit too large. [ 821.273323][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 821.439314][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 821.439364][ T9] usb 1-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 821.440357][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.440380][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 821.491165][ T9] usb 1-1: string descriptor 0 read error: -22 [ 821.491292][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.519136][ T9] usb 1-1: selecting invalid altsetting 1 [ 821.519815][ T9] usb 1-1: unit 3 not found! [ 821.741851][ T9] usb 1-1: invalid channels for MIXER UNIT 6: input=2, output=161 [ 821.861686][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 821.862500][ T1761] netlink: 'syz.2.11525': attribute type 1 has an invalid length. [ 821.862518][ T1761] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11525'. [ 821.914666][ T5914] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 821.964706][ T1765] netlink: 284 bytes leftover after parsing attributes in process `syz.2.11526'. [ 822.040332][ T5344] usb 1-1: USB disconnect, device number 33 [ 822.074776][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 822.075487][ T5914] usb 2-1: New USB device found: idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 822.076496][ T5914] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 822.076519][ T5914] usb 2-1: config 0 has no interface number 0 [ 822.076556][ T5914] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 822.076578][ T5914] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 822.076601][ T5914] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x2F, changing to 0xF [ 822.076625][ T5914] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0xF has invalid maxpacket 28265, setting to 1024 [ 822.076649][ T5914] usb 2-1: config 0 interface 186 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 822.076672][ T5914] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.078672][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.078693][ T5914] usb 2-1: Product: syz [ 822.078708][ T5914] usb 2-1: Manufacturer: syz [ 822.078722][ T5914] usb 2-1: SerialNumber: syz [ 822.082860][ T5914] usb 2-1: config 0 descriptor?? [ 822.083993][ T1746] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 822.161371][ T5914] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 822.305721][ T9] usb 2-1: USB disconnect, device number 55 [ 822.363162][ T5914] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 822.524558][ T5914] usb 3-1: New USB device found: idVendor=0af0, idProduct=6711, bcdDevice=0.00 [ 822.529206][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.529231][ T5914] usb 3-1: Product: syz [ 822.529245][ T5914] usb 3-1: Manufacturer: syz [ 822.529264][ T5914] usb 3-1: SerialNumber: syz [ 822.822811][ T1810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11537'. [ 823.044388][ T5914] usb 3-1: USB disconnect, device number 56 [ 823.123294][ T1833] netlink: 'syz.4.11542': attribute type 21 has an invalid length. [ 823.123318][ T1833] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11542'. [ 823.123367][ T1833] netlink: 'syz.4.11542': attribute type 4 has an invalid length. [ 823.123380][ T1833] netlink: 'syz.4.11542': attribute type 5 has an invalid length. [ 823.123392][ T1833] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11542'. [ 823.232046][ T4928] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 823.517608][ T32] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 823.698897][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 823.699821][ T32] usb 1-1: New USB device found: idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 823.708190][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.711020][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.711043][ T32] usb 1-1: Product: syz [ 823.711055][ T32] usb 1-1: Manufacturer: syz [ 823.711069][ T32] usb 1-1: SerialNumber: syz [ 823.728588][ T32] usb 1-1: config 0 descriptor?? [ 823.732680][ T32] cdc_ether 1-1:0.0: missing cdc header descriptor [ 823.737871][ T32] usb 1-1: unsupported MDLM descriptors [ 823.983914][ T5344] usb 1-1: USB disconnect, device number 34 [ 824.033256][ T1885] sctp: [Deprecated]: syz.4.11556 (pid 1885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 824.033256][ T1885] Use struct sctp_sack_info instead [ 824.309921][ T1848] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 824.309948][ T1848] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 824.455624][ T1903] openvswitch: netlink: IP tunnel TTL not specified. [ 824.455664][ T1903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.889841][ T9] wlan0 speed is unknown, defaulting to 1000 [ 824.909580][ T9] syz1: Port: 1 Link DOWN [ 824.910825][ T1848] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 824.910847][ T1848] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 824.971208][ T5937] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 825.131468][ T5937] usb 1-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 825.132607][ T5937] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 825.132630][ T5937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.132649][ T5937] usb 1-1: config 0 has no interface number 0 [ 825.132675][ T5937] usb 1-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 825.132735][ T5937] usb 1-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 825.132762][ T5937] usb 1-1: config 0 interface 1 has no altsetting 0 [ 825.134983][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.135005][ T5937] usb 1-1: Product: syz [ 825.135019][ T5937] usb 1-1: Manufacturer: syz [ 825.135041][ T5937] usb 1-1: SerialNumber: syz [ 825.149056][ T5937] usb 1-1: config 0 descriptor?? [ 825.250979][ T5937] cx231xx 1-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 825.251024][ T5937] cx231xx 1-1:0.1: Not found matching IAD interface [ 825.399679][ T5937] usb 1-1: USB disconnect, device number 35 [ 826.089508][ T2001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11577'. [ 826.115358][ T2001] ovs-system: entered promiscuous mode [ 826.125947][ T5344] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 826.286928][ T5344] usb 3-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 826.290526][ T5344] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 826.290550][ T5344] usb 3-1: config 0 has no interface number 0 [ 826.290585][ T5344] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 826.295481][ T5937] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 826.305093][ T5344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.305117][ T5344] usb 3-1: Product: syz [ 826.305130][ T5344] usb 3-1: Manufacturer: syz [ 826.305144][ T5344] usb 3-1: SerialNumber: syz [ 826.329885][ T5344] usb 3-1: config 0 descriptor?? [ 826.396192][ T5344] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 826.466449][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 826.467035][ T5937] usb 2-1: New USB device found: idVendor=0921, idProduct=1000, bcdDevice=89.97 [ 826.470800][ T5937] usb 2-1: config 8 has an invalid interface number: 52 but max is 0 [ 826.470824][ T5937] usb 2-1: config 8 has no interface number 0 [ 826.470852][ T5937] usb 2-1: config 8 interface 52 has no altsetting 0 [ 826.501738][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.501763][ T5937] usb 2-1: Product: syz [ 826.501778][ T5937] usb 2-1: Manufacturer: syz [ 826.501792][ T5937] usb 2-1: SerialNumber: syz [ 826.797466][ T5937] belkin_sa 2-1:8.52: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 826.803959][ T32] usb 3-1: USB disconnect, device number 57 [ 826.815796][ T32] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 826.830491][ T5937] usb 2-1: bcdDevice: 8997, bfc: 0 [ 826.850904][ T5937] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 826.871276][ T5937] usb 2-1: USB disconnect, device number 56 [ 826.890104][ T5937] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 826.890692][ T5937] belkin_sa 2-1:8.52: device disconnected [ 827.229704][ T2077] binder: Write failure EFAULT in pid:5565 [ 828.262986][ T5914] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 828.337346][ T5978] kworker/1:7 (5978) used greatest stack depth: 18576 bytes left [ 828.422616][ T5914] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 828.422659][ T5914] usb 2-1: too many configurations: 180, using maximum allowed: 8 [ 828.483070][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.483105][ T5914] usb 2-1: Product: syz [ 828.483120][ T5914] usb 2-1: Manufacturer: syz [ 828.483134][ T5914] usb 2-1: SerialNumber: syz [ 828.524152][ T5344] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 828.564545][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 828.678422][ T5344] usb 1-1: Using ep0 maxpacket: 8 [ 828.690777][ T5344] usb 1-1: unable to get BOS descriptor or descriptor too short [ 828.690822][ T5344] usb 1-1: New USB device found: idVendor=0506, idProduct=00df, bcdDevice=f6.6a [ 828.697214][ T5344] usb 1-1: config 6 has an invalid interface number: 114 but max is 0 [ 828.697238][ T5344] usb 1-1: config 6 has no interface number 0 [ 828.697264][ T5344] usb 1-1: config 6 interface 114 has no altsetting 0 [ 828.707353][ T5344] usb 1-1: string descriptor 0 read error: -22 [ 828.707485][ T5344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.765433][ T5344] gspca_main: spca501-2.14.0 probing 0506:00df [ 828.938174][ T2163] libceph: secret too big 289 [ 829.012653][ T2165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11616'. [ 829.012682][ T2165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11616'. [ 829.070665][ T32] usb 2-1: USB disconnect, device number 57 [ 829.140573][ T2172] UBIFS error (pid: 2172): cannot open "ubi0:testvol", error -19 [ 829.184735][ T5344] gspca_spca501: reg write: error -71 [ 829.184755][ T5344] spca501 1-1:6.114: Reg write failed for 0x00,0x02,0x01 [ 829.184835][ T5344] spca501 1-1:6.114: probe with driver spca501 failed with error -22 [ 829.207643][ T5344] usb 1-1: USB disconnect, device number 36 [ 829.384638][ T2189] netlink: 17 bytes leftover after parsing attributes in process `syz.2.11622'. [ 829.685292][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 829.685462][ T9] ath9k_htc: Failed to initialize the device [ 829.691393][ T32] usb 2-1: ath9k_htc: USB layer deinitialized [ 829.848135][ T2216] UBIFS error (pid: 2216): cannot open "ubi0_0", error -19 [ 830.670680][ T2250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11643'. [ 830.670934][ T2250] unsupported nlmsg_type 40 [ 830.901704][ T2263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11650'. [ 830.974373][ T2266] netlink: 'syz.4.11652': attribute type 12 has an invalid length. [ 830.974395][ T2266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11652'. [ 831.472329][ T2286] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11660'. [ 831.472356][ T2286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11660'. [ 831.472372][ T2286] netlink: 31 bytes leftover after parsing attributes in process `syz.1.11660'. [ 831.472387][ T2286] netlink: 'syz.1.11660': attribute type 2 has an invalid length. [ 831.472399][ T2286] netlink: 31 bytes leftover after parsing attributes in process `syz.1.11660'. [ 831.551778][ T2289] random: crng reseeded on system resumption [ 831.736117][ T2303] cgroup: Name too long [ 831.916422][ T5937] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 832.077486][ T5937] usb 3-1: New USB device found: idVendor=045a, idProduct=5210, bcdDevice=1.01 [ 832.085329][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.085355][ T5937] usb 3-1: Product: syz [ 832.085369][ T5937] usb 3-1: Manufacturer: syz [ 832.085384][ T5937] usb 3-1: SerialNumber: syz [ 832.132787][ T5937] ums-karma 3-1:1.0: USB Mass Storage device detected [ 832.151699][ T5937] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 832.151699][ T5937] Please send a copy of this message to and [ 832.639821][ T5937] ums-karma 3-1:1.0: probe with driver ums-karma failed with error -5 [ 832.660428][ T5937] usb 3-1: USB disconnect, device number 58 [ 832.909896][ T2365] netlink: 'syz.4.11691': attribute type 4 has an invalid length. [ 833.108304][ T2375] tmpfs: Using encoding : utf8-12.1.0 [ 833.551280][ T5937] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 833.714577][ T5937] usb 5-1: New USB device found: idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 833.716022][ T5937] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 833.716046][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.716065][ T5937] usb 5-1: config 0 has no interface number 0 [ 833.716103][ T5937] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 6213, setting to 64 [ 833.716129][ T5937] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 833.716154][ T5937] usb 5-1: config 0 interface 52 has no altsetting 0 [ 833.799900][ T5937] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 833.799926][ T5937] usb 5-1: Product: syz [ 833.799942][ T5937] usb 5-1: Manufacturer: syz [ 833.799956][ T5937] usb 5-1: SerialNumber: syz [ 833.805937][ T5937] usb 5-1: config 0 descriptor?? [ 833.934305][ T2415] ieee802154 phy0 wpan0: encryption failed: -22 [ 834.090746][ T5937] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input135 [ 834.369015][ T5937] usb 5-1: USB disconnect, device number 48 [ 834.369098][ C0] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 835.111594][ T5937] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 835.130033][ T9] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 835.275676][ T5937] usb 2-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 835.276856][ T5937] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 835.276903][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.310617][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 835.310652][ T9] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=1.00 [ 835.311837][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.311982][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.362549][ T5937] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 835.389106][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 835.935211][ T9] gspca_spca501: reg write: error -110 [ 835.935231][ T9] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 835.935311][ T9] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 835.938852][ T9] uvcvideo 1-1:1.0: Found UVC 1.00 device (0000:0000) [ 835.940324][ T9] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 835.940738][ T9] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 835.940787][ T9] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 836.023662][ T9] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -5 [ 836.069998][ T2520] __nla_validate_parse: 5 callbacks suppressed [ 836.070014][ T2520] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11735'. [ 836.070024][ T2520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 836.403046][ T2540] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11742'. [ 836.437264][ T5937] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 836.554125][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 836.654312][ T5937] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 836.654336][ T5937] stv0680 2-1:4.0: last error: 86, command = 0x58 [ 836.679146][ T5937] usb 2-1: USB disconnect, device number 58 [ 836.713696][ T5914] usb 1-1: USB disconnect, device number 37 [ 836.720552][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 836.749236][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 836.749288][ T9] usb 3-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 836.755369][ T9] usb 3-1: config 4 interface 0 has no altsetting 0 [ 836.783979][ T9] usb 3-1: string descriptor 0 read error: -22 [ 836.784068][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 836.824805][ T9] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 836.844350][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 836.844679][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 836.844736][ T9] usb 3-1: media controller created [ 836.893710][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 837.104918][ T2582] trusted_key: encrypted_key: hex blob is missing [ 837.319901][ T5344] usb 3-1: USB disconnect, device number 59 [ 837.394595][ T2604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11752'. [ 837.394840][ T2601] /dev/sg0: Can't lookup blockdev [ 839.085463][ T2701] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11790'. [ 839.214926][ T33] audit: type=1400 audit(2000000330.074:424): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=2702 comm="syz.4.11792" [ 839.303559][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 839.967579][ T2743] netlink: 'syz.0.11804': attribute type 10 has an invalid length. [ 839.967782][ T2743] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 839.968028][ T2743] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 839.968047][ T2743] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 840.099798][ T2749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11806'. [ 840.099826][ T2749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11806'. [ 840.548542][ T2781] ieee802154 phy0 wpan0: encryption failed: -22 [ 841.462576][ T2838] netlink: 'syz.1.11838': attribute type 4 has an invalid length. [ 842.088754][ T2879] netlink: 'syz.2.11852': attribute type 10 has an invalid length. [ 842.088791][ T2879] ipvlan0: entered allmulticast mode [ 842.088808][ T2879] veth0_vlan: entered allmulticast mode [ 842.119966][ T2879] team0: Device ipvlan0 failed to register rx_handler [ 842.201715][ T2884] futex_wake_op: syz.4.11853 tries to shift op by 144; fix this program [ 842.592427][ T2896] No source specified [ 842.784118][ T2910] netlink: 'syz.0.11863': attribute type 21 has an invalid length. [ 842.993000][ T5937] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 843.148433][ T5937] usb 5-1: New USB device found: idVendor=05ab, idProduct=0301, bcdDevice=1.00 [ 843.150008][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 843.150034][ T5937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 843.150057][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 843.150078][ T5937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 843.153869][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.153892][ T5937] usb 5-1: Product: syz [ 843.153906][ T5937] usb 5-1: Manufacturer: syz [ 843.153920][ T5937] usb 5-1: SerialNumber: syz [ 843.157890][ T5937] usb 5-1: config 0 descriptor?? [ 843.179465][ T5914] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 843.250780][ T5937] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 843.355125][ T5914] usb 2-1: New USB device found: idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 843.371324][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 843.371351][ T5914] usb 2-1: Product: syz [ 843.371364][ T5914] usb 2-1: Manufacturer: syz [ 843.371376][ T5914] usb 2-1: SerialNumber: syz [ 843.425192][ T5914] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 843.514509][ T2951] netlink: 'syz.0.11878': attribute type 21 has an invalid length. [ 843.514535][ T2951] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11878'. [ 843.514613][ T2951] netlink: 'syz.0.11878': attribute type 4 has an invalid length. [ 843.514628][ T2951] netlink: 'syz.0.11878': attribute type 5 has an invalid length. [ 843.514640][ T2951] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11878'. [ 843.585255][ T5937] ums-isd200 5-1:0.0: probe with driver ums-isd200 failed with error -22 [ 843.767139][ T5344] usb 5-1: USB disconnect, device number 49 [ 843.834487][ T2971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11883'. [ 843.870568][ T5914] vp7045: USB control message 'in' went wrong. [ 843.870586][ T5914] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 843.870622][ T5914] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 843.900501][ T5914] usb 2-1: USB disconnect, device number 59 [ 844.235935][ T2993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11890'. [ 844.263272][ T2993] ovs-system: entered promiscuous mode [ 844.568652][ T5914] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 844.663399][ T3015] xt_nfacct: accounting object `' does not exist [ 844.730536][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 844.734475][ T5914] usb 3-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 844.737393][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.737419][ T5914] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 844.737442][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 844.778390][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.778416][ T5914] usb 3-1: Product: syz [ 844.778430][ T5914] usb 3-1: Manufacturer: syz [ 844.778444][ T5914] usb 3-1: SerialNumber: syz [ 844.822791][ T5914] usb 3-1: config 0 descriptor?? [ 845.306043][ T5914] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 845.306077][ T5914] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 845.346578][ T5914] usb 3-1: USB disconnect, device number 60 [ 846.096931][ T5914] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 846.247504][ T3083] binder: Write failure EFAULT in pid:6103 [ 846.258023][ T5914] usb 5-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 846.262570][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 846.262673][ T5914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 846.262698][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 846.262719][ T5914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 846.262758][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.337165][ T5914] usb 5-1: config 0 descriptor?? [ 846.576578][ T5914] hdpvr 5-1:0.0: firmware version 0xc4 dated Xó'éõ?iF97’õ»CoðÝŒ=”)Î4ËŽ~³¬S2Ûº­”ñ [ 846.576604][ T5914] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 846.786843][ T5914] hdpvr 5-1:0.0: device init failed [ 846.786923][ T5914] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 846.804145][ T3110] comedi comedi3: das16m1: I/O port conflict (0x500,8) [ 846.818791][ T5914] usb 5-1: USB disconnect, device number 50 [ 846.963058][ T3121] UBIFS error (pid: 3121): cannot open "ubi0:testvol", error -19 [ 847.229522][ T32] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 847.393677][ T32] usb 3-1: New USB device found: idVendor=2b73, idProduct=003c, bcdDevice=0.40 [ 847.409975][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.410002][ T32] usb 3-1: Product: syz [ 847.410016][ T32] usb 3-1: Manufacturer: syz [ 847.410030][ T32] usb 3-1: SerialNumber: syz [ 847.489767][ T3149] syz_tun: mtu less than device minimum [ 847.621357][ T3153] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11951'. [ 847.621388][ T3153] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11951'. [ 847.860444][ T32] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 847.885986][ T32] usb 3-1: USB disconnect, device number 61 [ 848.099554][ T5344] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 848.175457][T32705] udevd[32705]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 848.408360][ T5344] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 848.408402][ T5344] usb 1-1: too many configurations: 180, using maximum allowed: 8 [ 848.434278][ T5344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.434304][ T5344] usb 1-1: Product: syz [ 848.434318][ T5344] usb 1-1: Manufacturer: syz [ 848.434331][ T5344] usb 1-1: SerialNumber: syz [ 848.497622][ T5996] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 848.533194][ T5914] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 848.645887][ T3235] netlink: 'syz.2.11970': attribute type 1 has an invalid length. [ 848.660929][ T5907] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 848.695862][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 848.695913][ T5914] usb 5-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=0.40 [ 848.697070][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 848.697100][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 848.701442][ T5914] usb 5-1: string descriptor 0 read error: -22 [ 848.701568][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.763966][ T3199] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 848.764095][ T3199] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 848.787198][ T5914] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 848.856325][ T5907] usb 2-1: not running at top speed; connect to a high speed hub [ 848.856362][ T5907] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 848.885016][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 848.885052][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 848.915471][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.915498][ T5907] usb 2-1: Product: syz [ 848.915513][ T5907] usb 2-1: Manufacturer: syz [ 848.915528][ T5907] usb 2-1: SerialNumber: syz [ 848.945835][ T3218] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 848.945945][ T3218] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 849.005737][ T5344] usb 1-1: USB disconnect, device number 38 [ 849.171418][ T5907] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 849.171490][ T5907] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 849.171510][ T5907] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 849.216413][ T5907] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 849.235870][ T5907] usb 2-1: USB disconnect, device number 60 [ 849.429486][ T5914] usb 5-1: USB disconnect, device number 51 [ 849.639947][ T5996] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 849.640109][ T5996] ath9k_htc: Failed to initialize the device [ 849.697899][ T5344] usb 1-1: ath9k_htc: USB layer deinitialized [ 849.786919][ T3308] netlink: 'syz.0.11983': attribute type 12 has an invalid length. [ 849.786944][ T3308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11983'. [ 849.907406][ T3312] netlink: 'syz.0.11985': attribute type 7 has an invalid length. [ 849.975822][ T5914] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 850.112854][ T3323] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11990'. [ 850.136728][ T5914] usb 3-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 850.140605][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.142837][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.142863][ T5914] usb 3-1: Product: syz [ 850.142878][ T5914] usb 3-1: Manufacturer: syz [ 850.142893][ T5914] usb 3-1: SerialNumber: syz [ 850.187369][ T5914] usb 3-1: config 0 descriptor?? [ 850.208047][ T5914] redrat3 3-1:0.0: Couldn't find all endpoints [ 850.254245][ T5907] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 850.416325][ T5907] usb 1-1: New USB device found: idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 850.419304][ T5907] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 850.419328][ T5907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.419347][ T5907] usb 1-1: config 0 has no interface number 0 [ 850.419384][ T5907] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 850.419408][ T5907] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 850.419429][ T5907] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.419453][ T5907] usb 1-1: config 0 interface 52 has no altsetting 0 [ 850.421432][ T5907] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 850.421454][ T5907] usb 1-1: Product: syz [ 850.421468][ T5907] usb 1-1: Manufacturer: syz [ 850.421483][ T5907] usb 1-1: SerialNumber: syz [ 850.535870][ T5907] usb 1-1: config 0 descriptor?? [ 850.622590][ T5914] usb 3-1: USB disconnect, device number 62 [ 850.783181][ T5907] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 850.785825][ T5907] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5 [ 851.047503][ T5937] usb 1-1: USB disconnect, device number 39 [ 851.312155][ T3363] CIFS mount error: No usable UNC path provided in device string! [ 851.312155][ T3363] [ 851.312178][ T3363] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 851.451045][ T3367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12000'. [ 851.570447][ T3372] IPv6: A: Disabled Multicast RS [ 851.777645][ T3385] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12007'. [ 851.851767][ T3387] binder: Write failure EINVAL in pid:6157 [ 852.743420][ T5937] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 852.903842][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 852.912771][ T5937] usb 1-1: New USB device found: idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 852.931118][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.931145][ T5937] usb 1-1: Product: syz [ 852.931160][ T5937] usb 1-1: Manufacturer: syz [ 852.931174][ T5937] usb 1-1: SerialNumber: syz [ 852.935556][ T5937] usb 1-1: config 0 descriptor?? [ 852.972509][ T5937] gspca_main: spca508-2.14.0 probing 041e:4018 [ 853.094380][ T3453] netlink: 'syz.4.12037': attribute type 2 has an invalid length. [ 853.477266][ T5937] gspca_spca508: reg_read err -71 [ 853.479545][ T5937] gspca_spca508: reg_read err -71 [ 853.479909][ T5937] gspca_spca508: reg_read err -71 [ 853.496564][ T5937] gspca_spca508: reg_read err -71 [ 853.496935][ T5937] gspca_spca508: reg write: error -71 [ 853.497013][ T5937] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 853.523478][ T5937] usb 1-1: USB disconnect, device number 40 [ 853.762202][ T3486] sctp: [Deprecated]: syz.2.12049 (pid 3486) Use of int in max_burst socket option. [ 853.762202][ T3486] Use struct sctp_assoc_value instead [ 853.920205][ T3494] ieee802154 phy0 wpan0: encryption failed: -22 [ 854.114221][ T5937] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 854.274467][ T5937] usb 5-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 854.275683][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.303117][ T5937] usb 5-1: config 0 descriptor?? [ 854.312973][ T5937] cp210x 5-1:0.0: cp210x converter detected [ 854.490670][ T3520] netlink: 'syz.2.12065': attribute type 28 has an invalid length. [ 854.490693][ T3520] netlink: 'syz.2.12065': attribute type 3 has an invalid length. [ 854.490707][ T3520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12065'. [ 854.602369][ T3527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12068'. [ 854.667092][ T3529] netlink: 'syz.2.12067': attribute type 21 has an invalid length. [ 854.667118][ T3529] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12067'. [ 854.752768][ T5907] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 854.755003][ T5937] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 854.755529][ T5937] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 854.755553][ T5937] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 854.761264][ T5937] usb 5-1: cp210x converter now attached to ttyUSB0 [ 854.803292][ T5937] usb 5-1: USB disconnect, device number 52 [ 854.832470][ T5937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 854.845508][ T5937] cp210x 5-1:0.0: device disconnected [ 854.889451][ T3550] siw: device registration error -23 [ 854.913261][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 854.914067][ T5907] usb 1-1: New USB device found: idVendor=0b05, idProduct=17a0, bcdDevice=0.40 [ 854.916354][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.916377][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 854.918364][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.918387][ T5907] usb 1-1: Product: syz [ 854.918402][ T5907] usb 1-1: Manufacturer: syz [ 854.918416][ T5907] usb 1-1: SerialNumber: syz [ 855.213866][ T5907] usb 1-1: USB disconnect, device number 41 [ 855.245541][T32705] udevd[32705]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 855.286710][ T5914] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 855.383368][ T5937] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 855.447779][ T5914] usb 2-1: New USB device found: idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 855.449573][ T5914] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 855.449597][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.449616][ T5914] usb 2-1: config 0 has no interface number 0 [ 855.449653][ T5914] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 6213, setting to 64 [ 855.449679][ T5914] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 855.449704][ T5914] usb 2-1: config 0 interface 52 has no altsetting 0 [ 855.452778][ T5914] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 855.452803][ T5914] usb 2-1: Product: syz [ 855.452819][ T5914] usb 2-1: Manufacturer: syz [ 855.452833][ T5914] usb 2-1: SerialNumber: syz [ 855.475538][ T5914] usb 2-1: config 0 descriptor?? [ 855.620759][ T5937] usb 3-1: New USB device found: idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 855.622996][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.628071][ T5937] usb 3-1: config 0 descriptor?? [ 855.733662][ T5914] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input139 [ 856.008042][ T5996] usb 2-1: USB disconnect, device number 61 [ 856.008104][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 856.063446][ T3607] netlink: 'syz.0.12083': attribute type 1 has an invalid length. [ 856.125169][ T5937] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 856.125197][ T5937] hackrf 3-1:0.0: Could not detect board [ 856.125244][ T5937] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 856.154874][ T5937] usb 3-1: USB disconnect, device number 63 [ 856.757299][ T3649] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 859.082332][ T5907] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 859.248097][ T5907] usb 3-1: New USB device found: idVendor=1235, idProduct=8211, bcdDevice=1.00 [ 859.260323][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.260350][ T5907] usb 3-1: Product: syz [ 859.260364][ T5907] usb 3-1: Manufacturer: syz [ 859.260379][ T5907] usb 3-1: SerialNumber: syz [ 859.304178][ T5907] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 859.649326][ T3764] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 860.057270][ T3785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12153'. [ 860.057331][ T3785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12153'. [ 860.230850][ T3789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12155'. [ 860.248298][ T3791] ieee802154 phy0 wpan0: encryption failed: -22 [ 860.584481][ T5907] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -71 [ 860.655729][ T5907] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 860.676548][ T5907] usb 3-1: USB disconnect, device number 64 [ 860.753721][T32705] udevd[32705]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.281757][ T5907] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 861.442844][ T5907] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 861.443867][ T5907] usb 5-1: config index 0 descriptor too short (expected 64884, got 36) [ 861.443916][ T5907] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.447306][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.447330][ T5907] usb 5-1: Product: syz [ 861.447344][ T5907] usb 5-1: Manufacturer: syz [ 861.447358][ T5907] usb 5-1: SerialNumber: syz [ 861.512801][ T5907] rtl8150 5-1:1.0: couldn't find required endpoints [ 861.538327][ T5907] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 861.623550][ T5914] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 861.734348][ T5907] usb 5-1: USB disconnect, device number 53 [ 861.788320][ T5914] usb 2-1: not running at top speed; connect to a high speed hub [ 861.788357][ T5914] usb 2-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=1.00 [ 861.789430][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.789488][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.881041][ T5914] gspca_main: spca501-2.14.0 probing 0000:0000 [ 862.054729][ T3891] netlink: 'syz.0.12187': attribute type 3 has an invalid length. [ 862.054754][ T3891] netlink: 'syz.0.12187': attribute type 1 has an invalid length. [ 862.054768][ T3891] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12187'. [ 862.054783][ T3891] NCSI netlink: No device for ifindex 767 [ 862.220240][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12191'. [ 862.404233][ T3903] netlink: del zone limit has 4 unknown bytes [ 862.425620][ T5914] gspca_spca501: reg write: error -110 [ 862.425640][ T5914] spca501 2-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 862.425720][ T5914] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 862.426837][ T5914] uvcvideo 2-1:1.0: Found UVC 1.00 device (0000:0000) [ 862.431407][ T5914] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 862.431841][ T5914] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 862.431891][ T5914] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 862.500214][ T5914] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -5 [ 862.607529][ T3911] syz_tun: tun_net_xmit 42 [ 862.787958][ T33] audit: type=1326 audit(2000000352.150:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3916 comm="syz.2.12199" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc934d9e199 code=0x0 [ 863.005985][ T3928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12204'. [ 863.194154][ T3938] ntfs3(nullb0): Primary boot signature is not NTFS. [ 863.202477][ T3938] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 863.204739][ T27] usb 2-1: USB disconnect, device number 62 [ 863.238938][ T5996] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 863.413537][ T3951] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.413571][ T3951] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.415045][ T5996] usb 5-1: Using ep0 maxpacket: 32 [ 863.415705][ T5996] usb 5-1: New USB device found: idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 863.416667][ T5996] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.418624][ T5996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.418645][ T5996] usb 5-1: Product: syz [ 863.420735][ T5996] usb 5-1: Manufacturer: syz [ 863.420752][ T5996] usb 5-1: SerialNumber: syz [ 863.425409][ T5996] usb 5-1: config 0 descriptor?? [ 863.435452][ T5996] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 863.707332][ C0] syz_tun: tun_net_xmit 42 [ 863.885091][ T5996] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 863.885176][ T5996] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 864.056072][ T5996] usb 5-1: USB disconnect, device number 54 [ 864.653616][ T4014] netlink: 'syz.0.12231': attribute type 2 has an invalid length. [ 864.789211][ T5273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 864.818813][ C0] syz_tun: tun_net_xmit 42 [ 864.979178][ T5914] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 865.132030][ T4047] tmpfs: Bad value for 'mpol' [ 865.144859][ T5914] usb 3-1: New USB device found: idVendor=05ab, idProduct=0301, bcdDevice=1.00 [ 865.146129][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 865.146154][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 865.146178][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 865.146198][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 865.148173][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.148196][ T5914] usb 3-1: Product: syz [ 865.148210][ T5914] usb 3-1: Manufacturer: syz [ 865.148225][ T5914] usb 3-1: SerialNumber: syz [ 865.191933][ T5914] usb 3-1: config 0 descriptor?? [ 865.232594][ T5914] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 865.331700][ T5907] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 865.506341][ T5914] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 865.526524][ T5907] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 865.527550][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.527595][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 865.527621][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 865.527661][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.530257][ T5907] usb 2-1: config 0 descriptor?? [ 865.671728][ T5914] usb 3-1: USB disconnect, device number 65 [ 865.753365][ T5907] ath6kl: Failed to submit usb control message: -71 [ 865.753419][ T5907] ath6kl: unable to send the bmi data to the device: -71 [ 865.753434][ T5907] ath6kl: Unable to send get target info: -71 [ 865.787881][ T5907] ath6kl: Failed to init ath6kl core: -71 [ 865.789135][ T5907] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 865.813219][ T5907] usb 2-1: USB disconnect, device number 63 [ 865.892396][ T4087] netlink: 'syz.0.12252': attribute type 1 has an invalid length. [ 865.892422][ T4087] netlink: 'syz.0.12252': attribute type 1 has an invalid length. [ 866.925566][ T33] audit: type=1800 audit(2000000356.033:426): pid=4131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12274" name="bus" dev="tmpfs" ino=8328 res=0 errno=-22 [ 867.381220][ T4157] IPVS: length: 140 != 8 [ 867.446806][ T4159] vcan0 speed is unknown, defaulting to 1000 [ 867.485442][ T4162] netlink: 6060 bytes leftover after parsing attributes in process `syz.0.12290'. [ 867.693721][ T4171] x_tables: unsorted underflow at hook 3 [ 868.056641][ T5914] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 868.221095][ T5914] usb 5-1: New USB device found: idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 868.223338][ T5914] usb 5-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 868.223368][ T5914] usb 5-1: config 2 interface 0 altsetting 178 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 868.223392][ T5914] usb 5-1: config 2 interface 0 altsetting 178 endpoint 0x86 has invalid maxpacket 33903, setting to 1024 [ 868.223416][ T5914] usb 5-1: config 2 interface 0 has no altsetting 0 [ 868.227018][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.227041][ T5914] usb 5-1: Product: syz [ 868.227055][ T5914] usb 5-1: Manufacturer: syz [ 868.227069][ T5914] usb 5-1: SerialNumber: syz [ 868.311645][ T4177] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 868.465880][ T5907] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 868.524110][ T4208] netlink: 'syz.2.12308': attribute type 1 has an invalid length. [ 868.551023][ T5914] ims_pcu 5-1:2.0: Incorrect number of endpoints on data interface (1) [ 868.557098][ T5914] ims_pcu 5-1:2.0: probe with driver ims_pcu failed with error -22 [ 868.586721][ T5914] usb 5-1: USB disconnect, device number 55 [ 868.624125][ T5907] usb 1-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 868.625173][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.625222][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.627228][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.627251][ T5907] usb 1-1: Product: syz [ 868.627264][ T5907] usb 1-1: Manufacturer: syz [ 868.627276][ T5907] usb 1-1: SerialNumber: syz [ 868.695995][ T5907] zaurus 1-1:1.0: probe with driver zaurus failed with error -22 [ 868.870309][ T5914] usb 1-1: USB disconnect, device number 42 [ 869.020386][ T4241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12316'. [ 869.091988][ T4245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12317'. [ 869.148875][ T4247] nbd: must specify an index to disconnect [ 869.233733][ T4249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12320'. [ 869.313758][ T4253] netlink: 'syz.4.12321': attribute type 10 has an invalid length. [ 869.315204][ T4253] syz_tun: entered promiscuous mode [ 869.404497][ T4253] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 869.614333][ T4265] netlink: 'syz.0.12328': attribute type 1 has an invalid length. [ 869.806588][ T4273] IPv6: A: Disabled Multicast RS [ 870.022807][ T5907] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 870.187318][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 870.202891][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 870.202942][ T5907] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 870.223204][ T5907] usb 3-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 870.223232][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 870.223273][ T5907] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 870.223297][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 870.223322][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26227, setting to 1024 [ 870.284255][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.284283][ T5907] usb 3-1: Product: syz [ 870.284297][ T5907] usb 3-1: Manufacturer: syz [ 870.284311][ T5907] usb 3-1: SerialNumber: syz [ 870.313249][ T4269] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 870.544886][ T5907] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 870.544932][ T5907] cdc_ncm 3-1:1.0: bind() failure [ 870.566230][ T5907] usb 3-1: USB disconnect, device number 66 [ 870.676070][ T4323] tc_dump_action: action bad kind [ 870.814051][ T4329] netlink: 'syz.1.12351': attribute type 10 has an invalid length. [ 870.814076][ T4329] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12351'. [ 870.814276][ T4329] veth1_virt_wifi: entered promiscuous mode [ 870.815236][ T4329] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 870.815691][ T4329] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 870.816026][ T4329] veth1_virt_wifi: entered allmulticast mode [ 870.828230][ T4329] veth1_virt_wifi: left allmulticast mode [ 871.309742][ T33] audit: type=1800 audit(2000000360.132:427): pid=4352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12363" name="SYSV798dd816" dev="tmpfs" ino=0 res=0 errno=-22 [ 871.362846][ T4354] sctp: [Deprecated]: syz.4.12365 (pid 4354) Use of int in max_burst socket option. [ 871.362846][ T4354] Use struct sctp_assoc_value instead [ 872.077035][ T4386] netlink: 'syz.1.12380': attribute type 15 has an invalid length. [ 872.077061][ T4386] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12380'. [ 872.258033][ T4396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12384'. [ 878.150127][ T4479] netlink: 220 bytes leftover after parsing attributes in process `syz.2.12423'. [ 878.442119][ T4483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12426'. [ 878.780261][ T4489] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 880.203430][ T4515] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.12438'. [ 880.642775][ T5907] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 880.984412][ T5907] usb 3-1: New USB device found: idVendor=055f, idProduct=a800, bcdDevice=1.00 [ 881.253012][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 881.253045][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 881.253066][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 881.253105][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.692831][ T4495] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 881.693046][ T4495] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 881.718389][ T5907] mdc800 3-1:1.0: probe fails -> Wrong Endpoints. [ 882.268377][ T5996] usb 3-1: USB disconnect, device number 67 [ 884.298926][ T4542] netlink: 'syz.0.12447': attribute type 8 has an invalid length. [ 885.543427][ T5937] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 885.547485][ T4562] netlink: 'syz.0.12455': attribute type 13 has an invalid length. [ 885.877541][ T5937] usb 5-1: New USB device found: idVendor=05c6, idProduct=9211, bcdDevice=0.00 [ 886.068679][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.068709][ T5937] usb 5-1: Product: syz [ 886.068723][ T5937] usb 5-1: Manufacturer: syz [ 886.068737][ T5937] usb 5-1: SerialNumber: syz [ 886.149123][ T5937] qcserial 5-1:1.0: Qualcomm USB modem converter detected [ 886.187378][ T5937] usb 5-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 886.928544][ T5996] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 886.932826][ T4585] program syz.0.12462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 887.090434][ T5996] usb 3-1: unable to get BOS descriptor or descriptor too short [ 887.091068][ T5996] usb 3-1: not running at top speed; connect to a high speed hub [ 887.091098][ T5996] usb 3-1: New USB device found: idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 887.092875][ T5996] usb 3-1: config 160 has an invalid interface number: 168 but max is 0 [ 887.092900][ T5996] usb 3-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 887.092917][ T5996] usb 3-1: config 160 has no interface number 0 [ 887.092952][ T5996] usb 3-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 887.092975][ T5996] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 65077, setting to 64 [ 887.092999][ T5996] usb 3-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0x23, changing to 0x3 [ 887.093021][ T5996] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x3 has invalid maxpacket 2046, setting to 64 [ 887.093043][ T5996] usb 3-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 887.093063][ T5996] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 920, setting to 64 [ 887.093087][ T5996] usb 3-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 887.093109][ T5996] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 887.093133][ T5996] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid wMaxPacketSize 0 [ 887.093153][ T5996] usb 3-1: config 160 interface 168 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 887.095306][ T5996] usb 3-1: config 160 interface 168 has no altsetting 0 [ 887.291917][ T5996] usb 3-1: string descriptor 0 read error: -22 [ 887.292048][ T5996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.325858][ T4579] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 887.326160][ T4579] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 887.326349][ T4579] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 887.333797][ T5996] io_edgeport 3-1:160.168: EPiC device converter detected [ 887.365788][ T5996] usb 3-1: detected [ 888.012752][ T5996] usb 3-1: error in getting manufacturer descriptor: -32 [ 888.023190][ T5996] usb 3-1: error in getting boot descriptor: -32 [ 888.023430][ T5996] usb 3-1: Device Reported 0 serial ports vs. core thinking we have 1 ports, email greg@kroah.com this information. [ 888.025233][ T5996] usb 3-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 888.025257][ T5996] usb 3-1: Falling back to sysfs fallback for: edgeport/down.fw [ 888.219729][ T27] usb 5-1: USB disconnect, device number 56 [ 888.282832][ T27] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 888.311246][ T27] qcserial 5-1:1.0: device disconnected [ 890.018721][ T4612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 890.039363][ T4612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 890.041859][ T4612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 890.045112][ T4612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 890.046417][ T4612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 890.419389][ T4928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 890.481752][ T4928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 890.482610][ T4928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 890.484594][ T4928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 890.485951][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 891.451026][ T4675] /dev/nullb0: Can't open blockdev [ 891.905112][ C0] sched: DL replenish lagged too much [ 892.350282][ T4689] usb usb7: usbfs: process 4689 (syz.4.12477) did not claim interface 0 before use [ 892.773472][ T4612] Bluetooth: hci2: command tx timeout [ 893.568653][ T4608] vcan0 speed is unknown, defaulting to 1000 [ 893.744473][ T4711] 9p: Bad value for 'cachetag' [ 894.500109][ T4718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12488'. [ 895.086561][ T4612] Bluetooth: hci2: command tx timeout [ 896.970492][ T4608] wlan0 speed is unknown, defaulting to 1000 [ 897.304305][ T4612] Bluetooth: hci2: command tx timeout [ 897.771224][ T4739] netlink: 'syz.2.12500': attribute type 29 has an invalid length. [ 898.664643][ T4756] netlink: 'syz.0.12505': attribute type 1 has an invalid length. [ 899.527780][ T4612] Bluetooth: hci2: command tx timeout [ 900.308851][ T4810] binder: Write failure EFAULT in pid:6404 [ 900.942314][ T4816] comedi: No check for data length of config insn id -3 is implemented [ 900.942334][ T4816] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 900.942638][ T4816] comedi: Assuming n=15 is correct [ 902.986471][ T4608] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.986981][ T4608] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.987297][ T4608] bridge_slave_0: entered allmulticast mode [ 903.041918][ T4608] bridge_slave_0: entered promiscuous mode [ 903.058311][ T4608] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.058900][ T4608] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.059211][ T4608] bridge_slave_1: entered allmulticast mode [ 903.063701][ T4608] bridge_slave_1: entered promiscuous mode [ 903.889734][ T4608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.939916][ T4608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.301832][ T4608] team0: Port device team_slave_0 added [ 904.342301][ T4608] team0: Port device team_slave_1 added [ 904.810773][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12528'. [ 904.916730][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 904.929920][ T32] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 905.010891][ T4608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.010911][ T4608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.010935][ T4608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.014958][ T4608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.014974][ T4608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.015007][ T4608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.181389][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 905.181444][ T32] usb 1-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 905.211161][ T32] usb 1-1: config 1 has an invalid interface number: 12 but max is 2 [ 905.211187][ T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.211205][ T32] usb 1-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 905.211225][ T32] usb 1-1: config 1 has no interface number 3 [ 905.211280][ T32] usb 1-1: too many endpoints for config 1 interface 12 altsetting 47: 47, using maximum allowed: 30 [ 905.211318][ T32] usb 1-1: config 1 interface 12 altsetting 47 has 1 endpoint descriptor, different from the interface descriptor's value: 47 [ 905.211344][ T32] usb 1-1: config 1 interface 12 has no altsetting 0 [ 905.325432][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.325468][ T32] usb 1-1: Product: syz [ 905.325482][ T32] usb 1-1: Manufacturer: syz [ 905.325496][ T32] usb 1-1: SerialNumber: syz [ 906.253556][ T4608] hsr_slave_0: entered promiscuous mode [ 906.784719][ T4608] hsr_slave_1: entered promiscuous mode [ 906.893549][ T4608] debugfs: 'hsr0' already exists in 'hsr' [ 906.893574][ T4608] Cannot create hsr debugfs directory [ 907.112597][ T32] usb 1-1: USB disconnect, device number 43 [ 908.771049][ T5044] udevd[5044]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.869272][ T5060] kAFS: unable to lookup cell 'syze¤@Ës0' [ 910.368385][ T5127] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 910.368403][ T5127] CIFS mount error: No usable UNC path provided in device string! [ 910.368403][ T5127] [ 910.368419][ T5127] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 912.882895][ T4608] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 912.952064][ T4608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 912.957116][ T4608] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 913.038765][ T4608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 913.089796][ T4608] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 913.751813][ T4608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 913.753949][ T4608] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 914.674960][ T4608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 915.966511][ T4608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.161585][ T4608] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.338902][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.339015][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.666251][ T5182] can0: slcan on ttyprintk. [ 916.827207][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.827311][ T479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.622553][ T5196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12563'. [ 918.823076][ T5181] can0 (unregistered): slcan off ttyprintk. [ 919.359614][ T5200] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12566'. [ 920.293278][ T5208] netlink: 768 bytes leftover after parsing attributes in process `syz.2.12569'. [ 920.971818][ T5216] cgroup: Unknown subsys name 'cpuset' [ 921.645626][ T5225] netlink: 666 bytes leftover after parsing attributes in process `syz.0.12576'. [ 922.017931][ T5228] netlink: 'syz.4.12577': attribute type 11 has an invalid length. [ 922.017955][ T5228] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12577'. [ 923.323207][ T4608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.833784][ T4608] veth0_vlan: entered promiscuous mode [ 924.908061][ T4608] veth1_vlan: entered promiscuous mode [ 925.132559][ T4608] veth0_macvtap: entered promiscuous mode [ 925.182252][ T4608] veth1_macvtap: entered promiscuous mode [ 925.311501][ T4608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.427232][ T4608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.180431][T19510] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.183427][ T5262] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.183478][ T5262] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.183513][ T5262] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.430399][ T5280] nbd: illegal input index -639123611 [ 930.470623][ T5265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.470643][ T5265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.753615][ T479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.753638][ T479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.898073][ T32] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 935.106305][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 935.108356][ T32] usb 1-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 935.109365][ T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 935.111355][ T32] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 935.111673][ T32] usb 1-1: Product: syz [ 935.111689][ T32] usb 1-1: Manufacturer: syz [ 935.111702][ T32] usb 1-1: SerialNumber: syz [ 935.458916][ T32] usb 1-1: Invalid connection information received from device [ 935.738074][ T27] usb 1-1: USB disconnect, device number 44 [ 938.335510][ T5375] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 938.765787][ T5381] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 938.765815][ T5381] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 938.765903][ T5381] vhci_hcd vhci_hcd.0: Device attached [ 938.841636][ T5381] vhci_hcd vhci_hcd.0: port 0 already used [ 938.850562][ T5382] vhci_hcd: connection closed [ 938.858306][ T155] vhci_hcd vhci_hcd.4: stop threads [ 938.858333][ T155] vhci_hcd vhci_hcd.4: release socket [ 938.858353][ T155] vhci_hcd vhci_hcd.4: disconnect device [ 942.482830][ T5400] tmpfs: Bad value for 'mpol' [ 943.112401][ T4928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 943.140712][ T4928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 943.169800][ T4928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 943.246102][ T4928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 943.247922][ T4928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 943.805472][ T5427] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 945.523585][ T4928] Bluetooth: hci5: command tx timeout [ 947.742971][ T4928] Bluetooth: hci5: command tx timeout [ 947.980306][ T5408] vcan0 speed is unknown, defaulting to 1000 [ 948.795707][ T5469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12652'. [ 949.294225][ T5408] wlan0 speed is unknown, defaulting to 1000 [ 949.477654][ T5474] netlink: 56 bytes leftover after parsing attributes in process `syz.5.12654'. [ 949.967594][ T4928] Bluetooth: hci5: command tx timeout [ 952.187859][ T4928] Bluetooth: hci5: command tx timeout [ 954.252336][ T5500] wg0: entered promiscuous mode [ 954.284220][ T5996] usb 3-1: Failed to load image "edgeport/down.fw" err -110 [ 954.322737][ T5500] netlink: 'syz.5.12663': attribute type 1 has an invalid length. [ 954.322761][ T5500] netlink: 9 bytes leftover after parsing attributes in process `syz.5.12663'. [ 954.346570][ T5996] usb 3-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 954.346596][ T5996] usb 3-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 954.551248][ T5506] netlink: 'syz.4.12664': attribute type 15 has an invalid length. [ 955.465782][ T5530] libceph: osd_idle_ttl out of range [ 955.719634][ T5537] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 955.759182][ T5538] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12669'. [ 955.759211][ T5538] netlink: 'syz.4.12669': attribute type 1 has an invalid length. [ 955.759226][ T5538] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12669'. [ 958.782316][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12677'. [ 959.605428][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.616721][ T5408] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.617061][ T5408] bridge_slave_0: entered allmulticast mode [ 959.685074][ T5408] bridge_slave_0: entered promiscuous mode [ 960.133490][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.133940][ T5408] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.134273][ T5408] bridge_slave_1: entered allmulticast mode [ 960.186823][ T5408] bridge_slave_1: entered promiscuous mode [ 960.565501][ T5408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.601352][ T5408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.909995][ T5408] team0: Port device team_slave_0 added [ 961.243121][ T5408] team0: Port device team_slave_1 added [ 961.982337][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.982355][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.982380][ T5408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.151502][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.151524][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.151550][ T5408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.369875][ T5730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.919117][ T5408] hsr_slave_0: entered promiscuous mode [ 966.455285][ T5408] hsr_slave_1: entered promiscuous mode [ 966.561293][ T5408] debugfs: 'hsr0' already exists in 'hsr' [ 966.561321][ T5408] Cannot create hsr debugfs directory [ 968.130010][ T5818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12702'. [ 968.130395][ T5818] Unknown options in mask b7f2 [ 970.608087][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 971.679093][ T5408] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 971.818113][ T5408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 972.253342][ T5408] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 972.315173][ T5408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 972.330385][ T5408] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 972.431042][ T5408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 972.436103][ T5408] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 972.600328][ T5408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 973.314458][ T32] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 973.428086][ T5892] netlink: 'syz.4.12715': attribute type 5 has an invalid length. [ 973.573403][ T32] usb 6-1: Using ep0 maxpacket: 16 [ 973.577037][ T32] usb 6-1: New USB device found: idVendor=1781, idProduct=0898, bcdDevice=0.00 [ 973.599362][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 33, changing to 9 [ 973.599394][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10057, setting to 1024 [ 973.599420][ T32] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 973.599461][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.691099][ T32] usb 6-1: config 0 descriptor?? [ 973.707302][ T5885] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 973.782318][ T32] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input141 [ 974.616903][ T5408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.035366][ T5937] usb 6-1: USB disconnect, device number 2 [ 976.035366][ C1] pxrc 6-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 976.091234][ T5408] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.168115][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.168214][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.245009][T19510] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.245120][T19510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.442625][ T5957] nfs: Bad value for 'source' [ 985.888767][ T5408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.031009][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12738'. [ 986.031110][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12738'. [ 988.734752][ T32] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 989.243269][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 989.284511][ T32] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 989.306607][ T32] usb 6-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 32 [ 989.306641][ T32] usb 6-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 64 [ 989.306664][ T32] usb 6-1: config 1 interface 0 has no altsetting 0 [ 989.413035][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.413063][ T32] usb 6-1: Product: syz [ 989.413077][ T32] usb 6-1: Manufacturer: syz [ 989.413091][ T32] usb 6-1: SerialNumber: syz [ 989.455385][ T6021] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 989.455498][ T6021] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 989.786470][ T32] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 989.865635][ T32] usb 6-1: USB disconnect, device number 3 [ 991.873994][ T6049] netlink: 'syz.4.12747': attribute type 21 has an invalid length. [ 991.903016][ T6049] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12747'. [ 993.028960][ T5408] veth0_vlan: entered promiscuous mode [ 994.373667][ T5408] veth1_vlan: entered promiscuous mode [ 996.042712][ T5408] veth0_macvtap: entered promiscuous mode [ 996.126517][ T5408] veth1_macvtap: entered promiscuous mode [ 996.988120][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.074758][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.647104][T19510] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.799329][ T1163] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.799379][ T1163] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.853298][ T5043] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.206031][T19510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.206054][T19510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.694104][T19510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.694126][T19510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.587484][ T6118] netlink: 'syz.0.12774': attribute type 46 has an invalid length. [ 1005.587509][ T6118] netlink: 'syz.0.12774': attribute type 28 has an invalid length. [ 1009.882633][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12787'. [ 1012.833999][ T27] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1013.001952][ T27] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1013.027057][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.027117][ T27] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1013.027142][ T27] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1013.032948][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.032972][ T27] usb 5-1: Product: syz [ 1013.032986][ T27] usb 5-1: Manufacturer: syz [ 1013.032999][ T27] usb 5-1: SerialNumber: syz [ 1013.117522][ T27] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1013.117569][ T27] cdc_ncm 5-1:1.1: bind() failure [ 1013.710673][ T27] usb 5-1: USB disconnect, device number 57 [ 1013.857269][ T6190] netlink: 'syz.5.12799': attribute type 10 has an invalid length. [ 1016.467527][ T32] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1016.700458][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 1016.707494][ T32] usb 1-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1016.727860][ T32] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1016.727887][ T32] usb 1-1: config 179 has no interface number 0 [ 1016.727932][ T32] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1016.727958][ T32] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1016.727982][ T32] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1016.728006][ T32] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1016.728031][ T32] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1016.728072][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.857886][ T6202] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1017.062516][ T6214] netlink: 495 bytes leftover after parsing attributes in process `syz.4.12805'. [ 1017.717878][ T9] usb 1-1: USB disconnect, device number 45 [ 1017.717892][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1017.717930][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1019.918752][ T5996] usb 3-1: Failed to load image "edgeport/boot.fw" err -110 [ 1020.089051][ T5996] usb 3-1: EPiC device converter now attached to ttyUSB0 [ 1022.221247][ T4612] Bluetooth: hci2: command 0x0406 tx timeout [ 1038.751189][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1077.424747][ T4928] Bluetooth: hci5: command 0x0406 tx timeout [ 1096.658745][ T34] INFO: task syz.2.12587:5258 blocked for more than 146 seconds. [ 1096.658776][ T34] Tainted: G L syzkaller #0 [ 1096.658787][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1096.658796][ T34] task:syz.2.12587 state:D stack:27616 pid:5258 tgid:5256 ppid:5848 task_flags:0x400140 flags:0x00080002 [ 1096.658866][ T34] Call Trace: [ 1096.658939][ T34] [ 1096.658983][ T34] __schedule+0x1b47/0x5b40 [ 1096.659132][ T34] ? __pfx___schedule+0x10/0x10 [ 1096.659194][ T34] ? schedule+0x90/0x2b0 [ 1096.659216][ T34] schedule+0x164/0x2b0 [ 1096.659237][ T34] schedule_preempt_disabled+0x13/0x30 [ 1096.659256][ T34] __mutex_lock+0x7c4/0x15a0 [ 1096.659279][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 1096.659302][ T34] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1096.659392][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 1096.659424][ T34] ? rcu_is_watching+0x16/0xb0 [ 1096.659476][ T34] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1096.659496][ T34] ? __kmalloc_noprof+0x387/0x710 [ 1096.659547][ T34] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1096.659571][ T34] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1096.659650][ T34] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1096.659678][ T34] genl_family_rcv_msg_doit+0x233/0x340 [ 1096.659705][ T34] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1096.659738][ T34] ? bpf_lsm_capable+0x9/0x20 [ 1096.659779][ T34] ? security_capable+0x7e/0x2c0 [ 1096.659869][ T34] genl_rcv_msg+0x614/0x7a0 [ 1096.659896][ T34] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1096.659914][ T34] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1096.659938][ T34] ? __asan_memcpy+0x40/0x70 [ 1096.659964][ T34] netlink_rcv_skb+0x226/0x4a0 [ 1096.659993][ T34] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1096.660013][ T34] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1096.660048][ T34] ? down_read+0x2b9/0x320 [ 1096.660100][ T34] genl_rcv+0x28/0x40 [ 1096.660117][ T34] netlink_unicast+0x7bd/0x940 [ 1096.660148][ T34] netlink_sendmsg+0x7c3/0xae0 [ 1096.660174][ T34] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1096.660201][ T34] ? apparmor_socket_sendmsg+0x98/0x360 [ 1096.660269][ T34] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1096.660287][ T34] sock_sendmsg_nosec+0x14e/0x190 [ 1096.660354][ T34] sock_write_iter+0x2de/0x3e0 [ 1096.660402][ T34] ? __pfx_sock_write_iter+0x10/0x10 [ 1096.660429][ T34] ? bpf_lsm_file_permission+0x9/0x20 [ 1096.660447][ T34] ? security_file_permission+0x75/0x260 [ 1096.660504][ T34] vfs_write+0x612/0xba0 [ 1096.660576][ T34] ? __pfx_vfs_write+0x10/0x10 [ 1096.660599][ T34] ? __fget_files+0x3a2/0x420 [ 1096.660644][ T34] ? __fget_files+0x2a/0x420 [ 1096.660666][ T34] ? fdget+0x1ac/0x250 [ 1096.660691][ T34] ksys_write+0x150/0x270 [ 1096.660713][ T34] ? __pfx_ksys_write+0x10/0x10 [ 1096.660743][ T34] do_syscall_64+0x166/0x520 [ 1096.660788][ T34] ? trace_irq_disable+0x3b/0x140 [ 1096.660817][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.660914][ T34] ? clear_bhb_loop+0x70/0xc0 [ 1096.660935][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.660955][ T34] RIP: 0033:0x7fc934d9e199 [ 1096.661040][ T34] RSP: 002b:00007fc935c78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1096.661090][ T34] RAX: ffffffffffffffda RBX: 00007fc935025fa0 RCX: 00007fc934d9e199 [ 1096.661105][ T34] RDX: 000000000000002c RSI: 0000200000000000 RDI: 0000000000000003 [ 1096.661118][ T34] RBP: 00007fc934e350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1096.661131][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.661144][ T34] R13: 00007fc935026038 R14: 00007fc935025fa0 R15: 00007ffe5ff13b28 [ 1096.661174][ T34] [ 1096.661199][ T34] [ 1096.661199][ T34] Showing all locks held in the system: [ 1096.661208][ T34] locks held by kthreadd/2: 2, last CPU#1: [ 1096.661281][ T34] #0: ffffffff8f2ad6b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1096.661363][ T34] #1: ffffffff8f15a3a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 1096.661413][ T34] locks held by kworker/0:0/9: 2, last CPU#0: [ 1096.661427][ T34] #0: ffff88805f393148 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.661513][ T34] #1: ffffc900000e7c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.661561][ T34] locks held by kworker/0:1/10: 5, last CPU#0: [ 1096.661575][ T34] #0: ffff88813fe0ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.661621][ T34] #1: ffffc900000f7c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.661667][ T34] #2: ffffffff909dfae0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 1096.661746][ T34] #3: ffffffff8f2ad6b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1096.661789][ T34] #4: ffffffff8f15a3a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1096.661848][ T34] locks held by kworker/u8:0/12: 3, last CPU#1: [ 1096.661863][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.661909][ T34] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.661955][ T34] #2: ffff888040070800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1096.662057][ T34] locks held by rcu_exp_gp_kthr/19: 1, last CPU#1: [ 1096.662072][ T34] #0: ffffffff8f160ab0 (rcu_state.exp_wake_mutex){+.+.}-{4:4}, at: rcu_exp_sel_wait_wake+0xb74/0x1170 [ 1096.662122][ T34] locks held by khungtaskd/34: 1, last CPU#1: [ 1096.662135][ T34] #0: ffffffff8f15a3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1096.662207][ T34] locks held by kworker/u8:4/61: 3, last CPU#1: [ 1096.662221][ T34] #0: ffff888079335148 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.662272][ T34] #1: ffffc9000204fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.662317][ T34] #2: ffff88807eb422c8 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 1096.662410][ T34] locks held by kworker/u8:5/155: 3, last CPU#1: [ 1096.662425][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.662470][ T34] #1: ffffc90002f0fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.662516][ T34] #2: ffff88804ad50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1096.662563][ T34] locks held by kworker/u8:6/479: 2, last CPU#1: [ 1096.662576][ T34] #0: ffff88807c75a948 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.662627][ T34] #1: ffffc90003a6fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.662676][ T34] locks held by kworker/u8:8/1163: 3, last CPU#1: [ 1096.662689][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.662735][ T34] #1: ffffc90005527c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.671433][ T34] #2: ffff8880226b2258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1096.671574][ T34] locks held by kworker/R-bat_e/3224: 4, last CPU#0: [ 1096.671589][ T34] #0: ffff8880328c2148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.671636][ T34] #1: ffffc9000e4d7c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.671682][ T34] #2: ffffffff8f15a3a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 1096.671769][ T34] #3: ffffffff8f15a3a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1096.671815][ T34] locks held by kworker/u8:9/3350: 2, last CPU#1: [ 1096.671829][ T34] #0: ffff888028687948 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.671881][ T34] #1: ffffc9000e817c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.671928][ T34] locks held by udevd/4978: 2, last CPU#1: [ 1096.671942][ T34] #0: ffffffff8f8f5df8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 1096.672018][ T34] #1: ffffffff8f2ad6b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1096.672063][ T34] locks held by dhcpcd/5272: 2, last CPU#1: [ 1096.672077][ T34] #0: ffffffff8f8f5df8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 1096.672122][ T34] #1: ffffffff8f2ad6b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1096.672165][ T34] locks held by dhcpcd/5273: 1, last CPU#1: [ 1096.672178][ T34] #0: ffffffff8f2ad6b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1096.672223][ T34] locks held by getty/5363: 2, on CPU#1: [ 1096.672236][ T34] #0: ffff888035d0b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1096.672337][ T34] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1096.672410][ T34] locks held by syz-executor/5596: 2, last CPU#1: [ 1096.672424][ T34] #0: ffffffff8f2ad6b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1096.672467][ T34] #1: ffffffff8f15a3a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1096.672512][ T34] locks held by syz-executor/5833: 2, last CPU#1: [ 1096.672526][ T34] #0: ffffffff8f8f5df8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 1096.672571][ T34] #1: ffffffff8f2ad6b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1096.672611][ T34] locks held by kworker/0:3/5907: 3, on CPU#0: [ 1096.672625][ T34] #0: ffff88813fe0ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.672671][ T34] #1: ffffc90005017c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.672715][ T34] #2: ffffffff8f160a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 1096.672764][ T34] locks held by kworker/0:6/5937: 4, last CPU#0: [ 1096.672778][ T34] #0: ffff88805c84a948 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.672828][ T34] #1: ffffc900054f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.672892][ T34] #2: ffff88805c26d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 1096.672971][ T34] #3: ffff88803461a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 1096.673019][ T34] locks held by kworker/1:8/5996: 5, last CPU#1: [ 1096.673033][ T34] #0: ffff8880206e2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.673077][ T34] #1: ffffc900057e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.673121][ T34] #2: ffff88802981d1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1096.673193][ T34] #3: ffff88802873e1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1096.673276][ T34] #4: ffffffff8f2ad6b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1096.673321][ T34] locks held by syz-executor/18228: 2, last CPU#1: [ 1096.673335][ T34] #0: ffff888059510f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1096.673387][ T34] #1: ffffffff8f15a3a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1096.673432][ T34] locks held by kworker/u8:1/19510: 3, last CPU#1: [ 1096.673447][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.673493][ T34] #1: ffffc9000b907c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.673537][ T34] #2: ffff888047980800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1096.673586][ T34] locks held by syz.1.12388/4402: 3, last CPU#1: [ 1096.673600][ T34] #0: ffffffff906df268 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1096.682100][ T34] #1: ffffffff8f49de60 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1096.682149][ T34] #2: ffff8880350aea60 (sk_xprt.xpt_lock-AF_INET-NFSD){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1096.682252][ T34] locks held by syz-executor/4608: 1, last CPU#1: [ 1096.682268][ T34] #0: ffffffff8f2ad6b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1096.682313][ T34] locks held by kworker/u9:0/4612: 5, on CPU#0: [ 1096.682326][ T34] #0: ffff888033744948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.682371][ T34] #1: ffffc9000d5f7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.682416][ T34] #2: ffff888038630ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 1096.682506][ T34] #3: ffff8880386300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 1096.682577][ T34] #4: ffffffff8f160a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 1096.682626][ T34] locks held by kworker/u8:2/5043: 4, last CPU#1: [ 1096.682640][ T34] #0: ffff888025273948 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.682689][ T34] #1: ffffc9000e9efc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.682736][ T34] #2: ffff88807a975440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1096.682783][ T34] #3: ffff88803461bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1096.682838][ T34] locks held by syz.2.12587/5258: 2, on CPU#1: [ 1096.682852][ T34] #0: ffffffff906df268 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1096.682894][ T34] #1: ffffffff8f49de60 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1096.682939][ T34] locks held by kworker/1:2/5261: 2, last CPU#1: [ 1096.682952][ T34] #0: ffff88813fe09d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.682998][ T34] #1: ffffc9000fd77c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.683045][ T34] locks held by kworker/u8:3/5262: 3, last CPU#1: [ 1096.683059][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.683104][ T34] #1: ffffc9000ff57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.683150][ T34] #2: ffff888046f80800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1096.683196][ T34] locks held by kworker/u8:7/5265: 4, last CPU#1: [ 1096.683210][ T34] #0: ffff8880284b0148 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.683260][ T34] #1: ffffc9000e96fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.683305][ T34] #2: ffff88807c665440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1096.683351][ T34] #3: ffff88803461aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1096.683400][ T34] locks held by kworker/u8:10/5642: 3, last CPU#1: [ 1096.683414][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.683459][ T34] #1: ffffc9000e7ffc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.683505][ T34] #2: ffff88802ab6f258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1096.683557][ T34] locks held by kworker/u8:11/6059: 4, last CPU#1: [ 1096.683572][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.683617][ T34] #1: ffffc9000b4cfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1096.683661][ T34] #2: ffffffff8f2ad6b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1096.683704][ T34] #3: ffffffff8f15a3a0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 1096.683748][ T34] locks held by udevd/6167: 2, last CPU#1: [ 1096.683762][ T34] #0: ffffffff8f2ad6b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1096.683803][ T34] #1: ffffffff8f15a3a0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x37/0x410 [ 1096.683856][ T34] locks held by syz.4.12811/6231: 1, last CPU#1: [ 1096.683870][ T34] #0: ffff888070f92800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1096.683909][ T34] [ 1096.683914][ T34] ============================================= [ 1096.683914][ T34] [ 1096.683976][ T34] NMI backtrace for cpu 1 [ 1096.684012][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1096.684032][ T34] Tainted: [L]=SOFTLOCKUP [ 1096.684039][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1096.684049][ T34] Call Trace: [ 1096.684056][ T34] [ 1096.684065][ T34] dump_stack_lvl+0xe8/0x150 [ 1096.684096][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 1096.684158][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1096.684188][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1096.684208][ T34] sys_info+0x135/0x170 [ 1096.684259][ T34] watchdog+0x1058/0x10d0 [ 1096.684300][ T34] ? watchdog+0x209/0x10d0 [ 1096.684319][ T34] kthread+0x38b/0x480 [ 1096.684336][ T34] ? __pfx_watchdog+0x10/0x10 [ 1096.684350][ T34] ? __pfx_kthread+0x10/0x10 [ 1096.684367][ T34] ret_from_fork+0x514/0xb70 [ 1096.684397][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 1096.684415][ T34] ? __switch_to+0xc78/0x1410 [ 1096.684435][ T34] ? __pfx_kthread+0x10/0x10 [ 1096.684452][ T34] ret_from_fork_asm+0x1a/0x30 [ 1096.684478][ T34] [ 1096.692086][ T34] Sending NMI from CPU 1 to CPUs 0: [ 1096.692132][ C0] NMI backtrace for cpu 0 [ 1096.692149][ C0] CPU: 0 UID: 0 PID: 3224 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 1096.692177][ C0] Tainted: [L]=SOFTLOCKUP [ 1096.692184][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1096.692197][ C0] Workqueue: bat_events batadv_tt_purge [ 1096.692269][ C0] RIP: 0010:__lock_acquire+0x5ae/0x2de0 [ 1096.692304][ C0] Code: 44 89 e0 49 ff c7 49 63 8e a0 0b 00 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c5 00 00 00 49 83 ff 31 0f 83 84 00 00 00 48 8b 03 <25> ff 1f 00 00 48 0f a3 05 75 0d 41 13 73 10 48 69 c0 c8 00 00 00 [ 1096.692326][ C0] RSP: 0018:ffffc90000006db8 EFLAGS: 00000087 [ 1096.692349][ C0] RAX: 2f00000000022007 RBX: ffff888032982b88 RCX: 0000000000000004 [ 1096.692363][ C0] RDX: 0000000000000003 RSI: 0000000000000003 RDI: aa00000000000000 [ 1096.692376][ C0] RBP: ffff888032982b90 R08: ffffffff8178799f R09: 0000000000000000 [ 1096.692390][ C0] R10: ffffc90000007098 R11: ffffffff81b34fe0 R12: 0000000000000003 [ 1096.692404][ C0] R13: 0000000000000000 R14: ffff888032981f40 R15: 0000000000000003 [ 1096.692417][ C0] FS: 0000000000000000(0000) GS:ffff88812462e000(0000) knlGS:0000000000000000 [ 1096.692432][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1096.692446][ C0] CR2: 0000555561873a38 CR3: 0000000060b9a000 CR4: 00000000003526f0 [ 1096.692463][ C0] Call Trace: [ 1096.692470][ C0] [ 1096.692483][ C0] ? lock_acquire+0x115/0x350 [ 1096.692502][ C0] ? lock_acquire+0x115/0x350 [ 1096.692520][ C0] lock_acquire+0x115/0x350 [ 1096.692536][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1096.692557][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1096.692574][ C0] ? nf_hook_slow+0xc5/0x220 [ 1096.692623][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1096.692640][ C0] unwind_next_frame+0xac/0x2550 [ 1096.692656][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1096.692675][ C0] ? nft_do_chain_ipv4+0x195/0x290 [ 1096.692727][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1096.692744][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1096.692770][ C0] arch_stack_walk+0x11b/0x150 [ 1096.692789][ C0] ? nf_hook_slow+0xc5/0x220 [ 1096.692807][ C0] stack_trace_save+0xa9/0x100 [ 1096.692824][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1096.692841][ C0] ? kfree+0x1c5/0x650 [ 1096.692859][ C0] ? __lock_acquire+0x747/0x2de0 [ 1096.692877][ C0] kasan_save_track+0x3e/0x80 [ 1096.692895][ C0] ? kasan_save_track+0x3e/0x80 [ 1096.692911][ C0] ? kasan_save_free_info+0x40/0x50 [ 1096.692928][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1096.692945][ C0] ? kmem_cache_free+0x182/0x650 [ 1096.692961][ C0] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 1096.693002][ C0] ? nft_synproxy_do_eval+0x389/0x5d0 [ 1096.693020][ C0] ? nft_do_chain+0x48d/0x1b10 [ 1096.693061][ C0] ? nft_do_chain_ipv4+0x195/0x290 [ 1096.693078][ C0] ? nf_hook_slow+0xc5/0x220 [ 1096.693111][ C0] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 1096.693128][ C0] kasan_save_free_info+0x40/0x50 [ 1096.693145][ C0] __kasan_slab_free+0x5c/0x80 [ 1096.693162][ C0] kmem_cache_free+0x182/0x650 [ 1096.693181][ C0] nft_synproxy_eval_v4+0x36a/0x4e0 [ 1096.693201][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1096.693220][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1096.693239][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 1096.693259][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1096.693280][ C0] ? lock_acquire+0x115/0x350 [ 1096.693299][ C0] nft_do_chain+0x48d/0x1b10 [ 1096.693321][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1096.693343][ C0] ? clockevents_program_event+0x491/0x630 [ 1096.693364][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1096.693387][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1096.693415][ C0] nft_do_chain_ipv4+0x195/0x290 [ 1096.693432][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1096.693486][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 1096.693505][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 1096.693524][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 1096.693542][ C0] nf_hook_slow+0xc5/0x220 [ 1096.693561][ C0] NF_HOOK+0x21f/0x3c0 [ 1096.693578][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1096.693596][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1096.693611][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1096.693628][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1096.693649][ C0] ? ip_local_deliver+0x113/0x190 [ 1096.693666][ C0] NF_HOOK+0x336/0x3c0 [ 1096.693683][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1096.693699][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1096.693715][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1096.693732][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1096.693748][ C0] ? ip_rcv_core+0x88d/0xd50 [ 1096.693766][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1096.693782][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1096.693798][ C0] process_backlog+0xa6b/0x18b0